$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: ApapiIUMxuhFHkdojSgwLDUYng8L+VuAWI4BU7oIJwk= Subject key identifier: BA:9E:F8:DB:B6:D3:96:BB:A2:50:77:97:26:62:8F:A4:24:4F:A2:3A Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 3489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 3489 Signing time: Sat 14 Jun 2025 15:03:51 +0000 Manifest this update: Sat 14 Jun 2025 15:03:51 +0000 Manifest next update: Sat 21 Jun 2025 15:03:51 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: TNkVDDeLTpSFgg10WLymQWl+MfZN5Ser+pQvUgIZtpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13449 (0x3489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Jun 14 15:03:51 2025 GMT Not After : Jun 21 15:03:51 2025 GMT Subject: CN=684d8f57-41f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:bf:73:e0:04:b1:df:ef:b6:d2:0c:6a:64: d6:93:89:f1:d7:db:aa:ff:75:a1:ad:90:22:32:d8: 4d:1a:9e:65:03:6d:60:b7:88:e6:ff:60:2e:5a:24: b5:98:5a:a4:33:d9:8b:58:db:24:50:b2:bd:40:f8: 58:bc:cf:ab:e0:a7:be:5b:60:0b:0a:c4:ae:db:20: 75:ae:5e:69:38:53:da:5e:0f:ae:b4:ee:21:ed:b1: 16:43:2d:f8:fd:c5:e3:58:bc:cb:3a:c7:5d:3c:67: 27:e7:6c:18:e3:7f:73:27:0b:d0:4f:1c:82:3f:f9: 56:0e:b9:11:1e:24:7d:c6:e0:7f:5b:b7:21:8a:98: 17:17:b9:86:a4:53:53:b8:4d:3d:f1:a6:7f:8e:f5: 40:34:62:db:0b:aa:a5:e3:e3:3e:92:78:52:41:47: 80:79:ff:49:66:09:70:db:fc:db:b2:94:c7:72:63: 75:95:5d:a1:7c:8c:53:10:a8:be:a4:17:04:3c:0d: 78:6f:d9:58:88:5c:a9:ae:80:42:7c:90:d5:26:10: d4:4c:32:b1:93:c8:54:18:92:38:7b:16:3f:62:ab: ab:1c:e4:c8:97:b2:a7:76:b6:c2:49:d4:1a:17:0c: cc:89:63:8c:4a:71:05:24:f5:6d:45:7e:6f:d3:ee: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9E:F8:DB:B6:D3:96:BB:A2:50:77:97:26:62:8F:A4:24:4F:A2:3A X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a0:ff:0d:50:6f:0f:26:d5:ba:93:28:d4:45:bd:9b:34:5f: 23:fd:0f:1b:d2:d2:a0:37:6a:f7:f5:ad:ba:43:f8:03:a1:5f: b8:52:6d:dc:71:42:f2:a5:69:6f:d6:80:e4:91:37:3e:21:3a: 04:e7:1c:86:c6:88:c2:a7:18:a4:b3:98:54:e5:9e:37:a0:1a: 58:c9:dd:16:61:d2:83:47:cb:9a:a2:3d:15:14:7f:90:53:c7: fb:0e:8c:20:0b:cb:85:57:b5:06:03:96:10:0d:32:50:c0:7f: 01:3b:8e:96:2d:a9:9e:0e:cb:5c:fb:d0:29:4c:7d:96:f7:9d: f3:55:cb:8b:61:80:af:94:a2:17:0a:de:25:77:cd:d6:5c:9a: e8:21:d6:24:21:46:c3:24:16:db:37:32:f0:64:81:10:d4:c6: a6:62:3d:bd:dd:a8:b6:a5:b5:75:71:f7:34:0d:48:aa:c7:9b: 60:a0:51:25:da:fc:d1:10:93:7e:62:e4:50:3f:8b:99:1d:f8: a9:de:44:1e:9d:5c:6d:bb:1c:db:30:00:2c:20:b7:d1:ab:6d: fe:f5:ec:35:31:ce:93:58:96:e2:49:32:ec:55:b8:14:81:80: 29:15:fb:63:c2:b5:3e:aa:09:0e:03:f6:08:e9:f8:c8:db:b8: 6c:2e:27:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUwNjE0MTUwMzUxWhcNMjUwNjIxMTUwMzUxWjAYMRYwFAYD VQQDEw02ODRkOGY1Ny00MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSS/c+AEsd/vttIMamTWk4nx19uq/3WhrZAiMthNGp5lA21gt4jm/2AuWiS1 mFqkM9mLWNskULK9QPhYvM+r4Ke+W2ALCsSu2yB1rl5pOFPaXg+utO4h7bEWQy34 /cXjWLzLOsddPGcn52wY439zJwvQTxyCP/lWDrkRHiR9xuB/W7chipgXF7mGpFNT uE098aZ/jvVANGLbC6ql4+M+knhSQUeAef9JZglw2/zbspTHcmN1lV2hfIxTEKi+ pBcEPA14b9lYiFyproBCfJDVJhDUTDKxk8hUGJI4exY/YqurHOTIl7KndrbCSdQa FwzMiWOMSnEFJPVtRX5v0+6hfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqe+Nu2 05a7olB3lyZij6QkT6I6MB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALoP8NUG8PJtW6kyjURb2bNF8j/Q8b0tKgN2r39a26Q/gDoV+4Um3c cULypWlv1oDkkTc+IToE5xyGxojCpxiks5hU5Z43oBpYyd0WYdKDR8uaoj0VFH+Q U8f7DowgC8uFV7UGA5YQDTJQwH8BO46WLameDstc+9ApTH2W953zVcuLYYCvlKIX Ct4ld83WXJroIdYkIUbDJBbbNzLwZIEQ1MamYj293ai2pbV1cfc0DUiqx5tgoFEl 2vzREJN+YuRQP4uZHfip3kQenVxtuxzbMAAsILfRq23+9ew1Mc6TWJbiSTLsVbgU gYApFftjwrU+qgkOA/YI6fjI27hsLidi -----END CERTIFICATE-----Generated at Sun Jun 15 05:05:41 2025 by rpki-client