$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: Gsw6Ptt2q/MO7QFC8ET7E7eX8hbjOxGnIuz0Ah4lxQ0= Subject key identifier: 78:F4:42:F4:B4:05:C6:DC:B3:E0:B2:0B:A4:E9:C7:21:9A:C4:02:40 Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 07F1 Signing time: Sat 14 Jun 2025 15:55:40 +0000 Manifest this update: Sat 14 Jun 2025 15:55:40 +0000 Manifest next update: Sat 21 Jun 2025 15:55:40 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: AMMiY7PcVDFIWUm1uUDTt2AuThJi3+5mGexgjnXs4vg=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: 8D5ksmfc3aXF/CCypLFYWvFyrGXF0UBfGXqLK0BT+9c=) 3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: p/AuYRiNnSg4t0PmmsqbbQiBX6hKVTQkj6NVyO5NMng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Jun 14 15:55:40 2025 GMT Not After : Jun 21 15:55:40 2025 GMT Subject: CN=684d9b7c-cfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:0b:88:fc:ab:3d:fc:af:a7:24:12:f4:19: de:7f:e8:93:a2:36:e1:f6:cc:2d:99:de:8a:92:4d: d1:57:13:b2:e2:9c:ae:c0:37:bc:51:09:b5:f4:0e: 49:00:4d:e0:d8:2c:6c:03:83:e5:3f:e6:1e:fc:25: ff:b8:bd:af:7b:38:de:9d:4a:d1:5e:8c:54:2c:b6: eb:1b:b8:b1:4e:a8:b3:5e:8f:e1:95:80:90:46:ce: 27:03:51:df:78:b2:58:43:b9:6e:c3:36:08:36:43: 03:4b:8d:3f:6e:cb:75:82:1d:f8:f3:c1:78:83:9b: 3e:e1:ae:a1:a0:95:9f:19:5a:c7:33:3d:f8:52:b4: f9:13:89:cd:35:48:b1:a6:c4:96:7b:91:00:75:ff: c1:a7:3e:76:e1:b0:23:ae:b6:96:64:dd:a1:75:de: d7:51:ec:6a:6f:5b:5f:83:c7:d5:ab:79:ef:ae:11: 25:d8:2d:cc:cb:fb:c6:29:59:54:cc:29:ad:42:1a: 31:d6:9e:f1:99:32:bc:50:07:60:c3:bb:99:40:44: d0:a7:b6:01:4f:28:ca:c8:6d:a3:a4:8d:50:c7:67: 16:32:ef:1a:ea:8f:e8:9f:72:da:14:5c:af:7f:9b: 87:e3:58:29:e3:e2:88:e6:42:46:4b:bf:93:65:70: c0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:42:F4:B4:05:C6:DC:B3:E0:B2:0B:A4:E9:C7:21:9A:C4:02:40 X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:89:67:cf:87:e5:9d:2c:2b:13:cb:22:67:45:32:74:d4: ed:d9:a4:1b:e7:0b:d3:a9:4d:27:24:fd:0d:b4:9d:cd:4d:33: 8e:dd:de:64:08:59:93:eb:6c:54:f5:4b:74:cf:84:76:41:e1: 35:e7:f6:69:95:de:47:2f:c7:ef:4e:ca:50:06:3b:4c:5a:72: 37:e9:1a:cf:71:b7:10:a2:33:c8:62:84:06:e9:dd:85:c7:40: be:12:1f:58:46:e3:2f:df:b0:02:b2:b3:96:d4:05:63:4b:20: 4e:cb:89:02:45:7b:ff:45:63:2d:87:8f:e2:c9:1f:f3:a0:c3: c4:b3:ac:d2:d8:0f:33:e9:48:4d:fe:b5:d8:d0:34:64:02:83: fd:ba:5f:91:09:a6:a2:6f:14:51:de:d4:5c:e7:86:c0:55:8d: 0e:a7:cb:23:d8:5a:51:eb:4f:a4:fa:e8:44:53:9f:66:72:bf: 93:c6:d1:91:9b:9a:80:5f:88:a7:e2:9d:6a:25:97:d2:0a:55: 7c:16:e8:89:33:5b:ed:18:d1:8d:a7:a5:f5:be:19:e5:9a:72: 65:dc:75:2a:75:81:41:46:db:9d:02:8e:77:83:11:99:dd:9e: 4d:65:8a:73:e8:6c:47:c3:11:d2:63:41:81:99:6f:de:d2:d8: d6:ee:27:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjUwNjE0MTU1NTQwWhcNMjUwNjIxMTU1NTQwWjAYMRYwFAYD VQQDEw02ODRkOWI3Yy1jZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQELiPyrPfyvpyQS9Bnef+iTojbh9swtmd6Kkk3RVxOy4pyuwDe8UQm19A5J AE3g2CxsA4PlP+Ye/CX/uL2vezjenUrRXoxULLbrG7ixTqizXo/hlYCQRs4nA1Hf eLJYQ7luwzYINkMDS40/bst1gh3488F4g5s+4a6hoJWfGVrHMz34UrT5E4nNNUix psSWe5EAdf/Bpz524bAjrraWZN2hdd7XUexqb1tfg8fVq3nvrhEl2C3My/vGKVlU zCmtQhox1p7xmTK8UAdgw7uZQETQp7YBTyjKyG2jpI1Qx2cWMu8a6o/on3LaFFyv f5uH41gp4+KI5kJGS7+TZXDAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj0QvS0 Bcbcs+CyC6TpxyGaxAJAMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC23Ylnz4flnSwrE8siZ0UydNTt2aQb5wvTqU0nJP0NtJ3NTTOO3d5k CFmT62xU9Ut0z4R2QeE15/Zpld5HL8fvTspQBjtMWnI36RrPcbcQojPIYoQG6d2F x0C+Eh9YRuMv37ACsrOW1AVjSyBOy4kCRXv/RWMth4/iyR/zoMPEs6zS2A8z6UhN /rXY0DRkAoP9ul+RCaaibxRR3tRc54bAVY0Op8sj2FpR60+k+uhEU59mcr+TxtGR m5qAX4in4p1qJZfSClV8FuiJM1vtGNGNp6X1vhnlmnJl3HUqdYFBRtudAo53gxGZ 3Z5NZYpz6GxHwxHSY0GBmW/e0tjW7idb -----END CERTIFICATE-----Generated at Mon Jun 16 05:19:27 2025 by rpki-client