$ rpki-client -vvf rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft File: 444NefP9KSMew_PjAp05P0MnfLM.mft (raw, json) Hash identifier: hvQjIzt20nGUON07TeWUBvnbqwqADsMn2MIXBHJJ1hs= Subject key identifier: 84:64:FD:79:A0:91:7A:5A:9E:CC:78:38:CD:0F:DF:41:25:30:A3:D7 Authority key identifier: E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 Certificate issuer: /CN=A9128298/serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft Manifest number: 05ED Signing time: Mon 16 Jun 2025 22:35:08 +0000 Manifest this update: Mon 16 Jun 2025 22:35:08 +0000 Manifest next update: Mon 23 Jun 2025 22:35:08 +0000 Files and hashes: 1: 444NefP9KSMew_PjAp05P0MnfLM.crl (hash: cIdEo0UZSRTqXFPG0NHX+YxINCNc/HKs/nEyBtUbqTo=) 2: 832F7D72B20E11EBB73B4E2FC4F9AE02.roa (hash: RWzQvPuAa0dvfgKQkKzubYejP/LcFU0xMaFFgk+jNhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128298, serialNumber=E38E0D79F3FD29231EC3F3E3029D393F43277CB3 Validity Not Before: Jun 16 22:35:08 2025 GMT Not After : Jun 23 22:35:08 2025 GMT Subject: CN=68509c1c-fef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:cf:82:79:cc:e3:9c:db:06:cc:f4:54:64: 3d:54:75:8d:85:84:5f:c5:6b:10:35:fa:2d:9f:e1: c6:75:e3:6d:26:99:e1:0a:6a:3d:b1:67:d9:29:f5: 1a:02:0d:92:15:21:d5:70:00:f3:60:8e:55:b2:9c: 1d:84:36:01:1f:36:41:ef:94:0f:e6:1c:7c:a2:14: 4f:9c:90:45:cf:a4:cc:94:e2:1d:27:45:8d:73:82: 78:02:fc:0b:e3:21:a5:aa:02:aa:d4:de:a3:37:c3: 76:1d:b5:50:93:b1:1a:75:ad:5a:36:89:3a:b4:3e: a1:7d:db:e2:8d:63:55:31:54:6d:73:09:79:f0:a5: 35:4e:b5:c7:af:44:ea:fe:98:db:0e:46:88:05:a8: 1b:9f:80:b7:bc:7c:9c:52:c3:51:f2:b1:bf:3e:3c: d9:09:7d:02:52:52:a0:6c:f9:09:22:d4:0e:09:df: e7:dc:a6:fa:7f:9c:ca:e1:41:4f:ad:08:b2:4a:b4: 10:9f:4e:64:84:62:fb:85:46:1e:38:17:60:bd:ff: 0c:1e:2d:30:6d:8e:75:90:fb:20:df:b3:a2:d4:af: fb:6e:38:00:e6:69:b5:e9:ae:08:ab:c3:f4:cd:59: a2:d9:fe:5b:a4:cd:cd:0e:6c:3e:84:0f:f1:a7:08: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:FD:79:A0:91:7A:5A:9E:CC:78:38:CD:0F:DF:41:25:30:A3:D7 X509v3 Authority Key Identifier: keyid:E3:8E:0D:79:F3:FD:29:23:1E:C3:F3:E3:02:9D:39:3F:43:27:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/444NefP9KSMew_PjAp05P0MnfLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128298/7224766AB20C11EBAC886A2CC4F9AE02/444NefP9KSMew_PjAp05P0MnfLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ae:93:05:44:fb:1f:52:d9:72:47:db:aa:f3:5a:d7:ab:be: a8:72:e8:e8:57:dc:ca:5d:e7:f6:f4:cc:da:23:f5:99:6c:b3: 6c:b7:be:fa:33:ac:72:7d:16:97:65:74:d3:21:6c:87:10:f7: f1:b0:8d:b7:ea:3f:2f:bd:b1:ea:5f:88:48:fa:85:4b:e8:94: af:03:57:6d:3a:ae:4a:55:a0:69:0a:b9:92:45:72:d6:55:11: 40:4b:7a:cc:14:e7:ea:ca:75:9c:f9:f0:30:ab:29:55:83:02: 4e:24:ae:20:2e:c4:5b:3d:56:8a:75:35:c7:50:08:9a:cc:6e: b7:8d:82:1c:c2:1e:2a:56:77:39:d6:a6:c2:4e:bc:73:af:35: d7:3e:da:ed:2a:20:fa:83:a3:37:2b:aa:59:e3:48:d8:db:0c: d3:4b:d6:fa:f7:47:c6:e3:26:d6:45:ae:26:0c:7a:16:46:c2: 25:d6:74:f3:a6:11:86:21:a1:c8:b0:d8:3b:0e:b9:82:ee:09: f4:ab:c4:92:19:9f:fe:7b:57:92:0a:13:0c:17:5d:e5:32:51: db:15:a1:62:3e:65:ab:26:d2:8a:21:9a:b2:7b:95:84:40:0c: 69:d6:e5:a4:db:19:37:d4:dd:9a:3b:3e:79:80:9c:99:43:5b: 33:8f:76:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgyOTgxMTAvBgNVBAUTKEUzOEUwRDc5RjNGRDI5MjMxRUMzRjNFMzAyOUQzOTNG NDMyNzdDQjMwHhcNMjUwNjE2MjIzNTA4WhcNMjUwNjIzMjIzNTA4WjAYMRYwFAYD VQQDEw02ODUwOWMxYy1mZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4PPgnnM45zbBsz0VGQ9VHWNhYRfxWsQNfotn+HGdeNtJpnhCmo9sWfZKfUa Ag2SFSHVcADzYI5VspwdhDYBHzZB75QP5hx8ohRPnJBFz6TMlOIdJ0WNc4J4AvwL 4yGlqgKq1N6jN8N2HbVQk7Eada1aNok6tD6hfdvijWNVMVRtcwl58KU1TrXHr0Tq /pjbDkaIBagbn4C3vHycUsNR8rG/PjzZCX0CUlKgbPkJItQOCd/n3Kb6f5zK4UFP rQiySrQQn05khGL7hUYeOBdgvf8MHi0wbY51kPsg37Oi1K/7bjgA5mm16a4Iq8P0 zVmi2f5bpM3NDmw+hA/xpwijnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRk/Xmg kXpansx4OM0P30ElMKPXMB8GA1UdIwQYMBaAFOOODXnz/SkjHsPz4wKdOT9DJ3yz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODI5OC83MjI0NzY2QUIy MEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtTTWV3X1BqQXAwNVAwTW5m TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0NE5lZlA5S1NNZXdfUGpBcDA1UDBNbmZMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODI5OC83MjI0NzY2QUIyMEMxMUVCQUM4ODZBMkNDNEY5QUUwMi80NDROZWZQOUtT TWV3X1BqQXAwNVAwTW5mTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6rpMFRPsfUtlyR9uq81rXq76ocujoV9zKXef29MzaI/WZbLNst776 M6xyfRaXZXTTIWyHEPfxsI236j8vvbHqX4hI+oVL6JSvA1dtOq5KVaBpCrmSRXLW VRFAS3rMFOfqynWc+fAwqylVgwJOJK4gLsRbPVaKdTXHUAiazG63jYIcwh4qVnc5 1qbCTrxzrzXXPtrtKiD6g6M3K6pZ40jY2wzTS9b690fG4ybWRa4mDHoWRsIl1nTz phGGIaHIsNg7DrmC7gn0q8SSGZ/+e1eSChMMF13lMlHbFaFiPmWrJtKKIZqye5WE QAxp1uWk2xk31N2aOz55gJyZQ1szj3aS -----END CERTIFICATE-----Generated at Wed Jun 18 13:42:26 2025 by rpki-client