$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: gdrN0MVV+B0vbLSS6hVzJ4bvSVbFRPGNFxfWw9OcUME= Subject key identifier: 16:FA:E9:B4:0F:86:FE:0D:3A:2F:82:99:26:2B:68:33:17:DB:3A:F8 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09F1 Signing time: Wed 02 Jul 2025 16:16:18 +0000 Manifest this update: Wed 02 Jul 2025 16:16:17 +0000 Manifest next update: Wed 09 Jul 2025 16:16:17 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: MSCu696nVJA9rZJhm1x6vvvrrQRb7VlHQp7QQnDd63k=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Jul 2 16:16:17 2025 GMT Not After : Jul 9 16:16:17 2025 GMT Subject: CN=68655b51-e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:f3:53:d0:9a:a8:ea:59:35:f2:1f:9e:ee: b3:06:8a:a0:2c:9c:60:5b:50:c7:85:f7:50:d5:eb: 32:fb:77:32:19:cc:91:73:4e:3e:61:25:39:0c:be: 16:0b:21:35:71:5c:2b:05:c0:ee:a6:13:27:2f:42: 45:b5:90:68:c9:a8:bc:d5:f7:c4:f9:b2:2d:a2:3c: ff:48:e4:6e:43:82:20:f0:df:50:9d:a5:55:02:70: bb:08:d9:88:a1:99:d2:a1:93:04:88:38:45:b1:19: a6:42:5d:e6:a2:7e:dc:bb:7b:72:3d:15:90:88:75: b2:b0:5f:15:3b:03:d8:ee:dd:45:c8:c4:22:fa:f8: 77:9d:86:79:05:a5:8d:d0:b3:2f:3c:81:03:a2:95: 5f:6d:7b:ce:12:ef:d1:e9:03:5c:a8:5b:15:21:e4: 4b:a3:f2:a7:7a:6d:35:74:d7:2e:df:28:0d:dd:ff: 53:37:77:d8:fb:58:b7:f9:28:ec:12:a9:6c:21:ad: 05:31:8c:5a:c3:19:4f:4c:17:e6:b1:07:45:50:91: fe:8e:66:e6:41:dc:66:90:8a:c2:31:bf:2e:a4:7d: 53:f5:63:fe:1b:9c:24:2d:7a:0d:c0:65:95:18:13: 90:7c:e8:a9:29:89:6b:b2:d2:ce:eb:80:e3:f0:2c: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:E9:B4:0F:86:FE:0D:3A:2F:82:99:26:2B:68:33:17:DB:3A:F8 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:98:5a:d0:bc:c7:01:92:07:00:d4:cf:1f:f5:dc:6c:bb: 8f:30:0c:15:a0:8f:47:2a:e6:11:10:01:bc:bf:52:57:bc:73: e6:9a:7b:10:aa:0c:6e:c1:6a:44:38:93:51:58:04:43:57:03: 76:3a:1b:b2:b6:93:21:b1:64:f8:84:f0:f2:85:ce:b5:27:3d: 2e:30:dd:32:55:a6:1c:c5:82:b3:6d:6f:a4:88:9d:01:05:a7: b5:e5:89:65:0d:bf:e8:f8:e1:b5:60:90:d2:4c:83:0a:34:0f: c9:96:a5:0f:f5:e9:76:b1:83:08:7a:55:67:d3:ac:14:b0:17: a9:89:16:8f:6f:57:a3:4d:01:ff:55:81:99:54:27:aa:b1:11: 00:ac:be:50:b7:7f:bc:de:fb:db:4f:38:eb:e0:53:1b:56:3f: b2:e7:a4:e1:50:d0:a0:20:70:aa:15:40:6e:65:08:38:e2:2d: 34:02:5b:20:58:eb:ca:68:b6:57:88:5f:9e:64:d6:cb:cd:d3: 22:b3:0e:15:fd:c9:42:e4:b4:5f:1c:01:fc:97:b5:74:6c:98: b2:3d:2a:ba:4d:9d:45:c6:c1:c8:82:08:c3:e2:b8:62:79:f4: 4a:a0:2d:7d:4d:00:81:9f:5b:36:0b:8b:ea:40:b4:24:51:a1: ca:4c:f5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNzAyMTYxNjE3WhcNMjUwNzA5MTYxNjE3WjAYMRYwFAYD VQQDEw02ODY1NWI1MS1lN2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2PzU9CaqOpZNfIfnu6zBoqgLJxgW1DHhfdQ1esy+3cyGcyRc04+YSU5DL4W CyE1cVwrBcDuphMnL0JFtZBoyai81ffE+bItojz/SORuQ4Ig8N9QnaVVAnC7CNmI oZnSoZMEiDhFsRmmQl3mon7cu3tyPRWQiHWysF8VOwPY7t1FyMQi+vh3nYZ5BaWN 0LMvPIEDopVfbXvOEu/R6QNcqFsVIeRLo/Knem01dNcu3ygN3f9TN3fY+1i3+Sjs EqlsIa0FMYxawxlPTBfmsQdFUJH+jmbmQdxmkIrCMb8upH1T9WP+G5wkLXoNwGWV GBOQfOipKYlrstLO64Dj8CwtMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb66bQP hv4NOi+CmSYraDMX2zr4MB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AJha0LzHAZIHANTPH/XcbLuPMAwVoI9HKuYREAG8v1JXvHPmmnsQ qgxuwWpEOJNRWARDVwN2OhuytpMhsWT4hPDyhc61Jz0uMN0yVaYcxYKzbW+kiJ0B Bae15YllDb/o+OG1YJDSTIMKNA/JlqUP9el2sYMIelVn06wUsBepiRaPb1ejTQH/ VYGZVCeqsREArL5Qt3+83vvbTzjr4FMbVj+y56ThUNCgIHCqFUBuZQg44i00Alsg WOvKaLZXiF+eZNbLzdMisw4V/clC5LRfHAH8l7V0bJiyPSq6TZ1FxsHIggjD4rhi efRKoC19TQCBn1s2C4vqQLQkUaHKTPXV -----END CERTIFICATE-----Generated at Thu Jul 3 23:07:35 2025 by rpki-client