$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft File: 99dMf7iwuu_DY1zU41BIr4jjnu8.mft (raw, json) Hash identifier: QpuiBy856ZTDkCTk/60Jw1s7bSur+YhhIaX1fgc5RcA= Subject key identifier: B4:89:B2:00:4D:92:3E:6E:3C:AA:00:60:92:74:62:3D:91:83:EA:7D Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF Certificate issuer: /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Certificate serial: 1AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft Manifest number: 1A61 Signing time: Wed 18 Jun 2025 16:22:06 +0000 Manifest this update: Wed 18 Jun 2025 16:22:06 +0000 Manifest next update: Wed 25 Jun 2025 16:22:06 +0000 Files and hashes: 1: 99dMf7iwuu_DY1zU41BIr4jjnu8.crl (hash: VCgSa0+9z2+u3ejD2n6Q1PcjyiYDTOXA5RdUnFjCFE4=) 2: 2578CBCCFD4611EDA9A46F52C4F9AE02.roa (hash: ZY9UVEPOCB1tx7LWMX0JPtFEK9gl6SqjcejUUwF9APo=) 3: 16A3B47EED7A11EAB00FA463C4F9AE02.roa (hash: p7tQRESvOucR4loUarfHpuL5VMHiMFu4353xIOkSzpw=) 4: 1E17F340724911E88CAE8E84C4F9AE02.roa (hash: H1ZnHxZixXVbHo7aB0OBCDDL/HvZe6bvZhxCcCw4jYQ=) 5: F5257E60FD4111ED947CD631C4F9AE02.roa (hash: e4tQVidUhYeVOQueW5SrNgjm3m0qmH9C2+LHfapMlI0=) 6: AC39D9F8615211E7BAD4DA61C4F9AE02.roa (hash: janciRMHjU97zB3lXitJwIl9Ika5JfzU+v8Mkow8p3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6828 (0x1aac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF Validity Not Before: Jun 18 16:22:06 2025 GMT Not After : Jun 25 16:22:06 2025 GMT Subject: CN=6852e7ae-30c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:7a:22:c4:08:94:f8:4e:a8:ab:6a:77:6f: e8:2f:a2:7c:4f:fa:a5:84:b9:84:84:67:d9:26:58: 68:27:13:b9:b0:4c:2c:cb:ca:1a:28:21:d7:fd:0f: 1b:4a:d7:05:12:79:6f:8c:a7:f0:4a:fd:00:38:7c: 1b:ad:9f:b3:83:d1:86:4e:0b:fb:1d:b6:4a:5e:8f: af:ef:dd:8b:46:d1:7f:17:66:72:ed:b9:c4:97:b0: 87:31:85:99:ec:36:9a:de:ac:75:f4:4e:e7:96:2e: 75:f8:09:f3:97:5b:df:73:f8:0d:e0:ca:a6:fe:5b: 06:aa:61:98:1a:6d:bb:8a:ea:89:73:05:97:b5:8b: 77:55:38:2a:2f:1b:a1:f0:61:6f:7e:52:da:75:f4: 46:75:31:25:23:3e:59:62:b3:56:9f:11:83:f1:bd: df:53:08:b7:34:76:d8:a4:3a:ee:c6:db:40:4d:07: 92:58:a4:da:9a:bd:bc:9c:a1:b3:da:39:e3:21:e3: 6c:dd:a0:bc:78:2f:d1:c2:14:0e:76:52:7d:53:ef: 8a:40:b9:39:f4:a9:e7:08:8f:d2:fd:cd:f4:5f:cf: c8:9a:ab:23:a1:ca:f4:e0:af:a1:3d:4f:81:45:9a: d5:2d:34:72:0c:06:d0:0c:5a:dd:b5:57:c4:37:52: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:89:B2:00:4D:92:3E:6E:3C:AA:00:60:92:74:62:3D:91:83:EA:7D X509v3 Authority Key Identifier: keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:f2:23:4c:ff:e1:8c:78:ed:38:9d:48:82:ec:e1:66:70: b1:73:16:a6:40:6a:63:3a:59:50:b9:5e:0f:82:b5:ff:46:5d: 7b:4e:c6:90:d4:aa:a6:fc:4e:ed:ff:5b:58:dd:80:b4:de:e8: 08:97:a9:7a:1b:c0:b0:62:93:f3:a1:ad:65:9a:34:eb:e0:70: eb:fa:27:a6:81:e7:82:88:c3:0c:7c:e2:3d:4c:dd:ad:92:44: 52:14:cf:ab:8e:52:6b:8e:68:9b:5c:ed:5b:5b:a1:db:28:dc: e5:60:c4:d0:cd:ac:7e:46:28:ab:c2:3f:a1:09:35:ab:b6:9a: d6:45:53:78:04:02:d5:ec:a4:60:0b:cd:71:65:aa:8c:b6:a1: b1:a7:8e:76:ab:63:ad:16:3c:52:2c:b0:ee:20:e7:8e:d0:a0: e1:44:0f:cd:2a:c5:c6:f9:7b:a1:3a:b2:38:de:ca:77:09:45: 5c:cb:61:24:dd:cb:75:31:60:2c:39:68:5f:95:34:35:65:9f: 0b:7e:c9:d4:92:dc:71:d5:71:b4:9f:fd:c1:aa:db:3e:f5:73: 68:40:b9:b4:c0:67:54:c8:8a:2c:a2:94:86:59:85:51:75:be: 7d:01:d1:f3:cf:50:85:aa:c2:f9:66:cd:b4:05:5f:8b:8f:ba: ce:ca:99:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY2QTgxMTAvBgNVBAUTKEY3RDc0QzdGQjhCMEJBRUZDMzYzNUNENEUzNTA0OEFG ODhFMzlFRUYwHhcNMjUwNjE4MTYyMjA2WhcNMjUwNjI1MTYyMjA2WjAYMRYwFAYD VQQDEw02ODUyZTdhZS0zMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9t6IsQIlPhOqKtqd2/oL6J8T/qlhLmEhGfZJlhoJxO5sEwsy8oaKCHX/Q8b StcFEnlvjKfwSv0AOHwbrZ+zg9GGTgv7HbZKXo+v792LRtF/F2Zy7bnEl7CHMYWZ 7Daa3qx19E7nli51+Anzl1vfc/gN4Mqm/lsGqmGYGm27iuqJcwWXtYt3VTgqLxuh 8GFvflLadfRGdTElIz5ZYrNWnxGD8b3fUwi3NHbYpDruxttATQeSWKTamr28nKGz 2jnjIeNs3aC8eC/RwhQOdlJ9U++KQLk59KnnCI/S/c30X8/Imqsjocr04K+hPU+B RZrVLTRyDAbQDFrdtVfEN1LRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSJsgBN kj5uPKoAYJJ0Yj2Rg+p9MB8GA1UdIwQYMBaAFPfXTH+4sLrvw2Nc1ONQSK+I457v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjZBOC9GM0JENEMzNjQ5 Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1X0RZMXpVNDFCSXI0ampu dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5ZE1mN2l3dXVfRFkxelU0MUJJcjRqam51OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjZBOC9GM0JENEMzNjQ5Q0IxMUU3QTRBODdDN0JDNEY5QUUwMi85OWRNZjdpd3V1 X0RZMXpVNDFCSXI0ampudTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAEvIjTP/hjHjtOJ1IguzhZnCxcxamQGpjOllQuV4PgrX/Rl17TsaQ 1Kqm/E7t/1tY3YC03ugIl6l6G8CwYpPzoa1lmjTr4HDr+iemgeeCiMMMfOI9TN2t kkRSFM+rjlJrjmibXO1bW6HbKNzlYMTQzax+Riirwj+hCTWrtprWRVN4BALV7KRg C81xZaqMtqGxp452q2OtFjxSLLDuIOeO0KDhRA/NKsXG+XuhOrI43sp3CUVcy2Ek 3ct1MWAsOWhflTQ1ZZ8LfsnUktxx1XG0n/3Bqts+9XNoQLm0wGdUyIosopSGWYVR db59AdHzz1CFqsL5Zs20BV+Lj7rOyplz -----END CERTIFICATE-----Generated at Fri Jun 20 07:50:25 2025 by rpki-client