$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: aSUmOvGtlRhMuotnAE4qVOJOzIOEkJIk9q0TAoP4Dmg= Subject key identifier: BD:55:D8:79:16:24:79:DF:A6:D5:62:4C:0B:83:5F:1F:D4:D0:83:FA Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 1A02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19C3 Signing time: Wed 02 Jul 2025 16:31:07 +0000 Manifest this update: Wed 02 Jul 2025 16:31:07 +0000 Manifest next update: Wed 09 Jul 2025 16:31:07 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: 9Js9l6BasTI3+QWySA9vFYms6aC1aT8s+ISG1jIiWRA=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6658 (0x1a02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: Jul 2 16:31:07 2025 GMT Not After : Jul 9 16:31:07 2025 GMT Subject: CN=68655ecb-9290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:72:5b:bc:54:a2:90:5f:08:ba:13:30:d2: 36:fe:b2:08:5d:7f:4d:2a:00:bb:f0:c2:a6:54:24: 58:41:77:07:20:e1:84:de:5b:35:66:27:9d:96:40: c3:73:cd:be:f6:86:dc:c0:3a:65:c3:28:a1:7a:8f: a9:9a:64:2b:fb:15:3f:fa:70:2d:ae:df:ce:6b:28: ae:b7:e0:07:46:5c:85:ec:25:d8:d0:cb:a5:e8:bd: 33:30:25:8f:df:56:15:ac:00:60:b1:d6:4d:d2:3e: e5:30:17:43:3e:16:76:18:d6:ac:b8:ed:66:5f:b1: 0b:46:4f:5c:ad:79:32:3e:8b:71:ba:2c:d1:e1:a5: c8:b0:da:7d:7b:65:2c:00:c5:59:a9:51:19:f4:97: 7d:eb:fc:42:5e:2d:23:e9:30:75:28:db:c6:7a:31: f1:07:f9:ac:f8:36:b2:18:ba:85:56:e6:93:3d:e7: bb:8b:7f:48:30:45:3c:af:bb:11:78:4f:81:89:7b: f4:5f:b9:4d:05:70:e9:4b:d7:10:fd:0d:04:60:5c: cc:94:8b:ea:06:dd:dc:43:5f:98:5d:e1:93:17:65: 7a:4b:fb:ed:46:aa:9d:5f:e0:30:4a:48:51:38:fd: 26:6a:43:80:e6:a0:ef:d7:7d:5e:68:09:53:6c:9b: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:55:D8:79:16:24:79:DF:A6:D5:62:4C:0B:83:5F:1F:D4:D0:83:FA X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:b1:50:85:fa:da:73:c1:56:3a:ba:dd:8d:c7:a2:2d:6d: f5:d5:f3:e7:15:ef:99:10:07:87:5e:cd:ef:f3:5d:4c:b6:8b: 00:26:cf:c9:e2:be:6e:36:fa:9d:3f:0c:60:58:73:77:c9:af: ac:58:e8:12:17:38:c8:b0:cf:15:94:1c:1b:df:c6:82:d4:c4: 3f:42:69:b1:4f:c5:15:1a:57:cb:24:d7:b1:ba:42:28:19:cc: a6:5e:29:1f:f2:c5:74:11:3e:0b:95:09:b4:d3:6d:68:e2:01: 05:d5:ac:ac:80:7a:91:c3:81:13:5d:0e:71:b7:d8:32:00:37: 2f:21:76:a5:e8:84:42:d6:47:17:02:d5:00:d4:7d:63:86:66: 99:3f:30:65:c4:05:97:7b:35:7b:f0:f2:e5:c4:ad:6c:be:eb: 30:0b:21:3c:c0:ce:fe:eb:3d:5d:8c:db:97:a6:86:3c:05:e2: d3:bf:d0:2c:08:c2:74:eb:ec:c8:85:36:1f:0b:f2:61:ac:11: 40:bd:6c:8b:ef:3c:3a:08:90:16:8a:4f:19:c0:53:7b:dc:e6: 95:33:07:6f:ba:db:fa:f9:03:02:77:78:42:34:5b:62:f6:5e: cb:49:89:3f:16:9b:07:48:fb:c5:14:bc:5f:b0:7c:0e:54:75: 3f:7a:8f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUwNzAyMTYzMTA3WhcNMjUwNzA5MTYzMTA3WjAYMRYwFAYD VQQDEw02ODY1NWVjYi05MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28FyW7xUopBfCLoTMNI2/rIIXX9NKgC78MKmVCRYQXcHIOGE3ls1ZiedlkDD c82+9obcwDplwyiheo+pmmQr+xU/+nAtrt/Oayiut+AHRlyF7CXY0Mul6L0zMCWP 31YVrABgsdZN0j7lMBdDPhZ2GNasuO1mX7ELRk9crXkyPotxuizR4aXIsNp9e2Us AMVZqVEZ9Jd96/xCXi0j6TB1KNvGejHxB/ms+DayGLqFVuaTPee7i39IMEU8r7sR eE+BiXv0X7lNBXDpS9cQ/Q0EYFzMlIvqBt3cQ1+YXeGTF2V6S/vtRqqdX+AwSkhR OP0makOA5qDv131eaAlTbJuM2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1V2HkW JHnfptViTAuDXx/U0IP6MB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzg7FQhfrac8FWOrrdjceiLW311fPnFe+ZEAeHXs3v811MtosAJs/J 4r5uNvqdPwxgWHN3ya+sWOgSFzjIsM8VlBwb38aC1MQ/QmmxT8UVGlfLJNexukIo GcymXikf8sV0ET4LlQm0021o4gEF1aysgHqRw4ETXQ5xt9gyADcvIXal6IRC1kcX AtUA1H1jhmaZPzBlxAWXezV78PLlxK1svuswCyE8wM7+6z1djNuXpoY8BeLTv9As CMJ06+zIhTYfC/JhrBFAvWyL7zw6CJAWik8ZwFN73OaVMwdvutv6+QMCd3hCNFti 9l7LSYk/FpsHSPvFFLxfsHwOVHU/eo9y -----END CERTIFICATE-----Generated at Thu Jul 3 12:29:11 2025 by rpki-client