$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: IlUBayxAV0EZiA741HQdynqH7viYmp8Xxz+3/z97Ku0= Subject key identifier: 21:24:E5:D2:25:0E:90:34:16:96:7F:60:7A:94:43:0A:33:21:34:19 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 0342 Signing time: Tue 17 Jun 2025 00:41:03 +0000 Manifest this update: Tue 17 Jun 2025 00:41:03 +0000 Manifest next update: Tue 24 Jun 2025 00:41:03 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: rBu7ds8KSvt3DNpwyvIy4RA6GMV/VXivpaEjak8XN8o=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: 4/mG+lweyXgrZC5mzJqWhB3/c7ZZHmvm4qvTx8E454E=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: j5kgXwbepMIvNgxa27dfn191WDj/vcSWthYxalKX4VY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Jun 17 00:41:03 2025 GMT Not After : Jun 24 00:41:03 2025 GMT Subject: CN=6850b99f-d159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:04:d1:62:8f:af:04:c0:86:d8:2f:71:d6: fe:3c:a9:0d:ae:fd:d4:3a:f0:58:d2:b6:8f:00:07: 20:60:c9:0b:0a:68:c2:55:2e:c4:53:74:fe:e4:56: ac:3e:df:36:4f:0c:17:46:98:6a:0c:2a:23:1c:09: b6:f9:d0:ba:61:c0:a2:e2:bf:3c:c2:02:11:06:66: 21:2b:56:cb:7e:36:da:e9:df:65:b6:62:ed:6d:ab: 1a:c0:5f:a7:e0:f3:5b:1f:ab:79:53:ef:39:16:c0: 74:a0:16:18:d9:9a:04:9f:c9:2d:b5:a0:82:73:4b: 81:45:37:26:b1:7a:1e:fe:26:f3:23:a4:e4:75:da: be:04:16:70:d6:47:d8:5d:69:c8:e9:8f:65:94:28: 2d:70:14:b7:36:55:07:b7:eb:3b:7d:5c:67:90:81: 04:74:e0:58:85:e0:32:6a:51:28:1d:8c:41:8a:5f: f9:30:71:1e:5d:c4:d5:e6:39:72:78:01:ad:d1:a2: a4:90:16:78:74:47:17:2b:76:03:19:5b:0f:f4:ca: 91:bb:0f:e8:fc:8b:60:d0:8b:5c:ec:d8:b3:08:ee: 02:8a:93:4d:9c:be:d1:81:0f:ea:fb:2c:c0:1d:4d: 40:9e:82:21:da:69:02:1a:a8:01:91:14:64:8f:27: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:24:E5:D2:25:0E:90:34:16:96:7F:60:7A:94:43:0A:33:21:34:19 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:09:a6:82:b2:fe:4f:04:e5:07:a9:3e:78:a5:98:69:3a: 10:56:fc:0b:97:1d:4e:f5:a7:40:9b:d0:9e:e5:47:7c:ba:c4: 6f:d8:80:71:81:5a:92:8b:f7:2d:55:90:5a:4f:4c:50:fe:ae: d5:aa:80:44:4c:e1:89:05:80:11:8e:8b:cd:8e:ae:19:d0:93: fe:7e:ba:67:51:88:8c:4c:7b:f6:d1:49:c8:a7:3a:20:56:dc: a8:17:4e:d2:e1:34:44:33:14:0d:13:71:94:7e:9e:16:58:90: 00:44:1d:21:65:99:fe:8a:d3:4b:80:0a:42:e6:22:39:38:16: ab:76:63:af:55:f8:5e:5a:50:2b:25:79:32:cd:ac:c2:ab:12: 06:9e:fe:a0:01:ac:10:23:7c:50:e7:85:b1:98:af:92:3e:44: 7a:be:0a:f4:be:fa:5d:53:0f:33:97:9c:77:45:e8:cf:12:68: 81:f2:f8:a5:ff:40:0a:03:60:7b:1d:0d:fe:e1:50:a5:8c:df: ce:72:fd:31:66:bc:20:3b:55:3a:77:5d:c7:5c:a6:47:75:ed: bd:d6:93:b4:e8:28:98:2f:3f:e7:e6:5d:1d:9b:b5:44:71:8d: 3b:ff:ff:52:5e:b9:e0:a5:c7:51:c0:49:26:6d:23:f9:45:c7: 9a:7d:50:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjUwNjE3MDA0MTAzWhcNMjUwNjI0MDA0MTAzWjAYMRYwFAYD VQQDEw02ODUwYjk5Zi1kMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RkE0WKPrwTAhtgvcdb+PKkNrv3UOvBY0raPAAcgYMkLCmjCVS7EU3T+5Fas Pt82TwwXRphqDCojHAm2+dC6YcCi4r88wgIRBmYhK1bLfjba6d9ltmLtbasawF+n 4PNbH6t5U+85FsB0oBYY2ZoEn8kttaCCc0uBRTcmsXoe/ibzI6Tkddq+BBZw1kfY XWnI6Y9llCgtcBS3NlUHt+s7fVxnkIEEdOBYheAyalEoHYxBil/5MHEeXcTV5jly eAGt0aKkkBZ4dEcXK3YDGVsP9MqRuw/o/Itg0Itc7NizCO4CipNNnL7RgQ/q+yzA HU1AnoIh2mkCGqgBkRRkjye23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCEk5dIl DpA0FpZ/YHqUQwozITQZMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6PwmmgrL+TwTlB6k+eKWYaToQVvwLlx1O9adAm9Ce5Ud8usRv2IBx gVqSi/ctVZBaT0xQ/q7VqoBETOGJBYARjovNjq4Z0JP+frpnUYiMTHv20UnIpzog VtyoF07S4TREMxQNE3GUfp4WWJAARB0hZZn+itNLgApC5iI5OBardmOvVfheWlAr JXkyzazCqxIGnv6gAawQI3xQ54WxmK+SPkR6vgr0vvpdUw8zl5x3RejPEmiB8vil /0AKA2B7HQ3+4VCljN/Ocv0xZrwgO1U6d13HXKZHde291pO06CiYLz/n5l0dm7VE cY07//9SXrngpcdRwEkmbSP5RceafVDX -----END CERTIFICATE-----Generated at Tue Jun 17 04:13:48 2025 by rpki-client