$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: 6xMDbAazd2ujAcmIoEOaS6Z1HkyJV6377egCJxewYnY= Subject key identifier: B4:3D:60:AB:0D:A3:3B:B4:94:8B:89:79:C4:37:93:BF:AD:CA:A8:4E Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 0242 Signing time: Tue 01 Jul 2025 02:34:45 +0000 Manifest this update: Tue 01 Jul 2025 02:34:44 +0000 Manifest next update: Tue 08 Jul 2025 02:34:44 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: NUmTa1ZTssWby0FeAERIc2TtwIZg5y3EKR/rposvmc8=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Jul 1 02:34:44 2025 GMT Not After : Jul 8 02:34:44 2025 GMT Subject: CN=68634944-18c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e3:e4:d6:0d:f3:1d:ab:9c:64:82:c6:1a:cf: 85:85:0f:5e:2c:b3:4d:aa:b5:20:dc:ec:71:f3:1b: 16:eb:0e:e8:38:cf:51:c1:ce:95:9b:16:71:e1:5d: c9:37:1a:87:9f:49:24:d4:55:eb:3e:1f:81:5e:61: f6:3e:52:2c:a4:fa:4b:76:5e:3b:00:a4:f1:eb:69: 59:83:89:16:a2:e2:6e:2c:23:3f:ea:da:e1:70:81: e8:d0:22:e2:0c:a6:70:1f:32:8d:9b:86:7e:32:29: 4b:10:71:3f:63:d6:d2:90:38:f6:5b:04:0a:a6:42: e5:45:7f:81:3d:15:cc:19:85:fa:0b:d0:f3:78:e9: 4f:67:bf:75:33:f9:8e:02:55:58:87:cc:81:96:a5: 0e:1d:d2:6b:1b:6c:4b:d3:f6:04:95:05:52:a5:51: b9:c3:98:ce:41:ba:04:2e:28:ec:d5:44:42:2c:56: 17:37:09:55:97:8a:ed:2c:50:1d:aa:33:17:02:2b: 16:94:32:5e:d2:fc:56:46:ea:b6:8e:5d:ca:47:36: ea:95:16:56:3e:0a:55:21:14:9c:9c:6d:79:f1:c9: ea:6c:a4:52:39:e9:3f:45:f8:03:7c:3e:d5:bc:57: 12:ab:08:32:58:17:1e:8c:e4:ff:e1:a4:1e:f7:8c: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:60:AB:0D:A3:3B:B4:94:8B:89:79:C4:37:93:BF:AD:CA:A8:4E X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:27:90:01:d8:69:40:9f:de:97:eb:f3:89:03:5b:39:b9:fd: 54:ff:64:22:66:50:4f:2c:c3:df:a4:8b:86:a0:d8:59:ec:ed: ab:fe:f6:b5:02:68:d0:c6:8f:69:5b:c8:28:e6:95:3f:b1:03: af:cc:4f:6c:44:df:94:69:d6:84:3a:0a:84:d5:97:31:a9:b9: cd:80:f4:9c:d2:ec:de:6c:77:33:d6:6d:09:92:fd:f5:d8:1e: 4d:1c:d1:9a:b8:e3:ae:a0:4f:95:62:35:38:26:4a:81:b8:b5: ee:4e:91:8e:81:d5:87:45:11:a1:8f:12:af:fe:70:c1:95:ad: f3:a4:d4:ea:97:35:52:2d:6e:27:62:7e:94:14:0e:99:b3:db: bd:cc:2a:8b:23:53:1d:83:cf:73:98:c2:f3:ad:1b:aa:6f:2e: c9:6d:34:81:20:81:51:06:2a:9f:91:94:84:69:99:5e:6e:b9: cc:f1:90:7e:b2:99:83:86:7f:d7:43:7b:74:05:f8:9b:93:5b: a1:62:d9:f1:2c:d6:ff:1d:fc:2b:32:4e:43:d6:21:42:5f:bf: 57:f0:bf:2b:ca:50:04:11:0e:ca:67:d2:b6:8a:ed:c8:78:88: c6:01:43:0f:0c:3a:dc:d1:fe:e1:f5:e9:f1:9c:2a:9a:cb:77: d4:00:89:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwNzAxMDIzNDQ0WhcNMjUwNzA4MDIzNDQ0WjAYMRYwFAYD VQQDEw02ODYzNDk0NC0xOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsePk1g3zHaucZILGGs+FhQ9eLLNNqrUg3Oxx8xsW6w7oOM9Rwc6VmxZx4V3J NxqHn0kk1FXrPh+BXmH2PlIspPpLdl47AKTx62lZg4kWouJuLCM/6trhcIHo0CLi DKZwHzKNm4Z+MilLEHE/Y9bSkDj2WwQKpkLlRX+BPRXMGYX6C9DzeOlPZ791M/mO AlVYh8yBlqUOHdJrG2xL0/YElQVSpVG5w5jOQboELijs1URCLFYXNwlVl4rtLFAd qjMXAisWlDJe0vxWRuq2jl3KRzbqlRZWPgpVIRScnG158cnqbKRSOek/RfgDfD7V vFcSqwgyWBcejOT/4aQe94xOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ9YKsN ozu0lIuJecQ3k7+tyqhOMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQJ5AB2GlAn96X6/OJA1s5uf1U/2QiZlBPLMPfpIuGoNhZ7O2r/va1 AmjQxo9pW8go5pU/sQOvzE9sRN+UadaEOgqE1ZcxqbnNgPSc0uzebHcz1m0Jkv31 2B5NHNGauOOuoE+VYjU4JkqBuLXuTpGOgdWHRRGhjxKv/nDBla3zpNTqlzVSLW4n Yn6UFA6Zs9u9zCqLI1Mdg89zmMLzrRuqby7JbTSBIIFRBiqfkZSEaZlebrnM8ZB+ spmDhn/XQ3t0Bfibk1uhYtnxLNb/HfwrMk5D1iFCX79X8L8rylAEEQ7KZ9K2iu3I eIjGAUMPDDrc0f7h9enxnCqay3fUAIld -----END CERTIFICATE-----Generated at Tue Jul 1 18:49:56 2025 by rpki-client