$ rpki-client -vvf rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft File: adcLNjVnbk9zG47xxYVbXi8n84g.mft (raw, json) Hash identifier: ZTGfMTsodjXfKkNc2CV0oSqyUDIxDTveC+jy9MOzMrE= Subject key identifier: C5:AF:49:59:05:F9:41:AA:3D:0A:A7:03:D6:96:31:B3:A9:A3:EF:14 Authority key identifier: 69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 Certificate issuer: /CN=A9174B04/serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft Manifest number: 01CF Signing time: Sat 05 Jul 2025 03:11:07 +0000 Manifest this update: Sat 05 Jul 2025 03:11:06 +0000 Manifest next update: Sat 12 Jul 2025 03:11:06 +0000 Files and hashes: 1: adcLNjVnbk9zG47xxYVbXi8n84g.crl (hash: xxtQ4w88tXych4PsT7u2MfVpGET0xYLYOxqUndNPKz4=) 2: 576B4A9298AB11EDBC12AA81C4F9AE02.roa (hash: hpINcvJULE4XElDu0MJmStTQHvk/pvkVHzA8BiayIb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174B04, serialNumber=69D70B3635676E4F731B8EF1C5855B5E2F27F388 Validity Not Before: Jul 5 03:11:06 2025 GMT Not After : Jul 12 03:11:06 2025 GMT Subject: CN=686897cb-8111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:35:de:37:91:9a:f2:00:63:f3:4e:d6:cd: 3e:e4:cd:e8:0b:a0:bb:d8:33:af:f6:17:e7:dd:dd: 8c:48:80:f6:c1:16:93:1b:f1:40:0f:bc:50:fe:33: 6e:e7:85:c3:2e:d7:3a:8f:c0:48:3c:6c:1a:f5:fd: 6b:84:ee:96:06:33:6e:63:1d:07:e0:7f:b4:84:6c: de:4e:96:38:c5:e5:67:15:c4:d7:7a:49:34:cb:c7: 0e:cf:22:3f:9e:9d:d9:2b:72:c5:a6:98:5f:67:fc: f0:c0:a4:fb:91:e5:60:3a:d7:b3:ac:62:e1:e7:59: c8:00:6e:d2:90:d9:4c:15:ea:88:b9:49:bc:d3:06: bd:59:fb:46:f9:5f:af:da:a2:17:cb:40:dd:34:1a: 54:b3:ec:62:af:0f:25:8a:ac:f8:eb:4b:a7:f0:fc: af:55:3b:13:c8:46:37:ca:3e:28:1e:16:f3:f8:28: 35:c4:6a:52:19:e7:51:da:3c:a8:fa:80:da:39:b4: 84:e9:2b:50:e3:34:80:7c:90:fe:38:5b:74:8e:83: f2:b2:d4:04:ad:27:c7:a3:ee:2f:95:d7:40:51:f3: bb:41:b9:0f:f1:b4:c7:46:b5:1f:44:fc:d1:be:d0: 6f:2a:f6:b8:37:e6:01:e6:81:55:f7:3d:05:c8:12: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AF:49:59:05:F9:41:AA:3D:0A:A7:03:D6:96:31:B3:A9:A3:EF:14 X509v3 Authority Key Identifier: keyid:69:D7:0B:36:35:67:6E:4F:73:1B:8E:F1:C5:85:5B:5E:2F:27:F3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adcLNjVnbk9zG47xxYVbXi8n84g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174B04/3C689E0698A711EDB94DC87BC4F9AE02/adcLNjVnbk9zG47xxYVbXi8n84g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:d8:1b:fd:25:32:f3:45:7d:b8:01:bc:6e:74:3d:c2:ad:c8: 65:0a:77:1f:d0:de:4a:23:03:dd:0f:5e:0e:11:88:67:4e:bb: 44:aa:f5:d4:8c:9d:fa:44:78:fc:5c:59:5c:3e:56:60:f9:a4: 9e:11:83:45:c1:82:db:f5:52:84:9f:a2:ac:cb:c0:c8:84:d6: 63:72:0f:5f:20:3b:e5:a2:f9:b4:3f:bb:e2:a0:d1:c2:cd:05: e9:35:4d:63:77:ca:4a:b0:9d:a6:c5:39:0d:d0:0e:7b:a4:db: c5:c6:ec:49:70:24:05:d0:a1:f0:d5:7b:06:1f:f8:11:60:80: 9b:24:9a:c4:c1:dd:ff:fa:1e:f5:b4:8a:91:16:4a:61:99:e5: 69:81:c8:b9:b4:14:07:ea:b4:5e:21:c6:b0:0e:37:2d:bd:db: bb:65:8a:fa:c6:92:52:3c:0d:e7:8f:c6:d0:10:78:8a:b6:dc: 38:41:bf:59:2d:a8:09:0b:2a:97:7a:db:c3:06:d6:3a:5c:55: 06:82:8f:9b:99:df:3b:d1:d2:a3:c7:05:a3:1f:5b:8d:56:e2: 67:37:b8:75:a5:35:39:48:45:ec:ed:57:aa:70:60:ae:05:2f: 34:21:02:1e:56:4f:6a:59:b0:1d:91:be:cf:b9:7e:f0:27:c3: 45:66:98:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRCMDQxMTAvBgNVBAUTKDY5RDcwQjM2MzU2NzZFNEY3MzFCOEVGMUM1ODU1QjVF MkYyN0YzODgwHhcNMjUwNzA1MDMxMTA2WhcNMjUwNzEyMDMxMTA2WjAYMRYwFAYD VQQDEw02ODY4OTdjYi04MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvME13jeRmvIAY/NO1s0+5M3oC6C72DOv9hfn3d2MSID2wRaTG/FAD7xQ/jNu 54XDLtc6j8BIPGwa9f1rhO6WBjNuYx0H4H+0hGzeTpY4xeVnFcTXekk0y8cOzyI/ np3ZK3LFpphfZ/zwwKT7keVgOtezrGLh51nIAG7SkNlMFeqIuUm80wa9WftG+V+v 2qIXy0DdNBpUs+xirw8liqz460un8PyvVTsTyEY3yj4oHhbz+Cg1xGpSGedR2jyo +oDaObSE6StQ4zSAfJD+OFt0joPystQErSfHo+4vlddAUfO7QbkP8bTHRrUfRPzR vtBvKva4N+YB5oFV9z0FyBLwmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWvSVkF +UGqPQqnA9aWMbOpo+8UMB8GA1UdIwQYMBaAFGnXCzY1Z25PcxuO8cWFW14vJ/OI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEIwNC8zQzY4OUUwNjk4 QTcxMUVEQjk0REM4N0JDNEY5QUUwMi9hZGNMTmpWbmJrOXpHNDd4eFlWYlhpOG44 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FkY0xOalZuYms5ekc0N3h4WVZiWGk4bjg0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEIwNC8zQzY4OUUwNjk4QTcxMUVEQjk0REM4N0JDNEY5QUUwMi9hZGNMTmpWbmJr OXpHNDd4eFlWYlhpOG44NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDr2Bv9JTLzRX24AbxudD3CrchlCncf0N5KIwPdD14OEYhnTrtEqvXU jJ36RHj8XFlcPlZg+aSeEYNFwYLb9VKEn6Ksy8DIhNZjcg9fIDvlovm0P7vioNHC zQXpNU1jd8pKsJ2mxTkN0A57pNvFxuxJcCQF0KHw1XsGH/gRYICbJJrEwd3/+h71 tIqRFkphmeVpgci5tBQH6rReIcawDjctvdu7ZYr6xpJSPA3nj8bQEHiKttw4Qb9Z LagJCyqXetvDBtY6XFUGgo+bmd870dKjxwWjH1uNVuJnN7h1pTU5SEXs7VeqcGCu BS80IQIeVk9qWbAdkb7PuX7wJ8NFZpiS -----END CERTIFICATE-----Generated at Sun Jul 6 00:50:46 2025 by rpki-client