$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: wwgeFBwsROB/uR6LYtwZkiyEr9kIWibzRc95N67HrzE= Subject key identifier: C0:BD:B1:E8:E4:BD:41:1F:3F:02:F1:C3:9A:DE:06:02:27:97:9D:88 Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 013F Signing time: Tue 01 Jul 2025 04:52:29 +0000 Manifest this update: Tue 01 Jul 2025 04:52:29 +0000 Manifest next update: Tue 08 Jul 2025 04:52:29 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: ok9qO2Tl3lzprhZs+EtNsSRflzRdQAYEtQ0p65AKFsQ=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: M/8UXHVwrUGREXAw7kPK2rXqXimmSlcdKlYZysm7Xmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Jul 1 04:52:29 2025 GMT Not After : Jul 8 04:52:29 2025 GMT Subject: CN=6863698d-8d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:38:6b:9b:25:37:be:4e:7b:37:f7:94:08: 25:5b:4c:d7:3a:3e:e5:4e:7b:e9:b6:6d:52:1d:29: bf:89:b0:84:51:07:d5:4d:55:07:d8:05:8a:39:11: d0:ee:20:23:c8:65:b5:75:e2:f6:07:12:25:8d:46: b1:1a:e7:5d:6a:21:db:7c:f0:ea:8a:1d:32:d1:5e: d4:b6:2b:f4:76:bb:8c:aa:6d:3e:17:c8:ea:34:29: 06:56:6a:9e:6c:f5:87:eb:91:55:e9:97:9e:d3:1b: 75:b6:47:3b:2b:92:8b:54:15:f2:10:18:6b:62:70: 5d:1c:45:7b:b8:ca:38:45:c8:b1:b8:8b:5c:42:73: 77:4a:82:9f:2d:31:9a:11:d5:2a:fa:39:b7:b2:dd: 86:ca:7e:b7:fc:d1:08:2f:54:18:0b:d6:e3:7a:9b: bf:47:4b:eb:31:c7:31:da:be:cc:da:49:46:54:7b: 9a:34:58:17:31:3a:09:5f:42:85:e8:ed:2f:f8:c6: 0c:30:be:d7:17:c2:4a:77:15:1d:64:40:98:d5:0e: 34:dd:87:2d:e1:88:4d:f0:f2:68:7e:8f:71:95:48: fe:9d:d2:e6:ca:87:96:fd:62:fd:11:ae:38:8a:67: 6f:f0:c0:a5:50:91:e6:06:a3:8f:fb:80:d7:bc:5a: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BD:B1:E8:E4:BD:41:1F:3F:02:F1:C3:9A:DE:06:02:27:97:9D:88 X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b3:f9:9e:91:56:66:1a:21:e9:c4:c1:27:83:71:65:77:01: 97:9b:a8:aa:5f:7e:df:df:31:3f:73:0e:71:94:86:2b:6a:7a: e7:9f:2e:9e:36:de:38:b5:df:d5:43:da:1c:18:c8:df:3f:db: a5:7c:fa:52:bd:1c:6e:03:bd:46:b7:46:b0:31:96:51:16:86: a0:b0:e9:47:70:13:8c:02:72:d0:66:7d:8c:54:f1:38:4a:26: 0c:a5:7c:a6:d7:9c:2d:a5:42:c7:13:b6:e2:06:86:37:a2:44: 10:0f:77:47:97:ed:bf:b5:bc:b3:04:3e:d2:1c:94:eb:0f:53: 74:c4:d6:3b:3d:04:e0:87:2d:c9:88:33:f0:93:bf:ef:ca:df: 52:8a:30:30:37:f3:92:1f:cb:d3:61:d2:89:1a:52:ec:f4:67: 4b:76:88:1a:6f:c1:f9:a0:2f:60:94:ed:d6:b3:d8:dc:ec:42: c7:fb:1e:66:8b:c0:a0:17:a0:e3:20:3a:25:9d:f0:c7:36:f9: 86:e7:d5:34:20:32:8a:de:fc:46:60:31:0a:f7:16:b0:7e:81: 2f:3e:30:4f:c7:d4:73:fe:f0:1b:02:a9:04:6c:c8:37:81:0d: 44:4d:5a:51:e2:dc:a5:f4:95:f1:45:e6:06:4f:50:87:e1:c5: 66:e3:9b:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjUwNzAxMDQ1MjI5WhcNMjUwNzA4MDQ1MjI5WjAYMRYwFAYD VQQDEw02ODYzNjk4ZC04ZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02Y4a5slN75Oezf3lAglW0zXOj7lTnvptm1SHSm/ibCEUQfVTVUH2AWKORHQ 7iAjyGW1deL2BxIljUaxGuddaiHbfPDqih0y0V7Utiv0druMqm0+F8jqNCkGVmqe bPWH65FV6Zee0xt1tkc7K5KLVBXyEBhrYnBdHEV7uMo4RcixuItcQnN3SoKfLTGa EdUq+jm3st2Gyn63/NEIL1QYC9bjepu/R0vrMccx2r7M2klGVHuaNFgXMToJX0KF 6O0v+MYMML7XF8JKdxUdZECY1Q403Yct4YhN8PJofo9xlUj+ndLmyoeW/WL9Ea44 imdv8MClUJHmBqOP+4DXvFpc6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC9sejk vUEfPwLxw5reBgInl52IMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFs/mekVZmGiHpxMEng3FldwGXm6iqX37f3zE/cw5xlIYranrnny6e Nt44td/VQ9ocGMjfP9ulfPpSvRxuA71Gt0awMZZRFoagsOlHcBOMAnLQZn2MVPE4 SiYMpXym15wtpULHE7biBoY3okQQD3dHl+2/tbyzBD7SHJTrD1N0xNY7PQTghy3J iDPwk7/vyt9SijAwN/OSH8vTYdKJGlLs9GdLdogab8H5oC9glO3Ws9jc7ELH+x5m i8CgF6DjIDolnfDHNvmG59U0IDKK3vxGYDEK9xawfoEvPjBPx9Rz/vAbAqkEbMg3 gQ1ETVpR4tyl9JXxReYGT1CH4cVm45tp -----END CERTIFICATE-----Generated at Thu Jul 3 00:21:36 2025 by rpki-client