$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: PmQCQCF6YDyp1/sfca0+jJtaGL7EHgf6ZpjBbjN66Ok= Subject key identifier: DE:B6:BF:46:50:76:C2:7B:80:B3:16:A8:94:EB:B8:E5:AC:1B:59:43 Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0C42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0C3A Signing time: Sun 08 Jun 2025 18:19:33 +0000 Manifest this update: Sun 08 Jun 2025 18:19:33 +0000 Manifest next update: Sun 15 Jun 2025 18:19:33 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: q8iPSEAb5wQ3KA4jFbyq2s8hJ0khcspjLXo/TmHs8dc=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: o6uzXxi45nuYDCicVYaDwUO/XE7Lp0WVGghWkgO8ZII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: Jun 8 18:19:33 2025 GMT Not After : Jun 15 18:19:33 2025 GMT Subject: CN=6845d435-022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:8b:64:84:f3:3f:a0:84:77:de:57:0f:84: e4:2d:ec:d6:cf:ab:6e:ba:61:93:c3:0f:d9:75:42: 3b:2a:56:0c:43:ed:e8:f6:d2:42:0c:d8:10:77:f3: e1:c2:7f:98:e3:8a:7d:b4:7e:be:bc:0c:bd:70:97: 79:ed:1a:45:0b:9c:30:12:d7:99:5e:04:fc:31:69: b9:73:00:40:34:88:d6:3d:10:9c:fe:18:86:51:d0: 85:82:29:74:60:da:ac:c3:c8:8b:63:57:8d:cd:8d: e1:c2:be:b5:1c:78:28:66:b0:dc:5a:ef:13:e8:0e: 2d:13:49:7e:d0:4d:53:a1:02:72:58:9c:3e:35:20: 58:3b:3e:3b:2d:86:7d:49:6b:bc:7b:1f:c5:a7:ad: ef:ac:67:fa:14:1f:07:ba:aa:d2:75:35:ce:2d:20: 36:3c:8c:a7:2c:4b:fb:87:af:d4:aa:9c:da:b3:de: c7:a1:23:ed:b4:cf:04:f9:8d:b0:f5:c7:e4:da:67: e3:7a:c0:0b:e7:60:cc:85:e7:e2:67:1a:51:1c:af: d0:75:17:f3:8d:60:6f:49:a5:ce:5f:5c:8e:b5:e0: f1:eb:8f:ad:4e:51:02:26:63:54:f7:c2:20:f6:9d: 24:68:bd:81:d4:f9:ca:c8:86:c9:b9:ed:50:08:9c: 98:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:BF:46:50:76:C2:7B:80:B3:16:A8:94:EB:B8:E5:AC:1B:59:43 X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6a:8e:8d:b4:c4:c5:ef:8d:44:dc:80:57:e2:53:40:93:27: 55:32:05:a0:26:a6:ee:7b:e4:39:53:5e:d3:0c:4c:d4:a0:20: 6d:91:dd:3a:d3:49:c7:fd:e9:8e:ac:f8:74:98:d6:c1:a3:d1: 96:c9:83:70:7b:80:6b:53:fe:61:16:6e:67:ff:18:bb:bc:fc: ce:86:d0:5a:3b:f2:dc:e2:e8:88:78:b4:e6:c7:3c:3b:8b:e2: 42:41:f8:d7:9e:5d:c4:0a:29:71:ae:c5:eb:96:5b:2d:ca:65: de:7c:7d:50:eb:d7:33:0d:88:f9:04:7c:e3:f9:ea:0e:0e:eb: 88:34:ba:fb:0a:7d:79:14:6b:bf:32:7d:a7:77:7c:9b:89:d0: 21:47:cf:e0:b3:e7:4b:83:e6:6e:6e:c7:06:db:99:88:18:e3: 13:bc:8f:57:f8:ed:8f:15:49:26:18:84:ef:1b:fa:e7:5a:3a: aa:7c:25:2f:ec:43:1e:3f:01:26:2f:a8:d1:39:12:d1:a8:a0: d6:c6:74:cf:bf:d8:00:1c:ea:ce:5b:f2:2f:87:db:3c:c9:64: c5:20:c7:d1:89:37:f7:2f:39:67:04:39:70:44:4d:38:48:cf: 38:53:3c:25:a1:f5:8c:d7:3f:d5:bd:c1:82:43:d0:d8:20:51: 2e:a8:3f:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjUwNjA4MTgxOTMzWhcNMjUwNjE1MTgxOTMzWjAYMRYwFAYD VQQDEw02ODQ1ZDQzNS0wMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wGLZITzP6CEd95XD4TkLezWz6tuumGTww/ZdUI7KlYMQ+3o9tJCDNgQd/Ph wn+Y44p9tH6+vAy9cJd57RpFC5wwEteZXgT8MWm5cwBANIjWPRCc/hiGUdCFgil0 YNqsw8iLY1eNzY3hwr61HHgoZrDcWu8T6A4tE0l+0E1ToQJyWJw+NSBYOz47LYZ9 SWu8ex/Fp63vrGf6FB8HuqrSdTXOLSA2PIynLEv7h6/Uqpzas97HoSPttM8E+Y2w 9cfk2mfjesAL52DMhefiZxpRHK/QdRfzjWBvSaXOX1yOteDx64+tTlECJmNU98Ig 9p0kaL2B1PnKyIbJue1QCJyYEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN62v0ZQ dsJ7gLMWqJTruOWsG1lDMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxao6NtMTF741E3IBX4lNAkydVMgWgJqbue+Q5U17TDEzUoCBtkd06 00nH/emOrPh0mNbBo9GWyYNwe4BrU/5hFm5n/xi7vPzOhtBaO/Lc4uiIeLTmxzw7 i+JCQfjXnl3ECilxrsXrllstymXefH1Q69czDYj5BHzj+eoODuuINLr7Cn15FGu/ Mn2nd3ybidAhR8/gs+dLg+ZubscG25mIGOMTvI9X+O2PFUkmGITvG/rnWjqqfCUv 7EMePwEmL6jRORLRqKDWxnTPv9gAHOrOW/Ivh9s8yWTFIMfRiTf3LzlnBDlwRE04 SM84UzwlofWM1z/VvcGCQ9DYIFEuqD9e -----END CERTIFICATE-----Generated at Sun Jun 8 23:21:20 2025 by rpki-client