$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft File: 9VqsRorxZKWTnXLq_dOkczp5lgk.mft (raw, json) Hash identifier: 0DK9ZbAApocB9aurJaKhLeIyG/GCQspx2OoGRWSvSTk= Subject key identifier: CC:1B:96:B9:C8:C5:9A:90:D4:F0:70:45:15:7D:D3:FE:5D:FF:37:7A Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft Manifest number: 0645 Signing time: Wed 02 Jul 2025 22:53:37 +0000 Manifest this update: Wed 02 Jul 2025 22:53:36 +0000 Manifest next update: Wed 09 Jul 2025 22:53:36 +0000 Files and hashes: 1: 9VqsRorxZKWTnXLq_dOkczp5lgk.crl (hash: 48prYM6fi0o225OB5jnd+b5mHdZZ8CQbx9VbKihRd60=) 2: 3F3A8E86912511EBB0270738C4F9AE02.roa (hash: zJD2DUaHYLIs6MFcD7dM939RjwobVqjAJWT+0osciMA=) 3: 3E6BCA6A912511EBB0270738C4F9AE02.roa (hash: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF83, serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609 Validity Not Before: Jul 2 22:53:36 2025 GMT Not After : Jul 9 22:53:36 2025 GMT Subject: CN=6865b870-eb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:3d:07:d7:e8:6a:ab:2a:35:a6:1e:c1:86: 9b:f8:6f:37:f3:00:a3:60:2a:15:ff:e8:8c:7f:48: 88:91:33:d6:6c:88:28:ff:e1:10:13:5b:45:2c:3a: 7e:dd:ea:ab:d8:d8:5f:9a:ae:a0:ce:d3:b6:9f:7d: 17:9d:ef:b4:f6:85:58:e4:30:ab:b3:74:5a:3e:22: 8a:9d:73:f5:7e:6d:0e:a0:b1:ee:38:c8:77:41:fb: 64:32:bb:50:3d:d1:65:0f:e2:99:34:8d:fa:01:fe: 5f:7a:b8:f1:77:5f:36:61:cc:35:08:e6:20:db:5d: 21:3d:1c:9f:82:2a:85:d1:81:56:23:01:df:1e:9b: ac:17:be:a5:4e:7a:3a:72:3c:dd:92:10:98:60:79: b3:a1:b5:2a:fb:fa:52:e1:a9:89:ba:14:f1:c3:65: ce:48:3b:e4:06:27:c0:18:73:10:2d:b4:2c:fd:fe: ea:c6:03:10:d7:d8:e0:0e:0b:01:de:af:32:2f:63: 44:20:ca:01:c8:b2:da:11:37:25:eb:ec:c8:ef:a2: fd:49:a6:68:6c:72:ea:4c:77:84:32:ef:39:40:a1: 8b:69:ee:78:6d:32:9d:7d:1f:1a:6f:de:05:e2:5e: 83:b4:bf:ed:c3:be:81:9c:b5:3f:56:58:11:0b:d7: f1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:96:B9:C8:C5:9A:90:D4:F0:70:45:15:7D:D3:FE:5D:FF:37:7A X509v3 Authority Key Identifier: keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e5:ce:04:3b:7b:e5:17:c9:c2:53:be:9d:67:35:0f:14:9d: 82:42:fb:66:7e:1b:93:5b:d3:56:00:19:24:40:66:b3:c2:92: f7:da:33:02:2d:d4:d5:fc:45:2f:d6:3f:e2:6f:9f:83:b7:64: 11:33:c2:c3:51:de:e8:43:f3:c2:99:9d:1b:6d:44:87:5f:66: 07:b0:bf:b2:9d:1a:90:fe:f4:29:dd:7d:20:c5:a7:cb:e0:f4: 40:d5:7e:98:72:8a:87:6c:d9:15:f8:a0:34:ec:7d:b7:7a:ac: 19:9a:e6:4c:61:85:c4:b7:8c:b4:1d:c8:cd:3c:45:ad:82:f2: 09:0c:65:b8:6b:87:bc:49:a0:58:a3:f5:7f:36:51:da:a6:c8: c6:ba:16:74:4b:f5:61:35:41:cb:e2:1c:09:c2:4a:42:4c:e0: 08:57:96:9d:ec:3d:b1:6f:39:aa:18:e2:5e:81:73:af:a7:d4: d2:10:34:c0:05:c3:58:d3:53:b3:f6:38:72:cb:5b:f1:6e:1d: 66:e7:c6:35:1e:b3:0e:91:80:ff:e2:41:c8:ed:9f:2f:7a:f5: b7:5b:a9:91:0d:14:47:a8:fb:25:cf:0f:b7:c2:b1:b1:38:a5: 67:e4:3e:16:51:40:d9:ad:e1:95:ef:be:87:d1:63:50:ad:d4: 59:14:1a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNGODMxMTAvBgNVBAUTKEY1NUFBQzQ2OEFGMTY0QTU5MzlENzJFQUZERDNBNDcz M0E3OTk2MDkwHhcNMjUwNzAyMjI1MzM2WhcNMjUwNzA5MjI1MzM2WjAYMRYwFAYD VQQDEw02ODY1Yjg3MC1lYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlE9B9foaqsqNaYewYab+G838wCjYCoV/+iMf0iIkTPWbIgo/+EQE1tFLDp+ 3eqr2Nhfmq6gztO2n30Xne+09oVY5DCrs3RaPiKKnXP1fm0OoLHuOMh3QftkMrtQ PdFlD+KZNI36Af5ferjxd182Ycw1COYg210hPRyfgiqF0YFWIwHfHpusF76lTno6 cjzdkhCYYHmzobUq+/pS4amJuhTxw2XOSDvkBifAGHMQLbQs/f7qxgMQ19jgDgsB 3q8yL2NEIMoByLLaETcl6+zI76L9SaZobHLqTHeEMu85QKGLae54bTKdfR8ab94F 4l6DtL/tw76BnLU/VlgRC9fx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwblrnI xZqQ1PBwRRV90/5d/zd6MB8GA1UdIwQYMBaAFPVarEaK8WSlk51y6v3TpHM6eZYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0Y4My9BMzk5NjEwNjkx MjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpLV1RuWExxX2RPa2N6cDVs Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0Y4My9BMzk5NjEwNjkxMjMxMUVCOTBEMTVDMzZDNEY5QUUwMi85VnFzUm9yeFpL V1RuWExxX2RPa2N6cDVsZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC25c4EO3vlF8nCU76dZzUPFJ2CQvtmfhuTW9NWABkkQGazwpL32jMC LdTV/EUv1j/ib5+Dt2QRM8LDUd7oQ/PCmZ0bbUSHX2YHsL+ynRqQ/vQp3X0gxafL 4PRA1X6YcoqHbNkV+KA07H23eqwZmuZMYYXEt4y0HcjNPEWtgvIJDGW4a4e8SaBY o/V/NlHapsjGuhZ0S/VhNUHL4hwJwkpCTOAIV5ad7D2xbzmqGOJegXOvp9TSEDTA BcNY01Oz9jhyy1vxbh1m58Y1HrMOkYD/4kHI7Z8vevW3W6mRDRRHqPslzw+3wrGx OKVn5D4WUUDZreGV776H0WNQrdRZFBrR -----END CERTIFICATE-----Generated at Thu Jul 3 18:54:34 2025 by rpki-client