$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: zIYOL0XaVg3HEV1HsC1KZIl223/FyIbJ1W1QTeq7t3Q= Subject key identifier: 39:EF:A1:4F:D7:32:3E:FB:67:6B:88:1E:2C:8E:7D:EF:06:4A:7F:B4 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0F60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0F52 Signing time: Wed 02 Jul 2025 17:48:16 +0000 Manifest this update: Wed 02 Jul 2025 17:48:15 +0000 Manifest next update: Wed 09 Jul 2025 17:48:15 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: RkG6bBWxKr32ipYz6ZA7fTNItbchsJXNxUXQARtn+tM=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: Rwnl5e54mLk+LHSVaZTg2cOR8P1YS+fQ04gmO2RO2+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Jul 2 17:48:15 2025 GMT Not After : Jul 9 17:48:15 2025 GMT Subject: CN=686570e0-4669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:3c:87:1c:05:d9:9c:bf:9c:e1:60:fc:6d: 8a:c1:7a:fe:c7:ac:a8:5b:81:a8:9a:d0:98:13:37: c5:a0:0e:48:08:e0:7d:c4:ca:dd:cb:f8:b6:55:dc: 26:93:7b:b1:a8:ca:7b:58:3f:93:44:d1:b4:c3:dd: 28:80:db:7e:69:db:56:95:79:32:ca:35:0c:f2:bb: 03:34:ad:53:9b:b9:b7:28:97:4f:67:49:d5:fe:b0: 44:f7:cc:ca:98:05:3f:56:71:d3:8d:50:7d:64:35: 3d:d8:61:89:21:75:f9:28:33:17:be:2c:27:fb:77: 9a:a3:49:29:0c:c8:0a:91:0f:98:8d:2e:15:04:b4: 4f:a6:46:df:54:02:17:52:e0:38:00:05:c3:f9:af: 42:ed:9d:b0:79:df:25:9a:03:38:82:2a:e1:69:9a: 80:a1:43:fc:e4:2f:7d:0c:41:56:c7:54:11:d2:f3: 7f:e3:a7:b4:f9:21:f1:82:76:5b:c8:0a:c9:3b:38: 9e:6a:fc:87:a0:f6:9e:8d:be:21:5f:65:ef:e0:5f: 31:42:b4:03:ce:1b:81:7d:d9:55:d5:f1:33:99:93: aa:33:94:26:6a:90:2c:e3:1c:6b:1f:bb:da:53:b9: 7d:70:67:83:d8:4a:35:03:ef:ff:03:9f:8a:7f:c0: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:A1:4F:D7:32:3E:FB:67:6B:88:1E:2C:8E:7D:EF:06:4A:7F:B4 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ee:ab:f1:c7:b7:f3:d7:0e:e7:a0:92:c0:15:9c:37:ea:a0: ff:83:d7:1a:c9:81:f2:8c:6d:12:c6:c3:36:ae:11:60:98:ba: 4c:99:57:06:e3:f4:b0:f6:f8:1d:55:e7:a5:f2:de:24:8a:01: 5d:61:59:cd:82:97:63:ae:62:dd:0a:68:5e:22:ac:e6:4e:f0: 0f:60:58:e4:9e:0e:6e:4d:6d:bf:94:88:ab:14:92:3b:48:ea: 6d:03:84:64:f8:99:1c:4f:c7:a9:12:65:df:d5:ab:10:a0:ea: 4c:6f:ac:6c:ef:d4:6d:1f:54:a6:e3:68:dd:63:33:8b:82:ee: 4c:fd:f4:ee:f0:a6:9b:06:23:2a:a4:86:94:09:38:9f:e0:a3: 00:8f:d9:74:33:3c:95:8e:f7:f7:74:4d:c8:ec:0a:44:ed:80: 4e:8d:23:65:b0:e0:ab:5a:de:b3:87:c4:cf:ef:51:64:ed:33: 6b:5c:d0:b0:9e:10:4a:3e:01:dd:54:c4:3d:ae:e9:5c:1c:ba: 2a:50:81:08:10:52:c3:92:a5:08:f7:2a:c7:ff:9d:77:94:6f: 6f:2a:3c:8b:9f:a4:fc:98:ff:8d:aa:30:69:77:13:de:5c:3a: 32:5c:02:6a:d3:8d:cb:cf:ab:b0:69:9c:a4:19:b5:fd:54:d7: fd:67:68:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUwNzAyMTc0ODE1WhcNMjUwNzA5MTc0ODE1WjAYMRYwFAYD VQQDEw02ODY1NzBlMC00NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Us8hxwF2Zy/nOFg/G2KwXr+x6yoW4GomtCYEzfFoA5ICOB9xMrdy/i2Vdwm k3uxqMp7WD+TRNG0w90ogNt+adtWlXkyyjUM8rsDNK1Tm7m3KJdPZ0nV/rBE98zK mAU/VnHTjVB9ZDU92GGJIXX5KDMXviwn+3eao0kpDMgKkQ+YjS4VBLRPpkbfVAIX UuA4AAXD+a9C7Z2wed8lmgM4girhaZqAoUP85C99DEFWx1QR0vN/46e0+SHxgnZb yArJOzieavyHoPaejb4hX2Xv4F8xQrQDzhuBfdlV1fEzmZOqM5QmapAs4xxrH7va U7l9cGeD2Eo1A+//A5+Kf8DxMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnvoU/X Mj77Z2uIHiyOfe8GSn+0MB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf7qvxx7fz1w7noJLAFZw36qD/g9cayYHyjG0SxsM2rhFgmLpMmVcG 4/Sw9vgdVeel8t4kigFdYVnNgpdjrmLdCmheIqzmTvAPYFjkng5uTW2/lIirFJI7 SOptA4Rk+JkcT8epEmXf1asQoOpMb6xs79RtH1Sm42jdYzOLgu5M/fTu8KabBiMq pIaUCTif4KMAj9l0MzyVjvf3dE3I7ApE7YBOjSNlsOCrWt6zh8TP71Fk7TNrXNCw nhBKPgHdVMQ9rulcHLoqUIEIEFLDkqUI9yrH/513lG9vKjyLn6T8mP+NqjBpdxPe XDoyXAJq043Lz6uwaZykGbX9VNf9Z2ha -----END CERTIFICATE-----Generated at Thu Jul 3 19:11:51 2025 by rpki-client