$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: K4eWFuaK9lyGR5KxboSgDEH4KpLWbdyEYhJ4sGgb5MY= Subject key identifier: 5E:E2:86:A7:60:AF:B1:A5:6F:56:A9:A3:B5:F3:9A:61:36:97:B4:4E Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 24B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 249C Signing time: Wed 02 Jul 2025 15:53:50 +0000 Manifest this update: Wed 02 Jul 2025 15:53:50 +0000 Manifest next update: Wed 09 Jul 2025 15:53:50 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: btPzw7FXvU//nGBB364VP8HBu/ZYwRC2N/daLifVyEQ=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9401 (0x24b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Jul 2 15:53:50 2025 GMT Not After : Jul 9 15:53:50 2025 GMT Subject: CN=6865560e-8b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:fd:45:d0:5a:f1:9e:10:bf:c8:c0:9b:f7: b1:0b:4c:a8:00:43:e5:f4:18:3c:99:73:eb:e1:70: 3c:68:b3:c1:3c:0a:00:38:80:79:f8:66:3e:2c:86: e8:02:4b:32:1a:77:d9:99:1b:64:72:4b:82:bc:c1: d2:35:92:4f:9a:81:c2:8c:4e:a8:59:bf:49:83:6c: 25:16:3e:e5:0a:b2:b9:57:a8:65:a9:f9:d3:81:5e: fc:a6:dc:88:4d:be:66:a9:da:56:99:0f:45:21:b8: b6:71:1e:93:bd:49:c2:7b:24:9d:1f:81:8e:ca:a7: fb:5b:58:30:8f:81:9e:e6:b6:2d:ae:0b:c0:f9:0d: 9b:21:d7:bb:13:7d:72:db:f8:55:92:0e:13:58:53: 42:8b:c5:3b:6e:59:3f:6e:b2:ae:a5:d5:98:f9:c3: 27:66:14:77:2a:10:41:ac:2f:93:02:9e:4e:a9:bd: 9b:35:b0:b3:8d:99:a7:e8:b4:ee:aa:2a:4d:2f:50: 7d:f4:29:a1:65:e8:28:f8:0c:8b:c6:82:c6:c5:7f: 36:58:56:cd:0d:3e:15:cd:40:0a:08:7c:dd:9c:44: dd:fd:e9:cd:e6:d2:1b:63:be:67:cd:15:6e:34:c0: 8b:0e:06:20:e3:bd:c0:eb:d6:f5:1d:7a:3e:0a:65: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E2:86:A7:60:AF:B1:A5:6F:56:A9:A3:B5:F3:9A:61:36:97:B4:4E X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:93:35:90:87:89:2d:9b:5f:7e:9b:a9:84:6f:f6:b2:7c:9d: a5:aa:ff:72:4b:09:8e:71:c2:db:98:c3:7b:95:c8:37:37:a8: 9a:70:3a:6c:c0:5a:30:c3:a0:bb:8b:98:25:a1:46:31:a5:dd: 3b:1b:f4:51:3c:61:8d:00:10:96:91:99:f3:80:66:32:65:7f: f7:79:11:f7:64:66:1b:6c:d9:2e:56:b2:c1:53:81:87:05:3b: 46:31:bd:7e:b4:bd:3e:c1:6e:bb:9a:19:d5:0a:4b:e1:62:63: 3b:0c:cb:5b:7e:48:5b:e8:e8:bb:4c:94:bd:04:fd:2c:48:16: a3:0b:04:03:87:91:d4:79:75:ff:dc:4d:3c:10:48:76:29:a5: bd:50:71:41:15:1a:b5:37:72:6a:72:f4:ff:73:43:9c:fd:0c: ea:91:09:a6:00:ab:0e:d9:e3:1b:d4:c8:f7:7a:35:4c:80:60: 38:52:2d:f0:7b:20:eb:36:c2:e7:6c:66:23:3b:0b:94:62:c9: c7:9a:ff:a6:bf:31:34:94:c6:a4:5e:bb:d4:93:dd:f1:74:9d: 10:49:df:9d:4c:21:fa:90:c9:5c:db:a0:9b:34:09:bd:d1:b2: e1:40:1d:30:8c:1c:61:de:0b:c3:db:95:63:60:04:1c:5c:bd: 50:54:49:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUwNzAyMTU1MzUwWhcNMjUwNzA5MTU1MzUwWjAYMRYwFAYD VQQDEw02ODY1NTYwZS04YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCr9RdBa8Z4Qv8jAm/exC0yoAEPl9Bg8mXPr4XA8aLPBPAoAOIB5+GY+LIbo AksyGnfZmRtkckuCvMHSNZJPmoHCjE6oWb9Jg2wlFj7lCrK5V6hlqfnTgV78ptyI Tb5mqdpWmQ9FIbi2cR6TvUnCeySdH4GOyqf7W1gwj4Ge5rYtrgvA+Q2bIde7E31y 2/hVkg4TWFNCi8U7blk/brKupdWY+cMnZhR3KhBBrC+TAp5Oqb2bNbCzjZmn6LTu qipNL1B99CmhZego+AyLxoLGxX82WFbNDT4VzUAKCHzdnETd/enN5tIbY75nzRVu NMCLDgYg473A69b1HXo+CmW5jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7ihqdg r7Glb1apo7XzmmE2l7ROMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnkzWQh4ktm19+m6mEb/ayfJ2lqv9ySwmOccLbmMN7lcg3N6iacDps wFoww6C7i5gloUYxpd07G/RRPGGNABCWkZnzgGYyZX/3eRH3ZGYbbNkuVrLBU4GH BTtGMb1+tL0+wW67mhnVCkvhYmM7DMtbfkhb6Oi7TJS9BP0sSBajCwQDh5HUeXX/ 3E08EEh2KaW9UHFBFRq1N3JqcvT/c0Oc/QzqkQmmAKsO2eMb1Mj3ejVMgGA4Ui3w eyDrNsLnbGYjOwuUYsnHmv+mvzE0lMakXrvUk93xdJ0QSd+dTCH6kMlc26CbNAm9 0bLhQB0wjBxh3gvD25VjYAQcXL1QVEly -----END CERTIFICATE-----Generated at Thu Jul 3 08:04:44 2025 by rpki-client