$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: 1kGsTjxm9JZH6m4UGE/wiMNi1mqLfXQSvQ1uEEL0jO8= Subject key identifier: 9F:20:61:93:FE:4E:A5:69:50:89:2E:CF:EB:04:CB:21:3E:90:04:A6 Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 0E Signing time: Fri 13 Jun 2025 06:57:51 +0000 Manifest this update: Fri 13 Jun 2025 06:57:50 +0000 Manifest next update: Fri 20 Jun 2025 06:57:50 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: dFGokG6TjgNC7g1tJ7FbnCaze7ICWwbsy2oYvftz7dU=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: Jun 13 06:57:50 2025 GMT Not After : Jun 20 06:57:50 2025 GMT Subject: CN=684bcbef-690c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:b8:05:f5:88:8d:01:1b:a3:0a:31:97:82: 79:9a:7c:a7:35:a9:55:d2:46:fd:0c:18:17:bb:88: 27:17:f3:16:fe:5c:14:8a:73:89:62:8f:5d:92:60: b1:0f:c9:db:70:5d:99:61:43:d3:a8:61:e4:ee:3c: 71:a7:94:0e:f1:66:47:9e:bd:8a:39:50:9f:0c:b9: 25:97:92:55:7c:f7:63:ef:7a:47:5a:6c:f0:b0:a0: 33:b1:b3:f9:7d:15:cb:7a:e3:fe:91:d7:d9:10:d1: 3e:42:2b:d9:23:0c:a1:a6:78:a3:5b:86:25:04:7f: 78:89:bc:68:e3:e5:a0:1a:89:40:43:7d:f3:31:e5: 1c:4c:2f:45:a3:bf:3e:ae:54:02:ba:d5:13:85:69: d2:69:58:a5:46:6f:58:a2:86:d9:2c:90:37:3f:2b: 94:2f:65:1b:f8:1a:e7:3f:92:a6:c9:ed:0d:52:74: 62:48:0f:f4:43:86:49:d7:a7:33:07:fd:ea:4d:1e: b3:9e:2f:8d:ca:0a:02:e7:be:8d:56:e7:1c:49:81: 41:0a:85:fd:8e:2c:3a:3f:d0:df:f6:69:84:cf:38: 75:4b:c5:8a:2f:0d:57:0e:ea:15:89:93:f9:18:16: 00:9b:1e:5c:93:fc:f2:7d:c3:95:60:f4:80:00:60: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:20:61:93:FE:4E:A5:69:50:89:2E:CF:EB:04:CB:21:3E:90:04:A6 X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:17:a9:1d:52:fd:b1:30:61:a4:31:0b:47:f0:ff:59:cb: 8e:3f:c5:d3:f9:bf:4a:a1:b8:3d:f3:d7:f3:11:cd:fe:21:0d: 56:7d:37:45:35:4a:84:75:f5:df:d7:08:25:7e:3a:a8:ec:fc: 3e:75:7c:f3:13:c3:76:6c:7c:ba:4b:2d:f9:8e:4e:b7:12:ce: b2:86:92:91:c8:dc:4e:3b:bf:df:e1:73:a5:4f:ae:43:a2:66: c4:5d:e7:d7:75:66:c1:51:0d:2c:46:52:1c:0c:27:6f:b2:91: 1d:4a:94:12:48:0b:69:11:14:25:75:4f:96:23:9c:1e:56:8f: 92:1f:38:10:e5:87:68:b8:da:d5:b2:0a:d0:2f:2a:7f:11:4f: f9:c6:26:a1:08:91:98:aa:cb:cc:bf:95:de:fc:e4:16:d1:02: 59:bf:22:f3:42:74:da:ef:02:c1:3a:bb:ff:e3:7f:80:0d:f7: de:ab:fb:5c:69:52:1c:0b:91:fb:05:fb:d6:5e:0b:79:4e:6b: 77:72:a2:a9:6d:35:b1:39:ef:e5:16:c3:1e:a3:6c:5b:9b:bd: 2b:c4:36:42:5d:bd:a6:4e:68:e7:39:0e:1e:b0:18:f6:5f:6f: 6a:0a:96:6a:a2:32:d4:68:dd:02:9c:c0:b6:e6:d6:2f:cc:b0: d5:ff:f6:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTA2MTMwNjU3NTBaFw0yNTA2MjAwNjU3NTBaMBgxFjAUBgNV BAMTDTY4NGJjYmVmLTY5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtlrgF9YiNARujCjGXgnmafKc1qVXSRv0MGBe7iCcX8xb+XBSKc4lij12SYLEP ydtwXZlhQ9OoYeTuPHGnlA7xZkeevYo5UJ8MuSWXklV892PvekdabPCwoDOxs/l9 Fct64/6R19kQ0T5CK9kjDKGmeKNbhiUEf3iJvGjj5aAaiUBDffMx5RxML0Wjvz6u VAK61ROFadJpWKVGb1iihtkskDc/K5QvZRv4Guc/kqbJ7Q1SdGJID/RDhknXpzMH /epNHrOeL43KCgLnvo1W5xxJgUEKhf2OLDo/0N/2aYTPOHVLxYovDVcO6hWJk/kY FgCbHlyT/PJ9w5Vg9IAAYJcTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnyBhk/5O pWlQiS7P6wTLIT6QBKYwHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaxF6kdUv2xMGGkMQtH8P9Zy44/xdP5v0qhuD3z1/MRzf4hDVZ9N0U1 SoR19d/XCCV+Oqjs/D51fPMTw3ZsfLpLLfmOTrcSzrKGkpHI3E47v9/hc6VPrkOi ZsRd59d1ZsFRDSxGUhwMJ2+ykR1KlBJIC2kRFCV1T5YjnB5Wj5IfOBDlh2i42tWy CtAvKn8RT/nGJqEIkZiqy8y/ld785BbRAlm/IvNCdNrvAsE6u//jf4AN996r+1xp UhwLkfsF+9ZeC3lOa3dyoqltNbE57+UWwx6jbFubvSvENkJdvaZOaOc5Dh6wGPZf b2oKlmqiMtRo3QKcwLbm1i/MsNX/9mo= -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:21 2025 by rpki-client