$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft File: g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft (raw, json) Hash identifier: FkFBwb1KLdSznYYyyZC5wte6FI4CCvTpsEaeDJ+jQDo= Subject key identifier: A4:4C:20:6A:59:E3:C9:24:D3:09:08:C7:0B:3C:B1:12:54:7C:7F:3A Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0750 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft Manifest number: 06CD Signing time: Mon 30 Jun 2025 23:00:04 +0000 Manifest this update: Mon 30 Jun 2025 23:00:03 +0000 Manifest next update: Mon 07 Jul 2025 23:00:03 +0000 Files and hashes: 1: g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl (hash: KucKPIUpnBF9Tm6h707HAUxzxwgCgPfMC+OZXmCreK4=) 2: 756E0BBCEAE711EE88CD8641C4F9AE02.roa (hash: AIYT1vtMWjn+gqf3bfo7gJUDe3tZqbxGWI5bPkWziTI=) 3: 993EAAD4522911EFA600C035C4F9AE02.roa (hash: 1rxTRx00g7mzqt5brNlauI0eIjIAqtvwJViBr5z6wUY=) 4: 9AE082EC318D11F0A159DF79C4F9AE02.roa (hash: Oyh0Hiv3Vf5S5+UetNdK3rc6KfUP/uHh89s91fbOt9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Jun 30 23:00:03 2025 GMT Not After : Jul 7 23:00:03 2025 GMT Subject: CN=686316f3-761d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:0b:34:0e:a3:fd:62:7e:ff:da:32:44:0c: 63:27:4f:24:89:df:9e:15:cc:a0:9e:35:4e:6f:3b: 56:76:d9:7e:b1:f8:7a:3e:df:a3:76:d9:9a:02:ce: 50:67:61:5a:b4:7a:05:ae:10:5b:ae:16:3b:77:90: 22:cc:fd:a3:6a:69:0a:de:29:70:82:6f:ee:b7:ec: 4e:6f:21:4a:04:f3:ec:85:21:88:70:8c:19:1a:c2: c0:af:49:91:4a:bd:aa:7d:01:cf:d8:17:7b:e7:1e: d2:7c:40:60:2c:eb:f3:e1:63:65:a7:78:ab:4b:9f: 23:2a:ab:96:f9:6f:2d:a2:a4:0e:95:47:f4:d5:86: dd:c1:81:b4:31:55:60:ba:c8:60:9c:c8:38:5c:f1: d8:80:5e:6e:da:e6:a9:25:3f:38:6f:83:77:b7:64: 4a:f2:78:3b:83:b0:fb:f8:30:aa:5a:d0:39:10:55: 6a:1d:50:08:2f:93:b5:37:4c:ab:8d:bd:ed:26:b3: 2c:95:a6:76:04:28:a1:8f:82:f4:cd:53:79:4e:cc: f2:35:a8:4a:d6:2b:82:e3:fc:ca:8b:94:fc:8f:90: 0e:aa:f4:12:76:e4:cc:7a:79:61:bc:ea:60:82:67: d2:e1:46:92:cd:4b:83:f4:54:96:ab:09:50:b1:53: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:20:6A:59:E3:C9:24:D3:09:08:C7:0B:3C:B1:12:54:7C:7F:3A X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:4e:8c:74:5d:08:6e:ab:40:53:34:b8:66:f0:69:8a:e8:af: 2f:a5:11:ec:26:f5:f4:cd:36:bf:5f:c6:e0:04:fe:be:ac:61: 13:7b:57:e9:33:15:37:ce:60:9f:5a:e1:36:7d:1a:e5:08:0d: 2b:2f:56:13:5b:4d:dd:e8:67:dc:cb:aa:14:9f:48:10:53:9f: b8:ba:d8:1a:a5:da:49:cd:4c:19:26:70:4e:fc:b2:08:b9:01: 52:ed:77:e1:c4:c8:59:f1:79:31:21:ed:10:90:f2:28:b8:fa: a5:87:dc:46:32:2b:3a:9b:7d:4f:75:45:06:c1:3d:c6:61:04: a0:3d:a4:ca:8a:90:91:fe:47:fc:db:f8:04:46:58:04:54:a1: 0b:84:79:c6:41:fd:f3:de:47:af:e4:70:41:ba:ed:38:c4:d6: 9d:0c:93:33:16:26:05:d0:72:f4:e0:85:64:16:4a:6e:8d:8c: a2:56:1e:5c:ed:bd:69:b5:aa:03:38:43:ef:27:99:0a:e4:49: a0:0c:98:cc:24:92:0f:3c:ca:a9:49:3b:ed:65:98:fe:bb:c6: 84:05:48:9c:9a:6b:36:12:c1:02:11:50:3e:a6:fe:ce:75:44: fe:85:e9:ed:15:9d:ec:75:2b:99:85:21:da:39:6a:98:16:fd: 56:f7:de:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNjMwMjMwMDAzWhcNMjUwNzA3MjMwMDAzWjAYMRYwFAYD VQQDEw02ODYzMTZmMy03NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyE8LNA6j/WJ+/9oyRAxjJ08kid+eFcygnjVObztWdtl+sfh6Pt+jdtmaAs5Q Z2FatHoFrhBbrhY7d5AizP2jamkK3ilwgm/ut+xObyFKBPPshSGIcIwZGsLAr0mR Sr2qfQHP2Bd75x7SfEBgLOvz4WNlp3irS58jKquW+W8toqQOlUf01YbdwYG0MVVg ushgnMg4XPHYgF5u2uapJT84b4N3t2RK8ng7g7D7+DCqWtA5EFVqHVAIL5O1N0yr jb3tJrMslaZ2BCihj4L0zVN5TszyNahK1iuC4/zKi5T8j5AOqvQSduTMenlhvOpg gmfS4UaSzUuD9FSWqwlQsVPjcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRMIGpZ 48kk0wkIxws8sRJUfH86MB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTZCNy85NUVGN0RCQTk2N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFa MGpTMFJXMXZablhjZm1CaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVTox0XQhuq0BTNLhm8GmK6K8vpRHsJvX0zTa/X8bgBP6+rGETe1fp MxU3zmCfWuE2fRrlCA0rL1YTW03d6Gfcy6oUn0gQU5+4utgapdpJzUwZJnBO/LII uQFS7XfhxMhZ8XkxIe0QkPIouPqlh9xGMis6m31PdUUGwT3GYQSgPaTKipCR/kf8 2/gERlgEVKELhHnGQf3z3kev5HBBuu04xNadDJMzFiYF0HL04IVkFkpujYyiVh5c 7b1ptaoDOEPvJ5kK5EmgDJjMJJIPPMqpSTvtZZj+u8aEBUicmms2EsECEVA+pv7O dUT+hentFZ3sdSuZhSHaOWqYFv1W994r -----END CERTIFICATE-----Generated at Tue Jul 1 22:27:26 2025 by rpki-client