$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: Qozu/k2d7I99tiRR6VqcrHYi+pLjSFnCeETIJwxqZpw= Subject key identifier: 73:E8:3B:07:82:9A:18:41:62:46:6A:97:5A:89:13:02:FD:DB:0F:A7 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0A77 Signing time: Sat 14 Jun 2025 19:27:26 +0000 Manifest this update: Sat 14 Jun 2025 19:27:26 +0000 Manifest next update: Sat 21 Jun 2025 19:27:26 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: Ev3JdeRdNFIWbWfz10J85xeWpmHs1DMQI4rwEIna/XM=) 2: E56559AA7CAD11EEB3536044C4F9AE02.roa (hash: 0eEfoYZVPT+i1jAQtAFcxmDQsIWicbTtDWldCs89vv8=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: +qdSnSMI4Cq6GPacx1y6troGvfBHeu8mDwsrgTG91us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Jun 14 19:27:26 2025 GMT Not After : Jun 21 19:27:26 2025 GMT Subject: CN=684dcd1e-09e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:71:68:79:8e:64:38:c5:ff:47:eb:72:50: 03:fb:c9:3d:ed:c0:96:62:a2:d7:5d:36:ca:d3:3f: 94:63:41:6c:c2:da:8b:de:7a:86:89:bb:3a:52:70: 13:25:ab:f5:43:ea:f7:b0:ae:ad:be:20:a3:c4:55: 99:4b:d1:12:e5:b8:bf:0f:d3:83:5b:5c:88:b7:71: 9b:d5:62:cd:d3:2e:39:57:c7:5e:b4:cf:52:92:3a: c7:a2:14:44:bc:80:0e:99:39:63:39:40:20:a2:5d: 49:e7:4f:3e:9a:4e:0d:92:75:7e:e5:8e:ed:29:e4: 3c:96:de:44:5a:98:e8:41:5c:5f:79:86:a8:72:10: 73:cd:98:9d:57:c8:9c:64:c2:69:ef:75:c5:10:51: 4e:ad:28:3c:21:02:1f:39:c8:17:0b:73:8a:e5:5f: 85:a0:06:08:ad:47:53:a4:e3:44:1e:43:ec:1c:ae: 06:4b:0b:9f:7b:93:28:be:60:8e:3f:fc:56:9e:1e: da:bb:f0:93:40:59:bd:ff:1a:48:63:21:9b:b7:fe: 6f:d2:92:ef:b2:39:23:93:e5:0b:af:64:08:9b:79: a6:82:fb:c8:81:cb:d0:47:5f:fd:f8:45:ce:90:bd: 66:d0:b2:ae:30:04:5e:d0:39:f3:41:f1:b3:3a:f8: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:3B:07:82:9A:18:41:62:46:6A:97:5A:89:13:02:FD:DB:0F:A7 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:64:55:5c:92:4b:80:28:83:a0:c9:40:60:aa:1c:f5:10: 37:31:c3:9f:ad:03:a4:1f:10:a0:3f:91:99:fd:4b:20:0f:b3: 06:80:9e:fc:0b:54:04:a8:1a:8f:ab:ab:2d:63:29:52:44:dd: a3:af:5a:0d:21:d2:83:9b:77:3c:c9:bc:05:9c:6c:f7:1f:69: 59:ac:14:ef:4d:21:08:3b:a0:e7:72:f4:b6:a4:65:da:b9:32: e7:af:40:0b:a2:c8:6c:6f:a6:f9:db:86:cb:54:94:4f:22:ba: 5f:61:b1:93:9d:3d:6e:81:7e:47:62:b2:18:5f:1a:3d:a1:b4: 42:01:4b:4b:93:37:97:ed:e6:d2:9a:bf:b2:30:4b:bd:7f:38: 6a:4b:64:82:ab:e7:88:ca:9f:53:08:ee:18:b4:bf:b2:35:27: e4:98:d3:2c:b7:4e:a9:e7:40:f4:ca:9a:37:cf:24:3e:65:47: 07:00:b9:89:0f:c2:d6:34:be:72:59:7f:88:c2:a6:e2:88:e4: 87:fe:26:35:2b:33:b7:1d:6c:a7:66:e6:93:aa:2c:fb:90:96: e7:e9:da:f5:37:e9:ad:0e:26:96:e4:8b:72:ca:8d:54:e4:68: 95:a8:9c:54:7f:e9:0c:50:01:db:7c:11:67:7b:42:ec:e4:bc: c8:55:3e:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjUwNjE0MTkyNzI2WhcNMjUwNjIxMTkyNzI2WjAYMRYwFAYD VQQDEw02ODRkY2QxZS0wOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/JxaHmOZDjF/0frclAD+8k97cCWYqLXXTbK0z+UY0FswtqL3nqGibs6UnAT Jav1Q+r3sK6tviCjxFWZS9ES5bi/D9ODW1yIt3Gb1WLN0y45V8detM9SkjrHohRE vIAOmTljOUAgol1J508+mk4NknV+5Y7tKeQ8lt5EWpjoQVxfeYaochBzzZidV8ic ZMJp73XFEFFOrSg8IQIfOcgXC3OK5V+FoAYIrUdTpONEHkPsHK4GSwufe5MovmCO P/xWnh7au/CTQFm9/xpIYyGbt/5v0pLvsjkjk+ULr2QIm3mmgvvIgcvQR1/9+EXO kL1m0LKuMARe0DnzQfGzOvh+SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPoOweC mhhBYkZql1qJEwL92w+nMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4NmRVXJJLgCiDoMlAYKoc9RA3McOfrQOkHxCgP5GZ/UsgD7MGgJ78 C1QEqBqPq6stYylSRN2jr1oNIdKDm3c8ybwFnGz3H2lZrBTvTSEIO6DncvS2pGXa uTLnr0ALoshsb6b524bLVJRPIrpfYbGTnT1ugX5HYrIYXxo9obRCAUtLkzeX7ebS mr+yMEu9fzhqS2SCq+eIyp9TCO4YtL+yNSfkmNMst06p50D0ypo3zyQ+ZUcHALmJ D8LWNL5yWX+IwqbiiOSH/iY1KzO3HWynZuaTqiz7kJbn6dr1N+mtDiaW5Ityyo1U 5GiVqJxUf+kMUAHbfBFne0Ls5LzIVT4M -----END CERTIFICATE-----Generated at Sun Jun 15 09:39:31 2025 by rpki-client