$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json) Hash identifier: f5oDwf2Yf2T9Z5kyT3sQiRmEKsiJLdziDpLuAFd5GKs= Subject key identifier: C1:83:7A:9D:83:3A:B8:BB:9A:EF:4C:A1:D6:EF:69:B2:66:BC:2B:DE Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 051D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft Manifest number: 0501 Signing time: Sat 19 Jul 2025 00:07:34 +0000 Manifest this update: Sat 19 Jul 2025 00:07:34 +0000 Manifest next update: Sat 26 Jul 2025 00:07:34 +0000 Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: 2eFGT6kT1stcCgKuqqmcJMbdPqkHY91SUGvANAC4emA=) 2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=) 3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1309 (0x51d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Jul 19 00:07:34 2025 GMT Not After : Jul 26 00:07:34 2025 GMT Subject: CN=687ae1c6-5a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ed:34:9d:d1:e2:f8:a1:50:21:46:a8:cc:0f: d8:0f:cd:8d:f3:4f:56:47:3d:a0:98:a1:75:d7:0a: be:f9:cf:6c:7d:9e:e5:f9:89:23:ba:69:f8:ee:a9: 6d:21:5f:ff:d7:6b:91:c9:e0:2d:ba:4e:6f:e4:9e: 26:59:41:19:11:54:5d:7a:47:2b:45:85:62:70:66: 46:a0:a8:11:18:f1:e1:9e:90:5b:43:52:96:93:6f: ca:31:65:b8:13:00:eb:a5:6f:67:b8:f2:96:dd:bf: 6e:53:57:69:82:44:2b:f8:db:1f:72:50:ab:b9:df: 4d:81:64:1e:90:d6:07:46:78:80:48:2b:21:d9:5e: 4c:28:43:91:8f:cc:11:e0:fd:5a:51:e2:22:5d:e4: 8a:a1:eb:31:16:3a:35:80:32:11:a7:c1:76:e7:c1: 96:f1:9a:ce:d9:1e:94:64:e6:32:a4:29:bd:d6:57: 8a:9a:79:f5:74:c2:d6:09:d1:ad:0d:2a:a5:53:81: 0b:b6:67:c7:31:8e:c4:b4:e7:0e:24:05:7d:a2:09: a9:8e:11:13:79:a5:6d:c8:b5:c6:1b:be:cd:20:12: 60:51:6c:fe:17:56:e8:45:b4:cc:94:06:8b:82:3f: 13:f6:a2:9c:9a:cd:d2:d6:8b:83:b0:56:df:b3:6d: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:7A:9D:83:3A:B8:BB:9A:EF:4C:A1:D6:EF:69:B2:66:BC:2B:DE X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:67:2c:37:28:01:43:82:ca:43:f4:ff:fc:da:d6:66:41:f6: 4b:6a:05:f8:58:86:fa:e6:b3:98:76:99:a8:4e:f5:f0:1f:2f: 9f:9f:6c:ee:1c:b7:0c:80:ea:32:99:43:66:fc:05:63:22:82: 37:76:29:be:6c:5b:fd:a8:d0:98:08:1a:f8:fb:f8:a5:25:85: cc:e2:60:d3:bf:93:5d:a3:21:de:5a:32:17:32:64:db:2a:39: 93:36:81:b4:be:60:79:eb:f0:1a:08:62:63:4a:a5:a7:7b:19: b8:5a:e0:73:b5:1a:02:7e:ea:05:25:8b:38:6b:ea:0a:82:69: fe:65:f0:f5:5f:08:e2:73:ce:32:24:dd:3d:dc:8a:62:f0:70: fe:43:e9:f3:98:6a:33:fb:f4:d6:3a:29:2a:0f:13:81:32:40: e8:0e:d3:68:ca:b5:d8:90:51:87:9c:9d:5e:41:a2:be:ab:df: 8d:a0:d9:46:99:71:3b:d6:60:f2:24:f1:f5:ae:28:41:42:80: 28:ff:9d:9f:39:7e:2e:d6:f7:5a:c8:b2:6e:60:85:d3:8b:0b: b6:39:18:45:71:af:66:9e:03:04:68:62:83:26:52:26:ef:9b: 2d:90:7c:dc:48:5d:8c:bd:47:10:7a:7f:1e:1d:d0:45:28:ad: 02:24:5a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUwNzE5MDAwNzM0WhcNMjUwNzI2MDAwNzM0WjAYMRYwFAYD VQQDEw02ODdhZTFjNi01YTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+00ndHi+KFQIUaozA/YD82N809WRz2gmKF11wq++c9sfZ7l+Ykjumn47qlt IV//12uRyeAtuk5v5J4mWUEZEVRdekcrRYVicGZGoKgRGPHhnpBbQ1KWk2/KMWW4 EwDrpW9nuPKW3b9uU1dpgkQr+NsfclCrud9NgWQekNYHRniASCsh2V5MKEORj8wR 4P1aUeIiXeSKoesxFjo1gDIRp8F258GW8ZrO2R6UZOYypCm91leKmnn1dMLWCdGt DSqlU4ELtmfHMY7EtOcOJAV9ogmpjhETeaVtyLXGG77NIBJgUWz+F1boRbTMlAaL gj8T9qKcms3S1ouDsFbfs22JuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGDep2D Ori7mu9ModbvabJmvCveMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Zyw3KAFDgspD9P/82tZmQfZLagX4WIb65rOYdpmoTvXwHy+fn2zu HLcMgOoymUNm/AVjIoI3dim+bFv9qNCYCBr4+/ilJYXM4mDTv5NdoyHeWjIXMmTb KjmTNoG0vmB56/AaCGJjSqWnexm4WuBztRoCfuoFJYs4a+oKgmn+ZfD1Xwjic84y JN093Ipi8HD+Q+nzmGoz+/TWOikqDxOBMkDoDtNoyrXYkFGHnJ1eQaK+q9+NoNlG mXE71mDyJPH1rihBQoAo/52fOX4u1vdayLJuYIXTiwu2ORhFca9mngMEaGKDJlIm 75stkHzcSF2MvUcQen8eHdBFKK0CJFo1 -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:22 2025 by rpki-client