$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: UmdGQ8kR9uKn+3HFexmIxSAeS0AWmQOlPqSIS+Ge/Wk= Subject key identifier: F0:43:5B:CE:2D:57:4F:84:30:1D:FE:60:CA:C7:BB:C8:D4:78:32:06 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: 01AD Signing time: Sat 07 Jun 2025 02:50:43 +0000 Manifest this update: Sat 07 Jun 2025 02:50:42 +0000 Manifest next update: Sat 14 Jun 2025 02:50:42 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: Xkf+341sw+Nd4CYhxmbAHVbx27Gp3A31wSTLo5gJo/w=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: Jun 7 02:50:42 2025 GMT Not After : Jun 14 02:50:42 2025 GMT Subject: CN=6843a902-a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:da:93:54:8b:e9:c9:ba:f0:3d:04:ac:86: b7:10:35:0b:0e:e8:8b:1d:dd:44:16:17:bc:79:7a: 6a:2f:a5:ad:35:fc:7b:ee:06:bc:aa:54:93:f9:57: 84:02:db:24:78:22:96:b9:40:17:e3:2d:df:87:ab: 74:98:d7:26:e0:f6:2d:de:16:80:b7:09:c0:d1:aa: 46:fc:45:41:e8:52:95:0d:44:a0:ce:7b:de:16:57: f1:6b:89:61:c7:56:78:5e:aa:47:25:3e:4e:7d:ad: 1d:86:f7:78:e3:87:7e:53:f3:07:0c:bd:d5:0a:0b: 4e:f2:6f:47:54:0e:3a:cb:52:17:a8:51:f4:c2:3f: cb:9e:fb:4d:0d:95:e3:94:77:80:09:34:f7:fe:fc: d8:35:c9:90:ec:a0:75:4e:83:39:a0:ad:a4:dc:6a: 61:f6:47:a6:41:ed:59:e2:0b:04:9e:ce:54:da:e3: d3:56:b2:a3:bd:4a:1e:67:dc:6d:a7:3f:0c:c7:61: 37:e0:dc:5e:14:26:cf:af:c2:24:25:3f:c6:95:65: 23:4f:c1:3f:c5:43:48:c6:5f:86:95:f8:4c:31:3a: fd:5c:55:82:b7:c6:1b:2a:d1:19:c1:3d:aa:d4:99: 2d:f5:c4:12:5b:39:98:6c:dd:fb:72:71:07:0b:10: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:5B:CE:2D:57:4F:84:30:1D:FE:60:CA:C7:BB:C8:D4:78:32:06 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d7:39:b8:0d:48:f3:8d:ea:1d:38:45:b2:b1:ff:b5:1e:b1: 85:de:6c:17:70:02:58:b7:d1:d7:34:51:ff:24:4c:45:9d:d2: 5e:8b:23:93:38:30:05:f1:0d:10:06:97:38:b8:6d:7b:7d:58: 93:5f:84:8c:c1:98:91:44:e9:06:70:e6:79:09:2a:fb:eb:4e: ea:2b:94:40:3f:89:69:be:f6:48:fb:fb:99:81:11:13:8f:1c: 59:79:7e:a2:1b:fa:38:b5:1c:16:86:ff:85:4d:65:ab:c0:de: c3:f7:3a:14:ad:41:f3:d4:13:71:e7:ed:3d:66:9a:c3:f9:41: 02:fc:be:64:cd:81:fa:1a:02:60:3f:e3:c6:a6:64:88:22:56: 2e:ba:85:57:82:a6:bb:84:b7:3f:72:21:a3:f4:41:80:4e:ec: df:42:b3:07:8b:9a:39:e5:c2:38:21:74:4c:a3:29:84:19:99: 65:ec:09:dd:db:c1:b3:bc:db:35:05:26:8e:da:6c:52:d6:65: 23:3e:5a:b0:56:60:a7:17:71:ce:2f:be:14:38:8e:77:e9:91: c4:5c:f7:a8:95:4c:82:fc:31:6e:d5:d7:0e:1b:1a:43:c7:e6: 94:3e:93:57:cf:90:9c:c3:25:af:8d:9b:1f:11:76:53:93:8b: 6a:73:3e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjUwNjA3MDI1MDQyWhcNMjUwNjE0MDI1MDQyWjAYMRYwFAYD VQQDEw02ODQzYTkwMi1hODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PXak1SL6cm68D0ErIa3EDULDuiLHd1EFhe8eXpqL6WtNfx77ga8qlST+VeE AtskeCKWuUAX4y3fh6t0mNcm4PYt3haAtwnA0apG/EVB6FKVDUSgznveFlfxa4lh x1Z4XqpHJT5Ofa0dhvd444d+U/MHDL3VCgtO8m9HVA46y1IXqFH0wj/LnvtNDZXj lHeACTT3/vzYNcmQ7KB1ToM5oK2k3Gph9kemQe1Z4gsEns5U2uPTVrKjvUoeZ9xt pz8Mx2E34NxeFCbPr8IkJT/GlWUjT8E/xUNIxl+GlfhMMTr9XFWCt8YbKtEZwT2q 1Jkt9cQSWzmYbN37cnEHCxArkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBDW84t V0+EMB3+YMrHu8jUeDIGMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu1zm4DUjzjeodOEWysf+1HrGF3mwXcAJYt9HXNFH/JExFndJeiyOT ODAF8Q0QBpc4uG17fViTX4SMwZiRROkGcOZ5CSr7607qK5RAP4lpvvZI+/uZgRET jxxZeX6iG/o4tRwWhv+FTWWrwN7D9zoUrUHz1BNx5+09ZprD+UEC/L5kzYH6GgJg P+PGpmSIIlYuuoVXgqa7hLc/ciGj9EGATuzfQrMHi5o55cI4IXRMoymEGZll7And 28GzvNs1BSaO2mxS1mUjPlqwVmCnF3HOL74UOI536ZHEXPeolUyC/DFu1dcOGxpD x+aUPpNXz5CcwyWvjZsfEXZTk4tqcz6M -----END CERTIFICATE-----Generated at Sun Jun 8 22:07:38 2025 by rpki-client