$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: JMrCVsKqrSgGJxf7pteQ0Tkvo0Ry9OiJBTSJRCaA53M= Subject key identifier: DD:26:B9:28:FB:46:8B:FF:51:CA:C3:62:4E:80:BC:5D:10:A8:BF:17 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0C92 Signing time: Thu 12 Jun 2025 18:05:33 +0000 Manifest this update: Thu 12 Jun 2025 18:05:33 +0000 Manifest next update: Thu 19 Jun 2025 18:05:33 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: DCqj61djCTBxMdGhOOd+dTryab8jFmaMRKUjfH+fIxo=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: nc7TBefBbU0mXqPXG5FtS5khsHRLeEqmotd1zbLKCfY=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: QVZHVEKIjuuhqR8CaduzUx2n60lfnPfkbZyqpQZ1wv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Jun 12 18:05:33 2025 GMT Not After : Jun 19 18:05:33 2025 GMT Subject: CN=684b16ed-21b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:17:d2:e5:25:aa:27:68:94:df:90:1e:44: 19:a3:00:70:f7:2d:2c:09:4a:be:37:4f:97:f9:09: 3b:d8:13:53:73:94:62:c7:28:99:50:38:fb:f3:16: e8:06:78:88:aa:0e:7c:0f:e1:d6:cd:ec:f6:6a:25: 79:ae:4a:44:5c:27:50:e0:31:74:7c:ee:57:94:e9: 39:a0:1b:04:fb:66:6f:96:4d:99:dc:56:ae:e3:9d: 25:e6:c5:b8:7e:8e:d1:3f:87:10:10:01:92:09:c7: 62:e6:06:c4:fe:01:85:c6:da:49:53:cc:16:e5:f7: 81:6c:ae:f6:4a:61:60:cd:dc:77:b7:4c:48:fb:19: 05:ec:4f:cf:7c:27:2a:35:57:30:42:3c:27:24:fd: a1:c3:30:18:f0:ce:46:1f:bb:30:55:80:fb:95:ad: c0:8a:78:23:5c:88:22:71:a1:93:c1:c6:2d:a5:5f: 25:6e:12:3b:ae:d8:cf:dc:75:82:a1:f7:6b:99:1a: fc:11:f0:bd:34:0a:11:d7:3a:55:1d:3f:8b:94:45: b5:02:04:76:c2:8b:f5:b2:b2:98:64:b1:00:fd:55: 7a:10:ee:71:42:86:f4:36:36:8b:31:43:2b:1d:88: 1a:ed:e3:0a:c8:f1:e0:e0:21:04:aa:f5:00:8d:bf: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:26:B9:28:FB:46:8B:FF:51:CA:C3:62:4E:80:BC:5D:10:A8:BF:17 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a7:e3:1b:96:a8:5b:25:95:65:df:20:cb:40:9c:a8:7f:52: 7e:32:9a:df:84:f2:08:1f:78:a8:4f:74:9b:ff:4f:c3:26:22: 7c:98:92:fa:e7:8c:d8:df:8e:27:71:87:b8:c8:de:cc:5d:82: 9b:f1:3d:ad:fc:52:d1:50:11:08:2d:5d:ed:25:c0:08:ee:52: 95:ee:1a:11:bf:12:19:74:c2:0f:7c:1d:63:e9:06:aa:30:a5: 19:06:22:5d:cf:99:37:ce:d7:42:9e:e3:d1:64:1e:93:21:37: 5e:ed:2b:3d:39:e3:e2:40:a8:61:9e:ed:26:31:c2:04:9a:6b: c2:b1:ac:63:c3:2c:11:d7:cf:bc:b0:40:e3:63:1c:c3:60:ef: 58:11:5c:41:c8:cf:0b:35:5f:80:5c:b8:3d:75:ed:56:51:d8: 16:18:05:6e:e1:6f:7e:bb:4d:2f:41:e6:0d:6d:da:1c:59:e0: 02:e6:3d:26:b0:5f:82:69:59:1f:ba:5e:de:96:be:0e:ef:a1: c4:9a:cd:e6:b6:7c:bb:63:79:01:e7:be:1e:55:59:f5:88:8f: e8:10:48:4f:e1:bb:1f:d8:d0:51:56:30:43:74:cf:7f:39:71: ae:56:74:ff:c9:f4:65:a8:27:aa:b2:25:19:ac:b2:9a:37:13: 2a:55:06:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwNjEyMTgwNTMzWhcNMjUwNjE5MTgwNTMzWjAYMRYwFAYD VQQDEw02ODRiMTZlZC0yMWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvq0X0uUlqidolN+QHkQZowBw9y0sCUq+N0+X+Qk72BNTc5RixyiZUDj78xbo BniIqg58D+HWzez2aiV5rkpEXCdQ4DF0fO5XlOk5oBsE+2Zvlk2Z3Fau450l5sW4 fo7RP4cQEAGSCcdi5gbE/gGFxtpJU8wW5feBbK72SmFgzdx3t0xI+xkF7E/PfCcq NVcwQjwnJP2hwzAY8M5GH7swVYD7la3AingjXIgicaGTwcYtpV8lbhI7rtjP3HWC ofdrmRr8EfC9NAoR1zpVHT+LlEW1AgR2wov1srKYZLEA/VV6EO5xQob0NjaLMUMr HYga7eMKyPHg4CEEqvUAjb8hewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0muSj7 Rov/UcrDYk6AvF0QqL8XMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdp+MblqhbJZVl3yDLQJyof1J+MprfhPIIH3ioT3Sb/0/DJiJ8mJL6 54zY344ncYe4yN7MXYKb8T2t/FLRUBEILV3tJcAI7lKV7hoRvxIZdMIPfB1j6Qaq MKUZBiJdz5k3ztdCnuPRZB6TITde7Ss9OePiQKhhnu0mMcIEmmvCsaxjwywR18+8 sEDjYxzDYO9YEVxByM8LNV+AXLg9de1WUdgWGAVu4W9+u00vQeYNbdocWeAC5j0m sF+CaVkful7elr4O76HEms3mtny7Y3kB574eVVn1iI/oEEhP4bsf2NBRVjBDdM9/ OXGuVnT/yfRlqCeqsiUZrLKaNxMqVQY2 -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:22 2025 by rpki-client