$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: JW5tGSAQT5fdCaAbej0ma1kaLPiz0SqhlupOllfqO+c= Subject key identifier: 29:89:F4:E2:31:40:3A:C8:4E:4D:17:86:AA:89:03:BC:DE:97:79:09 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 5F Signing time: Thu 19 Jun 2025 06:28:44 +0000 Manifest this update: Thu 19 Jun 2025 06:28:44 +0000 Manifest next update: Thu 26 Jun 2025 06:28:44 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: lH3S8kcB9twkGnxtwU5xGA6w4AuFZrllFoyDh4SkT/A=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Jun 19 06:28:44 2025 GMT Not After : Jun 26 06:28:44 2025 GMT Subject: CN=6853ae1c-8d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:9b:25:1e:79:d4:b6:87:a1:79:24:06:cc: 73:b4:52:00:2b:8e:a1:fc:27:6b:0e:21:8d:51:0d: ad:69:1e:da:15:79:d8:8c:3d:79:6e:7f:a0:14:05: 70:77:ab:fc:0d:69:97:cb:0a:51:8a:cc:66:c3:84: 0b:07:d6:8b:c3:29:8d:ce:fc:af:52:ef:f0:ff:35: 65:03:33:3c:3f:60:45:7a:10:a0:ca:62:56:36:ec: 33:16:26:f4:7f:dd:68:c7:a9:ec:dd:4b:f0:2a:25: d1:27:73:90:e1:68:d6:86:25:6e:56:ab:2f:ba:4f: af:1f:bb:bd:0e:67:d4:cd:57:d7:82:0b:92:aa:53: 75:65:bc:60:7c:36:64:21:cf:ce:e3:17:c4:e4:54: b1:cf:8b:32:4a:31:f0:d5:19:63:05:32:11:cf:35: 96:1d:31:43:b9:4a:ce:81:ab:bf:f6:66:12:68:72: e2:e6:3b:ef:b1:23:ad:4c:98:68:51:63:2d:62:d6: f6:4e:69:e1:19:48:b6:37:71:59:0c:e9:96:3c:9b: 29:10:c2:31:22:96:2d:96:6c:25:5b:42:cd:04:8b: ea:67:12:e9:c3:47:52:df:1f:98:25:34:6a:f9:d0: 20:01:24:9a:b6:68:b5:ae:1d:80:41:f4:05:4d:1c: bd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:F4:E2:31:40:3A:C8:4E:4D:17:86:AA:89:03:BC:DE:97:79:09 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:92:6d:a2:90:c8:0c:7a:83:74:72:85:65:9e:0e:6d:29: fd:f0:fe:91:10:4b:b3:76:28:2a:f6:3a:a4:4a:a7:1b:6d:6c: 74:e2:26:ae:33:16:8a:d3:44:d6:c7:7a:69:a9:ec:91:ab:f6: 0b:db:a4:90:9d:36:e0:18:da:a0:9a:25:1f:41:93:c7:39:e4: cf:bc:08:7e:db:0e:13:c5:8d:7a:8b:79:7e:56:5d:5f:5c:9c: fb:59:2c:bd:08:b7:6a:ae:fb:c3:f8:49:da:38:9f:4f:51:bd: a6:c5:ab:39:c9:28:d7:47:77:6a:28:1f:9f:bd:a5:8d:b1:8c: 2b:04:ed:b2:e8:2a:9f:2c:8e:5c:54:9c:4a:2a:81:d1:7c:c8: 9e:1b:70:20:25:0e:5c:e0:c3:b8:85:b5:14:1d:19:0a:ef:80: 7f:16:b7:07:47:5b:e3:b2:ac:df:e6:e1:61:51:55:be:35:4c: 96:35:d3:cd:ba:da:b7:9d:3d:04:16:41:57:cb:1d:24:11:79: 70:10:13:f1:e3:03:c4:61:44:01:c2:f8:f2:e6:70:42:7c:86: 41:b0:5f:09:48:e8:73:87:30:70:24:b3:57:81:a5:03:89:ff: 9e:f9:52:6f:a2:0c:ba:15:6c:f2:3d:91:8d:fd:37:c3:11:1b: ce:1b:97:a1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NEYzNDExMC8GA1UEBRMoNEIzMTA4QkM1NzU4ODQzRDYzREZGNkZDNjQwOTdGMkIx NjQ0Q0I4QTAeFw0yNTA2MTkwNjI4NDRaFw0yNTA2MjYwNjI4NDRaMBgxFjAUBgNV BAMTDTY4NTNhZTFjLThkNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYWJslHnnUtoeheSQGzHO0UgArjqH8J2sOIY1RDa1pHtoVediMPXluf6AUBXB3 q/wNaZfLClGKzGbDhAsH1ovDKY3O/K9S7/D/NWUDMzw/YEV6EKDKYlY27DMWJvR/ 3WjHqezdS/AqJdEnc5DhaNaGJW5Wqy+6T68fu70OZ9TNV9eCC5KqU3VlvGB8NmQh z87jF8TkVLHPizJKMfDVGWMFMhHPNZYdMUO5Ss6Bq7/2ZhJocuLmO++xI61MmGhR Yy1i1vZOaeEZSLY3cVkM6ZY8mykQwjEili2WbCVbQs0Ei+pnEunDR1LfH5glNGr5 0CABJJq2aLWuHYBB9AVNHL2PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKYn04jFA OshOTReGqokDvN6XeQkwHwYDVR0jBBgwFoAUSzEIvFdYhD1j3/b8ZAl/KxZEy4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzREMjJFRUUwQkRF OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3pFSXZGZFloRDFqM19iOFpBbF9LeFpFeTRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 RjM0LzREMjJFRUUwQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL1N6RUl2RmRZaEQx ajNfYjhaQWxfS3haRXk0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABM2km2ikMgMeoN0coVlng5tKf3w/pEQS7N2KCr2OqRKpxttbHTiJq4z ForTRNbHemmp7JGr9gvbpJCdNuAY2qCaJR9Bk8c55M+8CH7bDhPFjXqLeX5WXV9c nPtZLL0It2qu+8P4Sdo4n09RvabFqznJKNdHd2ooH5+9pY2xjCsE7bLoKp8sjlxU nEoqgdF8yJ4bcCAlDlzgw7iFtRQdGQrvgH8WtwdHW+OyrN/m4WFRVb41TJY10826 2redPQQWQVfLHSQReXAQE/HjA8RhRAHC+PLmcEJ8hkGwXwlI6HOHMHAks1eBpQOJ /575Um+iDLoVbPI9kY39N8MRG84bl6E= -----END CERTIFICATE-----Generated at Fri Jun 20 08:27:12 2025 by rpki-client