$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft File: v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json) Hash identifier: YC385Fic6Pr8SYQEzgm7lR5nwSHA2aPvufsN4w/I8LI= Subject key identifier: C6:D5:C9:B6:98:C2:68:11:1C:A9:C0:FB:E0:C9:AA:8F:5F:34:A9:86 Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E Certificate issuer: /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft Manifest number: 78 Signing time: Thu 03 Jul 2025 07:00:32 +0000 Manifest this update: Thu 03 Jul 2025 07:00:32 +0000 Manifest next update: Thu 10 Jul 2025 07:00:32 +0000 Files and hashes: 1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: i90WiOuMha7YprmtmQAYeDyocLn5JrHsbiuNzGh2ngE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E Validity Not Before: Jul 3 07:00:32 2025 GMT Not After : Jul 10 07:00:32 2025 GMT Subject: CN=68662a90-4ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:13:91:93:ad:ea:ef:e7:9a:8d:57:33:7b: 14:62:18:d9:e5:f7:88:1c:24:6b:a2:b5:0a:c2:02: f5:23:8f:9d:27:ce:53:d7:f5:16:1b:74:66:92:6e: bb:ab:84:82:de:bc:8d:0d:8f:2b:ca:26:aa:00:0c: 8b:90:35:68:b6:bf:6a:a5:70:ef:c2:f8:ee:01:13: 12:08:bf:b8:64:5b:ab:7b:f6:70:c1:01:29:41:e6: e2:91:60:8b:05:cc:ea:74:8f:16:b0:97:67:0e:3f: c4:80:82:e9:ba:0c:34:b8:45:7b:5c:e3:6b:d3:21: 8a:25:4d:89:65:d6:55:e9:f6:d4:92:3b:c5:01:01: 6c:e2:4c:37:c6:d0:1d:ee:b1:a3:62:5f:74:d5:04: 3b:d9:0e:dc:8e:41:35:64:2a:f9:37:58:0e:b6:56: 84:3f:ce:95:3b:2d:d7:1e:6d:96:e0:6a:13:5b:e1: e8:48:20:c7:3b:7d:5f:dc:79:d5:7f:02:af:81:50: 97:62:bd:ac:10:d7:2e:84:ae:69:8d:e0:74:65:a1: 9c:fa:49:05:25:52:87:14:ee:a9:e3:9c:7b:ca:f8: d4:90:e8:6e:a6:a5:e4:ae:8d:98:4f:a5:09:d9:b4: 69:72:fe:b8:8f:2e:d7:67:bd:b8:3f:8e:c2:d5:dd: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:C9:B6:98:C2:68:11:1C:A9:C0:FB:E0:C9:AA:8F:5F:34:A9:86 X509v3 Authority Key Identifier: keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:3e:72:98:53:c1:1b:f5:f4:8e:f4:a9:f9:91:12:82:f4: 47:1d:9a:b2:4d:76:ff:bf:c8:1f:94:d5:c4:09:b7:d4:ae:11: e1:8c:db:02:22:1d:b2:09:70:0b:09:96:cb:11:1c:95:fa:2e: 1d:3d:f6:6c:04:8e:50:be:91:5d:bf:d3:64:5c:b0:e2:87:af: 2d:1b:2c:cb:d6:42:fa:d8:4b:70:8c:3c:44:07:5e:22:6c:8b: c2:fb:2e:a0:21:4f:2e:2f:79:93:52:3d:b2:e0:d2:b8:3e:60: 24:e9:5e:0e:9b:53:11:7e:89:b0:5d:fe:10:6d:ca:a6:b6:19: 15:67:14:6c:aa:6f:cc:47:cd:4f:d1:c9:f9:28:d3:3d:b6:45: 00:1a:b0:7d:33:d8:de:73:bc:83:0c:5d:84:7c:dc:2b:e8:64: 52:0d:1a:be:bf:1d:ce:f0:7e:d3:ca:46:4e:75:44:5d:22:19: 1f:e3:c2:63:b1:b8:44:1c:0d:18:7b:71:fe:0a:23:be:d0:5a: 10:03:73:7f:ff:6d:d3:7d:99:a1:ef:99:70:92:78:ef:18:45: eb:50:b7:77:7b:26:6f:68:b7:e1:6a:e4:d1:06:c2:2a:0f:9a: d4:b4:23:b8:d9:cb:4a:b0:3b:95:a5:a6:3f:57:1c:c6:af:7b: e8:7b:16:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUEzRjExMC8GA1UEBRMoQkY1MjNDRDZGMTY2NDg1Mzg5MTkxNTVFNUY5RjI2Nzgz MEY2RjAxRTAeFw0yNTA3MDMwNzAwMzJaFw0yNTA3MTAwNzAwMzJaMBgxFjAUBgNV BAMTDTY4NjYyYTkwLTRjZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAAhORk63q7+eajVczexRiGNnl94gcJGuitQrCAvUjj50nzlPX9RYbdGaSbrur hILevI0NjyvKJqoADIuQNWi2v2qlcO/C+O4BExIIv7hkW6t79nDBASlB5uKRYIsF zOp0jxawl2cOP8SAgum6DDS4RXtc42vTIYolTYll1lXp9tSSO8UBAWziTDfG0B3u saNiX3TVBDvZDtyOQTVkKvk3WA62VoQ/zpU7LdcebZbgahNb4ehIIMc7fV/cedV/ Aq+BUJdivawQ1y6ErmmN4HRloZz6SQUlUocU7qnjnHvK+NSQ6G6mpeSujZhPpQnZ tGly/riPLtdnvbg/jsLV3UnBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxtXJtpjC aBEcqcD74Mmqj180qYYwHwYDVR0jBBgwFoAUv1I81vFmSFOJGRVeX58meDD28B4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5QTNGL0EzNzFGNjg0QTI0 RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZPSkdSVmVYNThtZUREMjhC NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjFJODF2Rm1TRk9KR1JWZVg1OG1lREQyOEI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 QTNGL0EzNzFGNjg0QTI0RjExRUZCNkIwRkY0OUM0RjlBRTAyL3YxSTgxdkZtU0ZP SkdSVmVYNThtZUREMjhCNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWXPnKYU8Eb9fSO9Kn5kRKC9EcdmrJNdv+/yB+U1cQJt9SuEeGM2wIi HbIJcAsJlssRHJX6Lh099mwEjlC+kV2/02RcsOKHry0bLMvWQvrYS3CMPEQHXiJs i8L7LqAhTy4veZNSPbLg0rg+YCTpXg6bUxF+ibBd/hBtyqa2GRVnFGyqb8xHzU/R yfko0z22RQAasH0z2N5zvIMMXYR83CvoZFINGr6/Hc7wftPKRk51RF0iGR/jwmOx uEQcDRh7cf4KI77QWhADc3//bdN9maHvmXCSeO8YRetQt3d7Jm9ot+Fq5NEGwioP mtS0I7jZy0qwO5Wlpj9XHMave+h7Fts= -----END CERTIFICATE-----Generated at Thu Jul 3 10:50:08 2025 by rpki-client