$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: RnP/mcB7/UqpNSdRU6OdWp+PSVgRCBUWAp48Qk/NqyU= Subject key identifier: C0:03:EB:AB:35:4E:5D:E2:F5:C3:10:95:EC:DF:5B:D1:51:AF:80:FC Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04D2 Signing time: Sat 28 Jun 2025 23:21:53 +0000 Manifest this update: Sat 28 Jun 2025 23:21:52 +0000 Manifest next update: Sat 05 Jul 2025 23:21:52 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: ZoRccf0ZOsZoD7F9bz/8stLAXxQ+GW0dszfQkhbycfI=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Jun 28 23:21:52 2025 GMT Not After : Jul 5 23:21:52 2025 GMT Subject: CN=68607911-ec1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:6b:28:0c:75:fd:ca:89:0b:5c:78:cb:29: 45:64:c4:fe:6d:c5:2a:fe:03:5d:9c:b8:56:b5:ba: d9:9c:a8:2e:c1:7a:7b:ac:1d:9e:6d:2e:49:b4:6e: 9f:9b:97:b7:fa:47:c0:8e:e6:77:49:e0:b5:a0:c0: 79:44:25:cc:3d:a5:d4:10:0e:17:2a:6d:dc:41:1f: b0:23:ad:b9:f3:48:f9:c6:0a:a5:72:76:5e:80:6e: e6:fb:d2:ed:25:4f:e7:a3:7d:6a:7d:59:4e:e9:2f: 0c:6c:83:a4:2b:14:a5:92:6d:bc:91:56:0f:58:e2: 11:57:38:98:88:2b:ba:80:bf:31:32:83:de:ba:ef: a8:e1:69:d5:aa:1a:d5:e2:c1:f9:e7:d8:5e:e6:0d: ff:2f:44:13:cc:a6:7b:8c:38:4d:84:a3:04:f8:94: e3:ec:79:a2:b4:b0:8a:20:dc:1e:53:f4:89:a1:30: 34:7e:c0:ec:66:1b:ea:69:66:ed:cb:9b:fe:b0:c5: 22:d2:8a:e2:22:f5:6b:54:24:b7:47:4c:c1:49:9c: 73:0f:7e:ac:4d:18:e0:02:9f:3c:0e:fe:7f:3a:38: 3d:ab:41:5d:97:69:c4:12:d9:43:bc:2b:5b:fa:e2: c8:e4:26:f2:b3:3e:6c:d9:40:5a:d9:5a:59:ad:8c: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:03:EB:AB:35:4E:5D:E2:F5:C3:10:95:EC:DF:5B:D1:51:AF:80:FC X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d0:0e:88:50:ee:dc:56:5d:11:e2:a2:96:07:5e:45:cd:28: 9e:ca:a4:f3:cf:c7:07:11:0d:62:fe:0d:1f:c6:d3:b6:55:e9: 5f:25:aa:61:47:04:3c:dd:f3:dd:e7:9b:1c:e3:ae:e1:4d:e4: 27:39:c2:ce:37:33:da:c1:7c:39:ac:91:85:22:ee:d3:43:8b: c0:a7:9e:6b:84:cf:ed:03:c8:c7:c1:7c:45:d7:de:db:f1:78: 12:f1:22:88:ef:31:ac:54:b5:2f:a9:0a:e8:36:bb:ad:1a:02: ad:12:4b:c2:11:62:e2:a9:b0:05:82:6a:d9:ef:e3:aa:b5:86: 29:38:ed:38:b2:1f:ca:f8:07:4c:39:45:31:03:18:66:77:c0: 07:3c:dc:65:19:09:67:a5:cf:31:e0:bb:08:b0:93:15:49:ff: e9:86:f1:74:bd:73:c1:05:08:5c:7e:6e:0f:35:e9:7d:5d:df: e4:6b:f7:68:bf:19:40:f5:1a:d0:f0:9f:c0:59:fd:64:19:29: 55:b6:e0:bc:df:af:14:57:28:86:47:90:b3:37:45:6f:cf:3d: c2:da:f9:92:d3:3a:a8:02:bd:47:cc:7c:24:b6:92:5e:3b:cf: e5:54:3c:36:81:a6:ae:3a:d1:e4:d3:19:fa:60:b0:ac:d3:c9: 56:70:98:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwNjI4MjMyMTUyWhcNMjUwNzA1MjMyMTUyWjAYMRYwFAYD VQQDEw02ODYwNzkxMS1lYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsClrKAx1/cqJC1x4yylFZMT+bcUq/gNdnLhWtbrZnKguwXp7rB2ebS5JtG6f m5e3+kfAjuZ3SeC1oMB5RCXMPaXUEA4XKm3cQR+wI62580j5xgqlcnZegG7m+9Lt JU/no31qfVlO6S8MbIOkKxSlkm28kVYPWOIRVziYiCu6gL8xMoPeuu+o4WnVqhrV 4sH559he5g3/L0QTzKZ7jDhNhKME+JTj7HmitLCKINweU/SJoTA0fsDsZhvqaWbt y5v+sMUi0oriIvVrVCS3R0zBSZxzD36sTRjgAp88Dv5/Ojg9q0Fdl2nEEtlDvCtb +uLI5Cbysz5s2UBa2VpZrYyHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAD66s1 Tl3i9cMQlezfW9FRr4D8MB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0A6IUO7cVl0R4qKWB15FzSieyqTzz8cHEQ1i/g0fxtO2VelfJaph RwQ83fPd55sc467hTeQnOcLONzPawXw5rJGFIu7TQ4vAp55rhM/tA8jHwXxF197b 8XgS8SKI7zGsVLUvqQroNrutGgKtEkvCEWLiqbAFgmrZ7+OqtYYpOO04sh/K+AdM OUUxAxhmd8AHPNxlGQlnpc8x4LsIsJMVSf/phvF0vXPBBQhcfm4PNel9Xd/ka/do vxlA9RrQ8J/AWf1kGSlVtuC8368UVyiGR5CzN0Vvzz3C2vmS0zqoAr1HzHwktpJe O8/lVDw2gaauOtHk0xn6YLCs08lWcJgw -----END CERTIFICATE-----Generated at Mon Jun 30 05:40:44 2025 by rpki-client