$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: 2H19yeTF3IjT/WlOnrLwcn+2VT4BVBKCQS4CEUoPO7w= Subject key identifier: C0:A7:19:9F:A2:44:10:D9:95:4F:6D:CF:77:E6:94:EA:32:C4:6F:E0 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 0456 Signing time: Thu 03 Jul 2025 00:32:50 +0000 Manifest this update: Thu 03 Jul 2025 00:32:49 +0000 Manifest next update: Thu 10 Jul 2025 00:32:49 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: /qNbF3ZVobFRDtXJFBEDJ/i6s85sibbjZl2oHKVBy0I=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Jul 3 00:32:49 2025 GMT Not After : Jul 10 00:32:49 2025 GMT Subject: CN=6865cfb1-4e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:22:29:66:b8:ab:6d:eb:57:08:07:5a:0c: 2f:24:38:8f:70:7e:80:72:f2:61:59:2c:52:26:18: 65:38:6b:15:10:4f:19:d0:b7:52:f2:9d:d5:f2:44: d3:ee:2c:cc:e4:a8:a2:d7:4d:6b:93:45:4d:fe:2b: cd:8a:3e:09:86:e0:e6:a2:1c:c0:c3:fd:bd:93:c0: 7d:f6:00:7f:78:5e:7e:86:8b:86:f8:b2:94:5c:7a: 42:bc:5e:62:b2:27:4c:5d:4b:b4:8f:a8:b1:50:60: 85:e0:71:89:50:21:c0:86:47:20:f1:95:27:d5:34: 4b:6b:11:af:4b:c8:af:ca:62:3b:2c:c1:4c:f3:9b: 22:5b:76:0d:5a:98:8e:2c:09:9b:88:38:32:9c:63: 76:71:c8:c7:eb:26:d3:37:1c:a2:5d:fd:a2:26:8d: f0:5f:20:cc:9f:65:fb:de:1e:6d:4a:e2:47:08:21: e5:ab:71:cd:13:19:d2:63:25:22:17:32:b7:19:b2: c1:b5:70:b1:c6:20:00:8b:9c:3d:c6:67:2b:92:aa: 73:23:04:24:dc:1a:df:2f:82:67:b5:20:7b:72:7b: 0f:1a:e7:d5:6e:c6:9e:51:49:cd:f2:32:94:91:c5: fc:f0:ca:6a:09:e6:c3:3a:ec:61:be:78:50:75:99: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:19:9F:A2:44:10:D9:95:4F:6D:CF:77:E6:94:EA:32:C4:6F:E0 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:56:18:48:27:2f:13:c0:4c:6c:0b:31:f1:88:48:de:4d:7a: c7:4e:b8:50:43:d0:e6:f6:3e:ab:ad:ed:ff:5e:d0:10:0c:ac: f0:1a:3a:e1:92:61:49:db:9c:72:bf:11:d4:1b:0c:e9:f0:15: 0b:b3:e0:af:83:71:95:d6:47:14:92:f0:b5:bf:7f:ea:aa:71: 2d:44:a3:9f:bd:cc:5d:1c:29:96:73:08:0e:b4:34:ec:50:9e: 33:83:e4:12:04:43:83:75:dc:e1:be:c0:12:9f:6a:9d:ad:01: 4c:6c:4f:0b:3b:9f:ce:5c:fb:51:5f:ec:28:d0:8f:c3:4c:69: 31:d8:3c:45:c8:be:0b:d8:f1:a9:fb:79:4b:90:4e:93:3a:76: ad:ac:43:2d:13:a9:38:87:de:ae:6a:6f:96:7c:39:63:e6:ac: 2f:a7:f3:8c:48:43:ff:42:ff:43:9f:f2:bf:9c:5c:84:65:a9: eb:8f:6c:51:18:46:ab:3c:2c:02:9b:e1:78:71:4d:48:5f:b3: 30:75:b7:2c:16:28:f0:b1:3a:98:5e:27:e8:78:c9:3e:60:25: 02:70:40:ee:1d:d5:3b:aa:d6:c4:54:ad:47:79:f7:16:b0:e5: 78:a4:4d:81:0d:b0:ce:35:4b:d9:7f:5a:c4:21:96:d9:c7:42: d9:22:4f:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwNzAzMDAzMjQ5WhcNMjUwNzEwMDAzMjQ5WjAYMRYwFAYD VQQDEw02ODY1Y2ZiMS00ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3twiKWa4q23rVwgHWgwvJDiPcH6AcvJhWSxSJhhlOGsVEE8Z0LdS8p3V8kTT 7izM5Kii101rk0VN/ivNij4JhuDmohzAw/29k8B99gB/eF5+houG+LKUXHpCvF5i sidMXUu0j6ixUGCF4HGJUCHAhkcg8ZUn1TRLaxGvS8ivymI7LMFM85siW3YNWpiO LAmbiDgynGN2ccjH6ybTNxyiXf2iJo3wXyDMn2X73h5tSuJHCCHlq3HNExnSYyUi FzK3GbLBtXCxxiAAi5w9xmcrkqpzIwQk3BrfL4JntSB7cnsPGufVbsaeUUnN8jKU kcX88MpqCebDOuxhvnhQdZlvGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCnGZ+i RBDZlU9tz3fmlOoyxG/gMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWVhhIJy8TwExsCzHxiEjeTXrHTrhQQ9Dm9j6rre3/XtAQDKzwGjrh kmFJ25xyvxHUGwzp8BULs+Cvg3GV1kcUkvC1v3/qqnEtRKOfvcxdHCmWcwgOtDTs UJ4zg+QSBEODddzhvsASn2qdrQFMbE8LO5/OXPtRX+wo0I/DTGkx2DxFyL4L2PGp +3lLkE6TOnatrEMtE6k4h96uam+WfDlj5qwvp/OMSEP/Qv9Dn/K/nFyEZanrj2xR GEarPCwCm+F4cU1IX7MwdbcsFijwsTqYXifoeMk+YCUCcEDuHdU7qtbEVK1HefcW sOV4pE2BDbDONUvZf1rEIZbZx0LZIk/g -----END CERTIFICATE-----Generated at Thu Jul 3 08:57:52 2025 by rpki-client