$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: v6U74nOffxZxtEWJVbtBy0ws0pb9WKB9wy8HzuPQTv0= Subject key identifier: 12:9A:91:A0:9D:7D:4F:9C:75:86:DF:F9:3C:DD:6A:B2:05:4B:7F:CF Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: CE Signing time: Fri 13 Jun 2025 04:40:08 +0000 Manifest this update: Fri 13 Jun 2025 04:40:08 +0000 Manifest next update: Fri 20 Jun 2025 04:40:08 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: xvyYaNH1TMKpeQPL+Jl3I5CvTOv57C9jTBJmoOxul3I=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: zLl/IZu0xffl+i5k4Uqz4PGyZN+zw+IO5hcnnTBBL7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Jun 13 04:40:08 2025 GMT Not After : Jun 20 04:40:08 2025 GMT Subject: CN=684baba8-755f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:1e:c2:35:02:c4:23:25:94:c6:65:c4:03: 11:8a:8a:28:a9:ea:59:aa:1c:bd:af:74:9d:e4:52: 01:88:44:80:5e:40:52:0b:c6:b4:11:93:fd:06:ca: 08:6c:49:38:da:9e:ca:17:bc:5c:37:6e:43:82:6c: 8d:c4:75:55:96:28:b5:a1:21:4d:2b:c9:bc:7e:de: 33:ed:24:c0:03:40:06:b5:bf:5a:de:ca:2d:36:96: 52:d5:26:ea:1a:67:74:54:39:77:61:67:a4:36:c2: d8:6a:45:0d:44:11:3c:94:a2:b4:cb:17:6b:72:45: 79:7e:a7:e4:27:49:a1:33:9c:1c:d6:d8:d9:fd:1e: e6:d9:89:b2:f0:83:40:07:08:99:be:71:92:9b:59: 83:88:35:be:83:5e:99:b4:fc:3f:46:fb:4d:9a:ef: 39:22:f8:11:2a:a0:0d:35:61:3a:55:2f:5b:8e:a0: e9:d4:6d:27:d8:21:1a:3d:34:58:c4:de:e9:49:ed: 81:18:8b:6b:16:63:9d:f4:f3:4a:f2:ed:6a:e4:c0: 9d:67:61:45:86:02:aa:68:78:f8:94:d9:b4:6f:70: 6e:d8:68:64:0b:9f:bb:c8:82:07:4d:c9:55:af:a5: 91:9e:3d:b8:20:74:81:9c:40:2e:57:b5:cc:0b:e0: 58:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:91:A0:9D:7D:4F:9C:75:86:DF:F9:3C:DD:6A:B2:05:4B:7F:CF X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:0a:de:b4:c2:04:00:60:30:5b:d4:8f:be:c4:45:83:f1:d8: 02:49:7c:6d:d0:53:08:d5:c3:18:2c:a1:09:96:03:a8:d2:c7: 70:67:09:ad:ae:ee:dd:a3:91:f6:8c:8f:9a:b5:57:18:af:43: f2:b7:14:4c:9c:9c:97:77:40:f8:02:35:3f:ee:80:e2:77:56: c7:b7:23:fb:bd:17:39:f2:23:5f:5c:86:2b:dc:15:3b:2f:8f: bf:a7:ff:60:8d:4b:13:2b:bf:69:7a:fd:dc:b5:c8:15:6c:ea: aa:4b:6a:03:bb:10:7f:58:69:e1:d9:83:de:f8:43:df:f0:d0: 57:37:06:c7:55:b8:a9:0d:b2:29:8a:91:2c:54:37:a7:72:d8: 4a:8a:69:c7:67:3d:30:4d:f2:42:40:40:7b:7b:6a:c2:92:a8: 31:d7:a9:e0:e0:56:d0:3b:bd:e4:9f:fe:53:77:f7:ac:a2:0e: b9:56:6a:78:6a:c4:e5:1e:0a:6f:09:99:4a:cc:12:5c:3b:10: 3e:57:84:9d:dd:8f:2d:f4:72:70:3c:25:f5:ae:b8:78:83:b2: 3d:51:b2:9b:89:ca:b6:ce:f4:86:6a:30:e4:f3:43:76:b5:13: ab:a2:7b:df:42:1d:1d:b1:a0:18:45:5f:da:6f:6b:05:77:09: f7:94:28:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwNjEzMDQ0MDA4WhcNMjUwNjIwMDQ0MDA4WjAYMRYwFAYD VQQDEw02ODRiYWJhOC03NTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJMewjUCxCMllMZlxAMRioooqepZqhy9r3Sd5FIBiESAXkBSC8a0EZP9BsoI bEk42p7KF7xcN25DgmyNxHVVlii1oSFNK8m8ft4z7STAA0AGtb9a3sotNpZS1Sbq Gmd0VDl3YWekNsLYakUNRBE8lKK0yxdrckV5fqfkJ0mhM5wc1tjZ/R7m2Ymy8INA BwiZvnGSm1mDiDW+g16ZtPw/RvtNmu85IvgRKqANNWE6VS9bjqDp1G0n2CEaPTRY xN7pSe2BGItrFmOd9PNK8u1q5MCdZ2FFhgKqaHj4lNm0b3Bu2GhkC5+7yIIHTclV r6WRnj24IHSBnEAuV7XMC+BYbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKakaCd fU+cdYbf+TzdarIFS3/PMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClCt60wgQAYDBb1I++xEWD8dgCSXxt0FMI1cMYLKEJlgOo0sdwZwmt ru7do5H2jI+atVcYr0PytxRMnJyXd0D4AjU/7oDid1bHtyP7vRc58iNfXIYr3BU7 L4+/p/9gjUsTK79pev3ctcgVbOqqS2oDuxB/WGnh2YPe+EPf8NBXNwbHVbipDbIp ipEsVDencthKimnHZz0wTfJCQEB7e2rCkqgx16ng4FbQO73kn/5Td/esog65Vmp4 asTlHgpvCZlKzBJcOxA+V4Sd3Y8t9HJwPCX1rrh4g7I9UbKbicq2zvSGajDk80N2 tROronvfQh0dsaAYRV/ab2sFdwn3lCgS -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:07 2025 by rpki-client