$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: klw3I8QIr3tTuil5X5mx+Pa+puJy1hXTQmr2UBPvz+8= Subject key identifier: 18:A5:74:97:92:4A:AE:80:C3:85:40:F8:37:E2:9B:24:36:08:A0:F5 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0732 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 0725 Signing time: Wed 02 Jul 2025 22:09:57 +0000 Manifest this update: Wed 02 Jul 2025 22:09:56 +0000 Manifest next update: Wed 09 Jul 2025 22:09:56 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: +aTeS6lB9P0lL32HM/nill5eEX+2cXAPunsOHYjpT3w=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Jul 2 22:09:56 2025 GMT Not After : Jul 9 22:09:56 2025 GMT Subject: CN=6865ae34-ba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:46:55:77:ea:bc:43:e5:e7:ba:3b:af:dc: 05:a2:72:bc:39:68:6c:2e:d4:64:c9:0b:6d:07:f0: 60:67:a4:59:40:ad:74:47:0e:2a:18:45:3e:dc:86: 28:75:b1:7a:1b:51:6b:ee:6e:8b:7f:cf:03:91:c5: 7b:3d:92:ce:75:47:85:80:0d:65:60:b9:7c:c4:4b: ac:5f:4f:ad:b3:7d:e4:16:4f:f1:c5:a2:9a:50:cc: 00:a5:4a:6e:9b:30:c3:61:eb:2d:99:7e:88:c3:ed: 4b:66:e1:d5:21:a7:08:ec:95:4f:ef:ed:e3:4d:38: 82:a9:56:bd:44:9f:e3:61:9c:b6:e2:ab:c4:0b:18: 3f:75:5f:6d:e0:78:d1:d9:9d:89:e7:27:dc:eb:be: 8b:77:61:3f:16:9f:b1:24:df:35:e9:01:45:a0:65: ee:4e:d3:7a:80:e1:1a:fd:60:d3:b3:9b:e2:aa:f8: a5:d8:43:b3:5e:d8:d2:b9:fb:b7:44:07:25:37:ce: d6:04:3d:cf:d2:0a:44:cb:2d:3b:3a:a4:28:bf:5e: 0a:a2:73:95:22:aa:1a:2d:69:28:5f:a2:d4:73:8f: 0d:b3:42:12:0d:51:20:e8:c5:89:78:e3:70:33:a8: cd:af:42:cb:89:c8:92:e9:fb:74:59:fa:c7:3e:c8: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:74:97:92:4A:AE:80:C3:85:40:F8:37:E2:9B:24:36:08:A0:F5 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c0:4c:df:91:89:2a:2b:22:18:ec:d2:82:0d:6e:72:4e:68: 0d:d8:6f:6e:99:c9:98:f8:1a:4b:3c:a9:c1:7a:35:0f:8e:00: d5:68:90:3e:0e:68:bd:ac:61:5e:21:e8:db:45:29:2e:b0:e4: 6d:fb:a2:74:50:df:ec:28:ed:16:07:3b:d6:8a:a5:c3:99:1d: be:33:63:76:88:2c:ac:63:b0:2f:1d:34:25:8a:95:47:c3:dc: 24:01:85:ac:14:cd:2c:3d:55:ab:d7:68:e7:33:74:26:6e:ca: 3b:42:11:16:dc:5a:bb:1c:b9:4c:08:ef:24:05:6b:98:ed:38: 83:61:d8:d0:9d:ea:c7:3d:bf:ab:4c:7e:52:75:c7:d6:64:a3: 4a:39:6d:d5:bf:43:4c:fb:be:71:8d:55:97:33:3f:3b:c7:af: 90:cb:a3:0d:01:70:2a:b7:e1:62:c3:55:41:49:18:0e:dd:4a: 22:54:d0:8a:69:a0:55:6f:04:e1:6d:07:54:f6:d7:0b:ae:41: 4f:51:5b:f0:ab:92:84:c1:76:b2:7c:ac:27:c1:91:2e:5e:b3: 3e:ef:7a:02:16:b4:b6:68:01:2c:87:e7:f2:73:f5:a8:07:27: f0:c4:07:8b:32:15:bb:6b:18:51:f3:77:b6:6d:8c:50:d6:09: db:7e:36:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjUwNzAyMjIwOTU2WhcNMjUwNzA5MjIwOTU2WjAYMRYwFAYD VQQDEw02ODY1YWUzNC1iYTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfpGVXfqvEPl57o7r9wFonK8OWhsLtRkyQttB/BgZ6RZQK10Rw4qGEU+3IYo dbF6G1Fr7m6Lf88DkcV7PZLOdUeFgA1lYLl8xEusX0+ts33kFk/xxaKaUMwApUpu mzDDYestmX6Iw+1LZuHVIacI7JVP7+3jTTiCqVa9RJ/jYZy24qvECxg/dV9t4HjR 2Z2J5yfc676Ld2E/Fp+xJN816QFFoGXuTtN6gOEa/WDTs5viqvil2EOzXtjSufu3 RAclN87WBD3P0gpEyy07OqQov14KonOVIqoaLWkoX6LUc48Ns0ISDVEg6MWJeONw M6jNr0LLiciS6ft0WfrHPsgXhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBildJeS Sq6Aw4VA+DfimyQ2CKD1MB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIwEzfkYkqKyIY7NKCDW5yTmgN2G9umcmY+BpLPKnBejUPjgDVaJA+ Dmi9rGFeIejbRSkusORt+6J0UN/sKO0WBzvWiqXDmR2+M2N2iCysY7AvHTQlipVH w9wkAYWsFM0sPVWr12jnM3Qmbso7QhEW3Fq7HLlMCO8kBWuY7TiDYdjQnerHPb+r TH5SdcfWZKNKOW3Vv0NM+75xjVWXMz87x6+Qy6MNAXAqt+Fiw1VBSRgO3UoiVNCK aaBVbwThbQdU9tcLrkFPUVvwq5KEwXayfKwnwZEuXrM+73oCFrS2aAEsh+fyc/Wo ByfwxAeLMhW7axhR83e2bYxQ1gnbfjYy -----END CERTIFICATE-----Generated at Fri Jul 4 07:47:29 2025 by rpki-client