$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft File: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft (raw, json) Hash identifier: LqsP9uS2PHuCc69A6b4JQv6cbf5aeNfPwsnJFxeve6M= Subject key identifier: 3D:50:40:3D:A8:2D:FF:81:E8:7C:F2:0A:77:C7:55:CF:FB:60:B4:3D Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft Manifest number: 0641 Signing time: Wed 02 Jul 2025 22:56:58 +0000 Manifest this update: Wed 02 Jul 2025 22:56:57 +0000 Manifest next update: Wed 09 Jul 2025 22:56:57 +0000 Files and hashes: 1: Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl (hash: bDrdhfathChu1VDzaiw5+PZ69dEexJc4BS/B0tGclvw=) 2: EA266BB0965911EB9A717E21C4F9AE02.roa (hash: unXzVSB7rlCBOdPMYdpaMnBlAZNAT9x8+AUdN+A92PI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178580, serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6 Validity Not Before: Jul 2 22:56:57 2025 GMT Not After : Jul 9 22:56:57 2025 GMT Subject: CN=6865b939-e67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:a4:d4:ed:4a:c6:a1:f9:26:34:fd:4d:38: bf:84:f4:9d:46:ec:e2:2c:71:8d:b2:a6:70:65:00: 85:90:ff:ff:56:73:81:99:97:69:22:dc:70:0c:ab: c1:84:44:34:09:a0:3c:56:9b:f3:37:25:fd:fb:03: be:d5:5d:1b:54:fb:ce:1b:85:1d:e3:90:ec:92:3f: 01:cb:a4:4f:64:cf:46:28:3f:19:a6:9a:28:98:cf: 0a:15:70:28:ca:39:84:8f:c8:67:5e:66:a8:e8:c2: 31:60:af:6c:61:75:e4:0b:5f:24:5d:0f:5a:d0:29: 3d:c1:65:78:f5:c0:2a:65:8a:b0:03:97:4a:91:1b: 45:3b:9c:4d:90:f4:03:14:e1:69:ca:4e:a4:da:83: ad:67:11:ac:06:0c:31:0b:a3:12:b1:8a:af:dd:93: 52:68:12:c4:94:8b:7a:9e:70:f0:83:57:5e:da:db: c8:10:bf:54:27:ed:81:df:b2:ce:75:8e:58:3f:8b: 0b:ae:c5:90:ba:34:c4:f8:f5:d7:33:ee:25:87:da: 99:bf:13:8a:a9:bb:d2:4d:de:39:3a:87:bb:e3:61: b6:ee:e8:b8:5b:a4:36:00:c3:29:0b:09:a5:28:6d: b6:26:f0:91:b3:78:b3:84:ca:bc:14:57:5f:96:9f: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:40:3D:A8:2D:FF:81:E8:7C:F2:0A:77:C7:55:CF:FB:60:B4:3D X509v3 Authority Key Identifier: keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b6:57:5f:d4:e7:c6:88:d8:e4:c1:f3:a5:2b:80:e2:90:c9: cd:d0:c8:0e:ce:fd:24:c4:ca:61:1d:23:dd:9c:47:59:b4:8b: 6e:cd:7d:e4:5a:ae:4d:9d:3d:89:ce:6b:23:ae:9a:39:a1:54: 05:04:04:5a:48:10:20:f5:97:a9:37:24:cb:c6:4c:21:96:a2: e0:c0:5f:7a:48:27:d7:e0:3d:2e:d5:0a:15:c7:0c:95:74:69: 80:f8:98:50:8b:df:85:e7:4e:83:8e:aa:82:0b:c9:05:0f:2a: 97:6c:42:26:0c:9d:c0:80:89:67:f5:e0:04:90:97:1f:56:2a: ef:df:e3:14:76:db:0c:59:27:07:c9:bc:9b:3e:b5:30:6c:76: f5:89:44:7c:fb:ab:e7:af:c8:1b:65:00:bb:1b:02:7e:9d:7a: 3e:c4:03:fa:26:9a:42:e7:6e:a1:12:0d:04:d9:82:a7:b2:ab: ea:3b:f1:cf:91:7a:6f:f4:0d:70:68:e9:0f:ef:93:a1:78:49: 75:a5:5e:8f:61:11:12:33:45:cc:a0:eb:b4:5f:5f:19:63:9c: 46:a2:78:46:7b:ca:1e:5e:9b:a5:80:e6:be:08:41:ef:9e:27: 49:a2:75:13:c7:dd:94:21:ab:5a:9d:55:ee:f6:86:5b:eb:d4: 04:3f:4d:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF MDkxM0M3RjYwHhcNMjUwNzAyMjI1NjU3WhcNMjUwNzA5MjI1NjU3WjAYMRYwFAYD VQQDEw02ODY1YjkzOS1lNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgSk1O1KxqH5JjT9TTi/hPSdRuziLHGNsqZwZQCFkP//VnOBmZdpItxwDKvB hEQ0CaA8VpvzNyX9+wO+1V0bVPvOG4Ud45Dskj8By6RPZM9GKD8ZppoomM8KFXAo yjmEj8hnXmao6MIxYK9sYXXkC18kXQ9a0Ck9wWV49cAqZYqwA5dKkRtFO5xNkPQD FOFpyk6k2oOtZxGsBgwxC6MSsYqv3ZNSaBLElIt6nnDwg1de2tvIEL9UJ+2B37LO dY5YP4sLrsWQujTE+PXXM+4lh9qZvxOKqbvSTd45Ooe742G27ui4W6Q2AMMpCwml KG22JvCRs3izhMq8FFdflp+/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1QQD2o Lf+B6HzyCnfHVc/7YLQ9MB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2 NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODU4MC8zOUY5NjZGODk2NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZ U0ZtYVo5ZnlLVmJna1R4X1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBftldf1OfGiNjkwfOlK4DikMnN0MgOzv0kxMphHSPdnEdZtItuzX3k Wq5NnT2Jzmsjrpo5oVQFBARaSBAg9ZepNyTLxkwhlqLgwF96SCfX4D0u1QoVxwyV dGmA+JhQi9+F506DjqqCC8kFDyqXbEImDJ3AgIln9eAEkJcfVirv3+MUdtsMWScH ybybPrUwbHb1iUR8+6vnr8gbZQC7GwJ+nXo+xAP6JppC526hEg0E2YKnsqvqO/HP kXpv9A1waOkP75OheEl1pV6PYRESM0XMoOu0X18ZY5xGonhGe8oeXpulgOa+CEHv nidJonUTx92UIatanVXu9oZb69QEP008 -----END CERTIFICATE-----Generated at Thu Jul 3 20:56:49 2025 by rpki-client