$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: YQkIbpXDeF2kav77COFUt2a7wD2fALoGkI5aZSTaao4= Subject key identifier: 37:C4:EB:B1:3B:9F:ED:FE:EF:36:4E:D5:35:40:3F:73:67:A0:C6:E1 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B31 Signing time: Sat 14 Jun 2025 19:01:38 +0000 Manifest this update: Sat 14 Jun 2025 19:01:37 +0000 Manifest next update: Sat 21 Jun 2025 19:01:37 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: 5P9b7M+TO00Gdo6CCR4cXjSCvPXsPnMVjmQbdEcDcfI=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: zSM1B8wSUB+mHKY/5kPPrFTVt9OokOjyYR65igDrdV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Jun 14 19:01:37 2025 GMT Not After : Jun 21 19:01:37 2025 GMT Subject: CN=684dc711-fe3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:46:71:a3:7a:8e:a1:e8:56:5e:4d:99:4f: fd:9a:d8:9c:68:aa:28:8f:46:7e:26:50:23:62:40: 88:78:3c:95:0c:f4:47:2c:ae:19:4f:0c:6e:11:2a: 48:76:cc:7b:83:af:90:5c:d5:5a:84:17:d2:aa:bf: d5:86:63:34:89:f1:b5:e7:b3:24:6b:4d:6f:b3:0b: 2c:41:eb:bb:38:3d:94:e4:34:e8:fa:56:31:48:af: 05:aa:a0:4b:de:22:6d:fc:c1:39:dc:ff:5d:95:55: 7a:4c:4d:22:08:d4:57:5b:5b:59:18:77:f0:10:71: c1:53:fc:9b:db:76:71:49:e3:9f:87:77:29:27:24: b6:c0:10:2b:c2:10:93:21:24:3f:62:7f:a0:66:f4: fe:5d:c5:d8:17:51:f1:13:51:97:6c:3a:e6:f8:13: ed:ac:b9:90:59:8d:e4:c2:c9:67:e2:c8:55:c3:c8: 82:57:67:f5:0d:5c:84:35:e4:25:c3:56:bc:6e:6f: 6f:b7:dd:38:fe:ce:ec:0b:d7:a0:90:41:9d:fd:2f: 37:ff:81:9b:9d:9d:44:bc:7f:29:39:73:30:76:b2: f2:ab:e5:a5:31:8c:a6:50:4c:19:7c:3f:52:79:63: 80:bf:ec:0f:3e:b5:82:31:26:c0:f3:4c:3b:43:62: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:EB:B1:3B:9F:ED:FE:EF:36:4E:D5:35:40:3F:73:67:A0:C6:E1 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bd:d6:af:5d:e2:25:ce:1e:6d:0c:99:99:ba:fa:0c:90:0f: b7:8f:10:b0:e6:90:95:94:16:34:ed:70:ad:ba:0b:fa:57:62: 84:10:19:79:14:73:2f:1b:93:d8:4d:0c:be:c1:6f:3e:97:4f: a3:b5:ac:44:6e:78:8f:82:31:54:10:c5:44:2a:48:fc:ac:3e: 29:43:a9:24:85:b7:74:5c:85:50:02:92:df:ef:54:7e:eb:6f: b5:ea:aa:20:b2:e2:dc:79:ab:7d:31:73:20:0e:a9:d8:e2:fb: 06:03:1c:14:55:16:e8:4e:87:24:88:82:ea:12:73:aa:12:81: 1f:66:4c:4a:af:86:9b:e0:90:e8:92:7d:90:40:40:0a:79:cd: e9:88:eb:d7:14:e6:20:90:a4:1e:24:79:5d:31:7b:61:87:b3: 04:0c:1c:e7:11:d8:ab:83:92:35:db:08:5a:1c:9d:59:97:fb: 47:5a:9d:65:b0:63:03:2b:4e:55:55:3d:8a:29:8e:c8:fb:f2: c2:0b:db:04:2f:98:9c:4c:8a:da:be:ec:2e:70:e2:8a:70:87: 46:75:35:8d:6b:72:9f:9f:63:62:58:08:ec:69:6c:ae:02:34: f2:ec:77:ad:4c:25:4f:cf:14:67:06:d7:96:e1:d2:e9:c6:23: ec:a1:c8:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwNjE0MTkwMTM3WhcNMjUwNjIxMTkwMTM3WjAYMRYwFAYD VQQDEw02ODRkYzcxMS1mZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu9GcaN6jqHoVl5NmU/9mticaKooj0Z+JlAjYkCIeDyVDPRHLK4ZTwxuESpI dsx7g6+QXNVahBfSqr/VhmM0ifG157Mka01vswssQeu7OD2U5DTo+lYxSK8FqqBL 3iJt/ME53P9dlVV6TE0iCNRXW1tZGHfwEHHBU/yb23ZxSeOfh3cpJyS2wBArwhCT ISQ/Yn+gZvT+XcXYF1HxE1GXbDrm+BPtrLmQWY3kwsln4shVw8iCV2f1DVyENeQl w1a8bm9vt904/s7sC9egkEGd/S83/4GbnZ1EvH8pOXMwdrLyq+WlMYymUEwZfD9S eWOAv+wPPrWCMSbA80w7Q2J8hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfE67E7 n+3+7zZO1TVAP3NnoMbhMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNvdavXeIlzh5tDJmZuvoMkA+3jxCw5pCVlBY07XCtugv6V2KEEBl5 FHMvG5PYTQy+wW8+l0+jtaxEbniPgjFUEMVEKkj8rD4pQ6kkhbd0XIVQApLf71R+ 62+16qogsuLceat9MXMgDqnY4vsGAxwUVRboTockiILqEnOqEoEfZkxKr4ab4JDo kn2QQEAKec3piOvXFOYgkKQeJHldMXthh7MEDBznEdirg5I12whaHJ1Zl/tHWp1l sGMDK05VVT2KKY7I+/LCC9sEL5icTIravuwucOKKcIdGdTWNa3Kfn2NiWAjsaWyu AjTy7HetTCVPzxRnBteW4dLpxiPsociW -----END CERTIFICATE-----Generated at Sun Jun 15 09:33:36 2025 by rpki-client