$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: 2caZpFyiBO6k+MHQaQpKz/vP9FcNEfurVjuDqvRTT8E= Subject key identifier: B8:E5:A0:4A:50:01:10:D3:0A:02:6A:38:AD:A6:CC:84:08:C4:09:F4 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0290 Signing time: Fri 13 Jun 2025 01:05:39 +0000 Manifest this update: Fri 13 Jun 2025 01:05:39 +0000 Manifest next update: Fri 20 Jun 2025 01:05:39 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: UeAjhQuBT7vorJFX/mLZCulAc/6XU94aBwOMqBBAQQo=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Jun 13 01:05:39 2025 GMT Not After : Jun 20 01:05:39 2025 GMT Subject: CN=684b7963-e772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:00:da:ef:77:a3:5c:85:6d:3a:d2:18:e2: 04:a5:4c:bc:3a:8c:b6:7d:8c:62:54:6e:1f:25:aa: 20:47:df:b1:65:dd:5d:c1:4e:48:da:35:b4:68:96: 31:48:f0:61:80:2d:ea:08:a1:0b:71:b1:ab:af:72: 38:cc:e1:9c:dd:8f:ee:ba:d4:3e:f8:c6:b5:ea:72: b9:a5:55:52:ed:ec:b4:e0:bc:61:bd:be:04:90:45: 5e:8b:9f:16:c4:2d:0f:7b:55:77:a5:71:91:cb:8d: ce:3a:4c:e9:f9:8e:0a:2f:70:91:f3:42:9f:1f:13: 9b:fa:62:fe:70:1a:da:60:af:da:e8:34:54:35:39: 76:c4:aa:82:2a:f1:53:6a:6a:1e:87:23:40:33:b5: 1e:d6:2f:8d:1a:11:80:55:d6:21:8c:50:a6:87:f7: 8f:14:44:55:29:46:6c:e6:41:26:e2:c6:79:67:5f: 22:a2:01:e6:18:44:6a:62:92:30:74:78:30:bb:ea: ce:33:81:02:a6:6c:a5:68:83:db:ab:89:e1:68:e3: 43:96:9c:67:fa:3f:b6:0a:4f:30:d8:bf:14:da:44: a7:17:7d:0f:61:37:64:b1:a7:d1:0f:c7:53:a8:ca: 45:7e:36:cb:8f:b2:c6:0b:c2:9d:2c:7d:ef:75:35: 50:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:A0:4A:50:01:10:D3:0A:02:6A:38:AD:A6:CC:84:08:C4:09:F4 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8d:f8:71:b9:d7:75:b9:a6:de:2b:0a:90:8c:2c:ea:f2:59: 7f:a1:8c:45:68:e6:cc:ad:54:7e:13:35:7e:a9:f8:49:0c:04: a1:1e:00:e6:9b:e6:de:c0:6c:e2:bd:e0:a2:b5:4f:04:20:cb: 21:00:69:ee:ad:80:36:b0:0a:25:a6:39:59:91:3e:94:11:29: c6:b9:02:2e:f8:53:94:e3:f7:b4:d6:84:45:73:78:50:5d:6b: d1:3b:ef:9c:ea:7c:ed:7e:11:1b:1a:c1:7e:50:ae:af:cc:5d: d9:33:58:fa:ce:c7:35:de:25:5c:ee:9f:0b:ed:76:9d:f9:e2: 53:24:82:17:e0:c3:d5:6a:ad:88:be:ae:81:5b:82:f2:ae:55: 07:ca:ee:f1:db:a6:6c:4c:18:91:da:d8:4f:f5:bf:a9:6c:bd: 05:3e:a8:c6:30:79:ee:ff:d8:e0:a2:30:b2:0b:c7:e3:d8:54: 83:10:5b:72:04:e0:63:7e:83:d5:bf:02:be:be:f1:02:e4:ab: 3c:1e:0a:04:79:3f:86:00:21:58:48:5f:eb:f3:5e:3c:2b:ef: ed:4d:f1:f3:17:49:56:0c:58:dd:92:c2:dd:e7:e9:9a:83:77: ad:41:a6:c4:e9:77:37:a8:a7:9a:76:20:81:92:dc:0c:e1:a5: 6b:af:28:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUwNjEzMDEwNTM5WhcNMjUwNjIwMDEwNTM5WjAYMRYwFAYD VQQDEw02ODRiNzk2My1lNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VMA2u93o1yFbTrSGOIEpUy8Ooy2fYxiVG4fJaogR9+xZd1dwU5I2jW0aJYx SPBhgC3qCKELcbGrr3I4zOGc3Y/uutQ++Ma16nK5pVVS7ey04Lxhvb4EkEVei58W xC0Pe1V3pXGRy43OOkzp+Y4KL3CR80KfHxOb+mL+cBraYK/a6DRUNTl2xKqCKvFT amoehyNAM7Ue1i+NGhGAVdYhjFCmh/ePFERVKUZs5kEm4sZ5Z18iogHmGERqYpIw dHgwu+rOM4ECpmylaIPbq4nhaONDlpxn+j+2Ck8w2L8U2kSnF30PYTdksafRD8dT qMpFfjbLj7LGC8KdLH3vdTVQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjloEpQ ARDTCgJqOK2mzIQIxAn0MB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjfhxudd1uabeKwqQjCzq8ll/oYxFaObMrVR+EzV+qfhJDAShHgDm m+bewGziveCitU8EIMshAGnurYA2sAolpjlZkT6UESnGuQIu+FOU4/e01oRFc3hQ XWvRO++c6nztfhEbGsF+UK6vzF3ZM1j6zsc13iVc7p8L7Xad+eJTJIIX4MPVaq2I vq6BW4LyrlUHyu7x26ZsTBiR2thP9b+pbL0FPqjGMHnu/9jgojCyC8fj2FSDEFty BOBjfoPVvwK+vvEC5Ks8HgoEeT+GACFYSF/r8148K+/tTfHzF0lWDFjdksLd5+ma g3etQabE6Xc3qKeadiCBktwM4aVrryhA -----END CERTIFICATE-----Generated at Sat Jun 14 19:07:32 2025 by rpki-client