$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json) Hash identifier: seTJrENBAboBC9n76EK1k3ejwGz/kivgyemAFGEshSs= Subject key identifier: CC:26:FE:3D:41:44:0D:95:3F:B1:B9:40:1F:DA:FA:FD:4B:E8:1F:D1 Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft Manifest number: BE Signing time: Thu 03 Jul 2025 06:04:02 +0000 Manifest this update: Thu 03 Jul 2025 06:04:02 +0000 Manifest next update: Thu 10 Jul 2025 06:04:02 +0000 Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: x6pB6gabgiwrCU8kSy2i+W7X3WmTAs9QnpsXovN8kM8=) 2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: BbrjGfo0UoZCcLf+k7hQstWYPdgNNbc+IXBk8J2BWwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503 Validity Not Before: Jul 3 06:04:02 2025 GMT Not After : Jul 10 06:04:02 2025 GMT Subject: CN=68661d52-1df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4e:b3:ac:43:78:6f:c8:6f:6e:b1:30:13:90: 64:3e:57:ed:e3:2d:25:63:ca:74:22:d6:bf:99:52: a6:18:51:76:04:60:bf:da:26:7e:17:f3:0c:6a:26: 67:f7:5b:cf:ec:ea:dd:59:8a:5b:8d:41:e0:5f:47: 6b:61:5f:f7:b3:d9:0f:ec:47:47:fd:b4:90:b5:54: 79:6a:26:a1:ae:d2:56:99:f2:a5:6b:dd:a7:f2:40: 31:d9:d0:01:2f:c4:a6:c9:cd:9d:0f:a6:79:8b:71: 35:55:c4:33:ee:61:f8:a8:6e:e7:b1:c0:b2:8a:78: c7:fb:80:9d:b6:c5:44:cc:34:5a:cb:b2:6c:65:e0: 11:84:8a:39:74:a8:d7:7b:15:b8:68:04:c1:77:58: 06:58:52:c8:a6:a2:e8:01:2e:2c:d9:91:3d:f1:b0: 23:b9:ca:cf:2d:b8:d3:f5:38:1e:00:01:36:fc:78: 0d:ef:0d:39:c3:cc:50:25:ba:f6:ad:90:b8:2c:95: 61:0e:e9:24:d5:92:cd:cd:33:6e:d8:e6:a8:44:69: 0d:e9:ac:45:c4:ca:24:f5:24:69:45:2a:50:1d:84: bc:bb:58:c4:77:f2:99:9d:ee:7d:70:69:cd:57:2e: a8:28:9d:56:7a:02:5a:ba:5e:4f:7e:b0:19:cc:54: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:26:FE:3D:41:44:0D:95:3F:B1:B9:40:1F:DA:FA:FD:4B:E8:1F:D1 X509v3 Authority Key Identifier: keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:9c:e6:46:40:69:2c:fa:e5:8d:0a:5f:91:e6:71:64:fd: 53:a4:b9:b6:a7:24:ab:9b:d5:70:43:50:45:56:2f:0b:aa:d7: 97:ec:cc:c7:1d:c2:e2:13:14:32:cb:31:4f:e7:f2:26:81:6e: 3b:0e:d3:77:29:1e:06:10:1e:32:04:f5:e4:ed:58:f6:02:c4: cc:ce:08:c0:80:00:bc:33:9c:63:38:cf:bc:01:6b:35:3a:64: 9c:3a:2a:74:52:09:14:a1:83:76:cf:8d:cf:f9:a6:7c:20:31: e4:92:75:45:52:2e:de:36:d8:18:8c:70:09:25:9e:ff:df:15: e0:26:42:06:aa:78:70:ec:81:91:2b:22:be:73:27:08:12:03: 40:40:04:e8:89:5c:32:43:8b:0a:a4:e9:db:d5:5d:4c:e8:7e: 35:49:15:6a:7f:02:0d:6a:c7:b6:2e:2c:42:ce:16:93:bd:73: dc:26:83:8c:a5:f4:5f:d9:72:fe:75:3f:c1:85:3e:dd:5c:17: 92:58:33:cb:e8:60:aa:d9:8d:08:48:c4:ae:30:ef:d4:77:b9: 75:f7:3f:7c:ff:84:26:ce:12:62:66:b0:31:3e:56:26:c6:30: 51:e1:bf:1a:70:66:52:47:71:a4:b4:23:be:51:e5:6f:ad:8d: 3a:f1:b7:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDc0QTExNjY5QzQzRTUzQjBGMjFENEI0MTNGOTJEOUVB OTEzMTU1MDMwHhcNMjUwNzAzMDYwNDAyWhcNMjUwNzEwMDYwNDAyWjAYMRYwFAYD VQQDEw02ODY2MWQ1Mi0xZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U6zrEN4b8hvbrEwE5BkPlft4y0lY8p0Ita/mVKmGFF2BGC/2iZ+F/MMaiZn 91vP7OrdWYpbjUHgX0drYV/3s9kP7EdH/bSQtVR5aiahrtJWmfKla92n8kAx2dAB L8Smyc2dD6Z5i3E1VcQz7mH4qG7nscCyinjH+4CdtsVEzDRay7JsZeARhIo5dKjX exW4aATBd1gGWFLIpqLoAS4s2ZE98bAjucrPLbjT9TgeAAE2/HgN7w05w8xQJbr2 rZC4LJVhDukk1ZLNzTNu2OaoRGkN6axFxMok9SRpRSpQHYS8u1jEd/KZne59cGnN Vy6oKJ1WegJaul5PfrAZzFR1kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwm/j1B RA2VP7G5QB/a+v1L6B/RMB8GA1UdIwQYMBaAFHShFmnEPlOw8h1LQT+S2eqRMVUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC83OTNFQTZEQTM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3RHlIVXRCUDVMWjZwRXhW UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RLRVdhY1EtVTdEeUhVdEJQNUxaNnBFeFZRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC83OTNFQTZEQTM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9kS0VXYWNRLVU3 RHlIVXRCUDVMWjZwRXhWUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwtJzmRkBpLPrljQpfkeZxZP1TpLm2pySrm9VwQ1BFVi8LqteX7MzH HcLiExQyyzFP5/ImgW47DtN3KR4GEB4yBPXk7Vj2AsTMzgjAgAC8M5xjOM+8AWs1 OmScOip0UgkUoYN2z43P+aZ8IDHkknVFUi7eNtgYjHAJJZ7/3xXgJkIGqnhw7IGR KyK+cycIEgNAQAToiVwyQ4sKpOnb1V1M6H41SRVqfwINase2LixCzhaTvXPcJoOM pfRf2XL+dT/BhT7dXBeSWDPL6GCq2Y0ISMSuMO/Ud7l19z98/4QmzhJiZrAxPlYm xjBR4b8acGZSR3GktCO+UeVvrY068bcp -----END CERTIFICATE-----Generated at Fri Jul 4 17:56:30 2025 by rpki-client