$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json) Hash identifier: m4cxO5RZpAmYwBQKPd25xWFkzSllJTRlNvhctjhmOnY= Subject key identifier: CC:BA:98:8B:56:0F:33:70:56:34:01:04:E5:6B:9F:A8:70:B7:4E:4A Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft Manifest number: 01CA Signing time: Fri 13 Jun 2025 02:04:17 +0000 Manifest this update: Fri 13 Jun 2025 02:04:17 +0000 Manifest next update: Fri 20 Jun 2025 02:04:17 +0000 Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: iJ/nfnHwCJu6Czg7h2O6hfnt3FoAJgdJqTPAZ9rvOkc=) 2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: C5xmuiW1qdvlYmxgBJhQt0Eam4dFMifTqr76aJr0Pzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48 Validity Not Before: Jun 13 02:04:17 2025 GMT Not After : Jun 20 02:04:17 2025 GMT Subject: CN=684b8721-0bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e9:78:ac:d1:a0:d7:4a:05:9a:fe:c2:57:41: 73:b8:d8:f0:ad:87:74:43:10:6a:6e:ef:a2:0d:6b: 5a:b4:ca:8a:1a:c0:54:d7:2a:85:2e:4e:ef:48:82: b2:2a:fe:10:35:ab:54:59:49:65:bb:bc:5f:5f:87: 36:d4:86:a9:c8:65:cb:0a:e4:6b:1e:b1:a0:6e:ba: d1:25:61:f1:2d:87:07:17:bb:5e:02:d1:06:34:f9: 95:ee:91:84:02:c1:81:4a:c8:00:7b:88:db:41:1a: b2:80:c7:51:e8:4b:d7:7c:0e:12:00:13:77:00:8d: 5d:63:d7:67:85:00:91:8c:b8:1f:30:aa:27:c6:39: 8d:0d:ed:4f:e6:b1:86:43:16:9c:9d:77:89:82:96: 3a:01:4a:eb:d4:39:61:45:ae:10:e3:77:3f:86:47: 6d:c8:26:51:19:99:d2:ad:1b:8b:c1:95:7c:da:a7: eb:a9:4d:42:08:1a:40:ca:ab:45:8a:b6:cb:d1:d6: 4d:ce:a8:d7:93:dd:1b:c7:ad:65:29:88:25:eb:c4: 37:fc:fb:3a:d9:59:74:b8:c7:de:25:6b:5f:1c:ea: 9f:2d:6a:3f:c8:c6:8d:6d:d1:94:f7:ae:e5:f5:93: 37:c7:3f:05:ba:5a:8c:cb:eb:0f:2e:ee:00:fd:c7: ba:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:98:8B:56:0F:33:70:56:34:01:04:E5:6B:9F:A8:70:B7:4E:4A X509v3 Authority Key Identifier: keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:27:25:b0:28:0e:1a:49:e5:84:8f:20:2b:2f:6f:5b:3d:cc: a3:d2:07:f0:84:0d:d9:cd:22:ea:30:0a:45:10:ef:8e:87:11: 6a:b4:c4:8e:48:8d:6e:94:91:02:2a:1c:71:e1:a8:3d:39:dd: 0d:b9:3f:0e:7b:4b:c4:1b:3f:37:8d:ce:93:cb:b9:a6:21:cb: 46:ee:ac:e4:46:a9:e9:14:97:45:6d:75:cc:70:dd:67:ff:79: 45:94:21:d0:19:fd:1d:20:b2:ea:d2:47:18:11:eb:7a:e5:38: 11:d0:32:b6:5c:f5:ad:e4:3f:58:92:21:cf:38:38:81:cf:ce: fa:d9:43:eb:b6:99:0b:69:15:fe:44:ff:64:52:f4:81:3f:32: 36:ba:3d:c9:d0:9c:a3:76:f8:a2:4b:3e:5b:0e:a2:b9:06:9c: 92:a3:0e:97:c7:df:01:c2:48:cd:dd:2e:3f:74:cc:54:94:e9: 94:60:f7:fa:db:64:76:35:16:57:02:a9:ed:c3:15:dd:89:3e: 51:0e:5d:6a:84:27:ce:76:ef:f3:45:e1:79:ac:35:d3:c7:12: 11:ea:56:1f:21:14:ff:aa:df:1c:66:a5:89:e2:b1:e1:6b:74: 94:b7:ab:fd:38:43:e8:c9:63:65:bc:0e:7d:d1:be:77:f7:70: ee:49:b5:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBNDgxMTAvBgNVBAUTKEY1RkQyNzRBRjI3Q0U5NUY2OTJEQjgwQkU4RUY2N0Mz MjQ2MDJCNDgwHhcNMjUwNjEzMDIwNDE3WhcNMjUwNjIwMDIwNDE3WjAYMRYwFAYD VQQDEw02ODRiODcyMS0wYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ul4rNGg10oFmv7CV0FzuNjwrYd0QxBqbu+iDWtatMqKGsBU1yqFLk7vSIKy Kv4QNatUWUllu7xfX4c21IapyGXLCuRrHrGgbrrRJWHxLYcHF7teAtEGNPmV7pGE AsGBSsgAe4jbQRqygMdR6EvXfA4SABN3AI1dY9dnhQCRjLgfMKonxjmNDe1P5rGG QxacnXeJgpY6AUrr1DlhRa4Q43c/hkdtyCZRGZnSrRuLwZV82qfrqU1CCBpAyqtF irbL0dZNzqjXk90bx61lKYgl68Q3/Ps62Vl0uMfeJWtfHOqfLWo/yMaNbdGU967l 9ZM3xz8FulqMy+sPLu4A/ce67wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMy6mItW DzNwVjQBBOVrn6hwt05KMB8GA1UdIwQYMBaAFPX9J0ryfOlfaS24C+jvZ8MkYCtI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkE0OC9GNzM3MTNGNjk3 RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZWOXBMYmdMNk85bnd5UmdL MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmMG5Tdko4NlY5cExiZ0w2Tzlud3lSZ0swZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkE0OC9GNzM3MTNGNjk3RDExMUVEQjFBMjU0NDFDNEY5QUUwMi85ZjBuU3ZKODZW OXBMYmdMNk85bnd5UmdLMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0JyWwKA4aSeWEjyArL29bPcyj0gfwhA3ZzSLqMApFEO+OhxFqtMSO SI1ulJECKhxx4ag9Od0NuT8Oe0vEGz83jc6Ty7mmIctG7qzkRqnpFJdFbXXMcN1n /3lFlCHQGf0dILLq0kcYEet65TgR0DK2XPWt5D9YkiHPODiBz8762UPrtpkLaRX+ RP9kUvSBPzI2uj3J0JyjdviiSz5bDqK5BpySow6Xx98BwkjN3S4/dMxUlOmUYPf6 22R2NRZXAqntwxXdiT5RDl1qhCfOdu/zReF5rDXTxxIR6lYfIRT/qt8cZqWJ4rHh a3SUt6v9OEPoyWNlvA590b5393DuSbVm -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:56 2025 by rpki-client