$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft File: Se4JeG9u2kI1x1dcppbboJnVR8w.mft (raw, json) Hash identifier: cKoweHP9pjaGNhAwNTbtEO8uZ62GsGjIr5F1dJxPCPc= Subject key identifier: AD:E0:BF:37:06:12:6D:27:FA:24:77:C9:89:72:0F:E4:C9:92:50:FF Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 0817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft Manifest number: 0811 Signing time: Thu 12 Jun 2025 20:34:19 +0000 Manifest this update: Thu 12 Jun 2025 20:34:18 +0000 Manifest next update: Thu 19 Jun 2025 20:34:18 +0000 Files and hashes: 1: Se4JeG9u2kI1x1dcppbboJnVR8w.crl (hash: 2ieK2ITi+GmuaYQOJ6I5Ogrb/PAg4jWGIkLKbSGrzMA=) 2: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (hash: DJGSwkZ0gnAwFVuSpr1DGFnHa6D3l7xSjCohDEJeEIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2071 (0x817) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Jun 12 20:34:18 2025 GMT Not After : Jun 19 20:34:18 2025 GMT Subject: CN=684b39ca-8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:db:da:8d:73:ec:03:e8:7a:78:b9:4f:f4:d5: 7f:38:dd:a1:44:81:d8:38:f3:02:bf:06:7f:47:4a: 1c:df:9e:7f:bd:b2:ea:1a:1c:26:cc:22:05:01:ae: da:db:c7:d4:2b:f9:b7:d8:e2:c5:6d:d7:65:23:0d: 87:86:af:d1:99:ae:84:0b:b5:9d:1f:28:75:57:8a: 19:41:1b:c1:16:56:96:66:85:cb:c2:f0:81:50:8e: dc:b3:20:f2:a7:88:5c:3f:40:03:7c:1a:2c:93:58: 1a:64:cf:85:ab:ba:38:37:ca:b5:63:d2:5d:54:4c: b1:63:ab:a6:70:45:2b:f5:b9:45:0d:d2:cc:b2:4a: 5f:4a:28:9f:8d:d5:a7:5e:e5:6c:ca:60:bc:90:da: be:b3:be:48:bd:79:12:b2:22:b1:05:c7:af:81:b6: 88:a7:3c:85:88:ff:9c:9f:82:c6:a8:0f:6f:a7:c7: b7:98:11:21:c3:3e:8c:f7:59:25:40:da:ad:44:05: fa:6f:81:22:47:48:c1:da:c2:b7:dc:ba:42:63:ba: 9f:c7:f9:9b:24:34:da:f6:dd:79:9a:b1:b8:0b:62: 66:6e:d1:26:01:d3:04:16:24:eb:f0:aa:ca:d4:e5: bd:2c:ac:04:f1:a0:98:05:45:07:0c:2a:47:af:09: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:BF:37:06:12:6D:27:FA:24:77:C9:89:72:0F:E4:C9:92:50:FF X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:db:b5:8e:21:05:ea:76:4b:47:26:d8:f9:c1:3e:a5:33:45: 10:a0:3e:7f:4e:ba:77:fe:ae:8e:2e:e9:09:72:21:df:00:fb: c0:44:a5:ce:9c:71:1f:e0:13:2a:a0:89:3d:2d:22:15:c8:03: 8c:76:e7:01:ac:58:ac:e1:e4:b1:45:01:9e:ec:c7:9d:78:fe: 74:c4:a0:b5:8d:d7:48:bf:3a:0d:d1:9e:74:20:d9:c8:44:81: de:d8:66:fe:d4:8d:48:b5:c6:82:d8:12:f6:b1:f1:41:0f:16: 00:dc:16:4b:04:a1:59:cb:59:b9:3d:3f:0e:1f:4b:75:79:30: 01:b4:05:79:f8:7e:17:bc:60:7d:3b:87:27:d8:78:c6:0c:90: dd:33:05:3f:54:f0:c0:74:8d:44:56:19:a3:21:64:23:50:72: 62:81:31:a7:2f:bc:49:e8:d4:62:89:24:31:0b:61:82:14:6c: 1f:e6:fe:85:f6:f6:2a:28:46:99:c5:c0:7f:ea:fd:05:9f:c7: 8a:4e:bf:8b:42:1c:ca:d3:52:a1:a5:e4:bb:f8:a1:39:d1:5e: e5:2e:ea:0e:06:59:c1:c8:ee:1a:8c:f1:65:34:7d:ee:2f:2e: 16:0f:2b:3c:bb:52:c3:40:69:c9:08:61:fd:00:18:7e:20:c1: f4:4b:66:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjUwNjEyMjAzNDE4WhcNMjUwNjE5MjAzNDE4WjAYMRYwFAYD VQQDEw02ODRiMzljYS04ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4tvajXPsA+h6eLlP9NV/ON2hRIHYOPMCvwZ/R0oc355/vbLqGhwmzCIFAa7a 28fUK/m32OLFbddlIw2Hhq/Rma6EC7WdHyh1V4oZQRvBFlaWZoXLwvCBUI7csyDy p4hcP0ADfBosk1gaZM+Fq7o4N8q1Y9JdVEyxY6umcEUr9blFDdLMskpfSiifjdWn XuVsymC8kNq+s75IvXkSsiKxBcevgbaIpzyFiP+cn4LGqA9vp8e3mBEhwz6M91kl QNqtRAX6b4EiR0jB2sK33LpCY7qfx/mbJDTa9t15mrG4C2JmbtEmAdMEFiTr8KrK 1OW9LKwE8aCYBUUHDCpHrwlR/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3gvzcG Em0n+iR3yYlyD+TJklD/MB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUU3Qy9GQzFFQjcwQ0RCQTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJr STF4MWRjcHBiYm9KblZSOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy27WOIQXqdktHJtj5wT6lM0UQoD5/Trp3/q6OLukJciHfAPvARKXO nHEf4BMqoIk9LSIVyAOMducBrFis4eSxRQGe7MedeP50xKC1jddIvzoN0Z50INnI RIHe2Gb+1I1ItcaC2BL2sfFBDxYA3BZLBKFZy1m5PT8OH0t1eTABtAV5+H4XvGB9 O4cn2HjGDJDdMwU/VPDAdI1EVhmjIWQjUHJigTGnL7xJ6NRiiSQxC2GCFGwf5v6F 9vYqKEaZxcB/6v0Fn8eKTr+LQhzK01KhpeS7+KE50V7lLuoOBlnByO4ajPFlNH3u Ly4WDys8u1LDQGnJCGH9ABh+IMH0S2ZP -----END CERTIFICATE-----Generated at Sat Jun 14 18:48:49 2025 by rpki-client