$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft File: aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json) Hash identifier: ZJz7q/1vhpLwfyDQC7j5Xsu3b+tnH/bShUQSmJYae5U= Subject key identifier: B6:54:BA:11:91:07:9D:31:2A:45:35:68:E2:6A:D3:2C:8F:AA:18:D1 Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Certificate serial: 22C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft Manifest number: 2281 Signing time: Mon 16 Jun 2025 15:56:37 +0000 Manifest this update: Mon 16 Jun 2025 15:56:36 +0000 Manifest next update: Mon 23 Jun 2025 15:56:36 +0000 Files and hashes: 1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: e6/b3stfwuYnvZf2rYoTAve/DCwYBhdzINpMkHvqFi8=) 2: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=) 3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: yV/SjGOrZoU6XjMAo/QC3pR5jQlSni/vmLDt0r4ftkA=) 4: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: 3g8CG6eXI2y/sKSche4ErWaN1/woBDrqwhgjSA2yZ4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8900 (0x22c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9 Validity Not Before: Jun 16 15:56:36 2025 GMT Not After : Jun 23 15:56:36 2025 GMT Subject: CN=68503eb4-b49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:f8:75:61:cf:a6:ee:8e:41:1d:5e:b4:1b: a9:37:5f:09:49:44:a9:26:35:29:7e:7a:c7:20:85: fc:85:a2:1c:95:79:67:94:16:3e:b2:68:65:d5:85: 00:c2:56:ec:87:a9:74:c7:fa:3d:bb:46:86:8e:23: 46:f7:c8:a4:ab:76:98:be:c3:30:f5:7b:a7:bb:16: 56:34:7b:92:4f:92:95:3f:0a:e0:ec:63:e8:8f:8c: a5:35:98:fc:ba:64:86:e8:ae:50:b2:9a:51:a0:66: ce:fa:5a:24:3d:59:e4:25:92:f7:50:7f:63:9b:de: a0:b7:0b:29:8f:55:25:31:77:16:cd:28:d6:6a:1e: 69:e9:df:a7:4e:49:6b:51:40:52:9d:a4:00:d5:39: d0:c7:08:2e:ed:73:08:f9:51:6e:a5:bf:e1:db:b5: b7:a3:86:ff:88:c4:84:7a:70:01:bb:7c:f7:ea:b8: 8f:51:3d:47:8b:2d:ac:91:76:bd:37:08:ef:51:fb: 1d:d4:77:6d:a5:72:f2:51:a2:9b:57:85:d4:fa:a5: c1:a5:4b:52:c2:fc:39:7c:bc:ef:d1:d7:d5:b2:4e: 51:af:7f:ad:21:6e:71:11:ef:f2:f3:91:64:4f:63: 01:36:a6:27:a4:3b:26:20:42:7d:26:33:b5:01:bf: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:54:BA:11:91:07:9D:31:2A:45:35:68:E2:6A:D3:2C:8F:AA:18:D1 X509v3 Authority Key Identifier: keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b9:a2:75:61:dc:c9:bc:66:57:3d:49:85:60:5a:29:6c:c6: 92:9e:84:1b:6b:c6:69:03:32:43:48:1f:5b:6a:41:1e:dc:a7: cb:35:ba:21:d5:f5:76:a8:3d:15:2b:bd:7b:fc:4c:74:9e:c3: 6b:12:6d:c9:18:ea:30:86:50:f5:91:01:5e:8e:4d:b5:48:4f: 8f:52:b3:1b:53:c1:96:b1:a6:1c:67:a8:ff:76:34:90:dd:cd: 87:f8:cb:67:85:be:ab:6f:aa:ce:8c:e2:1b:07:ee:02:ac:01: 0c:f6:24:f7:d5:d9:7c:a7:a2:df:09:8a:08:6f:b4:ce:18:65: 78:02:47:2d:3c:c3:83:67:87:08:c1:31:36:22:09:79:e9:6e: 8f:09:77:5d:48:7f:bf:7f:fa:b4:a8:f2:9b:f1:92:52:7e:c5: 52:7a:b5:62:98:7a:29:de:77:ae:8c:f6:12:6b:5b:46:ec:03: 8c:bc:1a:9f:16:8e:1a:7f:3b:61:ff:ef:d5:b7:e0:e3:89:e4: 87:b1:05:77:49:b0:71:48:69:e1:7a:60:fc:97:50:73:f2:d1: 4f:a9:79:a8:40:b4:8e:20:f9:8b:68:bf:30:61:9f:e9:51:ef: bd:ea:d6:df:61:c9:3e:62:9d:a3:b8:ed:6f:d0:ed:22:5a:14: 8c:a8:8e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzMzMxMTAvBgNVBAUTKDY5OUU2NzQyNTY3QkU3MzI5Q0MzQTc4NkRFQjc4NTdF MkMyNDIwRjkwHhcNMjUwNjE2MTU1NjM2WhcNMjUwNjIzMTU1NjM2WjAYMRYwFAYD VQQDEw02ODUwM2ViNC1iNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv34dWHPpu6OQR1etBupN18JSUSpJjUpfnrHIIX8haIclXlnlBY+smhl1YUA wlbsh6l0x/o9u0aGjiNG98ikq3aYvsMw9XunuxZWNHuST5KVPwrg7GPoj4ylNZj8 umSG6K5QsppRoGbO+lokPVnkJZL3UH9jm96gtwspj1UlMXcWzSjWah5p6d+nTklr UUBSnaQA1TnQxwgu7XMI+VFupb/h27W3o4b/iMSEenABu3z36riPUT1Hiy2skXa9 NwjvUfsd1HdtpXLyUaKbV4XU+qXBpUtSwvw5fLzv0dfVsk5Rr3+tIW5xEe/y85Fk T2MBNqYnpDsmIEJ9JjO1Ab/BlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZUuhGR B50xKkU1aOJq0yyPqhjRMB8GA1UdIwQYMBaAFGmeZ0JWe+cynMOnht63hX4sJCD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzMy8wNjVEQTNCQUI4 NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6S2N3NmVHM3JlRmZpd2tJ UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaNW5RbFo3NXpLY3c2ZUczcmVGZml3a0lQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzMy8wNjVEQTNCQUI4NDQxMUU1QjUzNTdCMkZDNEY5QUUwMi9hWjVuUWxaNzV6 S2N3NmVHM3JlRmZpd2tJUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQuaJ1YdzJvGZXPUmFYFopbMaSnoQba8ZpAzJDSB9bakEe3KfLNboh 1fV2qD0VK717/Ex0nsNrEm3JGOowhlD1kQFejk21SE+PUrMbU8GWsaYcZ6j/djSQ 3c2H+Mtnhb6rb6rOjOIbB+4CrAEM9iT31dl8p6LfCYoIb7TOGGV4AkctPMODZ4cI wTE2Igl56W6PCXddSH+/f/q0qPKb8ZJSfsVSerVimHop3neujPYSa1tG7AOMvBqf Fo4afzth/+/Vt+DjieSHsQV3SbBxSGnhemD8l1Bz8tFPqXmoQLSOIPmLaL8wYZ/p Ue+96tbfYck+Yp2juO1v0O0iWhSMqI6/ -----END CERTIFICATE-----Generated at Tue Jun 17 11:30:46 2025 by rpki-client