$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: c1GsZ4jcFWNcYAIfws+TEeFnyyIaCCIR9JI+XEWcHIA= Subject key identifier: FB:15:BB:CB:CB:36:00:F5:70:2D:08:8C:11:44:41:C0:98:3D:2E:5A Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 0819 Signing time: Sat 28 Jun 2025 20:29:22 +0000 Manifest this update: Sat 28 Jun 2025 20:29:21 +0000 Manifest next update: Sat 05 Jul 2025 20:29:21 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: SpD+yvodNzKO1ySlzDoXYlTebu6Q4eqZUUp13SyKopY=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Jun 28 20:29:21 2025 GMT Not After : Jul 5 20:29:21 2025 GMT Subject: CN=686050a2-6b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:b5:3a:40:7c:1b:92:6e:f8:7c:32:28:f8: cf:0e:58:96:f2:f0:3f:4b:22:a2:b6:f9:37:b0:22: f0:69:42:d1:77:b6:1e:6b:77:ab:ea:51:33:ee:3e: a2:24:74:35:80:b0:7d:5c:9a:35:11:ef:bf:70:6a: 05:0f:58:f2:67:8d:1d:5b:75:33:f7:96:15:99:ee: 6f:07:fa:47:c9:c0:c4:22:a0:28:b2:e4:58:1b:8e: ab:67:5a:e7:93:8b:d2:dc:41:76:07:7c:78:1d:a2: 93:9f:9d:6e:cd:bb:96:e3:2c:51:c5:8c:a6:cd:ed: bc:79:26:16:f1:ab:17:ed:ce:20:fa:90:b5:6f:27: 5c:ed:23:e9:6c:51:89:49:d4:ea:5d:a5:40:de:b9: a5:6a:91:f4:02:21:b8:10:f3:d5:15:f9:ef:72:ee: 9c:c8:c1:23:31:28:87:cb:d6:34:59:ce:c9:c8:8e: 6d:b7:f6:8c:e9:2c:c5:3f:ac:7f:48:b5:20:ee:c5: 2b:ef:70:88:16:2a:3f:03:57:15:36:9a:57:6e:a2: 24:98:e3:d9:c8:6f:49:ad:1e:97:27:c6:85:6b:03: 9a:88:ae:70:a9:2d:bd:8f:5c:69:0c:57:f3:63:31: cb:81:95:09:65:72:81:26:9b:e1:d2:7b:a6:7d:63: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:BB:CB:CB:36:00:F5:70:2D:08:8C:11:44:41:C0:98:3D:2E:5A X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:a3:55:e2:0f:6d:3b:07:20:d6:4f:e4:64:be:e1:cf:ad:20: 5e:7a:60:61:c9:01:8f:b8:93:0c:b5:f5:5b:9d:90:6e:77:22: 1b:31:da:1e:11:9a:db:0c:97:78:d1:95:fb:fe:4d:8c:39:3e: ac:68:a6:d0:60:9f:33:5f:5c:69:ce:9b:d4:00:0a:8d:24:fd: 76:b0:ef:93:8b:e7:fe:6e:e0:2b:7b:9d:84:78:e4:87:29:79: 93:30:f4:e2:15:92:f6:22:ca:1c:f4:61:43:34:bb:a6:dd:b5: 90:37:11:22:80:76:60:30:66:92:1d:77:54:0a:f2:e7:e9:a0: 5d:c0:1a:49:df:c9:cb:40:ed:2b:f5:d0:ee:58:51:da:62:3d: 45:3c:cb:df:45:57:f8:99:c9:50:61:a3:fe:a9:aa:e4:32:ad: af:53:02:98:bc:52:e3:a0:6a:eb:61:c9:d9:c2:26:14:63:88: 3c:f0:57:fc:61:1d:8a:f9:e3:b5:95:10:c4:a1:f4:a9:be:2c: 57:8e:47:e3:f4:49:27:46:6a:52:07:39:ee:9d:f3:eb:26:d0: bd:5e:7d:79:b0:d1:9f:47:c2:75:39:cf:16:3c:69:ec:d3:e6: e2:b9:2d:26:60:74:50:b4:13:be:1d:59:1a:31:38:46:98:e0: fe:4b:7b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUwNjI4MjAyOTIxWhcNMjUwNzA1MjAyOTIxWjAYMRYwFAYD VQQDEw02ODYwNTBhMi02YjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpW1OkB8G5Ju+HwyKPjPDliW8vA/SyKitvk3sCLwaULRd7Yea3er6lEz7j6i JHQ1gLB9XJo1Ee+/cGoFD1jyZ40dW3Uz95YVme5vB/pHycDEIqAosuRYG46rZ1rn k4vS3EF2B3x4HaKTn51uzbuW4yxRxYymze28eSYW8asX7c4g+pC1bydc7SPpbFGJ SdTqXaVA3rmlapH0AiG4EPPVFfnvcu6cyMEjMSiHy9Y0Wc7JyI5tt/aM6SzFP6x/ SLUg7sUr73CIFio/A1cVNppXbqIkmOPZyG9JrR6XJ8aFawOaiK5wqS29j1xpDFfz YzHLgZUJZXKBJpvh0numfWO5uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsVu8vL NgD1cC0IjBFEQcCYPS5aMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHo1XiD207ByDWT+RkvuHPrSBeemBhyQGPuJMMtfVbnZBudyIbMdoe EZrbDJd40ZX7/k2MOT6saKbQYJ8zX1xpzpvUAAqNJP12sO+Ti+f+buAre52EeOSH KXmTMPTiFZL2Isoc9GFDNLum3bWQNxEigHZgMGaSHXdUCvLn6aBdwBpJ38nLQO0r 9dDuWFHaYj1FPMvfRVf4mclQYaP+qarkMq2vUwKYvFLjoGrrYcnZwiYUY4g88Ff8 YR2K+eO1lRDEofSpvixXjkfj9EknRmpSBznunfPrJtC9Xn15sNGfR8J1Oc8WPGns 0+biuS0mYHRQtBO+HVkaMThGmOD+S3u8 -----END CERTIFICATE-----Generated at Mon Jun 30 15:30:19 2025 by rpki-client