$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft File: p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json) Hash identifier: d4KKFnG/wP3KQEFBWtThJS5h3suysF3RS0tlSITLqMA= Subject key identifier: EB:B1:93:90:DB:06:38:55:AA:7B:C5:72:95:4F:91:A7:E6:D5:34:47 Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE Certificate issuer: /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft Manifest number: CF Signing time: Thu 03 Jul 2025 05:51:40 +0000 Manifest this update: Thu 03 Jul 2025 05:51:40 +0000 Manifest next update: Thu 10 Jul 2025 05:51:40 +0000 Files and hashes: 1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: yBALaA1jfm8naSpnurD7iHjsPEqdrzAmwLbf/m8w14c=) 2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=) 3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE Validity Not Before: Jul 3 05:51:40 2025 GMT Not After : Jul 10 05:51:40 2025 GMT Subject: CN=68661a6c-f506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:51:eb:78:1f:d7:1f:fb:08:06:66:cd:9c: 00:c5:14:0d:ae:1a:2b:e0:6e:48:5a:a6:70:8e:9c: ef:e2:5e:e2:7f:74:60:5f:8c:62:6d:d6:8d:3d:06: 69:36:9d:83:b5:d2:3d:19:df:cf:b5:44:8b:99:02: b3:25:75:42:0e:5a:e4:a0:c9:24:31:f6:50:95:47: 33:ba:cf:8d:6a:e6:af:2d:1e:1d:2e:fb:37:5d:e2: 81:3d:e0:43:d5:59:15:a5:d4:17:28:48:6d:63:8b: 4c:8e:62:29:52:2d:47:29:2b:6a:d0:2d:11:f5:d9: 18:83:d2:f8:39:1d:37:6f:6c:49:db:c8:73:5a:86: 38:aa:79:c3:5f:b9:1f:67:86:64:d9:02:e2:36:09: 03:4f:78:50:75:d4:63:5c:94:3f:6a:aa:fd:24:e3: 07:ba:70:4b:26:85:06:3f:03:9a:dc:c3:f4:48:cd: 18:4c:f8:1b:b7:31:f0:45:6f:c6:e4:fd:3c:0f:1a: 45:20:c0:51:cc:28:ee:a2:b8:59:31:89:60:8f:ff: d3:50:46:b8:55:46:05:f5:f7:45:f7:4d:e6:12:d7: 09:7b:2c:f5:cb:6d:91:9b:ec:ce:83:a5:34:bd:3d: 62:32:8f:f1:00:dc:8b:d8:af:ce:92:cb:76:c6:b5: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:93:90:DB:06:38:55:AA:7B:C5:72:95:4F:91:A7:E6:D5:34:47 X509v3 Authority Key Identifier: keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5d:92:9c:b3:35:0a:bf:4f:31:b7:a8:70:9f:97:c7:ba:e1: 1f:51:ee:57:7b:05:7b:e1:98:df:f0:2d:50:6e:6b:9d:e6:78: d2:48:76:15:4f:27:b9:46:30:2c:d2:27:88:6e:34:f8:b8:38: ca:f8:fe:36:d8:a6:e9:bf:b4:50:24:2e:0e:19:9e:34:29:8d: d5:e4:99:e9:f2:a5:fd:b7:51:31:69:5d:ec:9b:97:95:eb:cb: 1f:02:c4:73:da:4c:aa:85:cf:11:23:11:df:3e:46:30:ad:56: 62:e8:14:7d:a4:d7:d5:f3:bc:17:4e:ee:4b:15:fc:f8:f2:7c: 01:b1:d2:61:c0:11:6c:e1:3a:d4:5e:3b:b6:26:2d:74:5e:44: 07:ad:09:69:ee:19:d1:6b:60:7c:24:b1:79:9e:f1:f6:12:0a: ad:83:71:e0:89:f4:ec:c0:49:d6:4c:44:43:8a:e8:c8:47:42: d3:ff:33:5e:e7:ac:b5:78:3c:af:c9:65:e4:22:c7:81:e6:e9: ba:e8:d7:fc:c9:01:c6:27:6d:13:a2:17:ef:91:0a:25:0b:e4: a7:dd:35:aa:be:f4:53:8c:15:10:22:dc:8c:57:10:0e:af:0d: a0:27:9d:23:fa:bd:af:67:0d:ac:f7:d6:4e:8c:11:05:08:3b: 3e:2f:99:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx RDAxMjlFQkUwHhcNMjUwNzAzMDU1MTQwWhcNMjUwNzEwMDU1MTQwWjAYMRYwFAYD VQQDEw02ODY2MWE2Yy1mNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwZR63gf1x/7CAZmzZwAxRQNrhor4G5IWqZwjpzv4l7if3RgX4xibdaNPQZp Np2DtdI9Gd/PtUSLmQKzJXVCDlrkoMkkMfZQlUczus+NauavLR4dLvs3XeKBPeBD 1VkVpdQXKEhtY4tMjmIpUi1HKStq0C0R9dkYg9L4OR03b2xJ28hzWoY4qnnDX7kf Z4Zk2QLiNgkDT3hQddRjXJQ/aqr9JOMHunBLJoUGPwOa3MP0SM0YTPgbtzHwRW/G 5P08DxpFIMBRzCjuorhZMYlgj//TUEa4VUYF9fdF903mEtcJeyz1y22Rm+zOg6U0 vT1iMo/xANyL2K/Okst2xrUkZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuxk5Db BjhVqnvFcpVPkafm1TRHMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsXZKcszUKv08xt6hwn5fHuuEfUe5XewV74Zjf8C1Qbmud5njSSHYV Tye5RjAs0ieIbjT4uDjK+P422Kbpv7RQJC4OGZ40KY3V5Jnp8qX9t1ExaV3sm5eV 68sfAsRz2kyqhc8RIxHfPkYwrVZi6BR9pNfV87wXTu5LFfz48nwBsdJhwBFs4TrU Xju2Ji10XkQHrQlp7hnRa2B8JLF5nvH2Egqtg3HgifTswEnWTERDiujIR0LT/zNe 56y1eDyvyWXkIseB5um66Nf8yQHGJ20TohfvkQolC+Sn3TWqvvRTjBUQItyMVxAO rw2gJ50j+r2vZw2s99ZOjBEFCDs+L5mR -----END CERTIFICATE-----Generated at Fri Jul 4 06:47:59 2025 by rpki-client