$ rpki-client -vvf rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft File: psUEnf_CZCcfSnelrurkd9fu6vM.mft (raw, json) Hash identifier: E0J1dfelqK5jDJ86UFOOxfZjbv88GVzW4u1qTMmixDY= Subject key identifier: DE:63:C4:96:98:43:42:E2:50:F6:C9:10:DE:AA:A6:67:27:77:CB:1A Authority key identifier: A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 Certificate issuer: /CN=A916683C/serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft Manifest number: 09E7 Signing time: Wed 02 Jul 2025 20:08:51 +0000 Manifest this update: Wed 02 Jul 2025 20:08:50 +0000 Manifest next update: Wed 09 Jul 2025 20:08:50 +0000 Files and hashes: 1: psUEnf_CZCcfSnelrurkd9fu6vM.crl (hash: XdinWmO4P0MlRGPYA/jOPthJ5+ZUOtiVdc5zAub6lDo=) 2: 800F1868BEB311EAAFE28B42C4F9AE02.roa (hash: wpAzbtu5F53kU4ooHDJQYR2Sx5W2H0NgT0BgO9+1V88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916683C, serialNumber=A6C5049DFFC264271F4A77A5AEEAE477D7EEEAF3 Validity Not Before: Jul 2 20:08:50 2025 GMT Not After : Jul 9 20:08:50 2025 GMT Subject: CN=686591d2-6b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:6a:c8:17:b2:25:f2:80:79:e3:06:46:4c: 6b:de:8c:d4:33:be:fb:c4:6a:19:96:dd:f1:cc:69: 0b:66:5c:51:10:67:f9:51:63:0f:7c:ce:32:88:14: af:75:e7:0c:c7:25:08:e6:f5:b5:ad:ca:cd:8e:6f: a1:f4:82:88:9c:16:56:3f:84:cd:f5:8e:fb:42:8b: fc:b1:08:aa:74:54:bf:b0:d4:dd:56:81:47:0c:5d: 8b:49:ef:da:25:9a:a2:cb:76:1f:7c:c2:6b:6e:45: d5:13:38:25:be:1c:9f:0d:03:d4:2d:c0:c5:72:14: 8f:03:4f:01:b3:72:89:61:82:4b:1b:02:cc:0f:ee: b9:b2:5c:2d:d6:fb:38:fc:c2:11:33:16:2b:76:1b: 69:bc:c4:b6:42:ed:dc:18:6b:be:52:19:2a:a1:2c: 83:7e:03:b7:a1:b8:ac:00:fe:e9:cd:50:e4:c6:7d: 39:18:06:0e:a6:78:92:66:79:85:38:51:89:64:5a: fc:1b:2a:95:bd:fc:26:1d:de:a1:2a:55:df:19:b9: 4f:bd:a7:eb:b2:28:a0:a4:41:bb:c1:25:88:6f:1d: da:a7:14:8c:73:64:b2:a0:c1:5c:05:ae:9c:ec:cd: 8f:15:11:f0:d1:67:fe:b7:e2:b6:2d:1c:3d:3f:e6: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:63:C4:96:98:43:42:E2:50:F6:C9:10:DE:AA:A6:67:27:77:CB:1A X509v3 Authority Key Identifier: keyid:A6:C5:04:9D:FF:C2:64:27:1F:4A:77:A5:AE:EA:E4:77:D7:EE:EA:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psUEnf_CZCcfSnelrurkd9fu6vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916683C/E0B5802E807B11EA82446125C4F9AE02/psUEnf_CZCcfSnelrurkd9fu6vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:37:44:b2:55:84:a9:31:05:d8:5c:17:d2:7e:f3:63:d8:68: 90:b5:0c:ef:bb:6f:0d:45:91:8c:cf:92:91:08:f2:47:33:9a: 43:13:6d:dc:53:76:7f:bd:b2:78:56:37:97:a4:a7:7d:bd:56: 95:40:59:98:12:fd:e8:ee:c2:be:8c:07:e9:5c:de:32:6f:ff: f7:f9:d3:15:40:9e:a2:86:5b:5f:37:de:e8:32:db:bd:60:0e: 94:8c:dd:47:7c:40:4f:0c:53:53:15:cf:35:fb:8b:32:27:f9: 8f:65:08:65:ca:61:b6:7a:a6:e5:70:7d:04:4e:ef:85:ce:80: ee:a1:70:fc:9e:aa:09:1e:a5:bc:bb:9b:81:9d:e4:28:e3:b2: b4:64:dc:26:65:9e:42:e3:5f:e7:f1:dc:c7:a1:51:41:77:1e: d1:98:b2:f7:12:2e:5b:e8:ab:34:76:eb:c6:0d:83:13:76:84: cb:b3:31:fd:46:7e:1e:73:57:f5:73:fe:e6:6d:22:81:0e:0a: 6f:0a:76:d2:c3:e8:0b:6d:a5:63:0b:3e:66:91:e0:61:1b:59: 22:af:4f:ba:3a:d9:28:1e:be:a0:62:b8:79:45:8e:e7:f7:50: 11:24:2b:9a:b2:4c:31:fb:88:1d:61:b7:02:8e:e8:85:04:1c: 2c:91:de:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY4M0MxMTAvBgNVBAUTKEE2QzUwNDlERkZDMjY0MjcxRjRBNzdBNUFFRUFFNDc3 RDdFRUVBRjMwHhcNMjUwNzAyMjAwODUwWhcNMjUwNzA5MjAwODUwWjAYMRYwFAYD VQQDEw02ODY1OTFkMi02YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIBqyBeyJfKAeeMGRkxr3ozUM777xGoZlt3xzGkLZlxREGf5UWMPfM4yiBSv decMxyUI5vW1rcrNjm+h9IKInBZWP4TN9Y77Qov8sQiqdFS/sNTdVoFHDF2LSe/a JZqiy3YffMJrbkXVEzglvhyfDQPULcDFchSPA08Bs3KJYYJLGwLMD+65slwt1vs4 /MIRMxYrdhtpvMS2Qu3cGGu+UhkqoSyDfgO3obisAP7pzVDkxn05GAYOpniSZnmF OFGJZFr8GyqVvfwmHd6hKlXfGblPvafrsiigpEG7wSWIbx3apxSMc2SyoMFcBa6c 7M2PFRHw0Wf+t+K2LRw9P+bZQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5jxJaY Q0LiUPbJEN6qpmcnd8saMB8GA1UdIwQYMBaAFKbFBJ3/wmQnH0p3pa7q5HfX7urz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjgzQy9FMEI1ODAyRTgw N0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pDY2ZTbmVscnVya2Q5ZnU2 dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzVUVuZl9DWkNjZlNuZWxydXJrZDlmdTZ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjgzQy9FMEI1ODAyRTgwN0IxMUVBODI0NDYxMjVDNEY5QUUwMi9wc1VFbmZfQ1pD Y2ZTbmVscnVya2Q5ZnU2dk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpN0SyVYSpMQXYXBfSfvNj2GiQtQzvu28NRZGMz5KRCPJHM5pDE23c U3Z/vbJ4VjeXpKd9vVaVQFmYEv3o7sK+jAfpXN4yb//3+dMVQJ6ihltfN97oMtu9 YA6UjN1HfEBPDFNTFc81+4syJ/mPZQhlymG2eqblcH0ETu+FzoDuoXD8nqoJHqW8 u5uBneQo47K0ZNwmZZ5C41/n8dzHoVFBdx7RmLL3Ei5b6Ks0duvGDYMTdoTLszH9 Rn4ec1f1c/7mbSKBDgpvCnbSw+gLbaVjCz5mkeBhG1kir0+6OtkoHr6gYrh5RY7n 91ARJCuaskwx+4gdYbcCjuiFBBwskd6M -----END CERTIFICATE-----Generated at Thu Jul 3 06:39:32 2025 by rpki-client