$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json) Hash identifier: N4CXgf0sl7rDUaF4+rKaJmCgNSJyNEdrpLDUS+0IqME= Subject key identifier: B5:39:52:2B:29:DB:80:C6:A0:AF:BD:90:9D:4A:BB:C7:7F:B5:E0:A7 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 10A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft Manifest number: 1087 Signing time: Mon 30 Jun 2025 17:32:58 +0000 Manifest this update: Mon 30 Jun 2025 17:32:58 +0000 Manifest next update: Mon 07 Jul 2025 17:32:58 +0000 Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: HziA4Kar6anhCv5lj6ci36He8jRg1fk+0A+rGVnkOks=) 2: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: 3gmCEFiYlMlievK4CwoMawO55eg7L6f6YvnH2KxpTBg=) 3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: x/lWlD9SNRm3Ra3Juz0ScqnsIpd3eUHkeQs8wFQ7pns=) 4: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: iuD1AmPPjauf4FdFiWRN/+tIFnT8RVbtSKHxTeRsXmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4256 (0x10a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Jun 30 17:32:58 2025 GMT Not After : Jul 7 17:32:58 2025 GMT Subject: CN=6862ca4a-24b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:18:38:c8:ee:a1:96:c1:a5:ba:37:c3:b4: 4e:f7:db:70:ac:5c:82:bf:be:a4:c7:32:13:e1:79: 9c:52:90:27:df:d6:a5:de:3d:ab:36:a7:aa:c6:24: 5e:b8:5e:2c:60:38:ad:34:d0:8f:17:68:83:1b:ad: 9a:71:98:dc:59:e0:c5:d8:f2:91:cd:b2:86:6e:6d: e1:e4:43:e2:7f:e3:c7:f3:e3:73:0f:1b:ec:85:67: 1c:8f:11:ba:dc:3f:b4:d3:97:0f:66:4e:dc:12:7d: 6f:11:7e:90:67:f2:a3:a5:41:a2:ab:6d:e3:15:00: 68:51:09:2e:a9:58:47:75:f4:da:c1:6d:32:ac:60: ed:40:f0:f3:42:49:de:e4:d9:45:5c:aa:e9:01:cf: 29:57:f4:7f:e2:0e:ef:84:3f:b4:be:b8:88:49:09: a8:cc:1d:ed:79:f5:fd:39:4e:74:d6:f0:1d:82:59: 3c:2c:09:80:72:89:64:89:3b:00:dd:94:fc:19:b1: c1:87:f5:b1:de:b3:96:52:67:37:07:03:03:46:30: fa:9d:37:58:bb:26:bc:76:94:db:29:92:f8:f4:a8: c5:b3:f0:1a:52:34:2d:ac:32:fd:a2:98:78:fc:a5: 69:8f:1e:86:c7:72:b8:74:52:23:09:d3:0a:44:fe: 38:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:39:52:2B:29:DB:80:C6:A0:AF:BD:90:9D:4A:BB:C7:7F:B5:E0:A7 X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f4:85:60:fc:bf:dd:01:3d:34:7c:20:05:98:e4:9b:90:71: f3:71:92:cb:e0:d5:7a:9a:6f:c3:ca:da:34:b2:c5:ae:3a:14: 18:4c:4e:46:3c:06:1b:88:5e:a8:80:25:dd:33:59:3c:6b:51: c3:b4:40:91:f1:cd:e2:d0:a2:0a:8f:b1:4e:7a:36:b4:d8:ad: 39:ee:51:2e:da:cf:d8:0b:5a:d0:89:02:0f:4d:49:89:9f:c5: ac:e4:87:d8:d6:fa:86:05:fe:bd:d6:7b:d5:91:c9:be:b3:63: 14:56:b5:83:94:e6:c4:9f:4f:fc:dd:57:cb:8d:81:5d:11:02: e6:6e:01:54:5f:fe:c6:78:21:3b:4f:39:78:48:fb:37:59:d5: 81:18:da:b9:e2:df:4d:d9:d4:1e:fc:e4:0e:44:9c:aa:08:9d: dc:19:f0:a5:fc:56:6f:96:26:95:c1:38:cc:74:a4:9a:d7:97: c2:51:ea:6c:06:a7:fe:19:b8:b7:b1:38:6a:95:b8:58:a1:79: d6:09:d3:ef:d6:74:16:d5:fa:38:05:e8:5e:9c:fa:0e:b3:7c: 5e:f0:6d:dc:e4:c4:f7:51:df:ca:7a:a4:97:0f:19:d4:7c:78: a5:4e:e5:6e:be:a7:ac:ec:40:50:3f:83:69:da:a4:ed:3b:13: a5:3c:aa:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwNjMwMTczMjU4WhcNMjUwNzA3MTczMjU4WjAYMRYwFAYD VQQDEw02ODYyY2E0YS0yNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/AYOMjuoZbBpbo3w7RO99twrFyCv76kxzIT4XmcUpAn39al3j2rNqeqxiRe uF4sYDitNNCPF2iDG62acZjcWeDF2PKRzbKGbm3h5EPif+PH8+NzDxvshWccjxG6 3D+005cPZk7cEn1vEX6QZ/KjpUGiq23jFQBoUQkuqVhHdfTawW0yrGDtQPDzQkne 5NlFXKrpAc8pV/R/4g7vhD+0vriISQmozB3tefX9OU501vAdglk8LAmAcolkiTsA 3ZT8GbHBh/Wx3rOWUmc3BwMDRjD6nTdYuya8dpTbKZL49KjFs/AaUjQtrDL9oph4 /KVpjx6Gx3K4dFIjCdMKRP44rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU5Uisp 24DGoK+9kJ1Ku8d/teCnMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUNFOS82Q0JCODRGNDMxRjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJO MHVkZ05MN0wwMnFJSERlSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD9IVg/L/dAT00fCAFmOSbkHHzcZLL4NV6mm/Dyto0ssWuOhQYTE5G PAYbiF6ogCXdM1k8a1HDtECR8c3i0KIKj7FOeja02K057lEu2s/YC1rQiQIPTUmJ n8Ws5IfY1vqGBf691nvVkcm+s2MUVrWDlObEn0/83VfLjYFdEQLmbgFUX/7GeCE7 Tzl4SPs3WdWBGNq54t9N2dQe/OQORJyqCJ3cGfCl/FZvliaVwTjMdKSa15fCUeps Bqf+Gbi3sThqlbhYoXnWCdPv1nQW1fo4BehenPoOs3xe8G3c5MT3Ud/KeqSXDxnU fHilTuVuvqes7EBQP4Np2qTtOxOlPKp2 -----END CERTIFICATE-----Generated at Wed Jul 2 07:05:20 2025 by rpki-client