$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: QeHhCmOyEMWncWRxeW/UOmaQwWJuYjh+J8rJAMKI8vg= Subject key identifier: F8:33:C1:94:F6:8C:FA:30:2E:96:77:E9:AF:25:3C:9F:A6:B1:A2:6C Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0C55 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C47 Signing time: Wed 02 Jul 2025 18:46:18 +0000 Manifest this update: Wed 02 Jul 2025 18:46:17 +0000 Manifest next update: Wed 09 Jul 2025 18:46:17 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: 9g/izmjukpFi8BUfpkZhL5BDXXPiw7w1SnBWPAn/5Is=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3157 (0xc55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Jul 2 18:46:17 2025 GMT Not After : Jul 9 18:46:17 2025 GMT Subject: CN=68657e79-3777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:f5:7e:e7:07:70:d2:46:d8:75:d0:e5:02: 0b:94:b7:17:36:9f:38:cc:fe:0e:72:37:98:5c:94: 3d:1a:49:61:53:fa:22:4c:cf:04:f1:37:96:8d:92: 45:98:55:d5:3d:2d:46:67:c3:18:df:ea:cf:c9:8b: 33:c6:8b:35:67:35:99:c3:b1:ef:97:74:c3:21:2d: d2:bb:d3:17:48:88:19:08:e2:ff:78:ae:2e:f5:ef: ac:df:49:65:ff:19:0e:5d:38:2b:14:53:b2:26:7b: 09:5b:47:7d:e9:1d:1b:41:84:ee:9c:97:7a:5c:8d: 35:e0:84:bf:5d:0c:da:9d:bc:70:c1:8c:12:22:2d: 8d:a4:9c:66:79:18:d6:f1:19:1a:f6:2d:1e:34:7c: 2e:0a:d9:52:7d:d9:47:a8:f6:99:78:2b:67:17:3f: 94:67:ae:76:3b:54:eb:8c:03:65:c3:cb:ac:b6:89: 4d:dd:97:8b:fd:0e:da:e4:53:b6:bb:c8:4a:08:b5: 4c:6e:c7:55:da:4c:0c:e4:dc:cb:05:eb:0d:90:3b: 1c:d4:05:27:13:36:30:7e:f6:09:20:27:43:d9:46: af:ab:76:b2:ef:2b:77:c2:43:84:3c:fc:b6:27:be: 3e:6a:ab:1f:4d:6e:ff:b7:26:ce:21:f3:ac:d9:08: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:C1:94:F6:8C:FA:30:2E:96:77:E9:AF:25:3C:9F:A6:B1:A2:6C X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:4e:d5:9a:70:80:2f:e2:60:3b:09:2c:72:55:4d:1d:fb: 46:d6:98:7a:82:c9:fb:7a:a6:a2:12:5f:2a:a7:10:1d:25:11: 15:18:d5:7f:34:f0:c6:67:ee:3f:c6:b5:10:32:4c:eb:42:c0: 96:e9:3a:fc:c8:3b:97:3b:d3:7c:6a:f1:af:44:06:60:fb:7e: d2:95:68:27:b2:48:a0:9d:58:f4:b4:1a:94:00:d8:d6:93:34: 52:39:e7:2d:f7:9f:cb:34:95:af:75:ea:3c:b8:0f:f2:93:5a: 57:d8:f0:02:17:9c:65:f1:f6:0a:72:7e:49:fa:dd:2a:64:e1: 6d:b6:bd:af:43:23:24:ff:9b:8f:21:0f:7b:c0:24:07:dd:7b: 2f:b5:5a:f0:b9:50:ba:50:49:9c:5d:8d:26:cb:f7:89:09:28: 2c:1e:a5:93:33:c4:e2:79:d6:c9:8f:7d:c6:02:05:9a:8f:c9: 90:51:fa:7d:15:00:9c:1e:1f:36:22:76:76:7e:0f:21:79:d2: 5c:30:12:fc:c8:2d:c4:4e:ae:b6:3e:7a:46:12:d0:5e:7d:e4: ce:44:19:4a:93:19:5e:6f:49:dd:9c:c8:07:0f:b1:0f:9c:aa: ce:63:28:33:e6:87:ee:cb:21:ba:74:68:f8:65:f4:1a:c1:dc: ac:2f:3b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUwNzAyMTg0NjE3WhcNMjUwNzA5MTg0NjE3WjAYMRYwFAYD VQQDEw02ODY1N2U3OS0zNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/P1fucHcNJG2HXQ5QILlLcXNp84zP4OcjeYXJQ9GklhU/oiTM8E8TeWjZJF mFXVPS1GZ8MY3+rPyYszxos1ZzWZw7Hvl3TDIS3Su9MXSIgZCOL/eK4u9e+s30ll /xkOXTgrFFOyJnsJW0d96R0bQYTunJd6XI014IS/XQzanbxwwYwSIi2NpJxmeRjW 8Rka9i0eNHwuCtlSfdlHqPaZeCtnFz+UZ652O1TrjANlw8ustolN3ZeL/Q7a5FO2 u8hKCLVMbsdV2kwM5NzLBesNkDsc1AUnEzYwfvYJICdD2Uavq3ay7yt3wkOEPPy2 J74+aqsfTW7/tybOIfOs2QhhZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgzwZT2 jPowLpZ36a8lPJ+msaJsMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgS07VmnCAL+JgOwksclVNHftG1ph6gsn7eqaiEl8qpxAdJREVGNV/ NPDGZ+4/xrUQMkzrQsCW6Tr8yDuXO9N8avGvRAZg+37SlWgnskignVj0tBqUANjW kzRSOect95/LNJWvdeo8uA/yk1pX2PACF5xl8fYKcn5J+t0qZOFttr2vQyMk/5uP IQ97wCQH3XsvtVrwuVC6UEmcXY0my/eJCSgsHqWTM8TiedbJj33GAgWaj8mQUfp9 FQCcHh82InZ2fg8hedJcMBL8yC3ETq62PnpGEtBefeTORBlKkxleb0ndnMgHD7EP nKrOYygz5ofuyyG6dGj4ZfQawdysLztB -----END CERTIFICATE-----Generated at Fri Jul 4 08:16:29 2025 by rpki-client