$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: 4N7qkwgrWLErnAXVikimgQvSOwP4H++SPG1Vk/w23fM= Subject key identifier: C1:79:6F:98:08:FC:F7:5B:3B:6C:7C:3B:0E:2C:D3:EB:4C:F0:6B:2B Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 086F Signing time: Thu 12 Jun 2025 20:25:10 +0000 Manifest this update: Thu 12 Jun 2025 20:25:10 +0000 Manifest next update: Thu 19 Jun 2025 20:25:10 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: v6Ibrl3mpK9zDLZEkv9eBwND8Jy9YSoOa5lhYNtgth8=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Jun 12 20:25:10 2025 GMT Not After : Jun 19 20:25:10 2025 GMT Subject: CN=684b37a6-26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:0f:40:6d:a9:57:3d:69:ed:49:2a:bb:fd: 16:77:5c:f7:9f:13:39:2d:ff:a8:1c:a0:a3:c0:05: 31:5e:0f:d7:d7:59:5d:c0:7e:64:9c:bd:68:d0:67: 4a:7d:5f:11:c3:d5:85:c3:8a:6e:69:88:46:cf:ab: 62:51:b1:41:c8:99:ba:9f:f7:ca:85:a9:be:cc:06: cc:b7:6d:4c:55:a4:64:27:ff:93:4d:c3:f8:3d:26: 69:5f:3c:2b:02:8f:94:30:bf:cc:1c:6d:73:55:97: 74:0c:a5:f0:7d:87:68:28:3d:d7:73:2c:25:ba:c7: 98:81:cf:75:28:60:45:b1:7d:d8:fb:16:f5:7b:92: f2:8a:40:81:e5:03:6f:83:3a:ab:b1:e6:02:76:40: 8d:45:ab:ea:7f:0d:c1:6d:33:2f:4d:db:30:dd:aa: f9:1f:1d:8b:df:f3:b2:c0:b1:8b:f2:db:d0:12:a0: 9a:09:5d:38:6b:5a:bf:79:b0:0f:43:01:91:bc:80: b5:9b:dc:9a:58:d1:68:27:74:fb:07:1d:49:bd:15: 52:22:a2:fd:8b:e6:b4:be:44:19:04:39:74:36:42: b3:25:9d:06:86:ee:8a:98:db:31:b1:bb:cb:f3:1f: 02:65:0e:7e:60:bc:7a:4c:fb:06:35:7a:98:dc:38: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:6F:98:08:FC:F7:5B:3B:6C:7C:3B:0E:2C:D3:EB:4C:F0:6B:2B X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b9:b8:5f:ea:e6:4a:aa:b7:ea:c4:4c:20:dd:bb:10:fd:b1: 93:52:6b:f4:6b:82:cc:2d:34:ba:e6:85:26:0d:0b:f8:87:1a: ea:22:2b:3f:98:fe:d6:d6:11:86:ab:b5:9f:2b:85:ba:a0:70: 64:05:89:94:e2:35:94:df:42:f7:1b:4b:42:81:17:37:46:e0: d3:7b:83:06:2b:d4:c3:f5:9c:43:7e:53:0b:8d:68:3b:d0:3d: 9d:b7:b9:a8:33:98:bb:67:5d:01:89:5a:7a:07:af:38:da:30: 10:f8:fb:bd:d0:a7:11:af:a5:7c:b8:0b:94:02:db:82:68:aa: 21:ae:0b:14:fc:d8:15:39:f2:2f:a1:8a:c9:01:ec:18:d4:c3: 4b:1e:c9:41:57:3c:a9:35:2e:6f:d5:08:8e:35:3c:db:bb:e7: 4d:2e:eb:df:b0:f4:7f:0a:91:e9:b5:eb:55:51:2c:2a:c0:0d: 00:41:39:fc:96:84:5a:32:16:50:68:cc:81:46:db:cb:f3:73: 60:76:5b:75:29:3d:8e:67:c2:3b:aa:98:c0:ea:e9:9f:e9:e6: d7:7b:72:99:76:ef:48:3e:1f:0c:f1:1b:e9:b0:10:3f:a1:03: 86:f1:a1:df:c1:b7:f7:b3:b3:f8:87:c4:97:9e:d2:37:cc:b5: f9:57:99:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjUwNjEyMjAyNTEwWhcNMjUwNjE5MjAyNTEwWjAYMRYwFAYD VQQDEw02ODRiMzdhNi0yNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorIPQG2pVz1p7Ukqu/0Wd1z3nxM5Lf+oHKCjwAUxXg/X11ldwH5knL1o0GdK fV8Rw9WFw4puaYhGz6tiUbFByJm6n/fKham+zAbMt21MVaRkJ/+TTcP4PSZpXzwr Ao+UML/MHG1zVZd0DKXwfYdoKD3XcywluseYgc91KGBFsX3Y+xb1e5LyikCB5QNv gzqrseYCdkCNRavqfw3BbTMvTdsw3ar5Hx2L3/OywLGL8tvQEqCaCV04a1q/ebAP QwGRvIC1m9yaWNFoJ3T7Bx1JvRVSIqL9i+a0vkQZBDl0NkKzJZ0Ghu6KmNsxsbvL 8x8CZQ5+YLx6TPsGNXqY3Dh02QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF5b5gI /PdbO2x8Ow4s0+tM8GsrMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmubhf6uZKqrfqxEwg3bsQ/bGTUmv0a4LMLTS65oUmDQv4hxrqIis/ mP7W1hGGq7WfK4W6oHBkBYmU4jWU30L3G0tCgRc3RuDTe4MGK9TD9ZxDflMLjWg7 0D2dt7moM5i7Z10BiVp6B6842jAQ+Pu90KcRr6V8uAuUAtuCaKohrgsU/NgVOfIv oYrJAewY1MNLHslBVzypNS5v1QiONTzbu+dNLuvfsPR/CpHptetVUSwqwA0AQTn8 loRaMhZQaMyBRtvL83Ngdlt1KT2OZ8I7qpjA6umf6ebXe3KZdu9IPh8M8RvpsBA/ oQOG8aHfwbf3s7P4h8SXntI3zLX5V5mN -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:50 2025 by rpki-client