$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft File: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json) Hash identifier: EcR7QipyIHHZAC+/8kH5Cf3GIoQQiEV2DfuRYHNOxAo= Subject key identifier: A9:41:9B:3F:A9:0C:D7:AF:21:F8:FE:3B:B6:27:E4:65:18:A1:CA:2D Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Certificate serial: 0C4F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft Manifest number: 0C41 Signing time: Fri 20 Jun 2025 18:30:09 +0000 Manifest this update: Fri 20 Jun 2025 18:30:09 +0000 Manifest next update: Fri 27 Jun 2025 18:30:09 +0000 Files and hashes: 1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: Kz0rey7CRSPfL1DKud6tw65TvNPiRKJFCnRXRMmOEBo=) 2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: IIl+hrMnm94EE997te9hu/Nd32AVZAIsxiVc91AGezY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3151 (0xc4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7 Validity Not Before: Jun 20 18:30:09 2025 GMT Not After : Jun 27 18:30:09 2025 GMT Subject: CN=6855a8b1-5f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3d:83:d0:b3:d6:d6:aa:d1:e9:95:9e:5a:99: 31:86:3a:7b:9f:94:f0:76:4b:78:9e:d9:2e:2b:94: e8:16:e7:ae:df:e7:ab:43:50:88:30:43:29:96:90: d6:23:08:2b:cb:cd:57:95:ec:7d:75:55:4b:e2:69: 61:fe:5a:42:44:12:08:1a:6a:ba:47:b6:c1:fe:e1: c8:69:dc:1a:87:a1:b4:90:d0:31:71:26:28:f1:a3: 05:39:a8:af:28:81:64:f1:97:5d:bd:af:ba:53:57: bc:f3:e8:ef:65:7b:5a:a8:c3:bc:82:f7:bf:15:84: 38:18:6f:71:94:93:f1:b1:d0:9d:07:c6:60:76:dc: 40:dc:fd:21:be:3b:74:d7:1e:7b:20:c0:a8:43:6c: 77:f9:ec:90:fb:67:2f:71:35:1d:6c:b5:46:b9:23: 1f:b6:a6:c6:31:80:33:9f:22:d4:5e:30:07:ca:8d: 63:8e:84:7c:46:f1:50:71:aa:fc:31:c6:e1:6f:21: 5c:bc:dc:d3:8e:c7:ef:b2:eb:e8:03:50:0b:1d:04: 0d:49:32:ce:88:61:b2:0f:27:3a:78:00:b4:5d:72: 32:36:1d:4f:84:e3:a4:59:cb:68:29:79:8e:ba:fe: ee:75:55:b2:29:7b:a0:f4:1b:23:6b:5b:04:dd:80: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:9B:3F:A9:0C:D7:AF:21:F8:FE:3B:B6:27:E4:65:18:A1:CA:2D X509v3 Authority Key Identifier: keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:6d:f0:b0:98:4b:c2:57:17:3c:34:f5:02:d5:29:bc:ac: 65:4d:a4:a6:28:41:53:e2:ae:59:45:1a:ad:1f:60:51:6a:77: dc:f7:d6:1f:e4:ad:2c:cb:d0:56:d9:83:c1:bb:91:09:4f:51: 8c:ac:06:b0:bf:2b:4d:78:79:1f:13:1f:57:d1:82:f4:d9:d6: 16:db:ae:0a:98:dd:24:0b:25:b9:05:be:57:d5:97:07:c9:ee: 7f:43:5b:14:a9:46:4d:1d:2b:d1:db:c5:8f:74:79:f3:9a:c7: 41:59:f2:42:0e:98:ee:2c:90:c8:72:ec:d6:2e:d4:28:db:f8: b1:58:32:6b:9b:e7:66:5d:e5:24:f1:98:36:92:a6:d7:1c:88: 6c:d1:00:5c:ef:4d:7a:35:91:8f:9c:ae:1a:6d:0d:65:0c:ed: 13:24:68:1f:b8:2f:2a:c3:32:92:b4:14:2a:04:ff:d3:d0:9b: 75:72:dc:04:bd:36:db:34:54:bd:47:58:a7:6a:b9:dd:ba:63: cc:16:be:28:ef:40:14:e1:a3:ea:37:a4:de:d9:16:8d:46:8a: 6e:57:c4:40:2c:f0:e9:ea:81:5d:de:c3:12:a7:d2:0f:d1:1f: 87:b4:7a:5f:84:e6:63:1d:18:3b:96:81:4e:bf:d3:9d:00:98: be:f2:16:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3 MjYyNDU3QTcwHhcNMjUwNjIwMTgzMDA5WhcNMjUwNjI3MTgzMDA5WjAYMRYwFAYD VQQDEw02ODU1YThiMS01ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6j2D0LPW1qrR6ZWeWpkxhjp7n5Twdkt4ntkuK5ToFueu3+erQ1CIMEMplpDW Iwgry81Xlex9dVVL4mlh/lpCRBIIGmq6R7bB/uHIadwah6G0kNAxcSYo8aMFOaiv KIFk8Zddva+6U1e88+jvZXtaqMO8gve/FYQ4GG9xlJPxsdCdB8ZgdtxA3P0hvjt0 1x57IMCoQ2x3+eyQ+2cvcTUdbLVGuSMftqbGMYAznyLUXjAHyo1jjoR8RvFQcar8 McbhbyFcvNzTjsfvsuvoA1ALHQQNSTLOiGGyDyc6eAC0XXIyNh1PhOOkWctoKXmO uv7udVWyKXug9Bsja1sE3YDRtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlBmz+p DNevIfj+O7Yn5GUYocotMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5 RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz YVpXSGhQLXZEbWx5WWtWNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk123wsJhLwlcXPDT1AtUpvKxlTaSmKEFT4q5ZRRqtH2BRanfc99Yf 5K0sy9BW2YPBu5EJT1GMrAawvytNeHkfEx9X0YL02dYW264KmN0kCyW5Bb5X1ZcH ye5/Q1sUqUZNHSvR28WPdHnzmsdBWfJCDpjuLJDIcuzWLtQo2/ixWDJrm+dmXeUk 8Zg2kqbXHIhs0QBc7016NZGPnK4abQ1lDO0TJGgfuC8qwzKStBQqBP/T0Jt1ctwE vTbbNFS9R1inarndumPMFr4o70AU4aPqN6Te2RaNRopuV8RALPDp6oFd3sMSp9IP 0R+HtHpfhOZjHRg7loFOv9OdAJi+8hb+ -----END CERTIFICATE-----Generated at Sat Jun 21 20:47:08 2025 by rpki-client