$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft File: pK73BplO997sjIomg0NykQSEsbA.mft (raw, json) Hash identifier: KY71+Kju3QHYhhFUBU4VxU2AoCmHzTKE7gFOwz8i9Pk= Subject key identifier: FA:D4:F9:63:21:A2:8F:2B:4D:38:D8:45:58:D0:7F:D9:0B:37:63:CF Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0 Certificate issuer: /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft Manifest number: 06A1 Signing time: Wed 04 Jun 2025 22:05:35 +0000 Manifest this update: Wed 04 Jun 2025 22:05:35 +0000 Manifest next update: Wed 11 Jun 2025 22:05:35 +0000 Files and hashes: 1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: 9pz4dpYolpS2ulPs1MFakNBg6+WzqWOFGGKu+z6FYSA=) 2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: 4hu+Ea1WW3aPEC6/j9KPgOfcmbDhbVy01ftALoJDrTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196412, serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0 Validity Not Before: Jun 4 22:05:35 2025 GMT Not After : Jun 11 22:05:35 2025 GMT Subject: CN=6840c32f-4446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:78:f7:73:5e:73:84:48:56:6e:ce:bf:6b: 84:d0:36:61:88:0c:21:ca:01:32:85:4e:1c:a5:07: 45:1b:56:3d:e7:a4:bc:21:d5:51:9c:6e:fb:0a:27: de:d6:e2:80:64:3b:a1:ff:96:ab:ab:5e:4d:4e:28: 53:e3:ab:95:ad:50:60:72:74:06:62:87:8e:d4:39: dd:ae:53:8d:d6:a9:c1:82:e4:76:fe:95:c2:85:77: 31:eb:94:d7:11:de:0f:f0:33:37:f1:9c:76:4b:d5: f8:60:9d:3a:f1:c0:36:c2:8c:4b:88:a2:00:c0:83: 8e:ac:d7:b4:80:1d:3b:33:dc:78:8e:a6:ef:ff:be: 8e:04:85:f3:e6:b3:4a:77:ad:b4:ac:52:01:a4:cc: c6:89:80:dc:49:6c:b0:3c:67:fd:d2:50:8f:68:b8: 2b:f8:11:e0:70:43:19:21:ef:c8:cc:26:2b:ee:71: 1c:51:d8:b8:1b:be:5b:d9:ce:3b:a9:9f:e5:67:c3: 6a:c6:f5:be:36:9c:7e:6b:48:2a:26:ca:b4:66:5c: 9b:32:9a:e2:f4:d7:72:00:2d:e8:91:63:1d:89:16: d2:f6:a4:42:dd:6b:71:fc:bd:ea:b8:40:16:cb:1b: ec:32:b0:3d:d1:f0:b9:85:53:52:4b:41:e6:4c:9e: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:F9:63:21:A2:8F:2B:4D:38:D8:45:58:D0:7F:D9:0B:37:63:CF X509v3 Authority Key Identifier: keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:66:e7:ca:bc:d4:ad:20:0f:67:bd:7d:68:75:73:08:d1:b8: ae:d5:fd:07:40:50:3d:a5:52:5e:4f:fd:33:ba:12:e8:cd:19: 4c:d6:a1:f5:ad:9a:c4:cd:6b:5a:e3:36:10:02:2b:fb:b4:a5: 35:df:12:0a:92:05:bb:da:c0:f8:62:e9:31:a1:c7:d9:e1:db: a3:90:27:43:53:44:79:6f:6f:03:81:95:15:45:6d:3e:33:22: 44:a5:fe:23:a8:f1:6c:40:3d:23:62:4a:7f:74:0b:16:0d:c3: 56:8f:5e:3f:1c:ca:e3:4b:6c:31:c7:d2:ca:a0:1a:94:a8:2f: d7:74:48:79:46:84:7e:9b:ce:58:f8:19:f9:15:e0:72:a8:d2: be:f5:0a:28:e0:b8:b0:bb:cf:66:bb:c8:b1:df:e1:8e:7a:2e: 32:79:7a:b8:a0:a8:f4:d7:a1:ed:db:b7:55:ea:22:9d:3b:3f: 16:02:25:c2:ad:06:75:09:4f:8d:51:de:ee:fd:74:88:93:2a: b5:74:2f:70:cd:4a:81:78:84:af:7b:09:e4:d2:2f:09:3e:d7: 14:de:e6:83:ce:de:a4:50:f7:38:ff:5d:29:48:bc:2f:06:1c: e0:3d:3c:4c:fb:5e:26:d2:01:29:9f:91:bc:d0:dc:08:06:f2: e8:f1:e0:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0MTIxMTAvBgNVBAUTKEE0QUVGNzA2OTk0RUY3REVFQzhDOEEyNjgzNDM3Mjkx MDQ4NEIxQjAwHhcNMjUwNjA0MjIwNTM1WhcNMjUwNjExMjIwNTM1WjAYMRYwFAYD VQQDEw02ODQwYzMyZi00NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaR493Nec4RIVm7Ov2uE0DZhiAwhygEyhU4cpQdFG1Y956S8IdVRnG77Cife 1uKAZDuh/5arq15NTihT46uVrVBgcnQGYoeO1DndrlON1qnBguR2/pXChXcx65TX Ed4P8DM38Zx2S9X4YJ068cA2woxLiKIAwIOOrNe0gB07M9x4jqbv/76OBIXz5rNK d620rFIBpMzGiYDcSWywPGf90lCPaLgr+BHgcEMZIe/IzCYr7nEcUdi4G75b2c47 qZ/lZ8NqxvW+Npx+a0gqJsq0ZlybMpri9NdyAC3okWMdiRbS9qRC3Wtx/L3quEAW yxvsMrA90fC5hVNSS0HmTJ5IpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrU+WMh oo8rTTjYRVjQf9kLN2PPMB8GA1UdIwQYMBaAFKSu9waZTvfe7IyKJoNDcpEEhLGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQxMi9BOEQ2NjI0MDZG OUExMUVCOEExM0RGMTdDNEY5QUUwMi9wSzczQnBsTzk5N3NqSW9tZzBOeWtRU0Vz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BLNzNCcGxPOTk3c2pJb21nME55a1FTRXNiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQxMi9BOEQ2NjI0MDZGOUExMUVCOEExM0RGMTdDNEY5QUUwMi9wSzczQnBsTzk5 N3NqSW9tZzBOeWtRU0VzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApZufKvNStIA9nvX1odXMI0biu1f0HQFA9pVJeT/0zuhLozRlM1qH1 rZrEzWta4zYQAiv7tKU13xIKkgW72sD4YukxocfZ4dujkCdDU0R5b28DgZUVRW0+ MyJEpf4jqPFsQD0jYkp/dAsWDcNWj14/HMrjS2wxx9LKoBqUqC/XdEh5RoR+m85Y +Bn5FeByqNK+9Qoo4Liwu89mu8ix3+GOei4yeXq4oKj016Ht27dV6iKdOz8WAiXC rQZ1CU+NUd7u/XSIkyq1dC9wzUqBeISvewnk0i8JPtcU3uaDzt6kUPc4/10pSLwv BhzgPTxM+14m0gEpn5G80NwIBvLo8eCQ -----END CERTIFICATE-----Generated at Thu Jun 5 18:32:52 2025 by rpki-client