$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: T/Di89PBhee4mnq4IddVliPsuhYa662n7geAiFbfSUQ= Subject key identifier: 6D:9F:86:6F:BA:B1:30:F3:71:A9:35:71:8C:5C:A4:99:3A:AF:AA:87 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 077A Signing time: Wed 04 Jun 2025 16:00:37 +0000 Manifest this update: Wed 04 Jun 2025 16:00:36 +0000 Manifest next update: Wed 11 Jun 2025 16:00:36 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: k+CSrFg+ksKLBodRmQhwVE47V0DQYOZCOy6traN2aHo=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: ldhnqRcVbTxkt0kcgUABU1YyeJx0zAFYwLA5AA7ZzpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Jun 4 16:00:36 2025 GMT Not After : Jun 11 16:00:36 2025 GMT Subject: CN=68406da4-a2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:12:2d:68:35:4a:06:61:16:2c:48:ef:d3:28: 58:23:06:59:a4:9b:df:03:4e:11:d6:c7:44:87:3a: fe:a1:a5:2f:c8:f0:e7:3b:73:60:b8:ed:3b:09:6e: fa:c5:f5:4b:14:c5:66:ed:0f:1f:e3:d4:96:00:24: 08:c9:70:ff:e7:36:1e:56:f8:c3:8d:dc:86:87:aa: 21:15:ba:6d:25:f4:61:98:9e:e7:a1:cc:62:fe:cf: 3a:1d:c1:85:08:ba:c1:5e:a9:c8:a6:12:1e:bb:9f: 4c:32:ca:78:12:dd:8a:4e:01:cf:a4:9f:ca:8b:66: b2:5f:42:1f:49:f0:6b:a9:90:a3:9e:30:4f:a3:f8: ae:a8:e0:a9:16:66:2e:2d:56:8a:73:c2:65:fc:50: 36:82:fd:57:85:e7:13:21:31:df:2e:1c:17:d5:01: 7e:d3:78:bf:49:ca:a3:5d:fb:64:3b:d1:14:1a:24: c8:62:28:ac:fa:98:0e:07:5d:d9:d6:73:a5:ac:20: 7a:b7:c2:17:b1:0e:f4:8f:cf:17:c9:f7:11:c8:e5: 05:20:68:18:c9:84:06:3b:18:f2:88:7e:f2:44:a8: 82:cd:44:71:7d:2c:76:02:7b:01:22:09:2b:73:50: b3:cc:2b:7f:21:e5:9e:a9:bf:6a:19:c9:0e:0b:ac: b5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:86:6F:BA:B1:30:F3:71:A9:35:71:8C:5C:A4:99:3A:AF:AA:87 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:17:41:9a:84:87:e6:0e:60:57:72:9a:3c:cb:c9:1f:90:b1: be:75:58:50:92:06:e1:96:57:34:6a:7d:5f:8c:f0:f9:19:72: 8f:9f:49:bb:51:dc:42:a7:41:04:bd:40:34:e2:53:6b:a8:3b: 6a:84:3c:6d:a2:a0:ef:49:b2:e8:37:80:2e:92:f5:09:75:72: ba:bb:26:3b:fb:ae:e1:44:9a:39:32:58:f5:ff:d1:b7:ce:52: 43:ab:0d:d6:ff:e9:02:b6:30:25:b1:a0:ed:03:72:86:32:a7: 00:2f:5a:e8:d2:90:29:6e:15:7f:8c:14:2a:80:05:c6:d7:b4: bb:71:9b:f6:e0:af:4b:29:99:bd:a2:9e:65:85:2e:6d:f3:52: 69:75:b3:02:ae:3d:59:5a:bd:0a:2f:e5:ea:50:c8:ed:1a:2a: 1d:35:9e:a1:43:75:ac:43:aa:34:1d:ad:26:2c:91:f5:78:0d: 88:a3:e9:f3:6c:bf:04:06:71:88:ec:e5:52:b8:0d:29:51:09: 87:0f:e6:1e:8d:c2:68:d5:ff:c6:cb:79:6f:f5:70:b2:d3:6a: ee:4e:db:dd:54:e5:3a:eb:f6:47:80:41:3c:cc:3a:df:5a:5a: 09:d4:31:e9:07:a8:05:12:18:47:d9:ff:84:88:1a:5a:5d:6b: e5:05:33:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjUwNjA0MTYwMDM2WhcNMjUwNjExMTYwMDM2WjAYMRYwFAYD VQQDEw02ODQwNmRhNC1hMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xItaDVKBmEWLEjv0yhYIwZZpJvfA04R1sdEhzr+oaUvyPDnO3NguO07CW76 xfVLFMVm7Q8f49SWACQIyXD/5zYeVvjDjdyGh6ohFbptJfRhmJ7nocxi/s86HcGF CLrBXqnIphIeu59MMsp4Et2KTgHPpJ/Ki2ayX0IfSfBrqZCjnjBPo/iuqOCpFmYu LVaKc8Jl/FA2gv1XhecTITHfLhwX1QF+03i/ScqjXftkO9EUGiTIYiis+pgOB13Z 1nOlrCB6t8IXsQ70j88XyfcRyOUFIGgYyYQGOxjyiH7yRKiCzURxfSx2AnsBIgkr c1CzzCt/IeWeqb9qGckOC6y1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2fhm+6 sTDzcak1cYxcpJk6r6qHMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPF0GahIfmDmBXcpo8y8kfkLG+dVhQkgbhllc0an1fjPD5GXKPn0m7 UdxCp0EEvUA04lNrqDtqhDxtoqDvSbLoN4AukvUJdXK6uyY7+67hRJo5Mlj1/9G3 zlJDqw3W/+kCtjAlsaDtA3KGMqcAL1ro0pApbhV/jBQqgAXG17S7cZv24K9LKZm9 op5lhS5t81JpdbMCrj1ZWr0KL+XqUMjtGiodNZ6hQ3WsQ6o0Ha0mLJH1eA2Io+nz bL8EBnGI7OVSuA0pUQmHD+YejcJo1f/Gy3lv9XCy02ruTtvdVOU66/ZHgEE8zDrf WloJ1DHpB6gFEhhH2f+EiBpaXWvlBTO/ -----END CERTIFICATE-----Generated at Fri Jun 6 16:45:58 2025 by rpki-client