$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: FxGF6xxUkqgvLc+3HlDHRQLJI8QZz79jQAPlhkvT+qs= Subject key identifier: E9:08:35:DC:FF:E9:E7:E1:36:3B:EB:DD:C2:93:5C:AB:07:67:44:CB Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 0317 Signing time: Mon 09 Jun 2025 00:47:08 +0000 Manifest this update: Mon 09 Jun 2025 00:47:08 +0000 Manifest next update: Mon 16 Jun 2025 00:47:08 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: lcA35QiR1lwEq6+3R+3tZP7ng6iDvYtz0v1c7yARaf0=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 00:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Jun 9 00:47:08 2025 GMT Not After : Jun 16 00:47:08 2025 GMT Subject: CN=68462f0c-dca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:46:35:d4:4c:f8:d5:d3:4f:d6:58:29:65: 41:c9:5b:b9:e7:71:fc:23:24:01:9e:23:4c:a2:ca: de:ed:ae:f8:18:59:76:dc:77:65:b0:f1:f3:cf:bc: 99:3b:dc:6f:86:0a:dc:4d:3d:2e:2f:0d:fa:c7:b2: 01:bd:e8:b1:97:56:d1:dd:53:f6:07:07:5f:3a:f3: 77:87:a0:3c:72:bb:f2:fd:85:f5:9b:5b:b0:f0:7f: 8b:e1:d4:77:3c:28:d1:0b:3f:02:cc:69:1a:ff:cd: aa:38:30:b4:74:6a:d8:d5:31:bc:09:0b:b5:b9:8a: 09:51:af:56:2c:be:a0:28:d9:27:e3:2a:7e:e6:48: 70:b9:5e:47:c5:d1:73:7a:ae:44:e1:81:93:88:ab: f0:3a:fb:81:dd:dd:4a:25:d3:92:52:0c:ab:e7:41: ee:83:c8:54:05:c6:9a:25:72:a1:0d:59:a8:36:14: 4f:d0:1e:f7:5e:05:5a:7e:3f:eb:f2:0a:4c:22:bf: b3:5d:c3:c1:9a:4b:a8:78:6e:a7:b4:25:d9:d7:20: 2d:03:f4:e3:28:b8:6f:6d:e3:19:4e:45:f6:ed:e3: f9:9b:ab:64:e6:38:b2:22:61:fd:1c:20:58:7e:d6: 68:74:8b:13:23:9f:94:84:9d:b8:ae:34:5a:17:c1: 41:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:08:35:DC:FF:E9:E7:E1:36:3B:EB:DD:C2:93:5C:AB:07:67:44:CB X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d2:26:f4:fb:5e:30:a9:86:4f:21:c3:fd:66:a3:aa:73:2d: a9:6c:4c:66:d1:79:38:7d:7d:fc:38:5b:eb:fc:2b:5f:65:a4: bf:7b:33:ee:07:fe:2a:3b:e8:67:2b:ce:56:42:65:ed:0f:83: 54:6d:48:20:1f:c6:9f:21:69:f0:9a:9d:aa:ee:9c:c8:c2:02: 57:47:82:8b:56:a7:c9:b9:f6:f8:b7:d2:5d:68:e1:e4:0c:cc: 68:74:de:42:54:e4:d3:c9:d0:64:d8:a4:ba:7f:c4:bf:9f:37: f5:23:ac:6d:1c:39:7d:93:17:66:e7:f0:0f:5e:1e:de:92:f1: 8c:e3:54:8d:82:53:20:2a:39:ba:53:b8:48:b7:9f:e6:39:b5: 4b:d4:6c:e5:ab:65:de:f9:f4:88:50:84:a3:c1:64:7a:58:75: f8:0a:cc:fa:79:92:6e:f3:da:0b:6b:96:0a:b4:90:95:8a:c6: 85:dc:72:ce:ee:ab:d9:5b:02:2f:8e:c0:5d:88:2b:2f:b4:f8: 2a:cf:61:d0:bd:d6:6a:81:e8:21:e3:47:26:90:7f:0b:87:4a: cd:67:cd:b9:c8:77:e9:3b:0a:97:cb:28:6e:f0:f9:0e:e3:3c: 6f:bb:50:fe:ca:9b:c6:3c:ea:1f:31:fc:01:70:2b:15:50:65: 0b:0c:a4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUwNjA5MDA0NzA4WhcNMjUwNjE2MDA0NzA4WjAYMRYwFAYD VQQDEw02ODQ2MmYwYy1kY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NdGNdRM+NXTT9ZYKWVByVu553H8IyQBniNMosre7a74GFl23HdlsPHzz7yZ O9xvhgrcTT0uLw36x7IBveixl1bR3VP2BwdfOvN3h6A8crvy/YX1m1uw8H+L4dR3 PCjRCz8CzGka/82qODC0dGrY1TG8CQu1uYoJUa9WLL6gKNkn4yp+5khwuV5HxdFz eq5E4YGTiKvwOvuB3d1KJdOSUgyr50Hug8hUBcaaJXKhDVmoNhRP0B73XgVafj/r 8gpMIr+zXcPBmkuoeG6ntCXZ1yAtA/TjKLhvbeMZTkX27eP5m6tk5jiyImH9HCBY ftZodIsTI5+UhJ24rjRaF8FByQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkINdz/ 6efhNjvr3cKTXKsHZ0TLMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt0ib0+14wqYZPIcP9ZqOqcy2pbExm0Xk4fX38OFvr/CtfZaS/ezPu B/4qO+hnK85WQmXtD4NUbUggH8afIWnwmp2q7pzIwgJXR4KLVqfJufb4t9JdaOHk DMxodN5CVOTTydBk2KS6f8S/nzf1I6xtHDl9kxdm5/APXh7ekvGM41SNglMgKjm6 U7hIt5/mObVL1Gzlq2Xe+fSIUISjwWR6WHX4Csz6eZJu89oLa5YKtJCVisaF3HLO 7qvZWwIvjsBdiCsvtPgqz2HQvdZqgegh40cmkH8Lh0rNZ825yHfpOwqXyyhu8PkO 4zxvu1D+ypvGPOofMfwBcCsVUGULDKTi -----END CERTIFICATE-----Generated at Mon Jun 9 11:59:11 2025 by rpki-client