$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: vv72uFhSplN1wSB5aEKOO8FpFA+mO4L8u0+Lr+qjHqw= Subject key identifier: 23:58:6B:89:51:E2:2F:6E:1B:3B:F5:57:B0:26:86:BE:F2:4E:A5:04 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0149 Signing time: Tue 01 Jul 2025 04:42:40 +0000 Manifest this update: Tue 01 Jul 2025 04:42:39 +0000 Manifest next update: Tue 08 Jul 2025 04:42:39 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: m9KaAQopd4P7k6Mxnw88Q6prMqYPit2JCyQ8loDfNcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Jul 1 04:42:39 2025 GMT Not After : Jul 8 04:42:39 2025 GMT Subject: CN=68636740-cefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:82:53:4c:c7:6b:fe:a9:41:f2:d7:9e:cf: 08:7a:71:13:76:c9:60:72:90:7f:13:ee:81:03:4a: 99:81:6d:c7:a3:ee:bd:e1:e5:fd:f9:d3:42:bd:38: ac:a9:82:7c:ba:c1:20:45:b9:9d:14:af:8b:1d:70: b0:0b:f5:40:f9:4b:41:dc:df:24:72:a2:3d:45:7e: 1a:e7:e7:53:d6:f3:ff:7c:0c:3a:38:c8:88:42:b6: c9:f2:f2:55:cc:08:c0:cf:a0:7e:0e:18:0f:21:e3: fe:38:dd:0f:b5:38:00:c0:0d:d3:15:b5:ab:8d:0b: 67:5e:26:4a:2c:39:df:e1:22:63:99:41:96:1e:f3: ca:3b:c6:ac:c9:e4:99:00:67:e2:0b:73:36:7f:b4: c2:b8:9b:28:2c:f2:74:2d:77:5e:12:48:16:08:fb: a0:a1:72:3e:1a:65:21:36:a8:9a:34:49:dc:38:34: 4c:49:4d:50:5f:07:bb:98:65:5e:6b:f9:77:39:07: c9:7d:7d:c4:f5:b7:90:13:56:6c:cb:df:f0:f7:b5: 32:1e:39:95:77:cf:b9:5c:e6:9a:70:ac:de:11:06: 38:d6:d6:a7:5c:5d:5a:bb:20:1c:42:ee:ae:40:b5: 72:05:33:4e:1c:58:91:3b:c8:15:08:2e:00:89:ce: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:6B:89:51:E2:2F:6E:1B:3B:F5:57:B0:26:86:BE:F2:4E:A5:04 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:c9:c2:1b:23:0b:dc:b2:fd:81:2f:8d:b5:f1:24:fd:40:66: 78:c5:fc:85:35:64:98:5a:97:11:22:46:9d:9c:e6:95:20:90: bb:67:7c:17:14:1a:3a:1b:b2:54:25:6e:14:15:68:ec:42:69: 8e:b8:84:f3:6c:97:8a:61:34:56:bc:c9:9c:d7:eb:3d:38:30: b3:cd:34:85:2d:f8:d1:71:e9:3e:99:64:da:a1:9f:67:e4:8d: bf:1c:7f:30:fe:06:8d:7f:72:8a:46:04:27:14:fd:a7:2a:70: 8a:0e:05:f5:c1:54:a6:7b:cc:12:4b:41:70:a1:1d:f1:75:b3: 66:c9:c6:07:32:43:f8:af:38:89:f7:a1:7e:3a:f6:55:86:a2: 74:df:f7:b8:b9:aa:b0:5a:0f:64:36:c6:fd:43:9a:59:00:e6: 41:3e:33:70:4a:b3:d5:56:02:4a:23:63:cf:81:a4:37:66:4b: 1f:49:e2:16:63:21:fd:32:25:ab:a7:2f:c0:cb:62:f7:cf:db: 4c:91:27:c4:90:d3:a5:c6:ca:06:7e:00:a9:11:fb:06:64:47: 99:b9:83:9b:17:7f:e9:72:0d:b3:18:41:38:f2:32:94:42:87: 94:c8:9e:33:33:4c:9f:c2:5e:0c:87:c6:6c:59:a4:9f:83:63: 95:27:d8:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwNzAxMDQ0MjM5WhcNMjUwNzA4MDQ0MjM5WjAYMRYwFAYD VQQDEw02ODYzNjc0MC1jZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA106CU0zHa/6pQfLXns8IenETdslgcpB/E+6BA0qZgW3Ho+694eX9+dNCvTis qYJ8usEgRbmdFK+LHXCwC/VA+UtB3N8kcqI9RX4a5+dT1vP/fAw6OMiIQrbJ8vJV zAjAz6B+DhgPIeP+ON0PtTgAwA3TFbWrjQtnXiZKLDnf4SJjmUGWHvPKO8asyeSZ AGfiC3M2f7TCuJsoLPJ0LXdeEkgWCPugoXI+GmUhNqiaNEncODRMSU1QXwe7mGVe a/l3OQfJfX3E9beQE1Zsy9/w97UyHjmVd8+5XOaacKzeEQY41tanXF1auyAcQu6u QLVyBTNOHFiRO8gVCC4Aic4D2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNYa4lR 4i9uGzv1V7Amhr7yTqUEMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhycIbIwvcsv2BL4218ST9QGZ4xfyFNWSYWpcRIkadnOaVIJC7Z3wX FBo6G7JUJW4UFWjsQmmOuITzbJeKYTRWvMmc1+s9ODCzzTSFLfjRcek+mWTaoZ9n 5I2/HH8w/gaNf3KKRgQnFP2nKnCKDgX1wVSme8wSS0FwoR3xdbNmycYHMkP4rziJ 96F+OvZVhqJ03/e4uaqwWg9kNsb9Q5pZAOZBPjNwSrPVVgJKI2PPgaQ3ZksfSeIW YyH9MiWrpy/Ay2L3z9tMkSfEkNOlxsoGfgCpEfsGZEeZuYObF3/pcg2zGEE48jKU QoeUyJ4zM0yfwl4Mh8ZsWaSfg2OVJ9hg -----END CERTIFICATE-----Generated at Wed Jul 2 16:28:28 2025 by rpki-client