$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: zwwccOlsZa4WwhxpRtiHK8ro0cbnr8iMfpIFo38JwtQ= Subject key identifier: 6D:5E:E6:34:AD:1D:63:C5:E7:8B:A1:28:43:B2:8B:B6:EA:79:03:4C Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 7B Signing time: Thu 19 Jun 2025 06:05:52 +0000 Manifest this update: Thu 19 Jun 2025 06:05:51 +0000 Manifest next update: Thu 26 Jun 2025 06:05:51 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: il8xb2oKrCV4UZO4xNjcS9BuJpWM/M3q3Lm65Rk+YKg=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: 0fdxeAEBe9WDBbNHH1E08sqfA2VEHdavddZ4/AMBK2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Jun 19 06:05:51 2025 GMT Not After : Jun 26 06:05:51 2025 GMT Subject: CN=6853a8c0-0222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:e8:a7:2d:a0:18:c0:57:c3:be:c6:4b:f1: 40:8e:1e:4f:8b:76:65:b5:0c:68:6e:d4:d2:d1:39: 4f:c5:17:29:05:e1:16:cb:30:15:38:24:80:84:2c: 6c:9b:19:a3:50:48:64:ab:69:41:f3:98:89:f8:fb: 44:a4:e5:09:1e:84:1d:f8:9c:2f:df:e0:3f:1e:bd: aa:6e:95:39:e3:d8:06:8d:33:d6:a0:10:3c:89:29: f8:6d:29:e1:d4:71:c1:34:eb:03:28:b8:34:7d:65: 6f:53:88:3c:47:30:90:3a:cc:87:37:dd:1c:cc:4f: 3e:0a:57:fc:e9:6e:ea:e9:c9:e0:92:78:d9:9c:4b: 57:42:6e:d7:47:62:3a:db:d2:d8:f2:ec:fc:e2:38: 19:dc:e3:a3:40:85:92:dd:8e:76:14:d9:14:1b:ef: 63:38:96:f0:71:c1:62:ab:0e:22:ab:96:86:c5:da: ed:50:96:62:6f:63:fa:b3:8d:4e:b0:b3:43:61:1d: 08:d0:e8:8a:4b:45:e0:c5:cc:4e:ba:45:f4:8d:ed: 90:4a:e2:65:31:53:dd:fe:a5:c8:88:8f:4f:c7:d2: 60:57:ba:fd:e3:46:f9:b2:8d:c6:a7:5e:85:8c:77: ba:81:9f:87:65:a1:e6:b6:c9:cc:69:ee:41:9a:02: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5E:E6:34:AD:1D:63:C5:E7:8B:A1:28:43:B2:8B:B6:EA:79:03:4C X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:75:e2:3c:20:3e:f8:0b:6e:a0:73:29:27:76:ea:79:89:bd: 75:fb:e4:28:45:8d:4e:25:68:58:e6:5a:1d:02:ba:17:1f:e7: 16:34:0a:f7:59:f9:c8:50:2a:fc:12:c0:11:3a:63:9d:c9:10: f9:ee:a9:9d:2c:36:66:b6:c2:ef:71:f8:54:61:8d:34:63:14: eb:5a:ca:eb:be:68:44:30:c3:49:da:64:6a:7e:a6:69:0a:70: 79:f6:66:9e:10:a1:36:b2:06:32:d3:35:18:ab:1b:92:0f:1a: 98:ee:40:8d:f6:bb:01:14:c4:0b:71:22:73:0c:3b:27:94:90: 29:18:39:17:77:d6:b2:3e:39:76:e3:fc:56:2a:4f:1b:2d:7e: 41:70:9f:7c:30:fe:25:ce:1a:2a:36:79:49:10:d8:a8:e7:35: c9:40:5f:26:ba:00:35:d7:0a:0a:1d:bd:c6:b2:f6:c9:41:fd: 34:f4:5a:77:e4:8a:64:93:42:e8:3d:f4:8f:8e:6e:6e:a4:0b: 78:46:41:eb:a8:9b:65:01:d1:cb:c1:1e:b3:d0:cf:58:20:ba: bc:7e:dd:09:e8:db:d2:e6:d2:6b:70:28:e2:2d:ce:dc:68:0a: b4:c2:62:1c:0d:11:ef:5d:c9:90:38:77:01:d0:c2:e2:1e:90: 07:be:82:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoRjQ0NEI4RERBQzFBMkFFQzlDOThEODk4MTYxQzczNDgy QzJFRDQ4ODAeFw0yNTA2MTkwNjA1NTFaFw0yNTA2MjYwNjA1NTFaMBgxFjAUBgNV BAMTDTY4NTNhOGMwLTAyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8IeinLaAYwFfDvsZL8UCOHk+LdmW1DGhu1NLROU/FFykF4RbLMBU4JICELGyb GaNQSGSraUHzmIn4+0Sk5QkehB34nC/f4D8evapulTnj2AaNM9agEDyJKfhtKeHU ccE06wMouDR9ZW9TiDxHMJA6zIc33RzMTz4KV/zpburpyeCSeNmcS1dCbtdHYjrb 0tjy7PziOBnc46NAhZLdjnYU2RQb72M4lvBxwWKrDiKrlobF2u1QlmJvY/qzjU6w s0NhHQjQ6IpLReDFzE66RfSN7ZBK4mUxU93+pciIj0/H0mBXuv3jRvmyjcanXoWM d7qBn4dloea2ycxp7kGaAvHHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbV7mNK0d Y8Xni6EoQ7KLtup5A0wwHwYDVR0jBBgwFoAU9ES43awaKuycmNiYFhxzSCwu1Igw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzcwMzFBMUVDOTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOUVTNDNhd2FLdXljbU5pWUZoeHpTQ3d1MUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzcwMzFBMUVDOTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyLzlFUzQzYXdhS3V5 Y21OaVlGaHh6U0N3dTFJZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKN14jwgPvgLbqBzKSd26nmJvXX75ChFjU4laFjmWh0Cuhcf5xY0CvdZ +chQKvwSwBE6Y53JEPnuqZ0sNma2wu9x+FRhjTRjFOtayuu+aEQww0naZGp+pmkK cHn2Zp4QoTayBjLTNRirG5IPGpjuQI32uwEUxAtxInMMOyeUkCkYORd31rI+OXbj /FYqTxstfkFwn3ww/iXOGio2eUkQ2KjnNclAXya6ADXXCgodvcay9slB/TT0Wnfk imSTQug99I+Obm6kC3hGQeuom2UB0cvBHrPQz1ggurx+3Qno29Lm0mtwKOItztxo CrTCYhwNEe9dyZA4dwHQwuIekAe+gnA= -----END CERTIFICATE-----Generated at Thu Jun 19 17:47:50 2025 by rpki-client