$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: g1dRX/AwkuaUxBb+PdKunU5N/rSGsmhEBCAP1DCToes= Subject key identifier: EE:0C:2D:28:4E:12:EE:B7:5F:0E:60:0D:77:69:77:94:11:50:2E:67 Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: 62 Signing time: Thu 19 Jun 2025 06:27:21 +0000 Manifest this update: Thu 19 Jun 2025 06:27:20 +0000 Manifest next update: Thu 26 Jun 2025 06:27:20 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: Pn8cGl2MFH3AcM7+qYKHybAhahHsc/Pk/wGcrdJUJgw=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Jun 19 06:27:20 2025 GMT Not After : Jun 26 06:27:20 2025 GMT Subject: CN=6853adc8-0f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:14:17:f8:14:e5:cb:7a:72:02:e8:3e:36:0e: 9a:52:86:68:da:3c:08:65:5b:4b:d8:03:4d:00:b8: 2a:4c:a6:a3:0f:ca:38:26:f7:96:9a:8a:19:19:a5: a9:ed:fb:f4:9b:58:f3:7c:94:bc:45:75:44:53:2c: 12:ab:df:98:59:ea:53:73:9d:cf:37:48:51:34:39: 29:65:cf:ac:9b:e0:e4:45:33:af:8b:d8:49:77:90: 4e:e4:01:4e:33:4b:5b:4e:9c:cb:63:85:2e:fa:86: 72:77:ff:e7:8f:4c:0a:5f:4f:d6:9c:3d:c1:2b:fd: 4a:74:0c:85:f1:85:ff:75:99:b3:7e:74:42:7f:bd: f4:8f:c6:46:86:ce:e9:77:49:9d:7e:36:ae:09:85: f4:50:06:47:f1:da:84:40:4e:8f:c5:2a:57:87:45: 0d:52:4f:5c:9b:73:7c:0d:f9:55:af:74:75:b3:61: 11:73:f4:3a:87:b8:be:76:61:01:b9:62:05:76:46: 2b:cd:93:e9:0f:ec:0d:83:91:97:71:55:a1:63:c4: 3b:c9:3e:1a:e8:ba:c0:f1:92:4f:0d:60:e7:34:97: ec:2f:04:d1:3e:a5:fb:89:76:7e:9c:ac:6a:2a:ae: e3:9d:20:3b:84:e1:67:26:1e:a5:8c:56:a9:72:24: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0C:2D:28:4E:12:EE:B7:5F:0E:60:0D:77:69:77:94:11:50:2E:67 X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:4f:2f:7a:73:d4:dd:2f:fe:b3:05:75:d1:57:55:ff:4e:f7: f5:f8:ad:93:f0:ab:3d:ad:8a:8b:d4:c9:9c:6f:94:c0:f6:65: 6d:74:2b:56:28:4c:ee:24:11:e1:28:ce:34:bb:4c:af:81:b1: 33:c5:73:ff:9d:b2:49:67:a0:98:af:56:1e:09:d6:74:e6:b6: ea:cf:4c:41:8a:88:ec:f4:e3:2a:78:d6:4b:ab:12:3e:b9:1e: 07:80:46:db:12:f3:51:f1:dc:d5:32:69:fe:32:bd:93:ae:46: 7e:c5:46:3d:7d:33:2f:ca:ab:b6:dd:86:38:d7:7e:6d:e9:ba: 1b:68:ec:b3:b0:27:ed:83:72:16:00:03:b3:97:11:8b:4e:d6: 98:46:46:02:c5:da:8e:9d:61:0c:8f:71:76:3d:8f:7e:65:a0: 18:5c:6e:79:29:7a:35:b9:ec:59:d9:57:46:76:d3:88:21:88: 92:ca:cb:10:0e:f6:c5:60:5d:4f:cb:3c:17:be:a6:e4:10:e9: a9:c5:e5:42:0d:6f:09:82:2e:1f:71:10:9a:9f:1c:40:50:bc: 9d:6a:97:ec:9f:aa:be:58:05:83:96:a4:43:03:76:52:eb:e4: a5:28:71:e6:cb:4b:cf:63:cd:a7:42:02:17:dd:aa:8b:3d:89: e1:57:c2:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgxRDlDQ0IwRTk3 NDAyQ0RENzAeFw0yNTA2MTkwNjI3MjBaFw0yNTA2MjYwNjI3MjBaMBgxFjAUBgNV BAMTDTY4NTNhZGM4LTBmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgFBf4FOXLenIC6D42DppShmjaPAhlW0vYA00AuCpMpqMPyjgm95aaihkZpant +/SbWPN8lLxFdURTLBKr35hZ6lNznc83SFE0OSllz6yb4ORFM6+L2El3kE7kAU4z S1tOnMtjhS76hnJ3/+ePTApfT9acPcEr/Up0DIXxhf91mbN+dEJ/vfSPxkaGzul3 SZ1+Nq4JhfRQBkfx2oRATo/FKleHRQ1ST1ybc3wN+VWvdHWzYRFz9DqHuL52YQG5 YgV2RivNk+kP7A2DkZdxVaFjxDvJPhrousDxkk8NYOc0l+wvBNE+pfuJdn6crGoq ruOdIDuE4WcmHqWMVqlyJAmtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7gwtKE4S 7rdfDmANd2l3lBFQLmcwHwYDVR0jBBgwFoAUf3dZIELjyHvlbu2B2cyw6XQCzdcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3LzE1OTA3QzIyQjgy MTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZjNkWklFTGp5SHZsYnUyQjJjeXc2WFFDemRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2 bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANZPL3pz1N0v/rMFddFXVf9O9/X4rZPwqz2tiovUyZxvlMD2ZW10K1Yo TO4kEeEozjS7TK+BsTPFc/+dsklnoJivVh4J1nTmturPTEGKiOz04yp41kurEj65 HgeARtsS81Hx3NUyaf4yvZOuRn7FRj19My/Kq7bdhjjXfm3puhto7LOwJ+2DchYA A7OXEYtO1phGRgLF2o6dYQyPcXY9j35loBhcbnkpejW57FnZV0Z204ghiJLKyxAO 9sVgXU/LPBe+puQQ6anF5UINbwmCLh9xEJqfHEBQvJ1ql+yfqr5YBYOWpEMDdlLr 5KUocebLS89jzadCAhfdqos9ieFXwoE= -----END CERTIFICATE-----Generated at Sat Jun 21 01:39:59 2025 by rpki-client