$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: mxAO1iHP7OoxRsZ2UHQVOFl9+PzKWpyvyyLXUNd5OaQ= Subject key identifier: FF:E7:4B:1C:4F:28:04:91:36:EB:E7:B1:CA:7F:EC:15:FF:E9:F8:CD Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 82 Signing time: Thu 19 Jun 2025 05:57:45 +0000 Manifest this update: Thu 19 Jun 2025 05:57:44 +0000 Manifest next update: Thu 26 Jun 2025 05:57:44 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: x9V13lVIwOaM5YEMSjKEhvHMjZ1HY4Bb42LuNRqJSYc=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Jun 19 05:57:44 2025 GMT Not After : Jun 26 05:57:44 2025 GMT Subject: CN=6853a6d9-79b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:da:1f:54:ae:40:0d:90:8b:b4:90:66:69:07: a6:69:17:17:b8:38:9d:29:d5:71:69:d0:c3:55:55: b5:e3:ea:73:6c:6e:73:4b:c4:61:0a:8c:91:b4:3b: de:0f:ae:61:d3:68:d7:c2:2d:df:09:29:7f:8c:df: c4:1c:54:64:ff:3f:ec:4d:58:07:55:85:09:2b:fa: b8:6b:05:47:ed:3f:9e:83:54:40:4d:30:82:18:02: b4:b1:97:ed:6a:aa:a3:fb:df:b8:4e:7b:f2:6f:2f: ab:68:96:e7:d4:ee:46:05:65:20:86:32:3a:95:ce: 6d:54:25:78:3e:75:db:4d:5b:45:60:ec:25:d2:d7: 4d:f1:dc:90:63:c7:15:35:73:87:41:31:52:f2:47: 5f:ce:83:03:32:cc:4a:8b:43:5a:75:e3:a6:a6:17: 5e:ed:96:1f:cf:55:73:2b:a0:69:fc:f9:a0:2c:7e: e9:3b:17:16:00:fc:ac:8a:57:b7:6b:72:76:f1:ca: d5:42:00:24:33:17:2d:f1:b6:6f:df:48:b4:c7:3f: cf:14:2f:93:4b:b4:a8:31:a0:69:fa:f2:2a:38:f8: 40:9a:3f:7c:56:f5:08:39:8c:4f:6d:0f:a7:f8:03: b2:98:b3:e8:3a:be:85:29:96:cc:e3:6f:64:e6:c2: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:4B:1C:4F:28:04:91:36:EB:E7:B1:CA:7F:EC:15:FF:E9:F8:CD X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:29:fe:4f:f8:db:fe:8c:46:90:55:8a:b3:05:18:12:ac:76: 0f:a1:2e:01:2c:5d:73:35:9f:1c:4e:1c:06:57:09:9f:eb:3b: 97:a0:27:c0:1e:b1:4a:fa:13:9f:6b:9a:76:80:dd:00:06:3b: 63:9e:f2:47:e6:01:a7:7a:9f:15:e9:07:ca:8e:50:ff:f7:af: f6:db:e9:18:46:f1:64:d3:0c:ba:1f:44:0c:43:6d:89:f1:3f: 64:43:5a:35:71:dc:c0:9d:9d:95:a4:fe:c6:d5:11:8b:dc:a5: f9:01:d7:0e:fe:30:a6:61:80:6f:1a:7c:2f:f1:1e:33:21:80: 27:db:b1:6c:c0:33:5d:da:cc:7d:d0:14:68:15:6d:5d:5e:e2: 00:2c:0a:2f:e8:29:f0:a7:4d:9d:db:1e:be:ae:94:ef:fe:0b: 65:3f:d5:8d:5e:ed:34:65:59:7a:17:c1:88:0a:7b:ef:a6:23: bb:bb:ae:50:f9:20:c5:15:00:5a:dc:7e:ed:67:b4:57:57:f4: 52:c1:1e:56:d3:21:21:22:b7:42:e8:a7:cc:57:76:26:d4:94: 00:6a:e5:05:fd:0f:16:e3:0b:7d:5b:51:7e:c8:30:7a:92:40: 01:5b:a2:03:a4:f7:38:cf:88:f8:70:86:de:03:97:e3:90:a6: 7c:93:cc:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx OUQwQ0VBQTMwHhcNMjUwNjE5MDU1NzQ0WhcNMjUwNjI2MDU1NzQ0WjAYMRYwFAYD VQQDEw02ODUzYTZkOS03OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/NofVK5ADZCLtJBmaQemaRcXuDidKdVxadDDVVW14+pzbG5zS8RhCoyRtDve D65h02jXwi3fCSl/jN/EHFRk/z/sTVgHVYUJK/q4awVH7T+eg1RATTCCGAK0sZft aqqj+9+4Tnvyby+raJbn1O5GBWUghjI6lc5tVCV4PnXbTVtFYOwl0tdN8dyQY8cV NXOHQTFS8kdfzoMDMsxKi0NadeOmphde7ZYfz1VzK6Bp/PmgLH7pOxcWAPysile3 a3J28crVQgAkMxct8bZv30i0xz/PFC+TS7SoMaBp+vIqOPhAmj98VvUIOYxPbQ+n +AOymLPoOr6FKZbM429k5sKoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/nSxxP KASRNuvnscp/7BX/6fjNMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1 aDZHblczU1Q4THdaME02cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKf5P+Nv+jEaQVYqzBRgSrHYPoS4BLF1zNZ8cThwGVwmf6zuXoCfA HrFK+hOfa5p2gN0ABjtjnvJH5gGnep8V6QfKjlD/96/22+kYRvFk0wy6H0QMQ22J 8T9kQ1o1cdzAnZ2VpP7G1RGL3KX5AdcO/jCmYYBvGnwv8R4zIYAn27FswDNd2sx9 0BRoFW1dXuIALAov6Cnwp02d2x6+rpTv/gtlP9WNXu00ZVl6F8GICnvvpiO7u65Q +SDFFQBa3H7tZ7RXV/RSwR5W0yEhIrdC6KfMV3Ym1JQAauUF/Q8W4wt9W1F+yDB6 kkABW6IDpPc4z4j4cIbeA5fjkKZ8k8zg -----END CERTIFICATE-----Generated at Fri Jun 20 14:23:25 2025 by rpki-client