$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: TSGqbSaRV3kNE7+8u4WLRKjc3fydYOHiO39d5X3f8dg= Subject key identifier: 35:CA:84:77:0E:7E:24:78:F4:44:1A:78:C1:2E:10:87:50:8B:4E:AF Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 0866 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 0862 Signing time: Mon 30 Jun 2025 20:53:28 +0000 Manifest this update: Mon 30 Jun 2025 20:53:28 +0000 Manifest next update: Mon 07 Jul 2025 20:53:28 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: +olre1yQdggfHhU+YYlkmMN9pV2Z1QRj0eUjWcX+9L4=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: /M2P6qLYLe5I9DwmD7wnKMTRki3A6i4WYlxxpdISB7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: Jun 30 20:53:28 2025 GMT Not After : Jul 7 20:53:28 2025 GMT Subject: CN=6862f948-bf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:94:d8:e5:62:55:73:8f:68:ba:27:80:1e:6b: 74:bb:45:ec:a8:57:23:a5:4b:f9:1c:56:71:43:c5: a5:25:be:56:02:8c:7c:4e:27:57:53:60:f7:af:a8: 49:42:13:ad:7a:36:6f:75:80:ce:d5:04:d5:e2:c4: bc:e4:6c:dd:20:44:17:4e:5e:12:e6:9f:c8:bc:b4: 65:c6:ed:ec:a6:f0:1a:1b:b4:e1:9a:cb:a6:d9:a6: 54:5f:04:92:2b:8f:c8:0f:58:b8:ae:8e:48:fc:f5: 1f:76:77:a8:44:62:34:7e:60:c2:20:a2:95:d8:10: d8:b5:ba:f1:7e:51:22:b4:0d:a6:92:20:22:0f:e4: 35:c3:01:70:20:91:91:b1:b5:a7:6f:b5:07:46:92: be:77:08:b1:0d:cc:5d:6e:da:7d:c8:aa:db:37:63: 72:6c:70:c4:63:95:bf:a4:af:07:55:b2:80:34:22: 8a:bc:b4:de:ac:d5:91:c0:2e:fb:b0:77:60:96:e8: e6:1a:5a:9c:8d:2e:e9:f2:a9:39:9d:60:bc:35:50: 83:18:ca:cd:48:bb:7c:00:b4:bb:16:58:d3:c6:d0: e8:e7:fd:91:c7:c3:4b:a3:67:09:38:78:4a:7c:15: 9a:d7:00:82:e0:4e:13:a2:2e:34:11:b3:05:16:26: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:84:77:0E:7E:24:78:F4:44:1A:78:C1:2E:10:87:50:8B:4E:AF X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:31:d8:8e:f0:ca:4b:d4:6f:06:f1:1c:af:9a:2e:08:a7: ec:09:af:5c:a3:c0:e8:b2:ca:d0:45:13:92:06:d5:3e:84:79: 62:d6:4b:9c:bd:6b:cf:70:73:a7:64:6e:04:8e:8c:e5:f3:fb: a4:55:4e:c0:c0:29:58:2d:5e:c8:0a:27:e0:37:6f:6a:8f:68: 06:00:09:a8:96:39:ad:76:2e:40:1a:88:c3:4e:cb:64:bf:67: 41:28:21:29:70:d9:26:3b:34:1d:3a:43:6e:9c:0c:7f:b4:d1: 1b:33:2c:f6:d6:38:89:04:e6:20:7e:e6:eb:d4:ea:db:ab:18: 6c:c6:f8:66:d0:f5:1f:fb:cf:b6:59:07:0a:0f:db:3d:0d:85: af:50:a4:63:f7:31:8f:e4:f3:e4:0d:06:b4:89:12:b0:a5:5a: 0c:dc:05:db:dc:6b:5a:d8:74:b3:47:26:a9:12:7f:23:03:7b: e4:b1:aa:81:82:54:ac:f6:c9:69:f1:ba:cc:53:e5:02:f0:74: 40:ff:16:1a:12:0d:1d:fb:07:e4:a8:10:c9:f0:20:8a:b0:b0: 5b:88:9c:a8:c4:94:1d:0d:4a:56:11:49:48:db:cb:ea:1a:d8: 41:fe:f4:de:16:b7:be:00:a1:73:31:b3:47:61:bd:4b:38:63: 1b:0a:5a:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUwNjMwMjA1MzI4WhcNMjUwNzA3MjA1MzI4WjAYMRYwFAYD VQQDEw02ODYyZjk0OC1iZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pTY5WJVc49ouieAHmt0u0XsqFcjpUv5HFZxQ8WlJb5WAox8TidXU2D3r6hJ QhOtejZvdYDO1QTV4sS85GzdIEQXTl4S5p/IvLRlxu3spvAaG7Thmsum2aZUXwSS K4/ID1i4ro5I/PUfdneoRGI0fmDCIKKV2BDYtbrxflEitA2mkiAiD+Q1wwFwIJGR sbWnb7UHRpK+dwixDcxdbtp9yKrbN2NybHDEY5W/pK8HVbKANCKKvLTerNWRwC77 sHdglujmGlqcjS7p8qk5nWC8NVCDGMrNSLt8ALS7FljTxtDo5/2Rx8NLo2cJOHhK fBWa1wCC4E4Toi40EbMFFiYTaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXKhHcO fiR49EQaeMEuEIdQi06vMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJlzHYjvDKS9RvBvEcr5ouCKfsCa9co8DossrQRROSBtU+hHli1kuc vWvPcHOnZG4Ejozl8/ukVU7AwClYLV7ICifgN29qj2gGAAmoljmtdi5AGojDTstk v2dBKCEpcNkmOzQdOkNunAx/tNEbMyz21jiJBOYgfubr1Orbqxhsxvhm0PUf+8+2 WQcKD9s9DYWvUKRj9zGP5PPkDQa0iRKwpVoM3AXb3Gta2HSzRyapEn8jA3vksaqB glSs9slp8brMU+UC8HRA/xYaEg0d+wfkqBDJ8CCKsLBbiJyoxJQdDUpWEUlI28vq GthB/vTeFre+AKFzMbNHYb1LOGMbClp5 -----END CERTIFICATE-----Generated at Tue Jul 1 13:15:42 2025 by rpki-client