$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft File: e_1dY_8gHxhzXBGACmL2pyeujBE.mft (raw, json) Hash identifier: G2t97Y5CqEExJ3la4j+sybBnFKdVwkkXunbAoEA6Nmg= Subject key identifier: 3F:9F:34:74:6D:32:AE:9E:8B:04:84:19:BE:9F:91:18:96:39:57:CB Authority key identifier: 7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 Certificate issuer: /CN=A9193F3A/serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Certificate serial: 0A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft Manifest number: 0A04 Signing time: Sat 14 Jun 2025 19:40:09 +0000 Manifest this update: Sat 14 Jun 2025 19:40:08 +0000 Manifest next update: Sat 21 Jun 2025 19:40:08 +0000 Files and hashes: 1: e_1dY_8gHxhzXBGACmL2pyeujBE.crl (hash: uYK8+tdTmD9SnUiwcJ0VIWI/NE7XHu41UI5fkJCEHIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F3A, serialNumber=7BFD5D63FF201F18735C11800A62F6A727AE8C11 Validity Not Before: Jun 14 19:40:08 2025 GMT Not After : Jun 21 19:40:08 2025 GMT Subject: CN=684dd018-77b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:90:71:76:2d:03:b7:c1:54:5e:4c:f8:1a: 7a:0d:77:35:82:4f:53:6e:b1:3b:a9:6a:cd:f3:9c: 40:16:28:4a:d6:fc:61:80:b0:9a:e8:1f:d5:1a:ff: 02:e1:c4:3c:22:b1:a7:bb:d1:06:54:80:7e:63:49: 57:90:b7:e8:7c:91:06:1d:1d:88:a8:b5:b0:75:10: d6:31:bb:b9:a4:bb:97:32:54:2c:aa:ae:f0:5f:04: 0e:e5:26:01:38:78:90:f9:6f:5e:48:f1:28:a9:b9: 5b:af:35:1b:8b:16:c4:c0:69:79:1d:66:78:7c:af: 28:43:f5:6d:de:6d:ca:a6:54:32:08:ad:5c:2a:70: 75:e1:a1:a7:7c:8d:ba:f5:c7:9c:19:ec:88:ff:12: 6f:d0:65:87:65:7d:3a:d7:9b:b8:e2:0e:26:a2:36: 93:94:ce:6b:db:87:58:7e:cf:80:13:9f:ab:d7:8d: d7:f2:ac:d7:71:1b:b7:d8:9d:c5:c4:bd:39:69:cc: 18:0f:4e:f0:b4:71:17:90:aa:9f:b3:a0:c0:d6:32: 5f:e2:7f:a8:72:bb:42:dc:4d:d9:94:4f:55:7a:8d: 81:ef:6b:cd:1a:cc:a5:c9:d1:da:c1:e9:73:0e:3d: 80:37:1f:d0:69:df:e4:a2:05:d2:68:80:6b:17:80: e0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9F:34:74:6D:32:AE:9E:8B:04:84:19:BE:9F:91:18:96:39:57:CB X509v3 Authority Key Identifier: keyid:7B:FD:5D:63:FF:20:1F:18:73:5C:11:80:0A:62:F6:A7:27:AE:8C:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_1dY_8gHxhzXBGACmL2pyeujBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F3A/AB42E160789811EAAADCA850C4F9AE02/e_1dY_8gHxhzXBGACmL2pyeujBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:48:d2:bd:62:8c:a5:80:52:05:75:e8:49:d1:05:18:e5:bc: a6:cd:31:39:fb:6b:c1:1e:c0:94:79:1b:d7:b7:f1:0d:65:00: 5c:2a:b8:3e:16:79:ac:5e:fc:c4:37:92:87:fe:bc:56:7a:99: 21:9e:00:ad:e1:4d:78:39:35:62:09:bb:92:60:ac:79:90:46: 6f:5c:04:e7:b8:6b:c6:f7:48:7b:4d:69:5e:e3:0c:2a:e3:4d: 5d:e0:5c:57:f4:54:ec:a2:41:71:72:1a:fb:8f:9b:00:c1:44: 81:cc:aa:d9:3d:3f:2c:46:0f:62:d6:08:45:07:27:80:76:97: e4:fd:75:85:d9:57:ad:99:cb:fe:2d:b2:27:a8:a8:ff:7b:8f: 8d:ea:b3:27:43:fc:44:8b:43:4d:9c:ee:c8:2d:4a:88:83:b2: 78:37:53:ab:5c:24:f8:9e:df:42:95:35:49:c1:dc:bc:1d:2f: a2:f5:1f:28:dd:f1:fa:d2:bf:53:21:15:ca:15:5e:0e:bc:fc: 22:4a:fb:11:21:ac:3c:cf:d9:e5:11:64:19:1a:4a:a7:cf:e9: 58:db:14:f1:a2:44:a1:5a:82:10:75:5f:e5:db:ed:d8:a2:4d: 29:c5:5e:8d:f8:9b:0a:d8:e1:2e:39:81:34:2b:f6:5f:db:e4: c8:b5:4b:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGM0ExMTAvBgNVBAUTKDdCRkQ1RDYzRkYyMDFGMTg3MzVDMTE4MDBBNjJGNkE3 MjdBRThDMTEwHhcNMjUwNjE0MTk0MDA4WhcNMjUwNjIxMTk0MDA4WjAYMRYwFAYD VQQDEw02ODRkZDAxOC03N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLWQcXYtA7fBVF5M+Bp6DXc1gk9TbrE7qWrN85xAFihK1vxhgLCa6B/VGv8C 4cQ8IrGnu9EGVIB+Y0lXkLfofJEGHR2IqLWwdRDWMbu5pLuXMlQsqq7wXwQO5SYB OHiQ+W9eSPEoqblbrzUbixbEwGl5HWZ4fK8oQ/Vt3m3KplQyCK1cKnB14aGnfI26 9cecGeyI/xJv0GWHZX0615u44g4mojaTlM5r24dYfs+AE5+r143X8qzXcRu32J3F xL05acwYD07wtHEXkKqfs6DA1jJf4n+ocrtC3E3ZlE9Veo2B72vNGsylydHawelz Dj2ANx/Qad/kogXSaIBrF4DgkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+fNHRt Mq6eiwSEGb6fkRiWOVfLMB8GA1UdIwQYMBaAFHv9XWP/IB8Yc1wRgApi9qcnrowR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0YzQS9BQjQyRTE2MDc4 OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4aHpYQkdBQ21MMnB5ZXVq QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfMWRZXzhnSHhoelhCR0FDbUwycHlldWpCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0YzQS9BQjQyRTE2MDc4OTgxMUVBQUFEQ0E4NTBDNEY5QUUwMi9lXzFkWV84Z0h4 aHpYQkdBQ21MMnB5ZXVqQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcSNK9YoylgFIFdehJ0QUY5bymzTE5+2vBHsCUeRvXt/ENZQBcKrg+ FnmsXvzEN5KH/rxWepkhngCt4U14OTViCbuSYKx5kEZvXATnuGvG90h7TWle4wwq 401d4FxX9FTsokFxchr7j5sAwUSBzKrZPT8sRg9i1ghFByeAdpfk/XWF2Vetmcv+ LbInqKj/e4+N6rMnQ/xEi0NNnO7ILUqIg7J4N1OrXCT4nt9ClTVJwdy8HS+i9R8o 3fH60r9TIRXKFV4OvPwiSvsRIaw8z9nlEWQZGkqnz+lY2xTxokShWoIQdV/l2+3Y ok0pxV6N+JsK2OEuOYE0K/Zf2+TItUso -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:16 2025 by rpki-client