$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: tj6zlIvH5x2XZ1hMnLplKhPaIBZJWiEkbMw1tASw9yc= Subject key identifier: A8:E1:7E:B0:83:3A:82:E2:6C:73:91:96:6D:03:D7:D6:FE:8D:41:B2 Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0319 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 02F9 Signing time: Thu 03 Jul 2025 01:46:36 +0000 Manifest this update: Thu 03 Jul 2025 01:46:35 +0000 Manifest next update: Thu 10 Jul 2025 01:46:35 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: iUqnBLKYKMt2fSn1Wodgi2aLUqNP3BDns4toUzReffY=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Jul 3 01:46:35 2025 GMT Not After : Jul 10 01:46:35 2025 GMT Subject: CN=6865e0fb-5a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:f3:fc:78:f8:71:b6:19:50:30:ba:a2:ac: 21:42:64:d0:00:ab:cd:a9:a2:e2:5c:af:90:83:15: bd:8b:f2:44:bc:f4:dc:16:29:f8:a1:45:a6:aa:8b: 79:b2:de:d2:ef:e9:28:03:72:f9:7a:ae:e1:19:7a: 5f:e0:07:24:37:fa:fa:05:48:07:98:a4:38:1d:42: 40:88:03:05:a6:ca:34:38:dc:e1:33:97:80:8b:b8: f0:fb:99:11:87:1f:5a:b8:ad:d8:0d:d2:56:29:d9: 97:11:19:67:cd:ee:09:17:89:08:f3:f6:54:24:96: 4c:1d:0b:76:b7:54:eb:bd:1e:04:fd:f5:7e:31:83: 1b:b5:b7:22:46:f5:9a:3d:c5:ac:ae:5b:b0:70:44: 9e:d3:34:78:ca:fe:d2:40:da:2f:79:61:82:00:1b: f4:82:35:e9:60:e8:99:84:8b:f7:33:a8:af:85:96: 76:17:d1:11:bb:78:4b:f6:e6:fd:df:a7:a2:35:39: db:85:4a:b7:05:c1:d8:42:87:73:b8:93:76:99:a6: 45:a0:2e:57:97:c0:17:85:2f:94:56:59:92:fc:59: 40:03:59:f9:03:24:da:6e:61:66:38:cd:2e:c1:70: 89:13:eb:59:2d:8f:a4:b8:84:3e:b4:32:be:bc:85: 53:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:7E:B0:83:3A:82:E2:6C:73:91:96:6D:03:D7:D6:FE:8D:41:B2 X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:42:fa:06:7d:1f:45:55:81:56:b3:fa:24:15:62:89:a8:68: 12:92:73:1c:10:b2:64:29:88:40:4d:58:f2:8b:0e:0e:17:0b: ec:68:61:f0:77:7c:36:69:11:6b:89:45:87:2e:4c:b4:29:7b: ee:a3:b7:ee:82:87:4b:e0:c7:2b:e0:cd:7b:8e:67:3f:ea:e5: f4:64:14:57:ce:2b:b6:50:18:9e:6c:2e:ed:88:8a:d9:0a:08: 46:6d:a3:81:2c:27:45:3f:43:09:1a:9f:32:2b:68:8b:6b:ea: 78:e8:a8:3b:cf:14:03:f6:96:b4:c7:4b:cc:a9:25:b6:f2:c0: 95:e2:a5:01:95:22:6d:2b:a8:50:10:df:94:be:1d:7c:4f:58: 96:52:7d:31:4d:24:30:7b:bf:46:56:4c:8f:e2:09:91:5e:6f: 69:e5:c2:a8:de:ca:74:78:0f:24:b9:ca:81:a3:37:ba:36:eb: 5e:cb:93:28:67:c2:c9:c9:88:ab:41:1f:12:79:e0:c1:74:30: db:c4:93:0e:59:89:5d:3f:d3:96:46:44:62:ed:6e:4f:0f:4d: 12:e4:0f:3a:55:c0:58:85:20:46:49:44:ac:a5:83:8f:b0:eb: 85:44:94:e2:39:e2:41:36:44:d0:bb:9c:82:06:f1:ef:df:e0: b8:9c:e9:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwNzAzMDE0NjM1WhcNMjUwNzEwMDE0NjM1WjAYMRYwFAYD VQQDEw02ODY1ZTBmYi01YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0N/z/Hj4cbYZUDC6oqwhQmTQAKvNqaLiXK+QgxW9i/JEvPTcFin4oUWmqot5 st7S7+koA3L5eq7hGXpf4AckN/r6BUgHmKQ4HUJAiAMFpso0ONzhM5eAi7jw+5kR hx9auK3YDdJWKdmXERlnze4JF4kI8/ZUJJZMHQt2t1TrvR4E/fV+MYMbtbciRvWa PcWsrluwcESe0zR4yv7SQNoveWGCABv0gjXpYOiZhIv3M6ivhZZ2F9ERu3hL9ub9 36eiNTnbhUq3BcHYQodzuJN2maZFoC5Xl8AXhS+UVlmS/FlAA1n5AyTabmFmOM0u wXCJE+tZLY+kuIQ+tDK+vIVTcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjhfrCD OoLibHORlm0D19b+jUGyMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQQvoGfR9FVYFWs/okFWKJqGgSknMcELJkKYhATVjyiw4OFwvsaGHw d3w2aRFriUWHLky0KXvuo7fugodL4Mcr4M17jmc/6uX0ZBRXziu2UBiebC7tiIrZ CghGbaOBLCdFP0MJGp8yK2iLa+p46Kg7zxQD9pa0x0vMqSW28sCV4qUBlSJtK6hQ EN+Uvh18T1iWUn0xTSQwe79GVkyP4gmRXm9p5cKo3sp0eA8kucqBoze6Nutey5Mo Z8LJyYirQR8SeeDBdDDbxJMOWYldP9OWRkRi7W5PD00S5A86VcBYhSBGSUSspYOP sOuFRJTiOeJBNkTQu5yCBvHv3+C4nOnw -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:38 2025 by rpki-client