$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json) Hash identifier: m/a+G0IZR6y6B2wMVTOjvAQeJ8kSugAvjZcrFDYFkRs= Subject key identifier: CE:2D:A4:F9:D5:B1:4C:F3:D1:4C:99:36:06:3D:9F:90:57:F0:64:B4 Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft Manifest number: 1268 Signing time: Wed 18 Jun 2025 19:04:00 +0000 Manifest this update: Wed 18 Jun 2025 19:04:00 +0000 Manifest next update: Wed 25 Jun 2025 19:04:00 +0000 Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: Hx/purPh6sD8vz8qWXLulZdhewI+MCYd/2ApOj7FbjA=) 2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 5XwqomZ9BLQ4EjKkc4C/QpwLGFRZM50AcN0fv78p3Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85 Validity Not Before: Jun 18 19:04:00 2025 GMT Not After : Jun 25 19:04:00 2025 GMT Subject: CN=68530da0-7c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:c8:84:f4:07:d9:41:76:3b:cf:66:97:c9: ac:04:3a:5c:41:cf:87:a7:d7:86:0c:e6:91:1b:83: 64:fa:9f:55:ad:db:2d:34:bc:3e:d1:f4:f5:d2:1b: 61:ea:d6:80:1a:59:d3:71:8a:1a:76:f1:35:8e:3a: 9e:7c:48:4a:aa:81:a4:f4:42:b3:71:97:f4:51:f6: b8:fa:93:b8:5a:41:05:3a:b6:5a:27:34:73:eb:aa: 9d:4d:bf:b2:fa:f6:ae:26:75:7c:ca:ba:46:37:76: ef:c6:3a:c6:6e:ff:55:ec:d5:df:d2:2d:ab:27:35: a0:3f:bd:f6:4d:42:4d:27:76:fc:bd:89:2d:7c:ab: cc:0f:bc:f1:93:00:5c:07:2f:af:15:89:2f:72:79: 68:e3:91:01:5b:c8:94:57:de:a7:0a:c6:e4:df:5b: 3d:76:7f:b8:fc:df:a1:3d:8f:fc:82:0a:ce:fd:8b: 47:4b:9a:18:65:8b:2f:97:b6:2c:c4:fa:06:e4:98: a1:70:81:46:91:c9:8c:00:60:b4:c2:f0:ec:5c:31: 2f:49:9f:b1:48:71:1b:46:cf:6b:5f:d4:95:7a:34: f0:f7:e5:40:7e:89:fb:95:1f:91:a8:69:61:58:1f: e1:fe:a6:05:0b:c6:59:5e:94:ea:45:d6:5e:cf:cb: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2D:A4:F9:D5:B1:4C:F3:D1:4C:99:36:06:3D:9F:90:57:F0:64:B4 X509v3 Authority Key Identifier: keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:4a:ab:85:12:a3:84:c9:2c:ae:d8:1d:af:f5:bf:a0:9e:92: 5d:2c:ba:7c:2c:32:3f:9f:e0:fe:d4:f3:14:f8:a1:4b:74:e2: 94:cf:43:14:9a:25:f1:ce:6c:a9:79:2d:2f:7d:c3:81:99:09: dd:e2:22:57:85:69:ff:77:5b:15:bd:b4:2b:a3:38:f1:0e:c7: 78:f8:5f:6e:d3:04:3d:a8:ab:f0:ca:97:08:25:a1:2f:a3:f8: 2f:02:c1:9c:a8:e9:98:eb:2e:4f:36:71:f7:e6:7a:9b:27:b6: 64:6a:bd:f2:8b:ce:48:48:9b:77:bc:02:4b:a2:5e:52:95:ae: 66:e0:5d:5c:9c:34:70:76:54:ee:c5:eb:d1:a5:75:c7:63:c7: e6:08:fd:9c:9a:63:e7:21:c9:c2:ab:16:f7:d0:f8:cf:7e:28: cc:72:6c:6b:a4:e2:c1:96:5a:c3:9c:1c:a5:c9:e4:0c:f8:a2: b9:e7:f3:8f:4c:b8:62:64:60:f8:46:0f:ca:af:ac:eb:82:17: 56:69:71:ec:59:e8:d5:04:0e:f8:ff:cd:85:db:6d:c6:20:2e: 38:e0:1b:ee:72:a5:1e:4a:4a:73:a8:7a:98:7a:49:a8:9b:c8: c3:24:36:2d:c9:fc:34:82:8a:c5:5e:61:78:8c:91:1a:2a:81: 2a:f3:7c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx ODVGRDlDODUwHhcNMjUwNjE4MTkwNDAwWhcNMjUwNjI1MTkwNDAwWjAYMRYwFAYD VQQDEw02ODUzMGRhMC03YzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0bIhPQH2UF2O89ml8msBDpcQc+Hp9eGDOaRG4Nk+p9VrdstNLw+0fT10hth 6taAGlnTcYoadvE1jjqefEhKqoGk9EKzcZf0Ufa4+pO4WkEFOrZaJzRz66qdTb+y +vauJnV8yrpGN3bvxjrGbv9V7NXf0i2rJzWgP732TUJNJ3b8vYktfKvMD7zxkwBc By+vFYkvcnlo45EBW8iUV96nCsbk31s9dn+4/N+hPY/8ggrO/YtHS5oYZYsvl7Ys xPoG5JihcIFGkcmMAGC0wvDsXDEvSZ+xSHEbRs9rX9SVejTw9+VAfon7lR+RqGlh WB/h/qYFC8ZZXpTqRdZez8upDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4tpPnV sUzz0UyZNgY9n5BX8GS0MB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/SquFEqOEySyu2B2v9b+gnpJdLLp8LDI/n+D+1PMU+KFLdOKUz0MU miXxzmypeS0vfcOBmQnd4iJXhWn/d1sVvbQrozjxDsd4+F9u0wQ9qKvwypcIJaEv o/gvAsGcqOmY6y5PNnH35nqbJ7Zkar3yi85ISJt3vAJLol5Sla5m4F1cnDRwdlTu xevRpXXHY8fmCP2cmmPnIcnCqxb30PjPfijMcmxrpOLBllrDnBylyeQM+KK55/OP TLhiZGD4Rg/Kr6zrghdWaXHsWejVBA74/82F223GIC444BvucqUeSkpzqHqYekmo m8jDJDYtyfw0gorFXmF4jJEaKoEq83xl -----END CERTIFICATE-----Generated at Thu Jun 19 12:26:01 2025 by rpki-client