$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json) Hash identifier: 50GyeZnTknaOYeVxoAdMJ14doYPn6n7ikZdGMKJJc18= Subject key identifier: C2:F8:B0:55:28:1E:93:BD:D6:51:86:43:6E:8F:AE:89:EC:04:1E:F4 Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft Manifest number: 0A3A Signing time: Sat 14 Jun 2025 19:34:38 +0000 Manifest this update: Sat 14 Jun 2025 19:34:37 +0000 Manifest next update: Sat 21 Jun 2025 19:34:37 +0000 Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: CjHJSAyuU+zBSoQ6JYcSI/oODeylOKPrLZYozyAh7Yk=) 2: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: 1XQOV4wSru0rmXvpwZfW5uyJwqkmGZ4/nFxMyl/NDpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6 Validity Not Before: Jun 14 19:34:37 2025 GMT Not After : Jun 21 19:34:37 2025 GMT Subject: CN=684dcecd-093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:f3:f1:b0:04:13:59:39:a3:75:82:03:3a: 19:86:79:60:2b:b1:38:fa:20:ce:95:67:99:07:e7: 4e:b3:76:b4:06:cc:ab:84:87:f7:a6:16:85:bf:c2: 5c:e4:ba:41:c9:f4:77:84:8a:8b:24:bf:d4:6f:89: 0b:43:24:79:bb:04:a2:37:fc:5f:3c:05:f0:27:14: 69:f5:7c:02:e2:f4:dc:0d:62:2a:fc:36:0b:40:97: ea:f3:1b:db:1e:50:5b:15:5d:65:75:36:00:e8:96: e6:cf:8b:ea:d5:97:62:32:ad:d0:ac:95:6a:15:97: 0a:6a:1b:ba:0d:16:bf:95:ec:cb:92:24:db:da:62: 39:66:89:00:16:fe:d3:f9:c3:c9:3a:21:46:4b:a4: 2b:fd:20:0a:34:56:71:1a:df:fe:4f:a8:40:9e:84: 27:90:bb:13:24:2e:4b:60:07:22:6d:72:3d:03:7b: a0:74:5d:f6:fe:d0:9b:d0:72:2c:f1:be:02:cb:43: 20:e4:c5:91:f4:b0:25:bb:9d:b0:7e:c7:b8:be:f6: ac:de:c5:fb:79:2c:f5:fe:d9:cd:3c:1c:41:af:bc: cf:cb:26:84:fb:e2:e7:5b:3d:ae:38:b9:0a:88:41: dc:37:f1:a5:6b:89:b1:07:b7:be:b7:71:e2:bb:56: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:B0:55:28:1E:93:BD:D6:51:86:43:6E:8F:AE:89:EC:04:1E:F4 X509v3 Authority Key Identifier: keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:34:ff:00:80:e8:e4:d1:14:d3:62:98:48:37:e1:3a:e8:05: d4:e8:bf:c0:18:7c:74:05:ef:44:be:e5:c8:29:91:9f:84:c3: f2:3d:0e:e5:66:e7:3e:65:0e:1d:cb:c2:db:1c:c2:3d:94:e1: 48:9d:87:dc:e8:56:80:0b:47:69:1a:0f:b1:f7:bc:ab:3c:55: 19:83:ea:e9:75:6c:ff:72:b5:43:70:fb:ef:5a:ea:d0:9c:22: 54:7f:01:79:16:02:d9:79:fa:90:15:be:bd:00:16:e5:79:7f: 75:9a:cd:b6:ec:49:30:dc:05:db:7f:25:72:c7:8d:f4:01:3d: fb:87:58:2c:0f:8a:0d:11:ea:d5:46:23:ba:47:0f:db:8e:36: 1d:2b:f6:0e:5e:f0:87:f7:63:63:68:b9:36:89:9a:96:35:f2: 34:b3:ed:a3:c7:d9:a5:ca:24:03:b5:8b:6d:ad:34:1b:07:42: fb:66:22:d8:7e:33:54:60:f8:35:1d:60:45:69:32:35:48:02: ee:1b:b1:c6:ce:97:f8:5c:c6:71:a5:45:39:0f:3c:12:5b:18: 56:b5:5e:de:3d:08:50:8b:01:60:0b:42:d7:b7:7d:08:cc:48: 90:ca:56:52:4f:8c:b0:3a:1f:aa:36:c5:40:f1:12:07:43:0c: a9:93:c3:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz RDVDNTMwQzYwHhcNMjUwNjE0MTkzNDM3WhcNMjUwNjIxMTkzNDM3WjAYMRYwFAYD VQQDEw02ODRkY2VjZC0wOTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZvz8bAEE1k5o3WCAzoZhnlgK7E4+iDOlWeZB+dOs3a0BsyrhIf3phaFv8Jc 5LpByfR3hIqLJL/Ub4kLQyR5uwSiN/xfPAXwJxRp9XwC4vTcDWIq/DYLQJfq8xvb HlBbFV1ldTYA6Jbmz4vq1ZdiMq3QrJVqFZcKahu6DRa/lezLkiTb2mI5ZokAFv7T +cPJOiFGS6Qr/SAKNFZxGt/+T6hAnoQnkLsTJC5LYAcibXI9A3ugdF32/tCb0HIs 8b4Cy0Mg5MWR9LAlu52wfse4vvas3sX7eSz1/tnNPBxBr7zPyyaE++LnWz2uOLkK iEHcN/Gla4mxB7e+t3Hiu1a7AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFML4sFUo HpO91lGGQ26PronsBB70MB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAONP8AgOjk0RTTYphIN+E66AXU6L/AGHx0Be9EvuXIKZGfhMPyPQ7l Zuc+ZQ4dy8LbHMI9lOFInYfc6FaAC0dpGg+x97yrPFUZg+rpdWz/crVDcPvvWurQ nCJUfwF5FgLZefqQFb69ABbleX91ms227Ekw3AXbfyVyx430AT37h1gsD4oNEerV RiO6Rw/bjjYdK/YOXvCH92NjaLk2iZqWNfI0s+2jx9mlyiQDtYttrTQbB0L7ZiLY fjNUYPg1HWBFaTI1SALuG7HGzpf4XMZxpUU5DzwSWxhWtV7ePQhQiwFgC0LXt30I zEiQylZST4ywOh+qNsVA8RIHQwypk8Nk -----END CERTIFICATE-----Generated at Sun Jun 15 09:51:19 2025 by rpki-client