$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: jdgB0ZgITJ5O/X1PLjfRc8NQhbRZFwbTqd1i44NLShk= Subject key identifier: 88:82:71:40:F5:CE:6A:42:C8:2B:13:0F:DE:ED:77:0F:99:47:16:7E Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: 9E Signing time: Thu 03 Jul 2025 06:29:20 +0000 Manifest this update: Thu 03 Jul 2025 06:29:19 +0000 Manifest next update: Thu 10 Jul 2025 06:29:19 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: xHybyWWVlbppQUJqAykWaYMHEjyvRb+qNeqmgq425pU=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Jul 3 06:29:19 2025 GMT Not After : Jul 10 06:29:19 2025 GMT Subject: CN=6866233f-b798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:2a:23:26:89:e7:8f:cd:13:17:12:98:b8: 77:70:fa:d3:bd:51:9b:b8:de:5b:70:62:e3:95:fe: d3:93:fc:1b:59:68:15:69:c0:9e:78:63:95:e6:06: 76:e6:4e:de:d2:d2:d6:74:6e:86:10:4c:36:9c:b5: 41:c1:dd:0b:0f:72:cd:06:79:bc:92:41:a6:79:b4: f8:83:19:0b:a7:e1:97:ea:3f:43:0c:c4:55:7c:82: 4c:48:1e:31:18:db:66:9c:6a:c4:0c:f2:8e:0f:32: 29:ac:4e:32:ef:5a:18:35:da:d9:87:a8:60:53:6f: e9:a9:f7:ef:b9:f9:3c:dd:ad:3b:fa:d2:d2:08:21: 6e:ae:cf:d8:49:f1:25:ee:69:35:a4:c1:2b:75:e7: 15:02:0c:ec:3c:8e:1b:ca:38:07:17:8e:f9:eb:be: b7:a8:1f:96:68:be:25:e3:a5:1d:91:3c:24:6b:c6: d0:53:81:07:7f:2e:b7:c0:7b:5f:c3:fd:32:7d:da: 86:c9:c0:e2:42:11:30:82:0a:7a:58:2b:ef:75:e4: 4e:fa:3a:01:a5:6d:5c:25:0b:17:e6:ea:0d:5d:a1: 87:7f:25:11:41:40:9d:0d:1e:88:59:d6:1a:43:0e: d2:1c:dc:6c:2c:43:a1:1c:b3:98:e3:6e:9b:76:3c: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:82:71:40:F5:CE:6A:42:C8:2B:13:0F:DE:ED:77:0F:99:47:16:7E X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:87:3d:70:fb:0f:f9:94:34:8d:c2:9c:25:54:50:45:7a: 07:7b:17:08:64:05:90:c9:6d:5f:fb:d7:2a:d8:ec:27:73:d1: f2:cd:1d:79:b2:b3:55:30:5d:58:90:71:c4:c8:7a:6b:de:44: 11:72:dd:16:5a:38:4d:3c:fa:0e:fd:5e:c3:61:64:05:98:7e: b9:5d:e1:af:b0:9c:e4:8d:ce:57:ff:bd:b3:26:9d:1e:fe:49: af:8f:b3:f7:b5:91:28:36:59:24:ac:8d:29:3f:c9:01:21:44: 64:3f:4e:ff:a8:8b:c4:a6:16:7c:15:a9:00:40:22:40:ed:20: 10:2c:03:80:c7:ae:80:67:0a:73:99:49:43:f2:b7:25:f7:0b: fe:d4:4a:05:2b:a2:83:1f:52:54:b2:5b:4a:c0:9e:dd:87:31: af:0f:a0:1c:94:78:98:c7:65:f5:0f:d4:03:b4:25:bf:a4:1a: b9:0d:6f:17:51:31:8d:66:12:ee:0d:a6:fb:84:83:ff:ba:e4: 0b:8c:f4:22:36:01:d1:03:78:c6:9e:6e:65:42:ba:71:24:e2: 5a:3e:0c:3e:0e:6f:68:67:79:63:73:ce:13:ae:84:1a:b6:e1: 66:70:28:90:97:eb:1b:a8:05:4f:ea:f6:78:49:b6:02:75:a1: 0c:1e:03:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE2OTUxMTAvBgNVBAUTKEUzQUU3RDA3NEQ2OTY3RTJGNDlGRjlFM0I4RDc5QkJG QTI4MDlBOTIwHhcNMjUwNzAzMDYyOTE5WhcNMjUwNzEwMDYyOTE5WjAYMRYwFAYD VQQDEw02ODY2MjMzZi1iNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HMqIyaJ54/NExcSmLh3cPrTvVGbuN5bcGLjlf7Tk/wbWWgVacCeeGOV5gZ2 5k7e0tLWdG6GEEw2nLVBwd0LD3LNBnm8kkGmebT4gxkLp+GX6j9DDMRVfIJMSB4x GNtmnGrEDPKODzIprE4y71oYNdrZh6hgU2/pqffvufk83a07+tLSCCFurs/YSfEl 7mk1pMErdecVAgzsPI4byjgHF4756763qB+WaL4l46UdkTwka8bQU4EHfy63wHtf w/0yfdqGycDiQhEwggp6WCvvdeRO+joBpW1cJQsX5uoNXaGHfyURQUCdDR6IWdYa Qw7SHNxsLEOhHLOY426bdjyW2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiCcUD1 zmpCyCsTD97tdw+ZRxZ+MB8GA1UdIwQYMBaAFOOufQdNaWfi9J/547jXm7+igJqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS84REVGRTgwRTY5 MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFotTDBuX25qdU5lYnY2S0Ft cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFot TDBuX25qdU5lYnY2S0FtcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYAYc9cPsP+ZQ0jcKcJVRQRXoHexcIZAWQyW1f+9cq2Ownc9HyzR15 srNVMF1YkHHEyHpr3kQRct0WWjhNPPoO/V7DYWQFmH65XeGvsJzkjc5X/72zJp0e /kmvj7P3tZEoNlkkrI0pP8kBIURkP07/qIvEphZ8FakAQCJA7SAQLAOAx66AZwpz mUlD8rcl9wv+1EoFK6KDH1JUsltKwJ7dhzGvD6AclHiYx2X1D9QDtCW/pBq5DW8X UTGNZhLuDab7hIP/uuQLjPQiNgHRA3jGnm5lQrpxJOJaPgw+Dm9oZ3ljc84TroQa tuFmcCiQl+sbqAVP6vZ4SbYCdaEMHgPq -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:48 2025 by rpki-client