$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json) Hash identifier: ERoUPBJ2G+0r6YP2qGPfL5k4zR7FrUXQ8uTEKKD3f2s= Subject key identifier: D9:1A:8F:9F:7B:F4:A3:7C:9A:46:37:2A:F2:79:1D:0F:82:D3:89:0D Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft Manifest number: E7 Signing time: Tue 01 Jul 2025 05:53:54 +0000 Manifest this update: Tue 01 Jul 2025 05:53:54 +0000 Manifest next update: Tue 08 Jul 2025 05:53:54 +0000 Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: S9JYg1uz1Tof6u/vH/moX/Mo3IXVW5p1V+75rGwUIHo=) 2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: 1cTaBvBAhxFneEeGlAFuRr/tcaFQd3vN8aAkRfuybSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: Jul 1 05:53:54 2025 GMT Not After : Jul 8 05:53:54 2025 GMT Subject: CN=686377f2-a8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:2a:22:a4:26:ec:ff:cc:c0:f2:0f:c1:b9: 50:9d:01:01:14:44:c8:a7:db:9f:74:81:e2:77:71: d8:ff:d8:50:28:71:33:d6:1f:3c:81:a8:f7:72:6a: 5d:62:1d:71:c9:bc:79:db:3a:ec:cb:88:e7:a0:66: 5a:2e:c1:78:99:e3:8c:48:28:89:54:09:f1:96:f0: 46:5f:4e:96:a5:46:4d:97:a2:59:d2:69:c4:34:cc: 97:9a:ce:0c:4c:09:b4:59:77:82:d8:a2:9b:e8:55: bc:24:88:3e:ce:35:66:19:33:7f:48:ad:0d:c1:f2: 07:07:15:aa:fe:1a:58:8d:85:f5:d8:d6:67:7b:1c: 2f:a8:8c:1e:14:ef:4d:04:d3:2e:2c:e8:63:5b:63: 00:9a:89:2b:6c:38:77:4a:89:8a:c7:93:31:f7:0d: 67:66:8a:18:f8:9c:cd:8e:eb:4c:5d:33:48:c5:7e: 2a:a0:43:4a:53:34:54:33:10:4e:58:f3:be:f3:a2: f9:e7:7b:a5:b9:06:c0:f4:e0:ea:4a:b6:cb:05:15: f3:a1:ca:ac:3d:d9:a1:f1:f5:63:0a:56:4d:2d:55: a7:f7:6a:c6:83:d3:4b:f2:f1:a5:e3:b5:26:ab:76: 81:1b:75:ac:7c:70:d2:34:6c:00:90:ba:60:af:2b: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:8F:9F:7B:F4:A3:7C:9A:46:37:2A:F2:79:1D:0F:82:D3:89:0D X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:1a:b2:8b:6e:e7:d3:70:2a:9f:cd:0e:1f:36:33:d9:d4:67: 9e:03:6e:98:11:c9:9c:71:ef:8e:f4:21:7f:8f:fe:03:ee:cb: 14:89:7d:b4:e8:73:2b:ee:62:20:a5:66:4c:42:c1:a1:58:1e: 43:a4:d0:80:ac:97:42:d9:ad:34:18:e4:29:22:44:52:73:e8: af:7f:bc:25:67:14:5f:c8:6c:e9:5c:f6:27:19:8b:5e:59:90: 9a:71:57:09:14:d5:dc:8f:ad:d1:70:51:c0:21:7f:dc:3f:36: 55:03:0a:89:86:bd:b8:0f:c9:88:25:62:fc:de:f7:0d:22:94: b2:de:67:19:8c:78:d0:9d:cc:87:f5:b4:8a:e8:43:5f:1c:25: c5:81:59:1a:7d:17:4c:69:9c:44:59:2e:60:f0:a7:ff:d4:a8: 37:b4:19:88:66:18:9c:8e:fc:36:34:40:45:dc:f6:aa:ad:2f: a3:de:d0:c4:54:a9:22:fb:f7:c1:1f:89:6b:70:0b:25:16:61: f6:9b:9d:96:43:81:bf:6d:a8:ea:ed:6c:56:31:c5:7e:8c:44: 88:58:22:f0:5c:34:8e:ef:90:f5:cb:7d:45:6b:52:31:27:84: c0:f2:86:a8:1d:46:a4:58:a2:1c:53:7f:ac:36:08:a4:91:32: 99:a8:8d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy Q0FERjc3MDcwHhcNMjUwNzAxMDU1MzU0WhcNMjUwNzA4MDU1MzU0WjAYMRYwFAYD VQQDEw02ODYzNzdmMi1hOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsIqIqQm7P/MwPIPwblQnQEBFETIp9ufdIHid3HY/9hQKHEz1h88gaj3cmpd Yh1xybx52zrsy4jnoGZaLsF4meOMSCiJVAnxlvBGX06WpUZNl6JZ0mnENMyXms4M TAm0WXeC2KKb6FW8JIg+zjVmGTN/SK0NwfIHBxWq/hpYjYX12NZnexwvqIweFO9N BNMuLOhjW2MAmokrbDh3SomKx5Mx9w1nZooY+JzNjutMXTNIxX4qoENKUzRUMxBO WPO+86L553uluQbA9ODqSrbLBRXzocqsPdmh8fVjClZNLVWn92rGg9NL8vGl47Um q3aBG3WsfHDSNGwAkLpgryv7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkaj597 9KN8mkY3KvJ5HQ+C04kNMB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp c2loZi1MWGVKZDhzcmZkd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXGrKLbufTcCqfzQ4fNjPZ1GeeA26YEcmcce+O9CF/j/4D7ssUiX20 6HMr7mIgpWZMQsGhWB5DpNCArJdC2a00GOQpIkRSc+ivf7wlZxRfyGzpXPYnGYte WZCacVcJFNXcj63RcFHAIX/cPzZVAwqJhr24D8mIJWL83vcNIpSy3mcZjHjQncyH 9bSK6ENfHCXFgVkafRdMaZxEWS5g8Kf/1Kg3tBmIZhicjvw2NEBF3PaqrS+j3tDE VKki+/fBH4lrcAslFmH2m52WQ4G/bajq7WxWMcV+jESIWCLwXDSO75D1y31Fa1Ix J4TA8oaoHUakWKIcU3+sNgikkTKZqI0f -----END CERTIFICATE-----Generated at Tue Jul 1 19:33:10 2025 by rpki-client