$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft File: pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json) Hash identifier: ODPg1ZNO8EWnCriXYu2P/yAPMFDpGzNI8/OJR6hgxAs= Subject key identifier: 52:52:9A:23:38:6F:6A:69:6E:B7:82:57:6D:98:97:E0:E4:5D:2B:6F Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE Certificate issuer: /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft Manifest number: 04D2 Signing time: Sat 28 Jun 2025 23:22:09 +0000 Manifest this update: Sat 28 Jun 2025 23:22:08 +0000 Manifest next update: Sat 05 Jul 2025 23:22:08 +0000 Files and hashes: 1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: yoBOPCcKOsb1gqS4gE6zSrtJnrA9Hf/78Sp87UKOeaE=) 2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: W3CoFW/9z7UlujIbTWP3AOKXFMu+6O4kA5ioHKglL9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE Validity Not Before: Jun 28 23:22:08 2025 GMT Not After : Jul 5 23:22:08 2025 GMT Subject: CN=68607920-1538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:b3:cf:e1:32:d6:6c:6c:ec:03:02:5f:13: 8f:82:e2:92:ca:1b:2c:63:ee:a4:c8:84:f1:61:0a: f3:ad:fa:38:70:db:e7:bb:90:69:b9:29:49:a7:4d: f8:b3:e5:95:e1:1d:eb:14:78:85:1b:6f:a0:89:a8: 30:bf:6e:da:48:ed:df:97:83:46:e1:86:d2:ef:05: 54:e6:90:83:a7:12:19:31:f3:9e:b3:1b:50:2c:2c: bf:7b:24:4c:d4:77:7c:7d:be:3f:63:c7:24:b7:18: 87:53:f2:dd:e2:c4:fe:b2:9c:8a:ed:d6:a2:a0:a6: 21:8f:88:b7:e2:b3:f6:45:60:c7:27:26:c1:6b:fd: 8c:a1:45:63:75:b5:e6:15:7a:29:c2:d1:b6:eb:0e: 63:d2:80:d5:2c:17:20:5c:d4:ae:ae:a5:6f:1d:52: c9:86:f6:4d:a8:30:ae:41:28:b8:0b:c6:a7:02:26: d0:0e:79:66:b2:88:d2:ff:48:ce:17:75:6d:38:2c: f1:4d:a8:75:31:e9:4a:79:74:5c:3d:45:2b:5a:d7: 45:b5:4c:b0:9c:cc:37:b0:8e:28:eb:29:cd:6a:51: d3:39:20:a8:57:f6:ff:36:63:03:bf:cd:8d:28:6d: a3:b0:89:ff:9f:0d:0a:59:5b:40:73:df:d6:0c:23: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:9A:23:38:6F:6A:69:6E:B7:82:57:6D:98:97:E0:E4:5D:2B:6F X509v3 Authority Key Identifier: keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:2d:9a:ee:ac:d6:98:a2:43:b0:6a:dd:74:5d:dc:1c:d6:b7: 82:8b:e7:27:3e:2a:a5:b3:2f:d5:d0:9f:90:7c:44:8a:33:30: 9a:e6:08:5f:f5:db:ae:6e:99:27:5f:31:b5:45:09:9b:96:61: a2:6f:ce:49:3b:60:8f:78:2e:60:92:20:83:9e:05:26:6e:d9: 32:9c:7d:40:02:51:bd:e3:b9:dc:32:32:4d:57:cc:48:9a:dc: 2c:ed:e2:9a:35:67:a6:43:64:b3:57:57:72:20:a3:e7:d2:d9: 68:93:4d:59:1d:ff:a5:63:31:9b:18:af:b6:c7:60:b6:20:b1: 79:f9:e0:8c:57:b6:07:b7:7a:f5:37:ef:4b:7f:1e:d6:3e:3f: e4:19:49:04:1a:8e:2f:54:4c:f5:b2:b6:5a:c1:b4:18:6e:6a: 65:37:a0:4d:2e:6e:f0:2f:19:7f:0f:c3:b1:7d:ba:45:3b:bb: 53:af:61:d6:3d:af:3a:82:82:31:1c:bd:c9:1c:91:6c:cd:16: e6:cd:52:1e:04:97:e3:c6:6c:c6:22:98:e4:5f:c7:f5:89:5d: 9d:36:ce:f7:dc:48:03:ef:14:d7:8c:00:eb:a0:d8:88:44:f1: 9d:6f:94:50:df:7f:c1:d5:79:ad:df:70:24:de:68:ca:dd:0c: ad:54:c9:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCOUYxMTAvBgNVBAUTKEE1MDczQTQ5ODRFNTk3MTAxMzMwQjlFN0EwNThGMzg5 Q0U5MzI5QUUwHhcNMjUwNjI4MjMyMjA4WhcNMjUwNzA1MjMyMjA4WjAYMRYwFAYD VQQDEw02ODYwNzkyMC0xNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbSzz+Ey1mxs7AMCXxOPguKSyhssY+6kyITxYQrzrfo4cNvnu5BpuSlJp034 s+WV4R3rFHiFG2+giagwv27aSO3fl4NG4YbS7wVU5pCDpxIZMfOesxtQLCy/eyRM 1Hd8fb4/Y8cktxiHU/Ld4sT+spyK7daioKYhj4i34rP2RWDHJybBa/2MoUVjdbXm FXopwtG26w5j0oDVLBcgXNSurqVvHVLJhvZNqDCuQSi4C8anAibQDnlmsojS/0jO F3VtOCzxTah1MelKeXRcPUUrWtdFtUywnMw3sI4o6ynNalHTOSCoV/b/NmMDv82N KG2jsIn/nw0KWVtAc9/WDCOjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJSmiM4 b2ppbreCV22Yl+DkXStvMB8GA1UdIwQYMBaAFKUHOkmE5ZcQEzC556BY84nOkymu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI5Ri9GNzhEQjVEQzI3 MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4QVRNTG5ub0ZqemljNlRL YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BRYzZTWVRsbHhBVE1Mbm5vRmp6aWM2VEthNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI5Ri9GNzhEQjVEQzI3MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4 QVRNTG5ub0ZqemljNlRLYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGLZrurNaYokOwat10Xdwc1reCi+cnPiqlsy/V0J+QfESKMzCa5ghf 9duubpknXzG1RQmblmGib85JO2CPeC5gkiCDngUmbtkynH1AAlG947ncMjJNV8xI mtws7eKaNWemQ2SzV1dyIKPn0tlok01ZHf+lYzGbGK+2x2C2ILF5+eCMV7YHt3r1 N+9Lfx7WPj/kGUkEGo4vVEz1srZawbQYbmplN6BNLm7wLxl/D8OxfbpFO7tTr2HW Pa86goIxHL3JHJFszRbmzVIeBJfjxmzGIpjkX8f1iV2dNs733EgD7xTXjADroNiI RPGdb5RQ33/B1Xmt33Ak3mjK3QytVMlX -----END CERTIFICATE-----Generated at Mon Jun 30 18:55:04 2025 by rpki-client