$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: ddm3SWcv8t8pJzT2tBkrfdHivetISCr1FqTwZANAaOY= Subject key identifier: 5E:41:94:B2:57:E8:F4:27:0E:8D:35:EF:C7:AC:32:37:F1:E6:3E:95 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0349 Signing time: Tue 01 Jul 2025 01:39:55 +0000 Manifest this update: Tue 01 Jul 2025 01:39:54 +0000 Manifest next update: Tue 08 Jul 2025 01:39:54 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: Vj37lK91jRG8OylTnTXTFV63ycusqKwJcCyJSjTT5Jg=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: 4/mG+lweyXgrZC5mzJqWhB3/c7ZZHmvm4qvTx8E454E=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: j5kgXwbepMIvNgxa27dfn191WDj/vcSWthYxalKX4VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Jul 1 01:39:54 2025 GMT Not After : Jul 8 01:39:54 2025 GMT Subject: CN=68633c6a-875f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a1:06:4a:a0:45:f9:b6:51:7b:48:88:75:39: 57:ad:5e:a7:6d:e8:6d:7e:43:53:18:59:13:d3:76: 8a:e0:5f:6d:dd:05:bc:6f:58:f4:a5:da:c6:d4:c5: 0a:3c:7d:15:33:0c:7f:91:a1:35:8a:fa:be:d3:7b: a3:01:dc:de:74:a0:4d:65:91:cb:62:d9:00:74:c1: 62:ed:02:c6:82:ec:ee:3b:26:52:0a:79:ba:ae:7d: 9f:3d:0f:c2:79:d2:06:81:19:80:8b:11:b7:84:72: 49:a1:0e:b7:10:a9:9b:01:03:a8:d5:6b:d2:76:66: 84:ef:8f:0e:17:ad:d2:24:2c:5d:76:6a:fa:bc:24: 6f:62:9e:69:24:a6:a8:47:76:9e:3d:46:b1:97:c4: 03:70:ac:d2:1a:0c:d3:98:e7:d8:e4:bf:af:66:b0: e2:99:4a:de:6e:c0:7b:e7:ca:ae:ea:a7:7b:c3:b3: fd:b4:25:66:3a:a6:76:75:a6:40:03:23:bc:d5:4e: 63:25:54:ce:41:d0:a8:72:37:02:fd:2b:60:f5:a8: 59:91:ea:5d:d2:b0:d2:51:3c:7c:02:cf:af:14:1f: 21:9f:0b:4b:3b:5b:09:b8:64:10:91:f4:a6:df:fe: 30:bc:97:68:d3:85:31:85:13:15:fc:c7:c4:c1:cf: 54:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:41:94:B2:57:E8:F4:27:0E:8D:35:EF:C7:AC:32:37:F1:E6:3E:95 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:9e:b7:ec:9a:4a:e8:1a:35:00:55:38:93:e9:5c:7d:8b:05: 16:4c:fc:2e:21:41:0f:27:ba:20:98:f5:be:bc:54:a5:fd:c6: c4:39:ef:81:f6:10:2d:75:34:eb:09:0c:ad:86:f7:9b:3c:4f: 04:22:17:4c:ad:ca:aa:15:fd:d0:d6:0a:40:a9:69:41:b4:1b: bc:e0:14:39:6f:95:23:42:c5:1d:0d:e2:67:77:3d:be:a8:4e: a9:49:db:4e:60:00:1e:80:89:fd:a1:7c:20:33:77:0d:41:2b: 9c:90:dd:c2:82:48:0b:e6:37:3c:11:8d:d6:1e:8d:e4:33:b1: 41:3c:94:9b:89:b2:b4:0d:ec:5c:4b:40:10:21:b1:f1:6b:84: dc:16:f8:72:c6:b1:d0:94:31:4b:ec:2a:6a:42:61:66:55:67: 64:f9:6e:a5:21:ea:ee:94:bd:0c:82:d4:3a:82:b7:10:98:c8: 71:ec:ab:81:d7:39:b5:95:88:e4:70:7b:6a:89:80:d9:31:15: 54:e5:56:28:fc:90:d9:2d:76:10:ac:b4:b7:34:e8:5e:f4:7f: bd:59:f9:33:03:8f:ce:c7:33:3a:a5:61:2e:91:d1:5c:a6:c2: e2:c7:77:be:10:12:55:21:0a:c3:fa:0b:c9:85:d1:d9:4f:f5: e8:2f:24:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNzAxMDEzOTU0WhcNMjUwNzA4MDEzOTU0WjAYMRYwFAYD VQQDEw02ODYzM2M2YS04NzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qEGSqBF+bZRe0iIdTlXrV6nbehtfkNTGFkT03aK4F9t3QW8b1j0pdrG1MUK PH0VMwx/kaE1ivq+03ujAdzedKBNZZHLYtkAdMFi7QLGguzuOyZSCnm6rn2fPQ/C edIGgRmAixG3hHJJoQ63EKmbAQOo1WvSdmaE748OF63SJCxddmr6vCRvYp5pJKao R3aePUaxl8QDcKzSGgzTmOfY5L+vZrDimUrebsB758qu6qd7w7P9tCVmOqZ2daZA AyO81U5jJVTOQdCocjcC/Stg9ahZkepd0rDSUTx8As+vFB8hnwtLO1sJuGQQkfSm 3/4wvJdo04UxhRMV/MfEwc9UpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5BlLJX 6PQnDo0178esMjfx5j6VMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVnrfsmkroGjUAVTiT6Vx9iwUWTPwuIUEPJ7ogmPW+vFSl/cbEOe+B 9hAtdTTrCQythvebPE8EIhdMrcqqFf3Q1gpAqWlBtBu84BQ5b5UjQsUdDeJndz2+ qE6pSdtOYAAegIn9oXwgM3cNQSuckN3CgkgL5jc8EY3WHo3kM7FBPJSbibK0Dexc S0AQIbHxa4TcFvhyxrHQlDFL7CpqQmFmVWdk+W6lIerulL0MgtQ6grcQmMhx7KuB 1zm1lYjkcHtqiYDZMRVU5VYo/JDZLXYQrLS3NOhe9H+9WfkzA4/OxzM6pWEukdFc psLix3e+EBJVIQrD+gvJhdHZT/XoLyTk -----END CERTIFICATE-----Generated at Tue Jul 1 11:24:25 2025 by rpki-client