$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: Ufjtwy/dUBG0wQ96fzzFWpiljPjjQvSkWidLIFDuZPk= Subject key identifier: 19:D8:CA:E2:F4:6E:70:9D:46:90:ED:21:D7:75:8F:02:5F:52:5E:E3 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 0117 Signing time: Tue 01 Jul 2025 05:17:37 +0000 Manifest this update: Tue 01 Jul 2025 05:17:37 +0000 Manifest next update: Tue 08 Jul 2025 05:17:37 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: g3s+7nslehaqOD6kh7zS2ym/Zg3fgnC40HJn4UWBaSQ=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Jul 1 05:17:37 2025 GMT Not After : Jul 8 05:17:37 2025 GMT Subject: CN=68636f71-3c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:cc:c4:63:53:ad:61:d6:c5:ea:58:f2:6b: c0:4c:45:a3:2e:c3:b8:9e:41:af:13:e5:a5:75:c6: ad:18:b2:ef:46:75:66:e2:f6:ec:95:7d:60:f4:84: a2:13:54:35:70:8a:b0:89:cf:ca:60:6d:f0:10:42: 60:c0:a9:a3:cd:4b:a9:d9:54:27:4a:bd:ae:90:f4: ca:65:9c:22:df:2b:5f:2e:26:d6:cd:4e:94:13:f5: 2c:ef:1e:6a:a8:a8:40:9c:41:fc:f1:57:67:00:88: d0:d1:18:76:27:44:1b:37:fa:0a:93:7a:33:20:cf: 37:52:13:e5:a9:93:2f:2d:e0:5a:b9:8b:76:5f:db: fc:ef:82:a3:d1:30:4b:1a:ba:c8:f4:6e:fa:69:b4: c6:00:b0:db:96:36:6b:9d:d4:13:2b:2c:29:c7:33: e6:fa:06:c6:5c:1b:93:87:bb:3a:0f:25:5a:16:98: bc:1f:50:d9:e6:78:2f:c3:e7:36:74:e3:fb:7f:8f: e1:0d:ac:7e:aa:e0:3b:bc:d0:64:46:fb:60:3a:e9: 5d:d5:c1:72:88:ad:35:b9:5a:cd:6b:35:b6:8c:51: 2d:a5:c8:61:c8:00:df:40:19:25:4b:65:a1:8c:af: 2d:b6:7f:c9:30:7a:f8:a0:b0:0b:18:65:b6:85:a3: db:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:CA:E2:F4:6E:70:9D:46:90:ED:21:D7:75:8F:02:5F:52:5E:E3 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:43:69:e3:92:db:47:7c:62:b2:94:e5:1e:16:70:4d:0e:7a: 01:21:44:dc:0b:a4:fe:5d:82:5c:19:0a:15:ef:c8:2f:a7:57: 91:50:ab:3f:76:94:50:87:c7:83:03:7f:cc:14:2a:e7:6b:52: fb:dd:e9:81:52:3e:c2:ae:e7:43:69:06:a4:83:55:7a:30:42: d0:79:93:57:8f:24:98:0f:29:ff:2a:2e:c1:83:47:89:60:24: e7:f6:78:ab:df:48:76:63:9f:20:37:93:64:da:57:cb:d8:83: 61:95:42:e4:48:5e:59:e8:c4:98:76:24:44:c8:fd:3e:85:af: ca:f4:b3:2f:a1:89:a7:9c:fe:c2:94:8f:ef:b2:f2:d8:75:cc: 5b:6b:c1:b2:2d:69:37:2e:77:cf:02:af:7f:d3:55:db:92:34: 27:e5:aa:05:a5:3e:57:98:59:cf:61:06:e9:f4:8a:4b:28:30: 29:a3:69:e8:cd:01:f5:2c:9e:9a:e3:87:99:b4:58:ea:24:1b: ae:76:68:bf:d3:82:59:e6:8b:4c:aa:ee:f9:64:63:da:bb:9e: 2c:08:55:80:13:45:a0:74:f0:51:eb:71:3d:a2:9c:e5:45:14: 8f:28:55:2d:4f:c1:60:e1:5f:92:04:a3:69:b2:42:ee:ca:10: 8a:bd:d4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjUwNzAxMDUxNzM3WhcNMjUwNzA4MDUxNzM3WjAYMRYwFAYD VQQDEw02ODYzNmY3MS0zYzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlqvMxGNTrWHWxepY8mvATEWjLsO4nkGvE+WldcatGLLvRnVm4vbslX1g9ISi E1Q1cIqwic/KYG3wEEJgwKmjzUup2VQnSr2ukPTKZZwi3ytfLibWzU6UE/Us7x5q qKhAnEH88VdnAIjQ0Rh2J0QbN/oKk3ozIM83UhPlqZMvLeBauYt2X9v874Kj0TBL GrrI9G76abTGALDbljZrndQTKywpxzPm+gbGXBuTh7s6DyVaFpi8H1DZ5ngvw+c2 dOP7f4/hDax+quA7vNBkRvtgOuld1cFyiK01uVrNazW2jFEtpchhyADfQBklS2Wh jK8ttn/JMHr4oLALGGW2haPbmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnYyuL0 bnCdRpDtIdd1jwJfUl7jMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCQ2njkttHfGKylOUeFnBNDnoBIUTcC6T+XYJcGQoV78gvp1eRUKs/ dpRQh8eDA3/MFCrna1L73emBUj7CrudDaQakg1V6MELQeZNXjySYDyn/Ki7Bg0eJ YCTn9nir30h2Y58gN5Nk2lfL2INhlULkSF5Z6MSYdiREyP0+ha/K9LMvoYmnnP7C lI/vsvLYdcxba8GyLWk3LnfPAq9/01XbkjQn5aoFpT5XmFnPYQbp9IpLKDApo2no zQH1LJ6a44eZtFjqJBuudmi/04JZ5otMqu75ZGPau54sCFWAE0WgdPBR63E9opzl RRSPKFUtT8Fg4V+SBKNpskLuyhCKvdRZ -----END CERTIFICATE-----Generated at Wed Jul 2 20:07:11 2025 by rpki-client