$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: dCPTG0bylJ4akyeU9di6jTPew0mQ5649fhdNKkZ/eCc= Subject key identifier: B6:BE:FE:BB:00:F0:B4:24:01:35:FC:40:C7:60:92:FE:97:F9:35:48 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 09E9 Signing time: Mon 16 Jun 2025 16:13:59 +0000 Manifest this update: Mon 16 Jun 2025 16:13:59 +0000 Manifest next update: Mon 23 Jun 2025 16:13:59 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: LSQ+kKmzn7PurSGOAG9THhfdvMoYdA+AGgTSS/GaxE4=) 2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=) 3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Jun 16 16:13:59 2025 GMT Not After : Jun 23 16:13:59 2025 GMT Subject: CN=685042c7-f67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:5b:9b:fd:cd:25:5e:1b:e8:a3:19:db:8b: a8:44:f2:7a:6e:7f:11:da:33:10:56:6c:76:a1:19: 5b:58:b5:3a:b9:7d:62:39:19:db:8f:18:45:8f:fd: 84:b5:95:e4:d0:d2:b2:7f:0d:91:ff:fa:53:6d:7c: 0b:c8:ba:5e:7f:78:1b:f1:19:a2:35:fc:5a:17:ee: b3:1c:9b:5b:42:2e:42:ac:f6:6a:66:16:06:76:a1: 08:a6:6e:35:a2:f6:0e:99:ae:64:36:f9:40:f4:0f: 9c:df:3f:69:bd:1f:60:b4:00:a7:a8:7d:67:46:c3: b2:c7:04:0a:d3:7b:ba:ec:d9:6f:e4:78:a9:3c:c3: 03:de:e8:97:00:6b:81:36:3c:50:8e:e9:61:ce:e2: 82:cb:77:e9:92:cd:bd:83:08:d7:cf:6f:ab:2f:79: 94:bb:27:ba:b5:17:58:6a:7d:b5:90:e7:3d:12:77: 67:10:ba:06:c9:13:24:39:48:d0:75:65:1f:77:b2: 77:20:08:d1:c6:61:7e:7f:45:9a:6f:fa:d8:3f:5f: 6d:3e:6f:e7:7e:66:d0:20:d8:03:e7:b5:4c:f7:8b: db:7b:07:a6:df:a9:dc:9f:6f:ef:fe:ab:4a:c3:fe: 4b:85:93:bf:25:65:0a:95:43:76:66:a7:e1:8b:a7: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:FE:BB:00:F0:B4:24:01:35:FC:40:C7:60:92:FE:97:F9:35:48 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:5f:e8:4b:b7:ab:06:f4:b2:2c:76:c0:9e:e6:a4:e9:e6: 97:fc:1b:ab:b6:8f:1e:37:64:ff:64:8b:e3:7d:34:7a:57:bd: 25:13:af:39:10:00:6e:80:a7:c4:cf:72:35:37:8b:a5:a5:f5: 73:d5:ad:c8:ad:67:27:bc:95:a2:21:31:62:bf:56:32:4a:65: cc:4f:6c:70:08:d5:50:da:04:58:02:1b:82:89:de:33:94:eb: dc:a5:d5:63:e8:87:91:e6:17:91:c8:7e:bb:ee:83:53:07:e5: 7b:e8:01:55:64:27:12:c3:99:44:69:6f:41:d2:24:46:35:31: 12:8f:8e:d3:c2:4e:71:20:22:0c:a6:7f:24:1a:ea:d7:a2:83: 5b:16:fc:5a:69:bf:55:dc:fe:e3:25:d2:2b:ea:60:15:22:bb: 8f:70:b1:35:43:38:ec:b5:6b:a1:1e:13:15:96:a7:85:60:82: 03:90:ad:22:4c:4b:7a:e6:05:0c:54:13:f1:98:6f:60:76:4d: 92:0c:07:af:4a:3a:3d:f2:3c:0d:b3:d6:cd:a7:2c:91:bd:50: 19:1e:16:36:57:1d:fe:a9:0c:f9:af:18:51:19:00:2e:b5:02: 68:74:01:c6:08:f4:43:1f:ad:ea:5e:e6:d5:55:b7:f9:26:8d: 37:a0:c6:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjUwNjE2MTYxMzU5WhcNMjUwNjIzMTYxMzU5WjAYMRYwFAYD VQQDEw02ODUwNDJjNy1mNjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Gxbm/3NJV4b6KMZ24uoRPJ6bn8R2jMQVmx2oRlbWLU6uX1iORnbjxhFj/2E tZXk0NKyfw2R//pTbXwLyLpef3gb8RmiNfxaF+6zHJtbQi5CrPZqZhYGdqEIpm41 ovYOma5kNvlA9A+c3z9pvR9gtACnqH1nRsOyxwQK03u67Nlv5HipPMMD3uiXAGuB NjxQjulhzuKCy3fpks29gwjXz2+rL3mUuye6tRdYan21kOc9EndnELoGyRMkOUjQ dWUfd7J3IAjRxmF+f0Wab/rYP19tPm/nfmbQINgD57VM94vbewem36ncn2/v/qtK w/5LhZO/JWUKlUN2Zqfhi6fZpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa+/rsA 8LQkATX8QMdgkv6X+TVIMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByU1/oS7erBvSyLHbAnuak6eaX/Burto8eN2T/ZIvjfTR6V70lE685 EABugKfEz3I1N4ulpfVz1a3IrWcnvJWiITFiv1YySmXMT2xwCNVQ2gRYAhuCid4z lOvcpdVj6IeR5heRyH677oNTB+V76AFVZCcSw5lEaW9B0iRGNTESj47Twk5xICIM pn8kGurXooNbFvxaab9V3P7jJdIr6mAVIruPcLE1QzjstWuhHhMVlqeFYIIDkK0i TEt65gUMVBPxmG9gdk2SDAevSjo98jwNs9bNpyyRvVAZHhY2Vx3+qQz5rxhRGQAu tQJodAHGCPRDH63qXubVVbf5Jo03oMb2 -----END CERTIFICATE-----Generated at Mon Jun 16 22:07:07 2025 by rpki-client