$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: rUOwrntKZr+qtljnODHKQKeUmmP96UZapjUpVgMOBg8= Subject key identifier: B0:0E:1E:CF:14:28:0C:F5:F9:2B:D9:6F:11:A2:45:E0:2A:F8:98:D6 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: E2 Signing time: Sun 29 Jun 2025 04:32:25 +0000 Manifest this update: Sun 29 Jun 2025 04:32:25 +0000 Manifest next update: Sun 06 Jul 2025 04:32:25 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: hR0w4ZH2NYpNotPkiVKzFWUv+ZUq5T1y9Efmxsr/jTE=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Jun 29 04:32:25 2025 GMT Not After : Jul 6 04:32:25 2025 GMT Subject: CN=6860c1d9-87b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:7f:90:fd:7a:02:d1:37:a0:4f:81:c4:23: 05:b4:5e:e9:91:fd:26:c6:dd:ad:76:c1:22:35:22: 21:c6:66:20:3d:6b:08:44:84:a2:8a:07:59:d2:ee: 26:43:b5:0b:55:8e:80:c5:ec:e1:97:4e:10:f4:1b: 53:78:bf:43:d2:64:7e:20:e5:da:8f:1f:22:cd:12: 2c:40:66:8e:a6:68:1e:5d:fc:ea:63:35:39:70:4e: f5:6f:ad:3c:b0:85:ef:0b:c4:9c:99:a9:73:4b:81: 4a:1c:37:26:94:ef:0d:ca:5a:f6:d1:24:02:8c:c0: 98:1f:2a:a5:2e:24:ea:92:ba:30:82:9f:7a:99:ac: 7e:01:42:03:f6:9a:b9:36:ff:96:cd:9b:07:6f:6f: 4e:37:bb:2a:8c:09:1a:ea:f7:c3:bf:e6:ad:96:30: 3a:26:c9:d8:93:4c:89:0b:42:20:51:2a:43:89:5c: 2f:6f:1c:54:05:f4:76:ca:07:20:c6:06:c8:a3:9c: 95:7a:bb:bb:27:65:3e:be:8f:2a:d2:4d:0f:77:6a: e3:9f:0e:98:dc:b6:0c:04:d6:c8:01:db:a0:4d:5c: e4:8c:fd:e8:e4:31:f4:35:8a:2a:68:cd:22:74:5b: 47:75:53:62:25:65:1d:fe:4b:d4:77:62:05:84:5e: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0E:1E:CF:14:28:0C:F5:F9:2B:D9:6F:11:A2:45:E0:2A:F8:98:D6 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:42:13:3e:7e:6f:11:89:b2:40:dc:f7:44:5c:28:43:71:22: 69:26:c5:65:39:d4:d6:1f:dd:8a:7d:a5:68:3c:61:53:a8:63: 90:15:49:c2:27:f2:d9:78:3d:21:27:67:a8:27:66:11:06:f5: 6b:f6:ba:2e:24:bb:e7:f9:2a:ee:ba:26:dd:a7:4a:a7:ce:c6: 33:db:5a:1d:2c:7e:48:66:c9:32:5e:b4:0b:f7:17:16:c1:32: 51:96:dc:b8:08:7a:43:5d:ed:43:60:58:00:85:9b:fa:6d:11: a9:0c:25:d7:8a:1e:6e:bf:c1:f8:3a:7d:ac:7f:da:01:a2:07: 81:4b:83:2e:30:f6:dd:cc:19:c7:7b:52:59:ca:7f:a7:b6:26: c6:ad:d9:fc:23:20:f5:a7:69:91:bd:42:d5:60:e6:1d:c5:42: eb:6e:71:8e:d5:f3:61:ab:98:53:9a:5a:7f:ba:90:46:3c:26: af:fe:c2:52:a5:f0:1f:5b:57:04:fc:9e:35:98:01:46:00:28: 5c:ce:01:f8:ac:dc:82:a8:38:8a:04:c4:5a:bb:6d:bd:84:58: 61:39:9b:fd:a6:54:da:cb:b5:f0:f8:3b:c0:b4:09:99:57:27: 32:0a:ce:65:1f:f3:d1:9c:d9:71:4c:e4:e2:03:83:e1:75:a0: 1f:4a:ac:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwNjI5MDQzMjI1WhcNMjUwNzA2MDQzMjI1WjAYMRYwFAYD VQQDEw02ODYwYzFkOS04N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrh/kP16AtE3oE+BxCMFtF7pkf0mxt2tdsEiNSIhxmYgPWsIRISiigdZ0u4m Q7ULVY6Axezhl04Q9BtTeL9D0mR+IOXajx8izRIsQGaOpmgeXfzqYzU5cE71b608 sIXvC8ScmalzS4FKHDcmlO8Nylr20SQCjMCYHyqlLiTqkrowgp96max+AUID9pq5 Nv+WzZsHb29ON7sqjAka6vfDv+atljA6JsnYk0yJC0IgUSpDiVwvbxxUBfR2ygcg xgbIo5yVeru7J2U+vo8q0k0Pd2rjnw6Y3LYMBNbIAdugTVzkjP3o5DH0NYoqaM0i dFtHdVNiJWUd/kvUd2IFhF4VdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAOHs8U KAz1+SvZbxGiReAq+JjWMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8QhM+fm8RibJA3PdEXChDcSJpJsVlOdTWH92KfaVoPGFTqGOQFUnC J/LZeD0hJ2eoJ2YRBvVr9rouJLvn+Sruuibdp0qnzsYz21odLH5IZskyXrQL9xcW wTJRlty4CHpDXe1DYFgAhZv6bRGpDCXXih5uv8H4On2sf9oBogeBS4MuMPbdzBnH e1JZyn+ntibGrdn8IyD1p2mRvULVYOYdxULrbnGO1fNhq5hTmlp/upBGPCav/sJS pfAfW1cE/J41mAFGAChczgH4rNyCqDiKBMRau229hFhhOZv9plTay7Xw+DvAtAmZ VycyCs5lH/PRnNlxTOTiA4PhdaAfSqyB -----END CERTIFICATE-----Generated at Sun Jun 29 13:27:53 2025 by rpki-client