$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: YDKTP1WYpdWFgw5NA30EVugG5dcEIhCm/Sl2gXZx8sc= Subject key identifier: 22:E2:D3:06:23:EA:01:AC:90:2B:F3:E4:4B:B8:34:EE:D8:78:19:B2 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 111D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 1100 Signing time: Sat 14 Jun 2025 17:14:08 +0000 Manifest this update: Sat 14 Jun 2025 17:14:08 +0000 Manifest next update: Sat 21 Jun 2025 17:14:08 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: wUOnkzuKHvZ1vxbAqUkYND4+3l2A/FF7chn9KDWyqwg=) 2: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 3: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) 4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 5: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4381 (0x111d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Jun 14 17:14:08 2025 GMT Not After : Jun 21 17:14:08 2025 GMT Subject: CN=684dade0-cc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:bc:7c:92:a0:52:ca:1a:fe:74:ff:8f:00: 1f:02:95:ae:26:ed:04:19:10:b0:6a:6d:33:67:f8: d0:39:6f:71:48:68:a2:cf:5b:52:45:fe:1c:81:7c: 8d:7d:54:23:7a:01:e8:48:d7:9a:81:21:2a:d9:7c: ad:83:38:f0:1d:0f:8f:9f:ee:47:2a:f9:6e:48:30: 6a:5e:22:aa:e9:26:76:d8:c9:7d:08:a6:2a:80:d1: 3c:ee:4f:8d:b4:30:fa:6f:f2:08:22:16:d9:42:3b: 92:3d:1a:76:cc:7f:d3:07:a1:c2:ec:39:9d:18:a8: 06:0c:ba:cf:c8:45:5b:97:e7:c5:f3:52:4d:90:ef: 5a:ea:5f:68:30:3b:d6:55:bd:d9:49:8a:22:29:3f: 60:84:46:91:1b:59:16:75:0c:f1:c4:53:22:e5:b5: 7e:6d:24:35:77:d9:29:6d:ce:e2:36:c6:05:bb:ab: d0:0a:a3:34:d6:69:3f:9d:28:1e:bc:9e:ed:12:f7: 82:66:4c:c7:94:e7:89:d9:f2:96:1c:46:36:b0:f1: 4f:5d:b8:47:9a:5d:52:01:8d:4e:b6:2b:d7:0f:70: 38:32:14:b7:19:a3:56:2e:74:c8:01:4d:3b:eb:40: d7:fd:fd:a5:3c:4b:18:5b:a5:00:1f:84:9f:7f:1e: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:D3:06:23:EA:01:AC:90:2B:F3:E4:4B:B8:34:EE:D8:78:19:B2 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9a:47:66:e8:a3:cf:9a:82:5b:9d:56:3d:d7:fe:a5:e9:dd: e9:bd:14:2f:0b:01:47:fe:0d:dd:ed:16:f7:8c:9b:7a:27:13: 94:55:3e:4b:87:cb:33:22:e8:d4:86:94:73:b9:f4:ba:c1:fc: 6e:95:53:cc:f8:1b:29:13:00:11:1a:f4:c6:2f:3a:e4:47:ba: 76:19:15:f0:c1:35:9a:86:79:d2:7e:75:bb:f7:03:0f:92:d2: 54:30:2a:4a:0a:04:55:f2:01:d3:24:7d:35:36:73:0b:d5:8b: b7:61:9e:ab:d3:58:f3:c0:16:a3:a9:c1:e1:03:7d:72:45:28: 21:93:8b:72:07:f3:71:ef:14:de:02:ac:31:74:43:98:41:6e: 00:99:28:71:85:dc:ed:09:b2:b4:87:20:67:15:39:fc:a7:c3: c1:8f:ca:5b:6c:70:eb:39:e3:bd:8d:22:94:6d:27:65:b0:95: 5a:1b:d1:88:21:b6:30:e8:2d:21:97:cb:2c:67:92:f0:01:e4: 00:e0:61:68:7a:31:37:fa:b9:1d:51:dd:42:de:1a:3c:da:68: 5b:9b:19:4d:0a:d6:52:6e:d4:93:65:ed:32:26:bd:73:05:74: 36:76:c0:bb:1c:b8:66:79:3d:16:0f:ec:65:46:c8:b2:71:8c: 39:66:2e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICER0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUwNjE0MTcxNDA4WhcNMjUwNjIxMTcxNDA4WjAYMRYwFAYD VQQDEw02ODRkYWRlMC1jYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusO8fJKgUsoa/nT/jwAfApWuJu0EGRCwam0zZ/jQOW9xSGiiz1tSRf4cgXyN fVQjegHoSNeagSEq2XytgzjwHQ+Pn+5HKvluSDBqXiKq6SZ22Ml9CKYqgNE87k+N tDD6b/IIIhbZQjuSPRp2zH/TB6HC7DmdGKgGDLrPyEVbl+fF81JNkO9a6l9oMDvW Vb3ZSYoiKT9ghEaRG1kWdQzxxFMi5bV+bSQ1d9kpbc7iNsYFu6vQCqM01mk/nSge vJ7tEveCZkzHlOeJ2fKWHEY2sPFPXbhHml1SAY1OtivXD3A4MhS3GaNWLnTIAU07 60DX/f2lPEsYW6UAH4Sffx70cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLi0wYj 6gGskCvz5Eu4NO7YeBmyMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mkdm6KPPmoJbnVY91/6l6d3pvRQvCwFH/g3d7Rb3jJt6JxOUVT5L h8szIujUhpRzufS6wfxulVPM+BspEwARGvTGLzrkR7p2GRXwwTWahnnSfnW79wMP ktJUMCpKCgRV8gHTJH01NnML1Yu3YZ6r01jzwBajqcHhA31yRSghk4tyB/Nx7xTe AqwxdEOYQW4AmShxhdztCbK0hyBnFTn8p8PBj8pbbHDrOeO9jSKUbSdlsJVaG9GI IbYw6C0hl8ssZ5LwAeQA4GFoejE3+rkdUd1C3ho82mhbmxlNCtZSbtSTZe0yJr1z BXQ2dsC7HLhmeT0WD+xlRsiycYw5Zi5F -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:03 2025 by rpki-client