$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: npuorK76u/E5Xy9EHEJDVDJDx2SmecaW5NhjCr8xzSg= Subject key identifier: BC:B5:29:15:99:D8:C9:A6:E3:FD:36:04:98:9F:65:16:61:E7:F6:8C Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 02DA Signing time: Thu 19 Jun 2025 01:13:29 +0000 Manifest this update: Thu 19 Jun 2025 01:13:28 +0000 Manifest next update: Thu 26 Jun 2025 01:13:28 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: 3ZaxpxVUJaK7jVGqU7fJqgC9icBbQaDYhOu3nLNAcfs=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: E8vwAczjvQJXB4RuH83+id/dNjBD9Eo3yf3KRRas1Z8=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Jun 19 01:13:28 2025 GMT Not After : Jun 26 01:13:28 2025 GMT Subject: CN=68536439-6f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:45:d8:12:37:f9:1c:6a:46:d6:07:85:06: d3:98:f0:d9:02:56:3d:eb:d2:a3:77:c4:a6:4f:85: 50:e2:40:30:f5:fb:f6:ce:90:07:2b:7c:ef:90:d5: b2:30:71:d7:d3:bb:03:a3:e2:84:76:38:e7:54:d1: 95:df:5e:9a:19:3b:d5:9a:8d:83:0d:0e:ae:2a:b2: e9:bd:c9:7d:22:96:a7:84:bd:12:af:85:09:e5:dc: 05:60:44:8c:0e:78:af:13:e0:e1:d7:50:9f:ea:4e: 76:8f:1d:40:45:18:2d:88:4e:ef:f4:74:e8:05:ac: d9:dc:5d:8d:72:51:fb:39:26:01:83:eb:bc:92:d6: be:c2:bf:58:1f:72:3c:14:88:73:a1:a5:2f:9b:4c: 75:f4:67:32:a6:1a:ef:f8:67:d7:87:c5:92:ff:b5: db:e1:b5:cb:4b:c6:2e:b6:47:f1:61:ac:68:0a:d0: a9:b9:08:28:90:0e:fd:23:7d:11:3b:46:ff:f9:76: ae:67:73:aa:9e:4c:19:eb:cb:2b:c7:72:9e:ca:85: 8d:4f:90:d1:92:64:86:da:73:76:ca:f5:84:e3:ea: 34:62:78:81:db:0c:2c:a4:20:18:59:75:6e:4c:98: 93:ed:12:f3:db:1c:84:db:66:a2:bd:76:5d:d4:14: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:29:15:99:D8:C9:A6:E3:FD:36:04:98:9F:65:16:61:E7:F6:8C X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:59:b1:19:7d:90:46:08:c0:fc:97:b8:6c:98:63:86:24:dc: 5e:52:43:f4:b8:11:15:80:44:bf:55:c8:05:f6:14:07:0f:ae: 44:42:66:5d:0d:de:b3:e1:24:e8:b3:54:b8:e9:7d:b9:06:69: 39:cd:52:6c:78:83:69:e3:f4:13:23:75:b0:39:1a:50:aa:49: d4:2b:39:b9:ea:eb:25:f1:75:13:ea:32:78:8e:db:86:e2:9a: 85:79:7e:a7:a5:5d:31:40:c3:66:99:a0:a5:71:13:cb:de:9d: 19:cc:42:0e:ea:7f:a7:78:8c:b1:e8:1e:81:22:23:f7:fa:47: ea:b2:cb:6f:82:68:8f:ae:56:d9:60:2a:de:77:a0:fa:10:19: 52:c4:81:57:ca:ea:2c:8b:14:8e:f9:59:28:32:11:1d:00:9d: f9:ec:87:5c:b3:4e:1e:03:d9:7d:fc:8b:3c:76:90:72:de:fa: 27:b3:e3:3d:92:17:16:6c:ec:4b:89:99:07:bf:ef:e5:cf:c2: 83:58:5a:5e:dd:bf:6c:2b:30:6f:94:98:4d:93:a9:ef:5b:1c: 78:ef:36:91:75:98:47:26:81:2e:5b:3f:cb:9a:2d:cb:36:23: 4b:1d:06:93:a6:29:10:1b:ea:26:97:b2:f5:b4:2a:b2:8c:85: 64:ba:8c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwNjE5MDExMzI4WhcNMjUwNjI2MDExMzI4WjAYMRYwFAYD VQQDEw02ODUzNjQzOS02ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHlF2BI3+RxqRtYHhQbTmPDZAlY969Kjd8SmT4VQ4kAw9fv2zpAHK3zvkNWy MHHX07sDo+KEdjjnVNGV316aGTvVmo2DDQ6uKrLpvcl9IpanhL0Sr4UJ5dwFYESM DnivE+Dh11Cf6k52jx1ARRgtiE7v9HToBazZ3F2NclH7OSYBg+u8kta+wr9YH3I8 FIhzoaUvm0x19Gcyphrv+GfXh8WS/7Xb4bXLS8YutkfxYaxoCtCpuQgokA79I30R O0b/+XauZ3OqnkwZ68srx3KeyoWNT5DRkmSG2nN2yvWE4+o0YniB2wwspCAYWXVu TJiT7RLz2xyE22aivXZd1BQB7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy1KRWZ 2Mmm4/02BJifZRZh5/aMMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpWbEZfZBGCMD8l7hsmGOGJNxeUkP0uBEVgES/VcgF9hQHD65EQmZd Dd6z4STos1S46X25Bmk5zVJseINp4/QTI3WwORpQqknUKzm56usl8XUT6jJ4jtuG 4pqFeX6npV0xQMNmmaClcRPL3p0ZzEIO6n+neIyx6B6BIiP3+kfqsstvgmiPrlbZ YCred6D6EBlSxIFXyuosixSO+VkoMhEdAJ357Idcs04eA9l9/Is8dpBy3vons+M9 khcWbOxLiZkHv+/lz8KDWFpe3b9sKzBvlJhNk6nvWxx47zaRdZhHJoEuWz/Lmi3L NiNLHQaTpikQG+oml7L1tCqyjIVkuowK -----END CERTIFICATE-----Generated at Thu Jun 19 18:53:18 2025 by rpki-client