$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: kOUXzaFYcwOUSdq0B8rL8tyTfz2IPctfKvYYE8dqYWM= Subject key identifier: EA:B7:3A:43:9B:3B:AB:F7:AE:CB:B8:1B:DF:5D:58:CD:4D:4E:42:E4 Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 0592 Signing time: Thu 03 Jul 2025 00:39:37 +0000 Manifest this update: Thu 03 Jul 2025 00:39:37 +0000 Manifest next update: Thu 10 Jul 2025 00:39:37 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: RIrx3th0xBMcYpe8n/NsxZyT+Jn+GNtsEN6ITxeWFXg=) 2: C5C77866584111EE85E40820C4F9AE02.roa (hash: xKArmrduSBI+gGo62RSF6mCGFoJkOu3mNzVbjwogvU0=) 3: C55784DE584111EE85E40820C4F9AE02.roa (hash: FOhpYe5DK9I/QvT8DCyDAdniDFXXS6XAPszrK91CJRI=) 4: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: 3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=) 5: 8F60E314584D11EE90C6141EC4F9AE02.roa (hash: Mehq2UCt1CiOt2/FTfT15J6Iwk1nsNkmhPQP9ob7BYA=) 6: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: JirC+a3hnrfRs218btabHTFrtTd+AmDYvGFRmHD+9Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Jul 3 00:39:37 2025 GMT Not After : Jul 10 00:39:37 2025 GMT Subject: CN=6865d149-9074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:db:89:33:6d:01:51:03:da:b7:84:f1:5c: 86:b7:c6:6e:f8:01:53:78:1d:b9:86:8f:e3:f4:5f: b5:20:cd:d9:4b:77:26:1a:3b:69:29:57:16:67:84: ea:50:57:ea:36:55:10:c5:c7:33:9c:d6:33:9b:43: e2:40:d6:51:b7:47:50:a4:69:cd:67:4f:f1:c4:0d: bf:6e:08:c3:0d:36:c4:db:4f:5e:26:9e:77:fa:8f: 09:01:e2:97:d2:60:80:e4:13:da:ed:1c:25:e3:cb: 44:e5:38:15:2d:4a:ee:cb:ac:85:a8:b1:8e:18:30: 06:4d:5c:b4:92:4d:32:11:0e:6e:32:75:d4:d2:0c: 56:ba:7f:51:e2:da:84:51:ba:78:04:af:6b:96:1e: 2c:de:a4:4b:e0:9a:be:7b:98:8c:de:49:23:4c:fd: 9a:83:a1:fb:f6:aa:c3:51:8f:83:9e:e3:30:76:bb: 81:d7:99:a5:22:3d:be:ca:e2:72:a6:a0:7c:c7:16: 32:2b:e3:5f:d2:42:57:6d:7f:36:69:2e:c4:c4:e0: 9f:73:20:49:8b:db:9d:6c:61:16:d1:db:d8:45:13: a0:cb:f0:1f:44:6b:d1:99:26:97:73:d2:69:c9:d0: 5d:db:c1:c5:24:52:3e:2b:98:ef:75:58:af:84:8a: 5f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:3A:43:9B:3B:AB:F7:AE:CB:B8:1B:DF:5D:58:CD:4D:4E:42:E4 X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:86:8c:39:90:9f:40:40:32:a3:d9:61:a4:81:b6:b1:90:f5: 8d:c9:40:2d:69:81:b2:02:b6:fd:3e:17:c6:8d:cb:6e:bf:40: d0:56:72:68:fc:9b:bf:a5:75:b8:ea:51:77:55:f3:53:17:6d: 09:2d:23:42:17:78:ac:a7:18:24:c9:95:c3:d6:d3:11:c8:d5: ef:ae:2b:da:08:d8:e4:1c:e7:9f:59:7b:8d:93:8f:be:d7:38: f5:f2:74:57:67:54:2f:47:94:dd:14:ef:67:60:05:4b:b7:a7: ba:2b:43:4c:d9:0a:2c:bf:75:6c:f4:2a:31:a0:e2:9c:1a:02: 90:6b:05:53:74:83:ab:5f:de:05:3b:d7:7e:69:ee:1f:50:77: 25:f7:cf:7d:b9:81:0c:b3:54:d6:9f:cf:f0:5c:4b:35:ff:1a: d2:c2:c6:9c:5e:2d:d2:5e:1a:42:a5:bb:72:c1:45:92:df:f7: 83:63:ae:59:7d:45:06:fc:83:d9:08:b5:b3:2b:31:94:7b:e8: 41:4a:6f:b8:51:fa:68:dc:73:45:a6:e7:b5:38:3e:2d:a4:2c: 4c:23:f5:b2:ab:b2:94:ce:1b:57:46:5c:04:e3:19:66:4b:74: 0b:37:e1:19:9f:4e:f4:0e:47:f5:eb:81:74:7d:85:4c:29:24: 64:8b:a0:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjUwNzAzMDAzOTM3WhcNMjUwNzEwMDAzOTM3WjAYMRYwFAYD VQQDEw02ODY1ZDE0OS05MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HLbiTNtAVED2reE8VyGt8Zu+AFTeB25ho/j9F+1IM3ZS3cmGjtpKVcWZ4Tq UFfqNlUQxccznNYzm0PiQNZRt0dQpGnNZ0/xxA2/bgjDDTbE209eJp53+o8JAeKX 0mCA5BPa7Rwl48tE5TgVLUruy6yFqLGOGDAGTVy0kk0yEQ5uMnXU0gxWun9R4tqE Ubp4BK9rlh4s3qRL4Jq+e5iM3kkjTP2ag6H79qrDUY+DnuMwdruB15mlIj2+yuJy pqB8xxYyK+Nf0kJXbX82aS7ExOCfcyBJi9udbGEW0dvYRROgy/AfRGvRmSaXc9Jp ydBd28HFJFI+K5jvdVivhIpfBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq3OkOb O6v3rsu4G99dWM1NTkLkMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWhow5kJ9AQDKj2WGkgbaxkPWNyUAtaYGyArb9PhfGjctuv0DQVnJo /Ju/pXW46lF3VfNTF20JLSNCF3ispxgkyZXD1tMRyNXvrivaCNjkHOefWXuNk4++ 1zj18nRXZ1QvR5TdFO9nYAVLt6e6K0NM2Qosv3Vs9CoxoOKcGgKQawVTdIOrX94F O9d+ae4fUHcl9899uYEMs1TWn8/wXEs1/xrSwsacXi3SXhpCpbtywUWS3/eDY65Z fUUG/IPZCLWzKzGUe+hBSm+4Ufpo3HNFpue1OD4tpCxMI/Wyq7KUzhtXRlwE4xlm S3QLN+EZn070Dkf164F0fYVMKSRki6CS -----END CERTIFICATE-----Generated at Thu Jul 3 09:34:23 2025 by rpki-client