$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: pJhBzCXOUhfwACJlSqif86I1AMfQiV7gBpo9uW9L5BQ= Subject key identifier: 60:17:5C:CB:72:DD:7B:26:AE:7E:2C:7D:B8:B8:C2:A1:12:3E:FF:B1 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01B9 Signing time: Thu 19 Jun 2025 02:32:56 +0000 Manifest this update: Thu 19 Jun 2025 02:32:55 +0000 Manifest next update: Thu 26 Jun 2025 02:32:55 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: 1j7MS7aJWPPXyJie+F1H5UXBo8dknFOShS2DzpJVQg8=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Jun 19 02:32:55 2025 GMT Not After : Jun 26 02:32:55 2025 GMT Subject: CN=685376d8-0cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:f8:d0:78:fb:21:d3:ed:b6:e2:71:c3:86: 19:90:a3:c2:d7:7a:a6:c5:99:3a:da:7c:7d:5a:b0: 67:57:55:52:26:22:30:72:04:a5:ae:b7:18:a5:62: 88:a2:ff:48:d7:12:d1:5a:b8:a1:84:7f:b3:6c:45: f3:b9:d1:5a:ea:c0:09:e8:5a:40:af:72:04:7f:fe: c9:9c:0c:fc:41:32:5c:88:ff:1a:38:ca:16:9a:6b: 59:20:1d:96:3b:fc:3c:3a:4d:fa:8f:91:be:d4:c6: 15:64:e7:3d:4d:4c:11:a2:64:37:04:4c:41:49:e0: b3:ac:65:d1:ee:e1:bc:9b:45:ce:39:11:74:b5:d1: bf:15:a7:37:29:f9:d1:2d:e9:da:31:d8:c6:c4:75: 87:97:9c:e5:6b:2e:ac:65:76:88:29:38:01:61:58: e0:7e:60:50:93:52:99:f8:38:86:15:03:3a:6c:58: 5a:5b:c9:7b:1c:61:d2:05:0d:3f:df:b2:ee:a5:2c: 38:5d:cf:88:18:14:9c:e9:91:db:8c:b4:ae:d2:e6: f7:c2:19:2d:05:aa:f0:7c:1e:14:e5:72:e0:db:8c: f6:e3:bd:64:51:1e:5c:c9:6d:02:8c:e0:b4:52:3c: 9d:cb:70:3e:2b:1d:1d:df:d1:28:7f:7d:98:9e:c6: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:17:5C:CB:72:DD:7B:26:AE:7E:2C:7D:B8:B8:C2:A1:12:3E:FF:B1 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:d5:a9:70:68:94:ff:43:e0:b5:30:01:a9:90:af:93:be:8b: c9:86:58:59:2f:3b:1d:ba:ab:c5:2d:5b:af:56:fd:4c:2b:a3: 81:76:fe:d6:8d:95:cf:2c:03:76:14:75:5f:7d:9a:1b:e7:b5: 67:e8:08:a5:71:f3:11:5a:6c:dd:11:5b:2a:f9:6c:8e:e4:61: ac:ad:1b:fb:4d:ec:55:89:6e:2a:7c:94:83:93:0a:bc:0a:9a: ef:1c:05:0b:42:b0:62:c3:93:43:e9:ed:a5:7b:1e:34:35:bd: be:1c:d9:8b:02:a1:f9:d9:52:bb:86:54:87:61:8c:98:56:88: aa:b4:cb:bb:d8:6c:bc:43:83:2c:bf:ce:1d:12:e8:a5:8d:54: 41:2b:0a:98:37:7a:52:44:24:78:69:90:6a:f6:11:c0:c9:71: 69:4b:5d:6d:9f:3e:b1:a8:15:98:72:24:69:f6:17:25:a5:ba: e2:d7:f0:da:ca:59:77:1a:4c:40:00:ee:37:79:ac:44:ef:35: a9:73:1d:f1:72:82:e4:35:f8:59:04:8d:f1:f9:0d:55:ce:a8: e5:83:03:37:a5:b7:4f:0d:a1:2d:af:3f:97:dc:ee:5f:10:20: d7:99:9b:d5:00:97:6b:a1:66:01:ac:65:2d:f9:08:d9:6d:68: 9c:3f:5a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwNjE5MDIzMjU1WhcNMjUwNjI2MDIzMjU1WjAYMRYwFAYD VQQDEw02ODUzNzZkOC0wY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRD40Hj7IdPttuJxw4YZkKPC13qmxZk62nx9WrBnV1VSJiIwcgSlrrcYpWKI ov9I1xLRWrihhH+zbEXzudFa6sAJ6FpAr3IEf/7JnAz8QTJciP8aOMoWmmtZIB2W O/w8Ok36j5G+1MYVZOc9TUwRomQ3BExBSeCzrGXR7uG8m0XOORF0tdG/Fac3KfnR LenaMdjGxHWHl5zlay6sZXaIKTgBYVjgfmBQk1KZ+DiGFQM6bFhaW8l7HGHSBQ0/ 37LupSw4Xc+IGBSc6ZHbjLSu0ub3whktBarwfB4U5XLg24z2471kUR5cyW0CjOC0 Ujydy3A+Kx0d39Eof32YnsY4+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAXXMty 3Xsmrn4sfbi4wqESPv+xMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDa1alwaJT/Q+C1MAGpkK+TvovJhlhZLzsduqvFLVuvVv1MK6OBdv7W jZXPLAN2FHVffZob57Vn6AilcfMRWmzdEVsq+WyO5GGsrRv7TexViW4qfJSDkwq8 CprvHAULQrBiw5ND6e2lex40Nb2+HNmLAqH52VK7hlSHYYyYVoiqtMu72Gy8Q4Ms v84dEuiljVRBKwqYN3pSRCR4aZBq9hHAyXFpS11tnz6xqBWYciRp9hclpbri1/Da yll3GkxAAO43eaxE7zWpcx3xcoLkNfhZBI3x+Q1VzqjlgwM3pbdPDaEtrz+X3O5f ECDXmZvVAJdroWYBrGUt+QjZbWicP1oZ -----END CERTIFICATE-----Generated at Thu Jun 19 05:53:20 2025 by rpki-client