$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: W5tuXl5LcmBebB8rVvvEWiUK+mEQ2DTs0xtmWui/3s4= Subject key identifier: 04:BE:19:A6:2A:6C:FE:02:77:94:7B:3B:CB:7A:88:14:7A:57:84:C1 Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: 98 Signing time: Tue 01 Jul 2025 07:09:02 +0000 Manifest this update: Tue 01 Jul 2025 07:09:01 +0000 Manifest next update: Tue 08 Jul 2025 07:09:01 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: jl+NxLrk9lea7nEA+Vq6pBHaBoIGrib/n/DsYOOsXFw=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: SEeajkndfK9XKBY3HRdlq0CgTt3jAkAhBVklDZv6c2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Jul 1 07:09:01 2025 GMT Not After : Jul 8 07:09:01 2025 GMT Subject: CN=6863898d-0828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:c6:6f:d5:df:36:d1:21:f7:10:41:03:ad: c3:d2:26:cb:f2:80:b8:e3:dc:c6:fc:d1:0f:47:d7: bf:85:9c:e6:40:23:d1:a0:75:e8:d6:e9:74:0f:cd: 77:e2:be:b9:3a:f4:cd:87:8b:b6:c8:a6:46:aa:11: 44:90:d5:7c:5e:18:d0:ab:0e:32:54:0d:93:b4:24: 4c:3c:af:be:50:f4:96:26:67:89:eb:ae:b2:26:18: a2:56:44:a1:d2:85:1f:2d:72:0a:21:70:c2:9e:6e: f5:5f:6c:12:c5:39:f8:50:bc:c1:23:46:05:0b:03: 7b:f9:83:80:62:c2:e3:bd:09:05:13:a8:3a:e6:55: 62:83:d5:45:d1:ad:7d:9e:ec:91:c3:45:a0:b1:a6: 44:d2:09:23:f0:74:81:b2:f1:f4:7f:3c:15:af:24: e9:9e:79:13:8e:55:4e:ad:db:fc:56:58:d6:7b:da: 50:36:e7:4c:35:98:63:3a:17:6d:c3:d2:0b:d5:14: b2:37:08:60:18:27:6a:32:1d:84:d7:3d:8c:b1:1f: 6c:c3:e8:12:2e:31:b9:81:f9:ac:b6:e7:57:15:86: 54:20:d7:13:d3:1c:fc:68:51:d8:96:77:c9:e3:0d: 6f:20:e9:f5:95:10:6f:24:56:d6:86:b3:ed:f1:8c: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BE:19:A6:2A:6C:FE:02:77:94:7B:3B:CB:7A:88:14:7A:57:84:C1 X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d2:97:0e:d1:ad:a0:97:5a:9e:c1:3a:4f:50:51:69:16:45: 4f:60:24:d9:65:44:78:c8:18:07:b1:42:0c:57:e2:d0:be:56: de:35:93:13:fb:b8:a3:60:04:2c:95:28:7f:ef:ba:96:7b:1b: e9:01:d3:91:e8:be:de:97:39:72:14:b5:c5:56:8b:d2:8f:f6: 70:6d:fb:82:ec:7e:f2:39:ff:1b:bb:42:41:36:99:c9:89:7e: 38:49:7c:b0:f8:b4:13:e7:c6:75:a6:91:c0:f1:58:53:0c:3a: 48:77:da:99:1f:24:73:d0:d6:fc:da:7a:e0:7a:b2:ca:0d:30: a6:96:5a:5b:16:93:dc:9b:ff:cd:be:f3:09:bb:3f:7f:c3:2b: e0:d7:00:a7:af:9b:1e:26:c0:99:33:ca:91:05:91:82:50:51: d1:11:bb:c9:94:07:c4:24:22:cd:2f:6d:3a:91:b1:df:34:be: 40:09:43:12:48:b9:e9:ee:83:bc:9e:18:c9:2c:4d:9d:19:c0: 25:f8:58:cd:77:49:36:9b:03:e4:22:b9:9c:16:e6:0e:c1:2f: 65:22:e9:db:c5:45:16:b4:7d:ad:d2:fb:03:7d:2e:71:53:63: c4:a0:6b:45:e8:89:79:84:df:82:61:36:f5:98:48:68:5c:94: fb:1f:a9:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2MDAxMTAvBgNVBAUTKDdGODI0NUJCRDRENDU5NzIxQjQxRDRGRjJCQkZCNDI1 RkYxMTg5NTMwHhcNMjUwNzAxMDcwOTAxWhcNMjUwNzA4MDcwOTAxWjAYMRYwFAYD VQQDEw02ODYzODk4ZC0wODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAnGb9XfNtEh9xBBA63D0ibL8oC449zG/NEPR9e/hZzmQCPRoHXo1ul0D813 4r65OvTNh4u2yKZGqhFEkNV8XhjQqw4yVA2TtCRMPK++UPSWJmeJ666yJhiiVkSh 0oUfLXIKIXDCnm71X2wSxTn4ULzBI0YFCwN7+YOAYsLjvQkFE6g65lVig9VF0a19 nuyRw0WgsaZE0gkj8HSBsvH0fzwVryTpnnkTjlVOrdv8VljWe9pQNudMNZhjOhdt w9IL1RSyNwhgGCdqMh2E1z2MsR9sw+gSLjG5gfmstudXFYZUINcT0xz8aFHYlnfJ 4w1vIOn1lRBvJFbWhrPt8Yy/TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS+GaYq bP4Cd5R7O8t6iBR6V4TBMB8GA1UdIwQYMBaAFH+CRbvU1FlyG0HU/yu/tCX/EYlT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yQUE3RDQ1RTc3 RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdYSWJRZFRfSzctMEpmOFJp Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTYwMC8yQUE3RDQ1RTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi9mNEpGdTlUVVdY SWJRZFRfSzctMEpmOFJpVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0pcO0a2gl1qewTpPUFFpFkVPYCTZZUR4yBgHsUIMV+LQvlbeNZMT +7ijYAQslSh/77qWexvpAdOR6L7elzlyFLXFVovSj/ZwbfuC7H7yOf8bu0JBNpnJ iX44SXyw+LQT58Z1ppHA8VhTDDpId9qZHyRz0Nb82nrgerLKDTCmllpbFpPcm//N vvMJuz9/wyvg1wCnr5seJsCZM8qRBZGCUFHREbvJlAfEJCLNL206kbHfNL5ACUMS SLnp7oO8nhjJLE2dGcAl+FjNd0k2mwPkIrmcFuYOwS9lIunbxUUWtH2t0vsDfS5x U2PEoGtF6Il5hN+CYTb1mEhoXJT7H6nM -----END CERTIFICATE-----Generated at Wed Jul 2 22:34:38 2025 by rpki-client