$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft File: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft (raw, json) Hash identifier: JfCpuz6UXONjt0Ln7kbrBn9bMXp7ruMhI2ofP1F6ubY= Subject key identifier: 59:A7:53:8E:EB:A8:B1:A9:CA:35:1F:4E:92:98:95:37:31:0D:DD:EB Authority key identifier: 76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C Certificate issuer: /CN=A9150733/serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft Manifest number: 0C9D Signing time: Wed 18 Jun 2025 19:05:12 +0000 Manifest this update: Wed 18 Jun 2025 19:05:12 +0000 Manifest next update: Wed 25 Jun 2025 19:05:12 +0000 Files and hashes: 1: dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl (hash: i0xC1iA8HoGH1T3EKSjeV4/EwJ0nuIcdZ51y9ef7EF4=) 2: DC41F9C4214411EEBC685C79C4F9AE02.roa (hash: EII0j0htPqZRd+8Muval63G6bvgUY1532bbGJQef7wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150733, serialNumber=769D44D9B41CBBCFC536713B9B9528F6CAB87C5C Validity Not Before: Jun 18 19:05:12 2025 GMT Not After : Jun 25 19:05:12 2025 GMT Subject: CN=68530de8-9d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:70:03:fa:74:e8:03:ec:6d:57:a7:6a:e9: f1:d3:12:84:4f:d0:28:c0:11:8d:cc:9f:f2:66:65: d1:3c:5e:32:8c:b8:18:38:af:69:e3:05:e0:77:f8: e5:14:1b:47:6e:6f:0f:e5:6b:9a:96:25:ac:1a:d4: 32:7e:03:89:2a:e7:8e:24:15:28:88:f9:98:40:ed: 8f:ca:db:3c:f9:ab:60:af:9e:f4:22:45:c0:74:da: 39:49:fb:41:05:7e:01:81:9c:46:6b:d5:5f:be:66: 6e:ae:4b:cd:3a:cb:de:c5:9c:a4:b9:c6:75:2a:c9: ae:15:16:08:5a:65:f4:28:ed:5b:e2:c1:1d:a3:ad: aa:f0:97:c2:d5:99:e0:53:47:35:b3:00:f0:81:ee: cb:fb:37:14:c8:9e:bb:61:1b:77:08:d8:26:d3:54: 90:c4:87:01:0f:63:9a:b2:98:14:03:0d:76:6b:20: 47:82:40:32:8a:97:fe:4e:16:01:47:d4:a7:2c:96: 28:11:ed:00:bb:c5:93:ef:b0:25:a3:60:58:0d:2c: 03:f2:d4:03:54:a9:07:c3:90:56:d9:af:ea:54:3c: a8:df:50:44:12:41:32:d6:30:43:05:2a:50:ea:77: 44:9e:44:b2:1a:be:fd:55:73:c6:b6:37:c8:1a:69: ea:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:53:8E:EB:A8:B1:A9:CA:35:1F:4E:92:98:95:37:31:0D:DD:EB X509v3 Authority Key Identifier: keyid:76:9D:44:D9:B4:1C:BB:CF:C5:36:71:3B:9B:95:28:F6:CA:B8:7C:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/dp1E2bQcu8_FNnE7m5Uo9sq4fFw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2d:06:d4:c0:c5:ad:99:1b:02:3b:81:2d:94:13:81:8d:6e: 2c:da:1f:0e:eb:63:17:64:68:12:2a:9e:81:87:cf:1c:90:33: 3e:5e:32:07:e9:11:c7:7d:ea:70:1e:53:6c:a0:0e:5f:b9:ac: 57:dc:06:af:ed:8e:fe:5b:58:fa:3b:46:64:14:a4:a1:80:24: e2:f5:20:a1:93:c9:5a:81:3c:2a:61:88:08:e6:75:c3:cd:e2: e0:4c:ff:e8:d5:e1:dc:d1:30:cb:4b:1e:83:63:0b:f1:48:a1: fa:72:35:e2:01:c4:28:8e:22:35:c1:e1:33:1a:90:d1:a2:6d: 82:c3:f6:b9:4a:3b:2a:68:91:ba:5d:3a:25:ba:0f:ad:7d:fc: 28:33:ca:e7:2b:68:1e:d9:08:32:32:f2:7e:69:1b:d0:08:1f: 10:c5:3c:48:ec:de:4a:ab:ed:9d:a5:c7:e1:30:84:f4:87:63: 7d:2e:d9:85:f7:8b:d3:10:ab:50:60:33:70:5a:30:08:44:5d: f8:3b:60:53:a9:24:95:23:7b:6e:54:34:0f:43:e1:ce:1a:ba: 61:d8:4b:6c:d0:62:bd:e0:62:d0:f9:bb:e5:a4:c4:2e:9d:75: fa:ea:7f:47:c9:64:9b:61:51:e0:3d:50:c8:1e:21:1e:83:1e: 78:30:e0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA3MzMxMTAvBgNVBAUTKDc2OUQ0NEQ5QjQxQ0JCQ0ZDNTM2NzEzQjlCOTUyOEY2 Q0FCODdDNUMwHhcNMjUwNjE4MTkwNTEyWhcNMjUwNjI1MTkwNTEyWjAYMRYwFAYD VQQDEw02ODUzMGRlOC05ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppZwA/p06APsbVenaunx0xKET9AowBGNzJ/yZmXRPF4yjLgYOK9p4wXgd/jl FBtHbm8P5WualiWsGtQyfgOJKueOJBUoiPmYQO2Pyts8+atgr570IkXAdNo5SftB BX4BgZxGa9VfvmZurkvNOsvexZykucZ1KsmuFRYIWmX0KO1b4sEdo62q8JfC1Zng U0c1swDwge7L+zcUyJ67YRt3CNgm01SQxIcBD2OaspgUAw12ayBHgkAyipf+ThYB R9SnLJYoEe0Au8WT77Alo2BYDSwD8tQDVKkHw5BW2a/qVDyo31BEEkEy1jBDBSpQ 6ndEnkSyGr79VXPGtjfIGmnqHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmnU47r qLGpyjUfTpKYlTcxDd3rMB8GA1UdIwQYMBaAFHadRNm0HLvPxTZxO5uVKPbKuHxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDczMy8yMTc4NjhDRTNE QjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4X0ZObkU3bTVVbzlzcTRm RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RwMUUyYlFjdThfRk5uRTdtNVVvOXNxNGZGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDczMy8yMTc4NjhDRTNEQjUxMUVBQTY0OTEzMTJDNEY5QUUwMi9kcDFFMmJRY3U4 X0ZObkU3bTVVbzlzcTRmRncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgLQbUwMWtmRsCO4EtlBOBjW4s2h8O62MXZGgSKp6Bh88ckDM+XjIH 6RHHfepwHlNsoA5fuaxX3Aav7Y7+W1j6O0ZkFKShgCTi9SChk8lagTwqYYgI5nXD zeLgTP/o1eHc0TDLSx6DYwvxSKH6cjXiAcQojiI1weEzGpDRom2Cw/a5SjsqaJG6 XTolug+tffwoM8rnK2ge2QgyMvJ+aRvQCB8QxTxI7N5Kq+2dpcfhMIT0h2N9LtmF 94vTEKtQYDNwWjAIRF34O2BTqSSVI3tuVDQPQ+HOGrph2Ets0GK94GLQ+bvlpMQu nXX66n9HyWSbYVHgPVDIHiEegx54MODh -----END CERTIFICATE-----Generated at Thu Jun 19 10:12:36 2025 by rpki-client