$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: K4HOoHNTpXSxk5J6WyngUx6lkArwhytftne5oFW0mQY= Subject key identifier: 93:E8:7F:06:37:8E:B5:B6:6C:67:AF:FC:CF:FE:AA:60:8C:CD:52:11 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 1116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 110E Signing time: Sat 14 Jun 2025 17:13:38 +0000 Manifest this update: Sat 14 Jun 2025 17:13:38 +0000 Manifest next update: Sat 21 Jun 2025 17:13:37 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: 5OXQQpkiEBgUq7DyqBrPei/l9Gpm/WIYmCXCBsOMJ3I=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4374 (0x1116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Jun 14 17:13:38 2025 GMT Not After : Jun 21 17:13:37 2025 GMT Subject: CN=684dadc2-1c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:9b:c6:3c:4c:a6:b8:09:f0:ff:9d:e0:cc: 3f:3d:f5:86:4d:ee:17:21:10:33:11:4d:f7:dc:23: b4:83:08:59:c6:56:e8:1d:8c:c7:fb:71:19:bf:6c: 55:18:66:f5:c6:45:3b:fd:9a:d2:91:33:b2:60:45: d7:5e:f7:27:b6:24:41:38:0b:9b:54:d8:a8:60:8f: 11:6f:a7:ed:c8:43:09:3a:af:d9:47:e9:28:11:26: 41:fc:20:af:bc:2c:5c:6c:ca:73:ed:1a:b9:c7:83: a6:2d:12:b7:1a:fa:1b:19:37:48:e5:f3:d6:0f:4c: d9:69:2b:08:70:63:40:01:41:cb:e4:70:f8:13:a6: 67:eb:4c:b0:21:6b:2f:c2:b9:f4:f5:2e:6b:7c:dc: 39:49:80:0e:c6:0a:f5:04:96:f7:14:d9:8c:6e:73: 49:f2:f5:15:6f:85:ac:84:16:7a:21:05:35:61:e5: cd:22:81:af:c8:cc:00:dc:ce:ff:ee:62:57:92:a2: 95:89:92:7c:fe:f1:47:4b:1f:97:22:57:3e:29:aa: 27:a4:dd:15:86:db:46:22:03:8f:28:cb:cd:c7:93: 7d:13:d1:67:d9:97:26:94:d2:8d:6d:e2:24:98:4d: 4d:84:27:c6:ac:3c:00:ce:86:61:8d:b8:bd:da:e5: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E8:7F:06:37:8E:B5:B6:6C:67:AF:FC:CF:FE:AA:60:8C:CD:52:11 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:07:13:58:7d:06:0a:2d:50:02:37:f4:4c:04:f3:be:ad:5c: 85:0b:4c:cf:9f:1d:2c:6e:4c:a0:c3:62:0f:bb:e4:67:65:cb: 82:9a:7b:3c:53:74:9c:78:90:20:cd:dc:01:32:9e:94:40:da: 61:7d:7c:28:d5:5e:fc:9c:1e:4d:87:06:45:8e:b3:e8:66:08: f6:4b:23:ec:dc:6f:cb:c7:f2:b0:99:5d:92:3e:39:75:2d:fa: 10:f0:8c:39:53:4e:ea:49:45:a1:22:8e:d0:5e:bc:9f:1f:24: c6:75:ec:d0:e1:7e:c0:67:63:9f:19:65:e8:b5:4f:04:80:cf: ed:8a:89:69:5e:0a:70:d6:53:fe:37:ce:bf:34:0b:52:e4:f2: cb:e4:90:5b:b5:5f:4b:1b:43:fc:4c:8b:50:55:5f:df:5c:3d: b3:9b:f9:c7:6e:f3:61:c4:4a:2b:d1:d0:ec:f8:68:7e:80:82: 9c:a7:aa:47:2f:03:ef:27:50:e6:ad:46:f7:be:db:80:7c:80: a3:34:5a:b1:a0:64:fb:5b:5c:bd:01:f0:86:6a:4c:f8:de:3a: d9:0d:6a:21:de:05:ff:3e:66:8a:85:c1:65:67:40:0f:f9:f7: f0:3b:99:bc:eb:33:c7:39:6b:a0:84:90:67:9c:16:08:1e:c1: 5d:82:f8:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwNjE0MTcxMzM4WhcNMjUwNjIxMTcxMzM3WjAYMRYwFAYD VQQDEw02ODRkYWRjMi0xYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgubxjxMprgJ8P+d4Mw/PfWGTe4XIRAzEU333CO0gwhZxlboHYzH+3EZv2xV GGb1xkU7/ZrSkTOyYEXXXvcntiRBOAubVNioYI8Rb6ftyEMJOq/ZR+koESZB/CCv vCxcbMpz7Rq5x4OmLRK3GvobGTdI5fPWD0zZaSsIcGNAAUHL5HD4E6Zn60ywIWsv wrn09S5rfNw5SYAOxgr1BJb3FNmMbnNJ8vUVb4WshBZ6IQU1YeXNIoGvyMwA3M7/ 7mJXkqKViZJ8/vFHSx+XIlc+KaonpN0VhttGIgOPKMvNx5N9E9Fn2ZcmlNKNbeIk mE1NhCfGrDwAzoZhjbi92uV4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPofwY3 jrW2bGev/M/+qmCMzVIRMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkBxNYfQYKLVACN/RMBPO+rVyFC0zPnx0sbkygw2IPu+RnZcuCmns8 U3SceJAgzdwBMp6UQNphfXwo1V78nB5NhwZFjrPoZgj2SyPs3G/Lx/KwmV2SPjl1 LfoQ8Iw5U07qSUWhIo7QXryfHyTGdezQ4X7AZ2OfGWXotU8EgM/tiolpXgpw1lP+ N86/NAtS5PLL5JBbtV9LG0P8TItQVV/fXD2zm/nHbvNhxEor0dDs+Gh+gIKcp6pH LwPvJ1DmrUb3vtuAfICjNFqxoGT7W1y9AfCGakz43jrZDWoh3gX/PmaKhcFlZ0AP +ffwO5m86zPHOWughJBnnBYIHsFdgvjy -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:56 2025 by rpki-client