$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json) Hash identifier: yK8HWIjzexeQ/LQjPFlv90jQsV+I6yznUt0NMRzRooQ= Subject key identifier: C8:A6:F9:FC:AD:99:BB:65:E0:54:43:DF:80:59:1A:D8:9E:18:FC:BE Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft Manifest number: 0115 Signing time: Thu 03 Jul 2025 05:01:22 +0000 Manifest this update: Thu 03 Jul 2025 05:01:22 +0000 Manifest next update: Thu 10 Jul 2025 05:01:22 +0000 Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: Swcf/8nBtNO9BigEOr8pnRZNFzw/f97dWTyshkAsBSg=) 2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: ZtCY4of0oNZSmT+bU0NNMOI3a0wB7P9BZQfRH7MJK3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Validity Not Before: Jul 3 05:01:22 2025 GMT Not After : Jul 10 05:01:22 2025 GMT Subject: CN=68660ea2-69e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:ee:c2:93:cb:2a:0a:d4:72:96:75:c5:f1: 3a:14:e1:c5:e6:71:0f:3c:7c:93:c6:25:08:19:12: 8a:d0:cd:73:88:79:79:cf:60:52:00:c9:7a:5e:46: 56:ec:82:b6:41:a7:ff:05:4b:e7:f3:2e:e4:bc:c4: 5c:67:ac:a6:a7:42:7c:de:d7:5c:f5:85:63:2c:38: e4:8f:92:23:20:81:40:fe:e6:58:b2:a2:73:0d:3a: 48:b7:13:e9:f6:4a:43:8e:c5:05:77:ce:5d:d6:af: b4:67:6e:e0:0e:26:11:5c:81:e4:08:24:f3:aa:6f: 2d:6f:ae:e7:e1:91:5c:82:83:ff:c0:41:1c:29:5a: b4:80:0d:fa:95:18:79:36:11:14:a3:c4:85:23:28: 3e:87:33:74:a6:c1:43:ac:5a:d1:97:bf:8a:79:f0: 77:4a:f9:44:da:54:a4:83:19:c5:af:c2:46:fd:2d: 26:1c:6c:6a:f3:4b:ae:63:0e:dc:93:2e:11:89:20: dc:4d:78:2a:ba:f7:d9:9c:6f:ba:1e:71:1b:65:71: 4e:4f:00:7d:c7:64:6a:f3:eb:d7:79:fa:fe:4e:14: 67:ef:2b:66:48:22:ba:2f:e1:fa:1a:b1:e7:a5:72: 30:79:81:0f:62:f6:4e:97:ab:66:e6:b1:62:08:7b: 86:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A6:F9:FC:AD:99:BB:65:E0:54:43:DF:80:59:1A:D8:9E:18:FC:BE X509v3 Authority Key Identifier: keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:24:ed:97:4e:c0:d7:d5:5e:df:40:7e:f2:b3:dc:de:8b:8f: e2:9e:a2:f0:5d:7d:3e:ff:e1:04:77:19:03:74:9a:ce:17:67: 4f:26:88:a3:9b:e2:9b:b8:d5:d6:93:1d:da:11:19:1b:c5:5c: 6f:74:d3:64:e2:b2:09:0e:4d:4f:c7:15:f3:f8:ef:42:59:09: d0:0c:2a:a7:be:ac:8f:7e:f9:95:31:92:98:30:1a:74:7d:d1: 1e:d9:13:a5:39:33:b0:46:31:4d:7c:16:38:47:1b:ba:8e:74: 82:87:bd:93:e0:26:da:4c:37:9e:79:cf:da:46:03:9d:45:e6: ec:18:15:b2:da:ff:ab:28:7b:a6:cc:f3:75:8d:81:ca:e2:91: b0:36:69:e7:9c:e9:c6:f6:9e:0a:89:43:3c:ea:bd:cc:69:ed: 99:58:96:c4:0f:27:a9:ce:6c:0c:1c:bf:01:80:e8:7e:89:f0: 0e:01:d2:32:3e:10:ec:06:a8:f7:a0:bd:76:fe:f1:10:5d:81: 8b:1e:f5:85:96:ee:81:33:bb:77:bd:7e:24:55:c7:1a:ff:94: 1c:fc:87:27:f7:dc:5f:ea:f5:a4:a4:3a:81:c0:f4:3b:b3:54: 24:8d:8c:77:15:51:07:5d:92:32:be:23:d7:f7:ac:de:bf:4e: 35:d4:bf:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYyOTYxMTAvBgNVBAUTKDVGREJENURGNTMyRDJDNTYyMDZGN0IxMTJFN0JCQjMw NTdBMzk5OTAwHhcNMjUwNzAzMDUwMTIyWhcNMjUwNzEwMDUwMTIyWjAYMRYwFAYD VQQDEw02ODY2MGVhMi02OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDfuwpPLKgrUcpZ1xfE6FOHF5nEPPHyTxiUIGRKK0M1ziHl5z2BSAMl6XkZW 7IK2Qaf/BUvn8y7kvMRcZ6ymp0J83tdc9YVjLDjkj5IjIIFA/uZYsqJzDTpItxPp 9kpDjsUFd85d1q+0Z27gDiYRXIHkCCTzqm8tb67n4ZFcgoP/wEEcKVq0gA36lRh5 NhEUo8SFIyg+hzN0psFDrFrRl7+KefB3SvlE2lSkgxnFr8JG/S0mHGxq80uuYw7c ky4RiSDcTXgquvfZnG+6HnEbZXFOTwB9x2Rq8+vXefr+ThRn7ytmSCK6L+H6GrHn pXIweYEPYvZOl6tm5rFiCHuGJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMim+fyt mbtl4FRD34BZGtieGPy+MB8GA1UdIwQYMBaAFF/b1d9TLSxWIG97ES57uzBXo5mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI5Ni80MkEwQjcxQUFG NUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExGWWdiM3NSTG51N01GZWpt WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1aQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjI5Ni80MkEwQjcxQUFGNUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExG WWdiM3NSTG51N01GZWptWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMJO2XTsDX1V7fQH7ys9zei4/inqLwXX0+/+EEdxkDdJrOF2dPJoij m+KbuNXWkx3aERkbxVxvdNNk4rIJDk1PxxXz+O9CWQnQDCqnvqyPfvmVMZKYMBp0 fdEe2ROlOTOwRjFNfBY4Rxu6jnSCh72T4CbaTDeeec/aRgOdRebsGBWy2v+rKHum zPN1jYHK4pGwNmnnnOnG9p4KiUM86r3Mae2ZWJbEDyepzmwMHL8BgOh+ifAOAdIy PhDsBqj3oL12/vEQXYGLHvWFlu6BM7t3vX4kVcca/5Qc/Icn99xf6vWkpDqBwPQ7 s1QkjYx3FVEHXZIyviPX96zev0411L8R -----END CERTIFICATE-----Generated at Fri Jul 4 19:34:15 2025 by rpki-client