$ rpki-client -vvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft File: g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json) Hash identifier: YMcJ5DJZH6yPp+csGBGwE+as2JtctLsZM8hnl5VNNUg= Subject key identifier: EC:A4:50:7D:B0:29:64:03:DF:06:A2:B4:DB:70:73:5E:84:6E:53:1A Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE Certificate issuer: /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft Manifest number: 0716 Signing time: Mon 30 Jun 2025 23:48:01 +0000 Manifest this update: Mon 30 Jun 2025 23:48:01 +0000 Manifest next update: Mon 07 Jul 2025 23:48:01 +0000 Files and hashes: 1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: EdaUwsbciUcaQIhn8PHK+I1G5hy7iUsJ9Tg9c3XRDtM=) 2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: ywWchnTSu/qeQDeWbCVaFbaIpGcNtf7MxWBgX+a8m9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE Validity Not Before: Jun 30 23:48:01 2025 GMT Not After : Jul 7 23:48:01 2025 GMT Subject: CN=68632231-effa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5c:db:c8:51:b3:6a:63:ba:38:9b:49:51:37: c2:fb:0f:16:b4:be:33:d1:f0:3a:96:49:ec:cd:cc: 84:86:c4:1a:be:95:7d:23:1c:73:1e:3f:3b:64:15: 54:86:a4:bc:76:b6:6e:7b:9c:2a:6a:cc:e3:71:6d: 03:da:ff:1a:c4:88:70:0d:72:e5:c2:29:0d:23:07: e9:53:ca:eb:42:d6:84:96:a3:06:1a:f6:b4:2d:d3: 37:28:df:ef:00:60:28:79:6d:d8:c7:5c:77:7b:f3: 93:bf:02:ec:ab:6e:bc:42:57:dd:be:24:0c:f4:34: 32:a9:24:10:d2:d9:9b:5a:f5:40:fd:c7:ec:7f:5b: 2d:65:c0:f4:fa:bc:74:bc:7d:b3:03:f8:23:3f:6f: 84:d3:ec:94:b4:25:9b:bc:44:3c:c5:e6:93:5a:3b: ce:03:f9:9c:9b:84:1f:79:9c:ab:51:7a:e0:88:7c: 5b:58:cf:c5:93:65:b5:e2:c5:25:2d:b4:21:fd:49: 82:83:38:6e:22:23:d2:65:11:58:2d:8f:b3:b4:af: 22:1b:f2:2f:88:75:01:aa:aa:61:4f:0c:be:5d:39: 1b:76:af:3e:41:ee:98:0c:7a:9f:37:dc:0f:93:7a: d9:da:38:07:e0:bb:ae:08:c8:33:78:67:40:20:80: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A4:50:7D:B0:29:64:03:DF:06:A2:B4:DB:70:73:5E:84:6E:53:1A X509v3 Authority Key Identifier: keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:93:70:58:80:cb:51:bf:ef:3c:06:24:27:09:55:9d:88:e4: ea:7b:26:24:ff:63:ca:30:83:09:f7:df:12:b0:30:11:85:6e: ed:31:1e:d8:1e:8e:99:fa:cb:7e:38:c5:92:a8:9e:4a:02:be: d9:21:b9:0b:fe:be:07:16:87:60:d5:7a:3b:70:8d:20:27:d0: 52:8b:60:02:fd:89:a1:80:16:ae:f3:c3:cd:ab:32:40:9a:d9: 1c:76:27:22:fd:4b:ed:97:ac:e3:65:f7:ab:23:61:0b:c2:e9: 0f:ba:92:6b:4b:f8:96:3d:17:19:e1:bd:3c:2f:97:0c:23:74: 41:cd:0c:13:e4:95:85:75:a2:05:60:cc:a0:b8:3e:28:8e:76: ec:4f:49:91:ad:9c:70:fd:f9:a5:e5:ca:88:32:c7:8f:5a:09: c1:4a:f4:63:29:5b:4e:44:c9:92:fa:c5:57:b3:83:6b:87:cb: 28:f8:e5:f6:45:f0:6a:70:bb:40:78:96:80:f4:6d:41:ec:a8: 2b:10:fe:35:f8:cd:f1:ea:21:b5:00:1a:95:f4:de:46:3c:e7: f4:7a:f3:c8:fe:e6:77:e5:8b:85:f3:06:34:8a:be:3d:35:ef: 7d:e0:e9:6a:78:52:44:52:a6:88:2f:6c:3f:72:90:d2:23:11: e6:61:7e:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY3QTExMTAvBgNVBAUTKDgzRDYwQ0Y4REVBODAyMjZCODA3MjRCQ0RFNjcwM0Qx MEQ2NTdGRkUwHhcNMjUwNjMwMjM0ODAxWhcNMjUwNzA3MjM0ODAxWjAYMRYwFAYD VQQDEw02ODYzMjIzMS1lZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FzbyFGzamO6OJtJUTfC+w8WtL4z0fA6lknszcyEhsQavpV9IxxzHj87ZBVU hqS8drZue5wqaszjcW0D2v8axIhwDXLlwikNIwfpU8rrQtaElqMGGva0LdM3KN/v AGAoeW3Yx1x3e/OTvwLsq268QlfdviQM9DQyqSQQ0tmbWvVA/cfsf1stZcD0+rx0 vH2zA/gjP2+E0+yUtCWbvEQ8xeaTWjvOA/mcm4QfeZyrUXrgiHxbWM/Fk2W14sUl LbQh/UmCgzhuIiPSZRFYLY+ztK8iG/IviHUBqqphTwy+XTkbdq8+Qe6YDHqfN9wP k3rZ2jgH4LuuCMgzeGdAIIAxowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOykUH2w KWQD3waitNtwc16EblMaMB8GA1UdIwQYMBaAFIPWDPjeqAImuAckvN5nA9ENZX/+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjdBMS85MUU4RTI4NEY0 MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0FpYTRCeVM4M21jRDBRMWxm XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5WU0tTjZvQWlhNEJ5UzgzbWNEMFExbGZfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjdBMS85MUU4RTI4NEY0MzcxMUVCQjVENTY5MUNDNEY5QUUwMi9nOVlNLU42b0Fp YTRCeVM4M21jRDBRMWxmXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtk3BYgMtRv+88BiQnCVWdiOTqeyYk/2PKMIMJ998SsDARhW7tMR7Y Ho6Z+st+OMWSqJ5KAr7ZIbkL/r4HFodg1Xo7cI0gJ9BSi2AC/YmhgBau88PNqzJA mtkcdici/Uvtl6zjZferI2ELwukPupJrS/iWPRcZ4b08L5cMI3RBzQwT5JWFdaIF YMyguD4ojnbsT0mRrZxw/fml5cqIMsePWgnBSvRjKVtORMmS+sVXs4Nrh8so+OX2 RfBqcLtAeJaA9G1B7KgrEP41+M3x6iG1ABqV9N5GPOf0evPI/uZ35YuF8wY0ir49 Ne994OlqeFJEUqaIL2w/cpDSIxHmYX5p -----END CERTIFICATE-----Generated at Tue Jul 1 19:52:52 2025 by rpki-client