$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft File: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json) Hash identifier: ENkATd8W29nm4QWxipsznZ/4sKqojzPfcdL4jbYZazw= Subject key identifier: 11:96:CB:4F:6D:15:FB:2E:FB:13:A2:4B:3B:93:E4:DF:1E:CC:AC:4B Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Certificate serial: 19FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft Manifest number: 19BD Signing time: Fri 20 Jun 2025 16:25:44 +0000 Manifest this update: Fri 20 Jun 2025 16:25:44 +0000 Manifest next update: Fri 27 Jun 2025 16:25:44 +0000 Files and hashes: 1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: l9N55aL4MsszFKnwB2yl8AVe4RfFNpaVflEU6ZHwgTU=) 2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: c2CgFARH3NGyjJVcgLSdMDavs6AC8B7rRi2PB+rzCh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 16:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6652 (0x19fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4 Validity Not Before: Jun 20 16:25:44 2025 GMT Not After : Jun 27 16:25:44 2025 GMT Subject: CN=68558b88-9e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:fc:39:4f:4d:e5:56:c3:21:8a:bf:b2:aa: 6b:fa:67:77:70:a5:5b:20:af:c9:2c:89:15:29:d6: 12:76:f9:5a:01:66:b3:85:a3:35:fc:bc:7f:fe:56: 78:5d:d2:ad:ec:c9:9b:27:6c:aa:07:14:dc:41:29: a3:41:87:d6:a7:90:a9:54:5e:0c:61:b0:86:e6:54: b7:57:83:82:af:7a:2e:ce:9a:a5:b0:4c:e4:9b:5b: 5f:78:d7:05:6a:4b:58:1b:4c:2e:4d:5b:84:7c:0d: 68:46:02:9c:0a:58:2b:f7:9f:5d:f8:e7:75:8f:12: 7d:a1:a1:a7:f1:17:dc:7b:d8:29:2b:43:e0:37:7d: 02:85:13:d8:8f:a9:b0:20:6d:34:ac:62:45:6c:ef: 6d:d4:3e:f4:07:7e:cb:b2:e1:07:99:90:2b:2a:e6: 49:eb:71:6d:de:30:49:95:16:ac:9d:33:93:8b:57: 27:28:58:5f:51:cf:2b:7e:52:fa:76:72:9a:20:6e: 25:4b:19:7d:b2:89:ce:07:ee:97:a2:b2:9f:e3:2b: 7c:c3:0d:4a:7a:77:40:5a:6f:75:b4:42:89:14:52: d1:38:0d:81:a2:9a:3d:fc:88:e7:bf:c4:be:12:36: 60:ce:2e:58:76:ff:d5:c1:bb:31:e0:72:91:b5:14: 7e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:CB:4F:6D:15:FB:2E:FB:13:A2:4B:3B:93:E4:DF:1E:CC:AC:4B X509v3 Authority Key Identifier: keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:27:53:0f:30:4e:2d:35:40:36:60:88:1a:48:c1:5b:78:5e: 36:19:77:0b:c1:c8:40:40:d0:ad:2c:4d:7b:e1:93:e7:07:96: 1f:1b:76:3c:01:01:85:bf:1c:9d:64:7c:70:04:f9:4c:54:0b: ad:0e:f3:c7:52:88:39:87:3e:67:e0:89:84:a2:9b:d8:01:be: a4:ff:23:8e:7e:e1:12:25:3a:e8:96:66:9e:bf:0f:73:5d:9d: 44:00:aa:47:43:3e:5e:21:1d:4b:c3:82:f4:c1:e1:34:59:00: e9:ea:05:9f:fb:d6:f9:d2:d4:5b:87:3c:9d:8f:f8:dd:e3:1a: ff:b6:e3:dc:05:65:41:e2:4d:d1:c2:57:5e:b5:0f:20:8b:53: 7b:ec:d7:e4:e7:de:5d:d3:05:a8:2a:d5:22:16:b0:c8:8f:5a: 86:8c:e3:d4:8a:bc:a2:ea:52:eb:eb:6b:bb:81:72:00:7a:fd: 9b:65:46:de:b8:49:43:80:bb:29:96:80:0d:f6:72:e4:87:8c: b1:56:71:20:07:6c:cf:74:51:95:94:fb:3b:67:3b:14:9e:b5: 58:00:d9:5e:b3:33:33:48:8d:97:fc:e8:37:58:01:99:ad:d6: 1a:bd:d8:e8:01:53:22:82:0d:36:66:c3:43:e8:2f:4a:09:46: ea:af:64:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw OTQ2RUFCQzQwHhcNMjUwNjIwMTYyNTQ0WhcNMjUwNjI3MTYyNTQ0WjAYMRYwFAYD VQQDEw02ODU1OGI4OC05ZTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMD8OU9N5VbDIYq/sqpr+md3cKVbIK/JLIkVKdYSdvlaAWazhaM1/Lx//lZ4 XdKt7MmbJ2yqBxTcQSmjQYfWp5CpVF4MYbCG5lS3V4OCr3ouzpqlsEzkm1tfeNcF aktYG0wuTVuEfA1oRgKcClgr959d+Od1jxJ9oaGn8Rfce9gpK0PgN30ChRPYj6mw IG00rGJFbO9t1D70B37LsuEHmZArKuZJ63Ft3jBJlRasnTOTi1cnKFhfUc8rflL6 dnKaIG4lSxl9sonOB+6XorKf4yt8ww1KendAWm91tEKJFFLROA2Bopo9/Ijnv8S+ EjZgzi5Ydv/Vwbsx4HKRtRR+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGWy09t Ffsu+xOiSzuT5N8ezKxLMB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5 UGJsOGFWbEJTOGNKUnVxOFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALJ1MPME4tNUA2YIgaSMFbeF42GXcLwchAQNCtLE174ZPnB5YfG3Y8 AQGFvxydZHxwBPlMVAutDvPHUog5hz5n4ImEopvYAb6k/yOOfuESJTrolmaevw9z XZ1EAKpHQz5eIR1Lw4L0weE0WQDp6gWf+9b50tRbhzydj/jd4xr/tuPcBWVB4k3R wldetQ8gi1N77Nfk595d0wWoKtUiFrDIj1qGjOPUiryi6lLr62u7gXIAev2bZUbe uElDgLsploAN9nLkh4yxVnEgB2zPdFGVlPs7ZzsUnrVYANleszMzSI2X/Og3WAGZ rdYavdjoAVMigg02ZsND6C9KCUbqr2Sz -----END CERTIFICATE-----Generated at Sat Jun 21 15:06:52 2025 by rpki-client