$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: LwOfdXoMGcoxm63smpgpzwUuQD9c4x/xlR7SidMCupM= Subject key identifier: 89:19:BE:22:03:90:01:E3:D2:D6:AF:75:BC:F4:AD:B1:45:CE:27:D2 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07C9 Signing time: Wed 02 Jul 2025 21:22:55 +0000 Manifest this update: Wed 02 Jul 2025 21:22:55 +0000 Manifest next update: Wed 09 Jul 2025 21:22:55 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: w0CPweetnbiCrk+Sfif1/qjh3vuJmu/m71ko6VxJAkc=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Jul 2 21:22:55 2025 GMT Not After : Jul 9 21:22:55 2025 GMT Subject: CN=6865a32f-d196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:e0:7e:df:fe:be:c4:f4:11:71:84:de:64: 8e:2b:df:e0:f0:a7:c6:5e:c5:c9:9c:b7:13:0d:cf: b2:2c:cf:d6:bd:21:92:0b:b7:fb:94:57:7b:93:66: 2d:4e:2c:43:00:54:04:2e:17:e0:3a:43:5b:e0:68: 55:f9:b5:1d:29:f3:66:27:9f:67:9b:ca:67:cc:ee: 0e:b9:ea:18:8e:8f:a5:78:13:0c:b8:6d:13:7b:80: 19:ac:0c:57:4a:d9:48:cb:45:d5:e7:bf:35:60:d5: 2e:9d:f8:37:c1:46:72:37:1d:5e:59:fa:89:ff:14: a9:96:86:54:87:2b:d7:2c:47:f2:d0:5d:dc:54:a6: 98:49:16:d2:c4:83:2f:52:c6:71:67:00:15:ae:d5: 5a:9f:47:5f:1c:90:ad:96:87:3b:83:12:22:59:04: 8a:00:66:7d:12:e6:5d:3c:c1:d3:be:58:c1:7e:68: eb:2e:67:98:f0:77:8b:b0:69:37:77:ce:ac:ca:bd: ca:2e:0e:b8:ee:ba:10:11:e9:96:7e:85:cf:ee:63: de:03:0d:15:bc:ae:70:0e:6e:e0:e6:8c:b8:5c:4a: 83:b8:4e:66:f9:7c:5a:c8:61:13:ea:c1:48:13:56: c8:42:ab:b9:d5:a8:3e:4b:44:08:e6:45:ed:7a:47: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:BE:22:03:90:01:E3:D2:D6:AF:75:BC:F4:AD:B1:45:CE:27:D2 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e4:71:21:7f:8f:45:11:f6:f5:c2:eb:e8:8a:1f:17:9a:16: 78:90:04:e3:57:17:8f:40:ac:73:64:f7:45:f0:69:d2:35:1a: e8:60:98:c9:25:cd:b2:85:36:f3:15:74:36:fc:7b:63:82:16: 0d:73:7b:70:c4:44:04:43:dd:b7:a6:5d:9e:8f:d5:8b:64:e4: 75:2e:18:84:91:fa:27:15:85:9c:81:07:86:89:d0:d6:54:7d: 01:cb:26:28:ac:b9:d6:7f:bd:4f:be:13:57:00:fa:d5:1a:d1: 8f:54:30:8c:e7:a7:3e:d3:e5:5c:0c:dd:99:2f:37:41:01:5a: 08:28:38:5d:29:e8:83:ac:1b:74:39:6c:e1:74:41:b5:d1:82: 6e:71:f3:4f:20:a4:5b:f2:b0:50:e7:d2:ce:1b:2a:1d:e6:bc: b7:52:11:63:66:64:21:53:a5:45:8c:15:0d:8d:e5:ec:c6:f2: e2:5b:52:26:4b:11:a1:e8:61:af:29:b0:27:58:63:fa:1c:4a: 13:70:84:04:41:36:07:22:f5:1a:b8:a3:a8:c0:95:42:27:32: 64:cb:76:f3:7d:f8:99:b1:67:55:24:5a:85:e6:94:15:ad:e5: 79:cc:05:77:b5:47:2e:96:fa:cc:31:fa:13:30:c6:68:55:e0: fa:06:5b:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNzAyMjEyMjU1WhcNMjUwNzA5MjEyMjU1WjAYMRYwFAYD VQQDEw02ODY1YTMyZi1kMTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Trgft/+vsT0EXGE3mSOK9/g8KfGXsXJnLcTDc+yLM/WvSGSC7f7lFd7k2Yt TixDAFQELhfgOkNb4GhV+bUdKfNmJ59nm8pnzO4OueoYjo+leBMMuG0Te4AZrAxX StlIy0XV5781YNUunfg3wUZyNx1eWfqJ/xSploZUhyvXLEfy0F3cVKaYSRbSxIMv UsZxZwAVrtVan0dfHJCtloc7gxIiWQSKAGZ9EuZdPMHTvljBfmjrLmeY8HeLsGk3 d86syr3KLg647roQEemWfoXP7mPeAw0VvK5wDm7g5oy4XEqDuE5m+XxayGET6sFI E1bIQqu51ag+S0QI5kXtekeMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkZviID kAHj0tavdbz0rbFFzifSMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC05HEhf49FEfb1wuvoih8XmhZ4kATjVxePQKxzZPdF8GnSNRroYJjJ Jc2yhTbzFXQ2/HtjghYNc3twxEQEQ923pl2ej9WLZOR1LhiEkfonFYWcgQeGidDW VH0ByyYorLnWf71PvhNXAPrVGtGPVDCM56c+0+VcDN2ZLzdBAVoIKDhdKeiDrBt0 OWzhdEG10YJucfNPIKRb8rBQ59LOGyod5ry3UhFjZmQhU6VFjBUNjeXsxvLiW1Im SxGh6GGvKbAnWGP6HEoTcIQEQTYHIvUauKOowJVCJzJky3bzffiZsWdVJFqF5pQV reV5zAV3tUculvrMMfoTMMZoVeD6Blsh -----END CERTIFICATE-----Generated at Thu Jul 3 02:05:15 2025 by rpki-client