$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft File: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json) Hash identifier: pCl2kPSZkq9KjSB1c0etazE4lyN8aeTZPv0+q85QGng= Subject key identifier: 94:82:1D:71:FF:FD:FE:36:B7:D6:51:37:FD:DD:CD:57:37:ED:1F:36 Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft Manifest number: 0CAB Signing time: Wed 02 Jul 2025 19:24:34 +0000 Manifest this update: Wed 02 Jul 2025 19:24:34 +0000 Manifest next update: Wed 09 Jul 2025 19:24:34 +0000 Files and hashes: 1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: s9wOVtoNfHUWHi7CxiLK8tRWjupeUDiRSNErWzLSi8c=) 2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Validity Not Before: Jul 2 19:24:34 2025 GMT Not After : Jul 9 19:24:34 2025 GMT Subject: CN=68658772-2c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:01:54:98:f9:d3:ed:21:af:82:a9:0d:7c:03: be:aa:2c:fd:a8:50:46:16:a6:c8:e2:7b:94:10:de: 03:20:84:6c:79:92:3a:d2:f3:54:32:67:2d:96:f2: ef:f5:15:22:b3:2e:fc:3e:d7:d4:8d:8a:24:61:8a: a3:bc:24:b8:be:2b:b5:7f:08:fa:0a:a1:66:ea:37: 21:8d:95:45:5e:a1:8d:a9:9f:be:1d:13:28:48:0a: dd:7e:3e:5e:40:22:23:ec:4e:56:25:41:88:d1:e6: 38:bb:9f:a9:97:17:51:c7:e2:92:7e:cd:02:55:82: 67:33:cf:58:51:e0:49:f1:1a:23:24:12:b9:44:5b: 1c:39:5c:8b:62:8b:38:c0:fc:17:68:7d:fe:5c:fb: b5:24:05:5d:07:82:04:9a:ad:40:b5:e8:8d:6e:93: 08:68:00:e0:00:c0:4e:ef:3b:1e:2f:26:52:91:d4: f7:37:59:63:18:f3:4a:1d:50:a5:2d:b0:02:66:44: ff:5d:16:e5:5f:ff:8c:04:d3:1b:19:c9:f3:3b:6d: f6:b8:ef:39:d2:23:3a:24:0d:5d:05:c9:10:c2:76: 11:a2:4b:92:24:5e:c0:12:90:8b:07:80:0e:4a:7f: 1d:68:39:5d:b4:16:cc:9b:de:66:2d:ff:72:65:60: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:82:1D:71:FF:FD:FE:36:B7:D6:51:37:FD:DD:CD:57:37:ED:1F:36 X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0a:da:8d:15:4c:0b:22:bd:5c:1d:73:33:ae:78:a2:32:69: 26:c8:4f:61:1c:6a:38:fc:16:99:9b:ec:1a:7c:36:17:03:ab: 37:39:55:03:96:67:a6:ef:ec:11:f0:c4:6f:fb:b1:0b:64:67: 89:fc:8a:32:fc:0a:d7:55:04:1d:95:a9:53:de:4f:9e:a4:b3: f5:57:d8:99:e2:81:c9:d7:53:3a:2c:62:12:3b:bc:19:a0:21: 15:c9:31:30:6d:d4:14:64:00:e0:c9:13:98:8a:58:85:43:9e: ae:ca:c6:f4:d0:cf:c1:71:4e:9e:23:8d:0b:3b:57:0c:f4:4e: d3:30:3c:be:2a:72:58:73:fb:22:0a:fd:9a:2b:56:63:04:78: 62:29:71:b5:5c:ef:3d:e6:a2:2b:39:b3:4d:b7:82:cb:5b:3b: 33:d4:39:71:a2:fe:26:bc:b9:c6:78:a4:80:3f:af:26:1c:f2: 93:c1:7d:c3:b1:a5:73:2a:23:eb:5f:01:0f:54:53:a9:cc:bb: ab:62:a3:38:4d:8e:ac:44:2d:45:08:ef:56:91:12:64:a2:5a: 34:e5:c1:6e:4a:fd:22:36:f8:47:6c:83:31:2c:6c:03:af:c7: 08:dd:1a:e7:60:b6:59:e9:a4:09:a1:7e:6c:6f:19:c7:a2:2b: 36:a1:b3:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUwNzAyMTkyNDM0WhcNMjUwNzA5MTkyNDM0WjAYMRYwFAYD VQQDEw02ODY1ODc3Mi0yYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gFUmPnT7SGvgqkNfAO+qiz9qFBGFqbI4nuUEN4DIIRseZI60vNUMmctlvLv 9RUisy78PtfUjYokYYqjvCS4viu1fwj6CqFm6jchjZVFXqGNqZ++HRMoSArdfj5e QCIj7E5WJUGI0eY4u5+plxdRx+KSfs0CVYJnM89YUeBJ8RojJBK5RFscOVyLYos4 wPwXaH3+XPu1JAVdB4IEmq1AteiNbpMIaADgAMBO7zseLyZSkdT3N1ljGPNKHVCl LbACZkT/XRblX/+MBNMbGcnzO232uO850iM6JA1dBckQwnYRokuSJF7AEpCLB4AO Sn8daDldtBbMm95mLf9yZWANKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSCHXH/ /f42t9ZRN/3dzVc37R82MB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4 X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoCtqNFUwLIr1cHXMzrniiMmkmyE9hHGo4/BaZm+wafDYXA6s3OVUD lmem7+wR8MRv+7ELZGeJ/Ioy/ArXVQQdlalT3k+epLP1V9iZ4oHJ11M6LGISO7wZ oCEVyTEwbdQUZADgyROYiliFQ56uysb00M/BcU6eI40LO1cM9E7TMDy+KnJYc/si Cv2aK1ZjBHhiKXG1XO895qIrObNNt4LLWzsz1Dlxov4mvLnGeKSAP68mHPKTwX3D saVzKiPrXwEPVFOpzLurYqM4TY6sRC1FCO9WkRJkolo05cFuSv0iNvhHbIMxLGwD r8cI3RrnYLZZ6aQJoX5sbxnHois2obPB -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:03 2025 by rpki-client