$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: Vd8pnKZrq119CRbez7PhsmaRRvKoe2WQOZ4GPRTNrSs= Subject key identifier: 9E:3D:CF:30:9D:9F:3D:1B:13:01:43:87:1A:43:1F:19:06:01:51:82 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0A65 Signing time: Thu 12 Jun 2025 19:28:37 +0000 Manifest this update: Thu 12 Jun 2025 19:28:37 +0000 Manifest next update: Thu 19 Jun 2025 19:28:37 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: O8YfKsFUOR7lJ3BSCOYjA6NBUID+FPoEv85iRhGtHyc=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Jun 12 19:28:37 2025 GMT Not After : Jun 19 19:28:37 2025 GMT Subject: CN=684b2a65-f0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:15:0f:cb:b4:f2:80:d8:34:eb:1a:1b:6d: 69:50:0a:fb:b1:05:fc:42:70:8c:ca:f6:be:82:bb: 12:f3:70:a8:ff:54:52:87:6c:d7:e5:a8:19:0f:f2: 21:a4:11:99:b0:79:c0:69:88:19:a2:a6:00:b8:79: 05:2c:b3:e4:13:07:66:d3:d8:a6:5f:82:d3:ba:f5: 97:f1:2c:aa:7a:98:1c:dc:d9:01:88:c5:e8:f0:19: 25:ee:29:c5:1c:ba:95:e9:22:2f:42:f9:f8:3a:86: 7d:8f:cd:1b:78:8f:d0:3c:8a:2c:e8:be:6d:90:83: f9:b6:0f:ba:7c:d9:9c:8c:84:5f:5e:60:79:c8:b7: 38:b6:c0:01:f7:15:27:28:22:e0:dd:a1:fb:84:34: aa:63:6a:4f:58:5f:62:6f:6d:1d:8d:44:86:32:f7: b4:76:d6:49:86:3f:eb:b4:b1:19:0c:ed:ce:0f:67: 56:3d:81:2c:7b:74:38:b4:95:cd:17:5e:0b:c4:1c: 52:0c:d7:05:23:a0:cc:a7:4d:e8:ef:f1:1a:4d:b6: e7:4a:01:c3:15:52:fc:73:73:80:a3:ab:09:f6:6d: c2:e2:3a:9e:7f:13:50:13:3b:6c:6a:36:f4:ae:83: 46:b6:fb:f2:52:77:74:33:1c:ae:7e:ba:5b:8f:a9: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:CF:30:9D:9F:3D:1B:13:01:43:87:1A:43:1F:19:06:01:51:82 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:63:ac:c5:99:e7:63:50:6c:bf:e4:49:5b:65:f8:47:d0:7c: 28:55:ac:5f:1b:69:22:57:66:d2:df:ce:3d:81:ab:e9:dc:dd: 05:0c:28:1f:a9:c7:15:03:62:bb:13:6a:fe:be:db:6b:9c:52: 2b:11:b4:4d:16:86:60:12:89:80:aa:be:ca:77:34:5c:a6:eb: 6a:55:33:91:ff:aa:d1:76:cd:15:d6:8b:ad:f9:d2:0e:cb:f9: 31:9e:87:f6:e9:d1:af:c0:a2:9d:10:47:8a:89:ef:f2:e0:fe: 6e:39:e4:c6:12:0c:ad:62:5f:d6:c6:fe:69:01:b7:a3:a0:2b: f2:46:17:62:f0:a1:da:b9:8f:da:95:df:bb:1c:d0:2e:88:2d: ca:51:ab:18:74:c6:d8:40:8f:b9:ba:5a:d0:99:ff:e2:2d:99: 47:47:71:db:14:34:10:57:d7:bc:35:9c:74:34:99:29:84:f0: c0:27:1c:62:ed:c5:27:18:2d:f5:76:60:6f:5f:42:39:51:a6: d3:2e:2c:96:cc:5c:36:c5:0c:8b:d0:16:87:df:00:ca:c5:65: d5:b4:b6:da:7c:6f:f9:7d:f3:a6:49:cc:dd:9d:cb:38:6c:43: 61:96:cb:98:0c:80:9f:c4:ec:62:d6:fb:6a:29:72:6d:95:9e: cf:a8:4c:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwNjEyMTkyODM3WhcNMjUwNjE5MTkyODM3WjAYMRYwFAYD VQQDEw02ODRiMmE2NS1mMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZQVD8u08oDYNOsaG21pUAr7sQX8QnCMyva+grsS83Co/1RSh2zX5agZD/Ih pBGZsHnAaYgZoqYAuHkFLLPkEwdm09imX4LTuvWX8Syqepgc3NkBiMXo8Bkl7inF HLqV6SIvQvn4OoZ9j80beI/QPIos6L5tkIP5tg+6fNmcjIRfXmB5yLc4tsAB9xUn KCLg3aH7hDSqY2pPWF9ib20djUSGMve0dtZJhj/rtLEZDO3OD2dWPYEse3Q4tJXN F14LxBxSDNcFI6DMp03o7/EaTbbnSgHDFVL8c3OAo6sJ9m3C4jqefxNQEztsajb0 roNGtvvyUnd0Mxyufrpbj6kCXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ49zzCd nz0bEwFDhxpDHxkGAVGCMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeY6zFmedjUGy/5ElbZfhH0HwoVaxfG2kiV2bS3849gavp3N0FDCgf qccVA2K7E2r+vttrnFIrEbRNFoZgEomAqr7KdzRcputqVTOR/6rRds0V1out+dIO y/kxnof26dGvwKKdEEeKie/y4P5uOeTGEgytYl/Wxv5pAbejoCvyRhdi8KHauY/a ld+7HNAuiC3KUasYdMbYQI+5ulrQmf/iLZlHR3HbFDQQV9e8NZx0NJkphPDAJxxi 7cUnGC31dmBvX0I5UabTLiyWzFw2xQyL0BaH3wDKxWXVtLbafG/5ffOmSczdncs4 bENhlsuYDICfxOxi1vtqKXJtlZ7PqEwS -----END CERTIFICATE-----Generated at Sat Jun 14 18:58:17 2025 by rpki-client