$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: 3Qdhj6XqREVj18R8Q8AMNIfnCqpVnWQYx50SYVFOCys= Subject key identifier: 12:11:0E:45:94:9D:46:75:55:F7:75:2C:8F:2B:4C:6C:60:88:4C:1F Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 3484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 3484 Signing time: Wed 04 Jun 2025 15:05:51 +0000 Manifest this update: Wed 04 Jun 2025 15:05:51 +0000 Manifest next update: Wed 11 Jun 2025 15:05:51 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: FmLpYclPooRsHUketonzw1Vy2Bbq4cjU7zVwxIRRdeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13444 (0x3484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Jun 4 15:05:51 2025 GMT Not After : Jun 11 15:05:51 2025 GMT Subject: CN=684060cf-029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:46:7c:e6:4b:bf:89:14:52:b9:0c:80:f8: a6:cc:00:c7:fa:45:74:df:f2:f3:73:0c:ac:b5:e6: 33:b0:d9:30:cd:84:4c:47:94:fa:2b:cd:cf:a3:8b: 65:77:68:74:80:e5:67:7d:d5:f6:62:f2:e7:2d:42: 01:61:1c:49:8d:e4:7a:7d:e3:08:fb:16:b8:0c:9a: 19:3b:69:60:30:92:96:61:1a:84:54:ec:b3:87:16: cf:32:ec:09:d5:46:27:4d:9d:cb:dd:df:48:32:30: 4f:b7:e8:48:3f:f2:54:67:72:01:58:f1:c6:b3:7d: bf:69:27:03:f6:af:d6:9f:f7:d3:98:43:f3:7c:28: 72:86:db:b8:5c:e2:b9:b4:f1:64:bc:cf:cf:08:91: 6d:37:47:d7:70:b2:a9:60:1f:10:1d:38:96:e3:e6: e1:fd:28:16:e5:31:aa:ba:30:70:c4:8f:1f:6e:3c: 3f:d5:f5:66:12:d4:92:c3:d1:f6:91:ca:9c:94:8e: 08:d8:2c:7e:fb:2b:a5:65:f3:ca:c0:a8:be:0d:33: c4:18:4a:25:04:d9:53:a5:42:5e:80:43:e1:11:c4: d1:a9:bf:c0:d7:66:c6:67:39:23:7a:f2:be:ba:eb: b9:c1:43:7c:5f:ed:ed:81:c6:d9:7d:bb:4a:a6:e6: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:0E:45:94:9D:46:75:55:F7:75:2C:8F:2B:4C:6C:60:88:4C:1F X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:28:53:ef:22:03:ef:72:c9:fa:12:23:18:26:82:cf:9e:71: eb:ce:03:11:40:89:77:55:31:1f:b3:ae:01:89:6a:01:8b:40: cb:7e:e6:79:96:dd:dc:7b:f0:18:30:2d:0e:62:ac:f6:0c:4b: 76:a8:5a:74:af:56:e5:19:a4:57:85:dc:27:5e:f2:06:c6:68: e2:1f:bd:24:e9:7e:cb:22:0b:6b:e9:30:94:5f:ec:4f:ba:27: 7e:ce:19:94:1b:f2:d7:ed:a2:dc:ab:ad:d6:ec:c2:ce:61:3e: 98:ec:82:1c:a7:2e:58:ec:e7:e4:86:73:e4:3e:39:3f:44:6b: 0d:15:8c:35:69:21:e2:6a:9a:79:23:47:a5:6b:60:9d:df:4b: 34:15:70:40:81:22:ab:ea:2b:d9:8e:5c:d0:5e:6f:45:f0:45: c0:5c:0f:93:6f:bf:d0:a6:c1:c1:e4:6d:74:1c:2f:7f:bc:36: 81:0b:c7:96:65:38:4b:06:a1:18:37:ef:5f:6f:3a:12:33:ad: 6e:a0:14:5d:8e:e4:8a:1a:94:dd:41:36:bf:18:1f:51:07:24: 80:33:80:a4:fe:c3:5b:38:4d:a1:c6:a2:f1:8d:0c:0e:40:36: 66:bb:39:6b:0d:29:2c:86:c9:77:a8:31:70:71:13:18:aa:53: 98:1c:1a:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUwNjA0MTUwNTUxWhcNMjUwNjExMTUwNTUxWjAYMRYwFAYD VQQDEw02ODQwNjBjZi0wMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hpGfOZLv4kUUrkMgPimzADH+kV03/LzcwysteYzsNkwzYRMR5T6K83Po4tl d2h0gOVnfdX2YvLnLUIBYRxJjeR6feMI+xa4DJoZO2lgMJKWYRqEVOyzhxbPMuwJ 1UYnTZ3L3d9IMjBPt+hIP/JUZ3IBWPHGs32/aScD9q/Wn/fTmEPzfChyhtu4XOK5 tPFkvM/PCJFtN0fXcLKpYB8QHTiW4+bh/SgW5TGqujBwxI8fbjw/1fVmEtSSw9H2 kcqclI4I2Cx++yulZfPKwKi+DTPEGEolBNlTpUJegEPhEcTRqb/A12bGZzkjevK+ uuu5wUN8X+3tgcbZfbtKpuYl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIRDkWU nUZ1Vfd1LI8rTGxgiEwfMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFKFPvIgPvcsn6EiMYJoLPnnHrzgMRQIl3VTEfs64BiWoBi0DLfuZ5 lt3ce/AYMC0OYqz2DEt2qFp0r1blGaRXhdwnXvIGxmjiH70k6X7LIgtr6TCUX+xP uid+zhmUG/LX7aLcq63W7MLOYT6Y7IIcpy5Y7OfkhnPkPjk/RGsNFYw1aSHiapp5 I0ela2Cd30s0FXBAgSKr6ivZjlzQXm9F8EXAXA+Tb7/QpsHB5G10HC9/vDaBC8eW ZThLBqEYN+9fbzoSM61uoBRdjuSKGpTdQTa/GB9RBySAM4Ck/sNbOE2hxqLxjQwO QDZmuzlrDSkshsl3qDFwcRMYqlOYHBrw -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:44 2025 by rpki-client