$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: mzhUKnkGZfilznBoxKiTz8opruV/qsGQiXvQnqGCkGg= Subject key identifier: 6A:67:F8:01:CF:7B:F0:5F:6A:81:11:81:82:EF:A8:17:A6:F4:6A:16 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 044C Signing time: Thu 12 Jun 2025 23:48:47 +0000 Manifest this update: Thu 12 Jun 2025 23:48:46 +0000 Manifest next update: Thu 19 Jun 2025 23:48:46 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: v+BIu30PzA16cLXs7SO4KPTROh3feEX6uoZiPW+1MWY=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Jun 12 23:48:46 2025 GMT Not After : Jun 19 23:48:46 2025 GMT Subject: CN=684b675e-be7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:69:88:21:00:8a:38:82:64:ed:37:db:c7: c6:c3:c4:4a:ab:ea:b3:ec:ce:54:5b:c3:b5:f7:13: dd:c0:59:ea:a7:cd:d2:e1:fe:68:af:b8:e2:92:3c: 56:96:9b:36:86:a8:55:b1:e0:e1:a9:57:a9:7b:2b: 99:92:c5:ed:0d:04:f9:a2:fe:c5:c7:5b:29:40:da: 5e:31:b0:eb:4a:72:a8:aa:4b:98:0e:b2:45:d9:df: 09:b5:6f:27:d9:f4:5c:65:70:03:5a:cc:ff:ed:31: bc:75:c2:8a:35:fd:aa:18:8e:88:78:da:1a:3b:4b: de:0f:39:ba:ae:3c:df:e5:c3:b2:5d:59:f7:b5:53: e6:75:dc:c8:3c:ae:d2:77:ce:d4:57:cf:e2:01:ed: 3c:15:16:3a:1b:ac:69:2b:d6:83:a5:93:d7:56:93: b3:f9:86:ee:ac:60:58:b6:a4:86:24:01:bc:cf:21: de:0e:25:61:46:a0:dd:3b:a1:77:9f:f3:c2:fb:f9: c5:d0:dd:80:bb:ac:79:05:e4:63:a0:b5:de:80:c6: bd:93:1a:dc:c7:2c:be:17:c4:26:78:8c:d5:16:1d: 45:d0:46:8d:35:35:be:b6:32:4d:21:cc:88:34:cf: 5b:ca:be:93:ad:7b:d5:9d:ca:ec:26:45:25:5d:3c: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:F8:01:CF:7B:F0:5F:6A:81:11:81:82:EF:A8:17:A6:F4:6A:16 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:62:6c:4e:4e:72:dc:7f:26:c3:0f:df:a6:17:38:5a:bd:d7: 93:23:d4:ec:e5:0d:e4:54:aa:68:e7:48:64:84:92:0a:13:48: 56:f5:d8:f3:ad:10:4e:4d:20:1f:ad:09:8c:6f:ea:b6:fe:51: 86:83:b6:ea:6a:5c:69:45:f2:e4:6f:d2:a4:0a:44:26:4f:a8: f3:9a:32:d7:c9:4c:36:bf:47:5d:22:1e:c4:e4:fc:01:25:dd: a8:e0:63:8a:b1:16:64:d9:37:68:e4:bf:73:60:88:68:62:70: 09:7a:08:63:b6:ab:9f:36:da:99:78:10:a7:7c:ea:cb:9c:49: a2:21:f4:99:94:3c:6d:06:57:4c:9c:5a:e2:9b:ad:1a:d3:5a: ac:c4:85:f7:1d:63:bc:77:c8:da:fc:23:5e:42:6a:54:35:f6: 71:7b:c1:e2:e4:2b:d0:4f:e0:36:12:d5:52:c6:b6:aa:a9:d6: 2c:a3:77:87:f3:76:fa:c8:9c:c9:12:04:12:67:96:26:d2:73: 8a:e6:e1:00:30:c4:27:d4:80:d6:a6:1e:03:8b:7d:ed:44:45: f8:5c:8e:11:0a:f2:7d:f8:64:a7:72:45:ec:cf:1e:f0:cf:f9: 52:51:ca:50:56:14:98:0e:5b:d0:29:f1:5f:40:45:6d:d3:d4: 21:1f:e0:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwNjEyMjM0ODQ2WhcNMjUwNjE5MjM0ODQ2WjAYMRYwFAYD VQQDEw02ODRiNjc1ZS1iZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KNpiCEAijiCZO0328fGw8RKq+qz7M5UW8O19xPdwFnqp83S4f5or7jikjxW lps2hqhVseDhqVepeyuZksXtDQT5ov7Fx1spQNpeMbDrSnKoqkuYDrJF2d8JtW8n 2fRcZXADWsz/7TG8dcKKNf2qGI6IeNoaO0veDzm6rjzf5cOyXVn3tVPmddzIPK7S d87UV8/iAe08FRY6G6xpK9aDpZPXVpOz+YburGBYtqSGJAG8zyHeDiVhRqDdO6F3 n/PC+/nF0N2Au6x5BeRjoLXegMa9kxrcxyy+F8QmeIzVFh1F0EaNNTW+tjJNIcyI NM9byr6TrXvVncrsJkUlXTzzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpn+AHP e/BfaoERgYLvqBem9GoWMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgYmxOTnLcfybDD9+mFzhavdeTI9Ts5Q3kVKpo50hkhJIKE0hW9djz rRBOTSAfrQmMb+q2/lGGg7bqalxpRfLkb9KkCkQmT6jzmjLXyUw2v0ddIh7E5PwB Jd2o4GOKsRZk2Tdo5L9zYIhoYnAJeghjtqufNtqZeBCnfOrLnEmiIfSZlDxtBldM nFrim60a01qsxIX3HWO8d8ja/CNeQmpUNfZxe8Hi5CvQT+A2EtVSxraqqdYso3eH 83b6yJzJEgQSZ5Ym0nOK5uEAMMQn1IDWph4Di33tREX4XI4RCvJ9+GSnckXszx7w z/lSUcpQVhSYDlvQKfFfQEVt09QhH+B2 -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:27 2025 by rpki-client