$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft File: sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft (raw, json) Hash identifier: 8kswv5Gi9cncdGok7EwORiGURIlwX+ew2xOgzet6idU= Subject key identifier: B3:AA:A1:68:D2:D2:BD:14:13:16:8D:82:79:DE:EA:06:40:34:FC:2A Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1F1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft Manifest number: 1F0A Signing time: Thu 12 Jun 2025 15:59:33 +0000 Manifest this update: Thu 12 Jun 2025 15:59:32 +0000 Manifest next update: Thu 19 Jun 2025 15:59:32 +0000 Files and hashes: 1: sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl (hash: I3+RIkhb5N3ZYVgGkmq94pbyHLrULSTsIAbRh4vSR7A=) 2: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (hash: BczHzIbLkzNL4updWdbsFHqnEhXAUmCVG50paNnAJDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7962 (0x1f1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Jun 12 15:59:32 2025 GMT Not After : Jun 19 15:59:32 2025 GMT Subject: CN=684af965-a67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:27:14:08:c9:46:e4:a2:7d:ea:39:4b:3b: 61:00:35:51:be:51:9a:ad:43:da:80:1f:62:b5:b3: df:b8:59:fe:ae:92:2a:d9:6a:7f:bd:1e:d0:d7:18: 88:92:98:b2:07:12:a0:44:2f:56:b8:16:a9:81:c9: 98:38:97:7b:3b:6e:57:4b:1a:50:27:34:3e:3e:c4: 7d:67:e2:62:2d:e0:20:f0:1e:cf:7f:61:f2:25:ae: 3f:62:90:39:ba:20:8a:ff:f0:e1:1d:ff:f3:cf:10: e5:39:d5:a7:cc:27:a8:19:27:fb:11:9f:9c:ac:6c: 82:12:da:09:5a:c1:24:2a:b3:c0:ac:f8:80:63:db: e6:9c:63:fd:6a:85:42:da:8b:e6:9c:b2:7d:06:71: cf:91:c2:f9:41:70:ca:25:75:cc:d9:4d:c3:1b:67: dc:d9:7e:cf:0b:0d:31:17:cf:24:0a:29:5b:ec:ea: 24:d5:2a:13:5b:3b:98:64:4b:b8:85:f3:f0:cf:ac: 34:ec:8d:c7:dd:b2:6f:14:22:a8:f5:7d:5b:65:50: e7:26:e5:b5:35:5b:ab:34:55:fd:f7:cd:0f:2f:32: e2:35:b6:a0:d3:04:a3:27:d6:05:bb:24:30:c3:6d: 7d:99:92:71:43:66:24:de:05:a3:13:88:20:0d:dd: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AA:A1:68:D2:D2:BD:14:13:16:8D:82:79:DE:EA:06:40:34:FC:2A X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2a:d5:6b:b1:18:b4:2b:95:4d:12:c2:7b:55:35:ab:d9:6a: dc:99:f0:ad:ee:32:e5:65:f1:38:e8:4c:44:34:b1:d0:9f:e7: 4d:1f:05:14:5f:f3:b7:cf:b2:4b:0f:29:ef:1e:73:d1:a4:c5: ae:bf:a9:8b:83:bb:e9:11:d3:3a:82:57:a6:f1:c1:76:b3:dc: ba:31:19:7c:8e:90:2e:a7:94:50:c0:d4:2c:ee:f6:3e:4f:32: ab:f5:f6:76:8a:34:1d:ed:44:ad:00:69:ac:2d:1a:95:54:c4: 9a:f9:cd:c3:c4:19:7d:78:6a:5d:fb:cb:d1:9c:07:80:2f:2c: 2c:3c:2b:37:94:9f:5d:89:1c:85:7b:ca:97:f4:07:c1:90:c4: 98:d7:b7:5e:c5:5e:17:2c:98:8e:50:e6:1e:62:d7:09:23:5d: a3:b5:b8:af:69:7b:9a:55:4e:4e:d8:ed:ec:89:cc:46:c7:f1: fb:9d:50:a3:fc:34:8d:a3:c9:90:2c:7e:4c:f4:09:f4:6b:01: 60:e2:ef:71:5b:b9:9e:04:65:15:04:fd:b7:31:3e:86:26:c1: 96:40:be:df:67:0f:69:43:84:c5:d6:ef:16:aa:c0:80:01:a2: cf:08:d4:70:7d:60:c1:26:db:65:f8:b2:87:71:b4:d0:aa:26: 4e:9a:fc:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUwNjEyMTU1OTMyWhcNMjUwNjE5MTU1OTMyWjAYMRYwFAYD VQQDEw02ODRhZjk2NS1hNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRsnFAjJRuSifeo5SzthADVRvlGarUPagB9itbPfuFn+rpIq2Wp/vR7Q1xiI kpiyBxKgRC9WuBapgcmYOJd7O25XSxpQJzQ+PsR9Z+JiLeAg8B7Pf2HyJa4/YpA5 uiCK//DhHf/zzxDlOdWnzCeoGSf7EZ+crGyCEtoJWsEkKrPArPiAY9vmnGP9aoVC 2ovmnLJ9BnHPkcL5QXDKJXXM2U3DG2fc2X7PCw0xF88kCilb7Ook1SoTWzuYZEu4 hfPwz6w07I3H3bJvFCKo9X1bZVDnJuW1NVurNFX9980PLzLiNbag0wSjJ9YFuyQw w219mZJxQ2Yk3gWjE4ggDd03jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOqoWjS 0r0UExaNgnne6gZANPwqMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjIwOS9BNkI1Njc4NDU4OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdR XzNhZGFxN3ZtZkptRUV6VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+KtVrsRi0K5VNEsJ7VTWr2WrcmfCt7jLlZfE46ExENLHQn+dNHwUU X/O3z7JLDynvHnPRpMWuv6mLg7vpEdM6glem8cF2s9y6MRl8jpAup5RQwNQs7vY+ TzKr9fZ2ijQd7UStAGmsLRqVVMSa+c3DxBl9eGpd+8vRnAeALywsPCs3lJ9diRyF e8qX9AfBkMSY17dexV4XLJiOUOYeYtcJI12jtbivaXuaVU5O2O3sicxGx/H7nVCj /DSNo8mQLH5M9An0awFg4u9xW7meBGUVBP23MT6GJsGWQL7fZw9pQ4TF1u8WqsCA AaLPCNRwfWDBJttl+LKHcbTQqiZOmvwI -----END CERTIFICATE-----Generated at Fri Jun 13 12:40:49 2025 by rpki-client