$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: SqxEX5U7TMkPErjdgdX5MhWvHYrJGRJ4iYWAiSpUKNI= Subject key identifier: A6:E4:A5:54:2A:FF:58:3B:6C:07:14:A6:11:9A:3C:97:45:C8:E9:07 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: 0127 Signing time: Tue 01 Jul 2025 05:35:02 +0000 Manifest this update: Tue 01 Jul 2025 05:35:01 +0000 Manifest next update: Tue 08 Jul 2025 05:35:01 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: a3e/IiHOI0mq/odrgFPLACxHPGlEHcLtdMdhBcyuvNc=) 2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=) 3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=) 4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=) 8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=) 9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Jul 1 05:35:01 2025 GMT Not After : Jul 8 05:35:01 2025 GMT Subject: CN=68637385-4149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:40:0b:13:66:35:fc:ac:ab:88:ee:47:f4: b8:bc:ba:ab:86:97:a4:d9:36:b1:ad:a5:ee:2d:3b: 9d:56:c0:70:ab:44:5d:c1:8c:d8:76:09:49:58:ff: b0:95:26:fc:37:9d:ae:28:d1:30:b5:db:59:5d:50: 86:47:be:1a:7b:b6:5e:d2:f8:d3:fd:4d:59:09:ea: 83:aa:5b:5b:b4:0a:81:2e:04:4a:8f:94:63:e6:2a: 65:9a:3d:02:ad:6b:38:ba:24:e0:94:09:3c:a8:06: e8:fc:d3:9a:7c:e8:c8:57:ac:57:fc:c0:47:db:a0: 73:48:f8:a0:fe:63:36:0b:92:31:b6:b9:36:ac:47: 0a:42:f4:10:7c:df:ac:51:d0:bb:d1:8c:78:7d:70: 36:53:94:ba:9b:29:f2:f2:a1:2e:0a:8f:61:69:43: 9e:96:9e:17:80:40:40:95:0b:e7:be:4e:4f:52:38: a8:20:c3:3a:b9:23:f3:7d:cc:ef:4c:5f:1e:d9:58: cb:47:a4:44:6c:23:21:b3:7a:3d:79:c8:c5:a6:78: 55:21:0e:20:f4:6b:12:83:7f:6c:a1:fa:d7:55:3d: 23:8d:d4:ed:66:32:36:6b:c9:0a:f6:87:bd:08:85: 7e:64:2e:c6:7a:d3:38:61:84:23:fc:cb:6f:49:17: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E4:A5:54:2A:FF:58:3B:6C:07:14:A6:11:9A:3C:97:45:C8:E9:07 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:15:21:47:26:db:dd:ec:de:16:32:68:cc:5e:4a:5b:3e:af: 37:5a:92:ad:1b:a4:27:b8:9d:3b:f3:73:ce:68:fe:1e:d1:97: eb:50:49:9b:1d:19:61:10:2c:34:5b:c6:d4:7b:5f:73:39:e8: 38:93:76:e9:1a:8e:69:90:cb:0a:56:7c:f4:67:48:08:bc:36: b3:67:3a:91:e9:7a:3a:0c:55:7e:83:9f:f3:95:3c:ce:91:e2: 77:16:aa:7d:2e:80:e2:26:36:dc:0f:35:72:a2:f2:06:5b:49: c0:b8:d2:5f:b6:c7:7c:57:71:2e:bc:9a:22:dc:d3:12:e6:1e: df:c4:de:ef:ed:2f:fd:49:3b:b7:5f:13:fb:7c:af:43:bc:ec: fb:62:30:fb:bd:1c:be:0b:f2:e8:1e:5b:b3:49:6b:ff:f1:05: 75:28:5a:1e:cd:20:2e:7f:47:d7:47:e3:a4:96:03:64:44:65: 0e:92:79:83:45:c2:53:64:13:e9:90:60:13:6b:0f:25:b5:4f: 01:be:84:98:1d:d2:57:79:27:67:3a:47:e2:04:33:5f:0e:35: 30:7d:7a:20:27:58:0e:05:17:36:31:43:03:17:d9:e6:b9:71: ce:e5:75:3b:f0:6f:b9:83:a7:3a:9b:32:d6:76:e7:76:94:ff: e2:2e:52:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwNzAxMDUzNTAxWhcNMjUwNzA4MDUzNTAxWjAYMRYwFAYD VQQDEw02ODYzNzM4NS00MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAFACxNmNfysq4juR/S4vLqrhpek2TaxraXuLTudVsBwq0RdwYzYdglJWP+w lSb8N52uKNEwtdtZXVCGR74ae7Ze0vjT/U1ZCeqDqltbtAqBLgRKj5Rj5iplmj0C rWs4uiTglAk8qAbo/NOafOjIV6xX/MBH26BzSPig/mM2C5Ixtrk2rEcKQvQQfN+s UdC70Yx4fXA2U5S6myny8qEuCo9haUOelp4XgEBAlQvnvk5PUjioIMM6uSPzfczv TF8e2VjLR6REbCMhs3o9ecjFpnhVIQ4g9GsSg39sofrXVT0jjdTtZjI2a8kK9oe9 CIV+ZC7GetM4YYQj/MtvSRdX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbkpVQq /1g7bAcUphGaPJdFyOkHMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZFSFHJtvd7N4WMmjMXkpbPq83WpKtG6QnuJ0783POaP4e0ZfrUEmb HRlhECw0W8bUe19zOeg4k3bpGo5pkMsKVnz0Z0gIvDazZzqR6Xo6DFV+g5/zlTzO keJ3Fqp9LoDiJjbcDzVyovIGW0nAuNJftsd8V3EuvJoi3NMS5h7fxN7v7S/9STu3 XxP7fK9DvOz7YjD7vRy+C/LoHluzSWv/8QV1KFoezSAuf0fXR+OklgNkRGUOknmD RcJTZBPpkGATaw8ltU8BvoSYHdJXeSdnOkfiBDNfDjUwfXogJ1gOBRc2MUMDF9nm uXHO5XU78G+5g6c6mzLWdud2lP/iLlLV -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:57 2025 by rpki-client