$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: Uqc7PBkwwCA7SLrlqyzbW81RRS1+pRzm2U4qCzQRP1U= Subject key identifier: 9C:7C:E5:5C:38:21:38:9A:6B:A1:52:48:CE:2F:92:67:16:93:13:6A Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 036A Signing time: Thu 03 Jul 2025 01:22:02 +0000 Manifest this update: Thu 03 Jul 2025 01:22:01 +0000 Manifest next update: Thu 10 Jul 2025 01:22:01 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: 4DjW79pQiQSh9i/mt0eB24gTYlOLj8vOijkXEnUWtOM=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=) 4: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Jul 3 01:22:01 2025 GMT Not After : Jul 10 01:22:01 2025 GMT Subject: CN=6865db39-7f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:c1:69:04:85:90:11:15:05:01:01:44:32: ba:92:75:5d:f0:61:ed:e4:30:32:49:0f:a0:50:3a: cf:d8:0e:c2:cf:35:e3:b5:2b:ed:18:ea:8c:6a:a4: 1c:2d:a6:8f:ea:d9:3d:0f:20:40:61:19:72:41:63: d8:6f:4c:07:34:0d:c9:aa:b1:1e:af:5f:69:d7:ad: 32:cc:44:d7:02:fd:72:9d:8e:4b:8f:63:79:d1:c0: 94:bf:dd:a8:4e:0d:b0:0a:fe:c8:1d:13:9a:47:ed: bc:cc:7d:92:81:21:76:bb:63:80:66:4a:70:9b:68: 61:1d:af:ad:13:76:3f:9c:0b:5d:dc:c5:3f:14:3e: 17:ae:cd:29:ee:ea:f5:bc:62:e9:1d:29:ae:4c:c6: 85:a6:9a:49:60:58:1a:fd:93:47:a1:29:f7:25:87: dd:6e:b4:f1:90:0d:e3:cd:23:45:33:f3:47:0f:f4: aa:3e:59:23:17:a0:a7:7a:26:c5:b4:f0:09:e7:32: 54:2e:ad:72:0d:6b:c4:ad:1c:cd:3d:46:05:bc:be: 0d:ac:ae:4e:b7:41:f6:da:d6:e6:2a:8e:2f:95:75: 44:fb:7f:3e:a0:fd:4b:51:fd:a7:54:dc:97:b8:18: c6:6a:b8:69:4d:69:7e:3f:9a:29:fe:dc:9d:c8:58: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:E5:5C:38:21:38:9A:6B:A1:52:48:CE:2F:92:67:16:93:13:6A X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:37:d3:ca:1a:82:50:d4:f6:4b:97:a7:25:2e:b5:51:eb:6a: 46:36:a5:b3:58:36:ab:db:19:2d:2c:ce:cc:80:57:fd:c1:85: ae:8f:33:c0:58:b6:c5:df:0a:c3:c5:94:9b:b0:1d:60:db:87: 03:c8:b5:6d:58:0a:3a:8d:9a:ef:ff:c6:f5:59:08:bd:73:25: 7b:ee:c8:fa:6f:e5:59:e3:b9:a9:c0:44:4d:8d:10:4f:3f:33: 90:d8:2b:82:b3:d1:ca:8c:7b:81:89:15:b1:b7:8f:9b:18:7e: a4:57:ec:ab:1a:fd:d4:b5:dc:73:89:f1:03:85:fd:d1:8b:e5: b7:0f:24:05:ef:e2:40:3d:8c:b3:bf:c7:16:41:c3:19:ec:cf: ad:3d:78:5c:d1:b8:6e:69:b9:4a:d6:9d:56:a8:ec:f4:42:18: 31:20:8c:34:c8:da:77:9e:1e:7f:01:8e:24:71:e2:25:a6:48: 4c:c7:8e:b0:91:a7:2b:5e:18:a7:da:4e:f4:0e:f4:b4:72:12: 81:dd:8c:18:79:6d:af:65:a1:3e:df:66:d5:2b:fa:b3:33:47: 0c:b7:80:a2:08:74:24:9a:1b:27:f1:f1:b6:81:13:14:21:4d: 72:0b:ce:8d:6d:f0:eb:9d:0a:2f:e0:0d:1d:c1:6d:bf:e9:34: 82:4a:78:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNzAzMDEyMjAxWhcNMjUwNzEwMDEyMjAxWjAYMRYwFAYD VQQDEw02ODY1ZGIzOS03ZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfDBaQSFkBEVBQEBRDK6knVd8GHt5DAySQ+gUDrP2A7CzzXjtSvtGOqMaqQc LaaP6tk9DyBAYRlyQWPYb0wHNA3JqrEer19p160yzETXAv1ynY5Lj2N50cCUv92o Tg2wCv7IHROaR+28zH2SgSF2u2OAZkpwm2hhHa+tE3Y/nAtd3MU/FD4Xrs0p7ur1 vGLpHSmuTMaFpppJYFga/ZNHoSn3JYfdbrTxkA3jzSNFM/NHD/SqPlkjF6CneibF tPAJ5zJULq1yDWvErRzNPUYFvL4NrK5Ot0H22tbmKo4vlXVE+38+oP1LUf2nVNyX uBjGarhpTWl+P5op/tydyFgjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJx85Vw4 ITiaa6FSSM4vkmcWkxNqMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjN9PKGoJQ1PZLl6clLrVR62pGNqWzWDar2xktLM7MgFf9wYWujzPA WLbF3wrDxZSbsB1g24cDyLVtWAo6jZrv/8b1WQi9cyV77sj6b+VZ47mpwERNjRBP PzOQ2CuCs9HKjHuBiRWxt4+bGH6kV+yrGv3UtdxzifEDhf3Ri+W3DyQF7+JAPYyz v8cWQcMZ7M+tPXhc0bhuablK1p1WqOz0QhgxIIw0yNp3nh5/AY4kceIlpkhMx46w kacrXhin2k70DvS0chKB3YwYeW2vZaE+32bVK/qzM0cMt4CiCHQkmhsn8fG2gRMU IU1yC86NbfDrnQov4A0dwW2/6TSCSnhm -----END CERTIFICATE-----Generated at Thu Jul 3 18:43:45 2025 by rpki-client