$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: XxMKFH5KRaauOdsL5ej7CoKs0Ya34Ifwn284ypPm2lw= Subject key identifier: 54:01:57:95:30:59:8C:73:00:80:1A:0F:C3:F2:48:2D:89:DE:39:59 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 16EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16C2 Signing time: Sat 14 Jun 2025 16:38:09 +0000 Manifest this update: Sat 14 Jun 2025 16:38:08 +0000 Manifest next update: Sat 21 Jun 2025 16:38:08 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: fMBOX6ubm8AIz5W21Ff1d6xtZin4AHjPeoktLpnPYg0=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5866 (0x16ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Jun 14 16:38:08 2025 GMT Not After : Jun 21 16:38:08 2025 GMT Subject: CN=684da571-f9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:7b:ad:98:0a:5f:a5:0d:7f:fc:ef:ed:6d: c8:72:fa:d7:3f:b0:4f:9b:5d:f2:4c:df:aa:3f:33: c2:fd:94:12:6c:8e:5f:cb:15:7a:9e:12:79:0a:fa: 58:69:68:a4:06:18:be:f7:75:92:3e:60:4f:25:f1: 90:29:01:64:29:4c:11:f3:e2:56:aa:e5:3e:7f:20: 5d:4e:bc:74:de:da:28:2b:63:28:1e:50:9f:18:70: 9c:85:3c:58:ba:33:c6:84:dd:d7:05:00:d0:de:3a: db:b8:c6:98:f6:43:b7:9a:59:0a:37:6a:22:a6:ca: 7b:45:e7:93:7e:e5:7a:c9:c0:b4:50:f1:aa:37:95: 88:ca:55:e5:9a:62:27:60:e8:e7:ed:16:d6:93:cb: e4:f0:19:1d:5c:cd:45:cf:79:7e:a5:71:45:c6:bc: c2:48:5d:40:98:02:1c:3b:f5:cc:85:45:24:65:e7: 4f:a2:cb:4d:4a:8c:f8:10:7f:28:93:c1:c4:14:4e: fe:8b:bd:61:c8:69:45:b9:8c:4c:5a:f3:f0:c9:7e: 52:46:92:ec:a5:b4:14:36:a0:a5:85:c0:63:7e:d1: 03:57:db:3f:12:b5:0b:2b:9c:e2:89:54:f1:e8:92: cc:74:af:05:8e:ea:b2:74:b1:9b:37:bf:20:8d:8b: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:57:95:30:59:8C:73:00:80:1A:0F:C3:F2:48:2D:89:DE:39:59 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:04:ef:6d:95:24:f9:b1:42:c9:e7:c8:e6:b6:d1:f4:e6:18: 72:13:1c:ab:b0:1c:b9:ef:41:aa:39:79:e7:b4:1d:e8:13:41: d2:9e:28:90:9e:44:8f:3d:9e:f3:11:46:c6:8a:01:43:a1:61: c1:42:82:f4:16:2e:81:bb:e2:2c:79:30:aa:dc:40:1f:66:c6: c0:fa:8b:6c:52:c5:cc:5d:40:40:27:af:23:f3:1c:09:e2:b5: 79:70:c2:0a:85:80:a9:15:00:de:ef:32:5a:66:8a:d3:66:34: 83:06:6f:46:bc:e4:88:bc:d2:dc:a7:7a:cf:c1:dc:1e:9b:35: c4:7f:1a:8b:ef:79:ff:d6:83:37:52:f2:5c:8d:2e:dc:13:83: 40:ae:80:25:4b:81:95:b3:5c:cb:7b:fb:5f:74:26:ac:24:b6: 02:94:46:ba:a8:45:e8:89:ff:96:6a:3e:d8:7f:12:51:4f:9a: ae:aa:4a:06:38:82:72:1a:76:14:66:be:65:6d:8d:da:a4:95: a9:78:6e:7d:e7:94:29:34:15:a7:ea:12:ac:c5:e7:27:5d:18: 6d:9a:80:77:96:0b:ce:ff:90:e1:63:20:45:df:0f:8a:5f:df: a3:8c:41:c1:c2:a6:0d:e1:66:15:7e:af:2e:72:f9:e6:b6:5d: 1e:f6:39:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwNjE0MTYzODA4WhcNMjUwNjIxMTYzODA4WjAYMRYwFAYD VQQDEw02ODRkYTU3MS1mOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmZ7rZgKX6UNf/zv7W3IcvrXP7BPm13yTN+qPzPC/ZQSbI5fyxV6nhJ5CvpY aWikBhi+93WSPmBPJfGQKQFkKUwR8+JWquU+fyBdTrx03tooK2MoHlCfGHCchTxY ujPGhN3XBQDQ3jrbuMaY9kO3mlkKN2oipsp7ReeTfuV6ycC0UPGqN5WIylXlmmIn YOjn7RbWk8vk8BkdXM1Fz3l+pXFFxrzCSF1AmAIcO/XMhUUkZedPostNSoz4EH8o k8HEFE7+i71hyGlFuYxMWvPwyX5SRpLspbQUNqClhcBjftEDV9s/ErULK5ziiVTx 6JLMdK8FjuqydLGbN78gjYt2eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQBV5Uw WYxzAIAaD8PySC2J3jlZMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADBO9tlST5sULJ58jmttH05hhyExyrsBy570GqOXnntB3oE0HSniiQ nkSPPZ7zEUbGigFDoWHBQoL0Fi6Bu+IseTCq3EAfZsbA+otsUsXMXUBAJ68j8xwJ 4rV5cMIKhYCpFQDe7zJaZorTZjSDBm9GvOSIvNLcp3rPwdwemzXEfxqL73n/1oM3 UvJcjS7cE4NAroAlS4GVs1zLe/tfdCasJLYClEa6qEXoif+Waj7YfxJRT5quqkoG OIJyGnYUZr5lbY3apJWpeG5955QpNBWn6hKsxecnXRhtmoB3lgvO/5DhYyBF3w+K X9+jjEHBwqYN4WYVfq8ucvnmtl0e9jn8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:54 2025 by rpki-client