$ rpki-client -vvf rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft File: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft (raw, json) Hash identifier: H3OJm/km4jusH856n9o2jCG4lYsCrWl7/b6ufQI2mcA= Subject key identifier: 30:3D:68:75:BE:DA:3B:37:ED:50:38:97:DD:7D:5B:D0:33:E5:C5:EC Authority key identifier: 6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB Certificate issuer: /CN=A9196172/serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB Certificate serial: 1145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft Manifest number: 1135 Signing time: Wed 02 Jul 2025 17:27:28 +0000 Manifest this update: Wed 02 Jul 2025 17:27:28 +0000 Manifest next update: Wed 09 Jul 2025 17:27:28 +0000 Files and hashes: 1: bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl (hash: ppjzm5gkC2ZxWVoRJckyiRRpCvZoimE7kesi0vVl7Wk=) 2: 2D9B5B380F1D11E991F4271EC4F9AE02.roa (hash: 28+4DGnpX6Ji2cYmKm+1uSknOVpH5kmdClZ3WCtYgVk=) 3: 2CE73CF20F1D11E991F4271EC4F9AE02.roa (hash: oY1WXZVko8XjgFNGHLeULp2ndsYGuRPLSE4EMHTqlSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4421 (0x1145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196172, serialNumber=6C3A7E02ACBB73A6635BDAFE022D785D00C447DB Validity Not Before: Jul 2 17:27:28 2025 GMT Not After : Jul 9 17:27:28 2025 GMT Subject: CN=68656c00-d8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:9e:f7:e8:82:e9:ac:da:35:29:41:0c:aa: 8a:0c:68:59:4a:e2:ae:93:12:ac:bf:6f:97:e3:ab: 33:5b:43:a9:bb:5f:1c:ab:5b:c9:8e:70:bc:4a:d3: 1e:22:9b:a7:45:d2:81:1e:ae:41:bf:3a:1b:c6:ea: b7:cd:92:1b:69:f1:e7:67:e2:de:dd:0c:76:22:b6: af:df:b0:aa:25:21:f7:67:74:9e:52:1f:dc:86:28: 89:6c:fd:e0:86:bb:c9:d2:d4:80:81:e5:78:cc:61: b5:87:19:0d:45:9b:8f:29:b3:9e:82:8a:e4:64:90: 5a:98:98:e8:51:88:28:15:16:62:f0:4f:d1:55:7f: ad:f1:47:50:ca:9c:17:84:cf:dc:9f:eb:a7:77:e2: 4b:1c:37:cd:e6:c5:28:ff:69:a0:2c:65:93:9e:6d: 2c:ca:30:dd:8f:a1:c1:47:cc:63:f3:36:36:8f:67: 98:86:38:6f:0c:77:d4:eb:5f:45:52:0a:b7:a0:e9: 55:9a:d6:6d:c3:d1:b5:0b:a5:bf:60:0e:51:b5:8d: bb:2e:c8:a8:df:86:e9:69:86:e9:dd:36:de:00:ab: e6:05:7a:9e:17:9d:7f:b5:6e:a3:25:ad:7b:41:b5: 3a:88:8f:42:df:2a:08:7d:5a:f3:d0:1a:d8:f2:24: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:68:75:BE:DA:3B:37:ED:50:38:97:DD:7D:5B:D0:33:E5:C5:EC X509v3 Authority Key Identifier: keyid:6C:3A:7E:02:AC:BB:73:A6:63:5B:DA:FE:02:2D:78:5D:00:C4:47:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196172/E867CB100F1B11E9A5DBDB1BC4F9AE02/bDp-Aqy7c6ZjW9r-Ai14XQDER9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:5a:f4:6f:7d:22:0a:33:c2:2a:00:d6:d4:aa:5d:34:3d:dc: b2:25:29:49:9c:0c:c9:fb:68:55:44:45:c2:ca:ce:81:b0:61: 1c:79:e6:08:13:48:7d:a0:cc:c7:ba:35:5d:14:c2:f3:21:ee: 46:6d:36:3e:8f:bc:99:cb:ef:29:f4:82:3d:78:e2:8d:c3:31: 3f:e4:e1:70:5d:eb:39:75:8a:2c:59:19:00:0d:b8:b3:11:5f: b9:59:62:47:56:62:b9:f8:11:eb:56:7d:32:b0:6a:39:bf:ed: 3a:c0:6b:30:9c:e8:e4:4c:42:39:d7:16:e1:36:a8:96:82:67: 66:65:b9:b9:fc:00:3e:eb:02:ee:db:84:b5:e0:fe:73:b4:e0: 50:ca:83:67:9e:65:fd:ca:5b:b8:e2:1e:48:3f:54:2d:63:c5: 88:d3:c2:7d:8b:b1:bf:93:ef:f5:16:a7:fd:1c:8f:53:66:9b: 40:96:d7:3a:d9:de:fc:bc:e8:02:05:30:20:64:29:24:92:9d: 0d:5a:fe:a8:11:52:62:23:fa:56:0d:d7:09:2e:4a:7b:7d:79: 49:1d:56:cc:33:19:80:d8:e6:23:e9:e2:70:e8:b6:46:77:c4: 2e:fa:6b:bf:6d:0b:65:02:35:b1:45:e4:a7:2f:8d:96:d2:45: a9:8d:d9:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYxNzIxMTAvBgNVBAUTKDZDM0E3RTAyQUNCQjczQTY2MzVCREFGRTAyMkQ3ODVE MDBDNDQ3REIwHhcNMjUwNzAyMTcyNzI4WhcNMjUwNzA5MTcyNzI4WjAYMRYwFAYD VQQDEw02ODY1NmMwMC1kOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp46e9+iC6azaNSlBDKqKDGhZSuKukxKsv2+X46szW0Opu18cq1vJjnC8StMe IpunRdKBHq5Bvzobxuq3zZIbafHnZ+Le3Qx2Irav37CqJSH3Z3SeUh/chiiJbP3g hrvJ0tSAgeV4zGG1hxkNRZuPKbOegorkZJBamJjoUYgoFRZi8E/RVX+t8UdQypwX hM/cn+und+JLHDfN5sUo/2mgLGWTnm0syjDdj6HBR8xj8zY2j2eYhjhvDHfU619F Ugq3oOlVmtZtw9G1C6W/YA5RtY27Lsio34bpaYbp3TbeAKvmBXqeF51/tW6jJa17 QbU6iI9C3yoIfVrz0BrY8iSi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA9aHW+ 2js37VA4l919W9Az5cXsMB8GA1UdIwQYMBaAFGw6fgKsu3OmY1va/gIteF0AxEfb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjE3Mi9FODY3Q0IxMDBG MUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2WmpXOXItQWkxNFhRREVS OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEcC1BcXk3YzZaalc5ci1BaTE0WFFERVI5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjE3Mi9FODY3Q0IxMDBGMUIxMUU5QTVEQkRCMUJDNEY5QUUwMi9iRHAtQXF5N2M2 WmpXOXItQWkxNFhRREVSOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUWvRvfSIKM8IqANbUql00PdyyJSlJnAzJ+2hVREXCys6BsGEceeYI E0h9oMzHujVdFMLzIe5GbTY+j7yZy+8p9II9eOKNwzE/5OFwXes5dYosWRkADbiz EV+5WWJHVmK5+BHrVn0ysGo5v+06wGswnOjkTEI51xbhNqiWgmdmZbm5/AA+6wLu 24S14P5ztOBQyoNnnmX9ylu44h5IP1QtY8WI08J9i7G/k+/1Fqf9HI9TZptAltc6 2d78vOgCBTAgZCkkkp0NWv6oEVJiI/pWDdcJLkp7fXlJHVbMMxmA2OYj6eJw6LZG d8Qu+mu/bQtlAjWxReSnL42W0kWpjdkm -----END CERTIFICATE-----Generated at Wed Jul 2 23:27:04 2025 by rpki-client