$ rpki-client -vvf rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft File: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft (raw, json) Hash identifier: FXSNhitjBaH9qMVCHavK5ATKcR+8rR34HR28EApBVtU= Subject key identifier: B8:60:6F:AC:64:77:6A:9C:47:89:89:82:36:69:28:E6:FF:88:D0:43 Authority key identifier: D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD Certificate issuer: /CN=A9122219/serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Certificate serial: 0B42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft Manifest number: 0B39 Signing time: Mon 30 Jun 2025 19:19:30 +0000 Manifest this update: Mon 30 Jun 2025 19:19:29 +0000 Manifest next update: Mon 07 Jul 2025 19:19:29 +0000 Files and hashes: 1: 0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl (hash: JrXCv7ahT+4ZATI1dON24Gw5Xgv/8Qxqc/hgof9fLgk=) 2: CD145D246E4E11EDBE02B065C4F9AE02.roa (hash: zSM1B8wSUB+mHKY/5kPPrFTVt9OokOjyYR65igDrdV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2882 (0xb42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122219, serialNumber=D0D2F45A46D26766014B786019A09A8334873DAD Validity Not Before: Jun 30 19:19:29 2025 GMT Not After : Jul 7 19:19:29 2025 GMT Subject: CN=6862e342-8386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:0e:8c:c8:f0:61:b3:c8:16:36:ec:68:70: 37:82:e2:8e:d7:b3:85:ce:24:1b:ce:91:19:2c:41: a5:76:bd:36:8f:0b:5c:e8:d6:85:e2:8f:05:fc:49: 52:a1:c9:bf:f0:87:0e:79:42:a8:91:85:2c:da:fb: f2:a8:2b:f0:96:2a:6d:03:14:44:48:7e:c4:d3:f4: 33:73:70:9c:e0:de:7c:71:9b:d5:23:c2:ec:f5:b3: 4e:46:a9:4a:4d:1d:f2:b2:e9:67:a2:92:21:fd:cd: 9f:1e:43:67:f1:5b:67:1e:17:9e:f5:ee:79:f3:89: be:82:2e:ac:cc:e7:6c:c0:9a:45:51:77:24:54:59: 31:16:1c:02:f9:7a:d2:7c:ff:71:f1:72:76:95:0e: 4e:06:e4:35:47:0f:37:7b:32:63:5b:a7:39:9f:cb: a0:33:a8:b3:b3:db:2e:76:f9:ac:34:d6:cf:b8:57: 91:c1:92:4f:f1:c9:74:91:2b:7a:c5:db:ad:e7:24: 4a:6c:59:5d:10:33:5f:b9:e0:c3:66:51:b7:b9:58: 55:18:09:bd:23:ab:01:b2:ab:1c:50:f7:47:09:f7: df:8d:04:9b:7c:05:f4:ec:04:59:83:e2:e0:66:0d: e9:74:0b:c5:20:dd:b6:db:fb:9a:d9:4d:40:0d:5f: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:6F:AC:64:77:6A:9C:47:89:89:82:36:69:28:E6:FF:88:D0:43 X509v3 Authority Key Identifier: keyid:D0:D2:F4:5A:46:D2:67:66:01:4B:78:60:19:A0:9A:83:34:87:3D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NL0WkbSZ2YBS3hgGaCagzSHPa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122219/82FE89CC3C3711EA873E1460C4F9AE02/0NL0WkbSZ2YBS3hgGaCagzSHPa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:9e:78:95:2f:3e:e6:1c:06:d0:fa:04:49:0d:2a:5d:51: 78:f0:d0:c6:52:80:9a:c8:71:bb:5d:09:54:d9:58:3f:e9:a6: 13:4c:c7:2c:1d:b9:ea:ac:84:0f:0e:63:05:44:0c:6a:f8:71: 9d:70:c4:6f:ee:5e:18:9e:48:89:97:3f:13:b9:9e:c3:c0:56: 00:51:e6:b9:70:12:84:ed:a9:0e:f7:40:42:00:a5:b0:a0:29: e3:5a:44:f6:95:bb:d6:a9:47:5d:dc:12:3f:1f:1a:6d:f7:81: f3:1f:12:18:b7:9b:ef:b2:2b:b3:4a:40:68:d1:b8:53:f1:2e: 22:4b:8a:f6:59:15:c8:d8:d2:1c:90:61:6f:6f:32:e7:d8:b9: 12:d7:1b:bc:36:b7:c2:53:1d:49:49:0d:c0:f6:a0:9f:7c:ed: 1a:ff:06:c9:d9:5d:a3:0e:75:55:fa:35:a6:e4:35:63:1d:11: d6:27:86:5a:e2:d3:57:5a:a1:95:90:04:7e:e9:79:da:6f:4f: 27:bd:e2:b9:da:f8:28:75:aa:4d:b5:09:5e:e0:e4:55:80:58: 19:c7:9c:96:00:71:66:06:14:5a:70:ca:33:4d:b3:8a:d0:a9: 32:26:f9:77:de:5f:2d:d1:8b:e0:a7:99:08:62:5f:1c:32:29: 4a:2e:70:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyMTkxMTAvBgNVBAUTKEQwRDJGNDVBNDZEMjY3NjYwMTRCNzg2MDE5QTA5QTgz MzQ4NzNEQUQwHhcNMjUwNjMwMTkxOTI5WhcNMjUwNzA3MTkxOTI5WjAYMRYwFAYD VQQDEw02ODYyZTM0Mi04Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05MOjMjwYbPIFjbsaHA3guKO17OFziQbzpEZLEGldr02jwtc6NaF4o8F/ElS ocm/8IcOeUKokYUs2vvyqCvwliptAxRESH7E0/Qzc3Cc4N58cZvVI8Ls9bNORqlK TR3ysulnopIh/c2fHkNn8VtnHhee9e5584m+gi6szOdswJpFUXckVFkxFhwC+XrS fP9x8XJ2lQ5OBuQ1Rw83ezJjW6c5n8ugM6izs9sudvmsNNbPuFeRwZJP8cl0kSt6 xdut5yRKbFldEDNfueDDZlG3uVhVGAm9I6sBsqscUPdHCfffjQSbfAX07ARZg+Lg Zg3pdAvFIN222/ua2U1ADV+zEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhgb6xk d2qcR4mJgjZpKOb/iNBDMB8GA1UdIwQYMBaAFNDS9FpG0mdmAUt4YBmgmoM0hz2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjIxOS84MkZFODlDQzND MzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oyWUJTM2hnR2FDYWd6U0hQ YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOTDBXa2JTWjJZQlMzaGdHYUNhZ3pTSFBhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjIxOS84MkZFODlDQzNDMzcxMUVBODczRTE0NjBDNEY5QUUwMi8wTkwwV2tiU1oy WUJTM2hnR2FDYWd6U0hQYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXh554lS8+5hwG0PoESQ0qXVF48NDGUoCayHG7XQlU2Vg/6aYTTMcs HbnqrIQPDmMFRAxq+HGdcMRv7l4YnkiJlz8TuZ7DwFYAUea5cBKE7akO90BCAKWw oCnjWkT2lbvWqUdd3BI/Hxpt94HzHxIYt5vvsiuzSkBo0bhT8S4iS4r2WRXI2NIc kGFvbzLn2LkS1xu8NrfCUx1JSQ3A9qCffO0a/wbJ2V2jDnVV+jWm5DVjHRHWJ4Za 4tNXWqGVkAR+6Xnab08nveK52vgodapNtQle4ORVgFgZx5yWAHFmBhRacMozTbOK 0KkyJvl33l8t0Yvgp5kIYl8cMilKLnA1 -----END CERTIFICATE-----Generated at Tue Jul 1 19:38:55 2025 by rpki-client