$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: 0ECXYrhvpKs9Tbi2Ez8n5JRZsbfh+VwKKAKuGBWB9U8= Subject key identifier: 00:4D:A1:33:56:4D:6A:A7:C9:74:8D:E4:87:48:BE:6E:8C:2F:3D:D8 Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 8A Signing time: Thu 19 Jun 2025 05:55:14 +0000 Manifest this update: Thu 19 Jun 2025 05:55:13 +0000 Manifest next update: Thu 26 Jun 2025 05:55:13 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: esgd25MsNnEHjn5xwheHP4nDo2gQ/+udl5T98lowU7w=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: IVX22Sj0l4iAKc50j77MELQdp1CwcB3skhe7+xJHsEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Jun 19 05:55:13 2025 GMT Not After : Jun 26 05:55:13 2025 GMT Subject: CN=6853a642-2bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:4e:49:3c:ed:75:4f:95:0b:63:98:bd:b3: 17:e4:77:1f:7f:3f:e3:c3:10:5a:d0:39:09:bf:86: db:98:35:43:3a:8e:8d:ce:a5:88:5f:79:76:7c:8d: 43:f3:0b:e9:69:a6:eb:71:a4:35:20:84:a9:4f:97: 8c:4d:74:c4:f2:76:a9:ca:b0:3a:51:fc:58:55:68: 31:b9:fd:a0:f1:1d:93:e6:53:d4:34:4b:cf:30:75: a3:00:57:9a:a6:5d:af:8a:e3:16:5e:ec:30:6f:b3: cf:fc:b3:b0:66:e2:a2:a5:60:3f:2e:b8:64:b4:ca: 5e:90:da:08:38:b9:3d:5e:ec:e9:26:e8:7f:8a:18: 01:a1:a7:41:23:7a:41:e7:56:1a:92:06:af:65:35: 34:f2:22:90:e1:46:24:b9:ad:30:f2:37:54:9c:d6: 19:79:dc:23:3b:77:9b:f8:e4:38:09:05:68:2e:61: 1d:49:31:86:eb:f2:24:19:a7:47:ea:1a:54:7c:3b: ba:ce:fc:db:d1:39:7d:e2:48:b7:24:34:73:e1:b1: 46:8b:87:c4:34:b3:fd:54:d6:a2:c2:09:68:56:6e: 16:53:c6:99:23:cb:97:17:c4:37:c8:95:6e:9f:0f: b2:dd:d5:4e:fa:28:77:65:c5:79:f4:49:06:1d:75: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:A1:33:56:4D:6A:A7:C9:74:8D:E4:87:48:BE:6E:8C:2F:3D:D8 X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4f:13:64:74:5f:57:ce:8d:e8:b6:e2:66:27:64:87:79:52: 8e:60:bb:72:45:6f:1d:14:4f:7a:ef:4e:ac:87:fc:37:0a:4d: 4a:a7:09:0e:ea:c1:a5:31:42:ae:cc:27:13:9d:77:b8:68:8d: 17:50:75:1a:98:74:bc:c9:93:e6:d5:3e:90:e2:50:0f:00:33: 4c:3c:15:2a:d7:80:d5:bd:73:c7:a2:0c:8f:58:70:b0:02:83: 33:b6:87:77:0a:cf:2a:01:fd:40:bb:6e:7b:e5:af:c6:f8:65: f1:a9:3d:bb:14:59:09:19:90:6b:45:1a:6c:8b:5c:59:37:f5: 58:08:99:87:a1:6f:5f:a5:ca:ec:16:21:69:c4:03:b3:34:05: 7c:e6:72:bc:82:e4:3f:7d:37:c9:cb:f9:5f:ec:7c:5e:c2:9d: cb:f0:05:5b:85:44:b9:e0:bb:53:85:d7:2b:21:06:1b:37:10: c3:f4:81:fb:f6:71:d3:f8:ad:06:82:1f:8d:79:85:70:d9:fd: 12:ea:30:e3:25:f1:fb:b3:5b:af:d9:fa:dd:14:a5:8f:0a:90: 7d:91:76:fa:ce:c9:1a:14:ad:6e:5d:7c:f3:6f:bc:83:39:4e: 9b:11:02:90:b7:47:bc:13:14:5b:56:ac:d4:b3:8a:d6:30:da: f7:f3:13:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDFCREVCMEMyNzVDOTBFODFCRkEzQUFGRTIxM0U0RTcx MjFFQjczNEEwHhcNMjUwNjE5MDU1NTEzWhcNMjUwNjI2MDU1NTEzWjAYMRYwFAYD VQQDEw02ODUzYTY0Mi0yYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK1OSTztdU+VC2OYvbMX5Hcffz/jwxBa0DkJv4bbmDVDOo6NzqWIX3l2fI1D 8wvpaabrcaQ1IISpT5eMTXTE8napyrA6UfxYVWgxuf2g8R2T5lPUNEvPMHWjAFea pl2viuMWXuwwb7PP/LOwZuKipWA/LrhktMpekNoIOLk9XuzpJuh/ihgBoadBI3pB 51YakgavZTU08iKQ4UYkua0w8jdUnNYZedwjO3eb+OQ4CQVoLmEdSTGG6/IkGadH 6hpUfDu6zvzb0Tl94ki3JDRz4bFGi4fENLP9VNaiwgloVm4WU8aZI8uXF8Q3yJVu nw+y3dVO+ih3ZcV59EkGHXWQBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABNoTNW TWqnyXSN5IdIvm6MLz3YMB8GA1UdIwQYMBaAFBvesMJ1yQ6Bv6Oq/iE+TnEh63NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS8xM0Q4MDYwODgy NDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRvR19vNnItSVQ1T2NTSHJj MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS8xM0Q4MDYwODgyNDIxMUVGQUQzRDgxODFDNEY5QUUwMi9HOTZ3d25YSkRv R19vNnItSVQ1T2NTSHJjMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2TxNkdF9Xzo3otuJmJ2SHeVKOYLtyRW8dFE96706sh/w3Ck1KpwkO 6sGlMUKuzCcTnXe4aI0XUHUamHS8yZPm1T6Q4lAPADNMPBUq14DVvXPHogyPWHCw AoMztod3Cs8qAf1Au2575a/G+GXxqT27FFkJGZBrRRpsi1xZN/VYCJmHoW9fpcrs FiFpxAOzNAV85nK8guQ/fTfJy/lf7Hxewp3L8AVbhUS54LtThdcrIQYbNxDD9IH7 9nHT+K0Ggh+NeYVw2f0S6jDjJfH7s1uv2frdFKWPCpB9kXb6zskaFK1uXXzzb7yD OU6bEQKQt0e8ExRbVqzUs4rWMNr38xPs -----END CERTIFICATE-----Generated at Thu Jun 19 12:12:53 2025 by rpki-client