$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: iYPs7BH4AgokcM+Q4EyN+3bGOGgerItXIBLw5S5zSks= Subject key identifier: 58:85:62:7D:F7:8E:47:90:31:1A:BC:01:E2:60:7A:36:4F:85:4C:4D Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 07C9 Signing time: Fri 04 Jul 2025 21:31:06 +0000 Manifest this update: Fri 04 Jul 2025 21:31:06 +0000 Manifest next update: Fri 11 Jul 2025 21:31:06 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: f5yk//ocsd+FhDSaoxmwAynjZy7/ZYMX/AlrvzDjp7I=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Validity Not Before: Jul 4 21:31:06 2025 GMT Not After : Jul 11 21:31:06 2025 GMT Subject: CN=6868481a-2ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:d2:a7:67:ae:c7:f9:1a:53:c2:00:da:fc: 57:63:6d:e7:0d:e0:58:05:ba:4a:2d:62:f3:6f:c4: 39:66:1c:c3:fb:4f:56:97:e8:67:5a:ba:4c:92:ad: 96:4b:f9:f6:19:2f:80:01:b0:0e:e4:0a:99:ce:90: 1f:c1:5a:51:3e:2f:b7:ab:86:35:78:1b:9a:45:dc: 45:63:ed:78:0c:05:6d:62:76:67:ab:3b:c0:97:72: 71:28:a5:d8:30:31:28:02:06:a7:54:e9:11:59:10: 8a:1c:e7:3d:8e:0c:d3:5c:cc:9b:b9:69:33:6f:7e: 9d:46:66:25:01:d9:49:25:9f:83:5c:29:23:5c:a5: df:59:ca:a7:ca:77:89:ed:17:62:53:58:40:a6:76: 7b:7d:2f:e6:6f:66:60:61:11:87:10:4a:19:5b:34: 88:1a:ae:0a:5c:af:76:64:bb:05:3e:27:42:d8:b6: b9:f4:4f:a6:df:a1:71:1d:bd:23:77:36:cd:c9:42: 30:91:28:e0:65:d6:e8:e4:24:af:05:57:de:85:6d: 7d:46:54:d7:86:04:33:7b:d3:d2:93:08:ec:d0:95: 57:e1:17:9e:5a:04:4d:72:11:9a:93:9b:02:4f:68: 63:a5:63:c9:b5:ee:95:12:fa:a8:02:51:79:ae:b7: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:85:62:7D:F7:8E:47:90:31:1A:BC:01:E2:60:7A:36:4F:85:4C:4D X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:c0:50:51:3c:bc:82:9b:b5:1a:b0:75:54:e4:9c:69:28:07: 7e:03:f2:38:e8:1f:e6:ec:12:53:29:aa:d9:c7:b2:ac:72:82: ca:a0:e8:ae:9f:9c:de:3c:94:dd:7d:5b:49:a3:15:0c:07:a2: 61:45:e1:0f:4f:32:96:53:47:c8:0d:9e:38:d5:ae:85:ce:5c: f7:35:03:54:74:4d:16:ee:86:b1:de:25:92:b7:2e:5c:31:8e: dd:34:06:0a:97:77:be:d0:3e:38:0d:12:f1:e1:67:b7:ab:1e: 93:8e:45:b4:b9:f6:ea:d8:b2:a3:12:b8:9d:e5:ed:fd:9d:2b: 55:5d:bf:f9:40:b4:48:34:d9:f9:03:6c:0b:8d:84:38:bb:b5: 2d:b0:c1:98:ae:6a:af:1d:dc:10:ac:d8:91:18:8a:b5:1a:bf: 78:a2:74:7e:b5:9c:55:3d:78:22:74:e5:2d:48:a3:04:77:36: 51:1e:60:e6:45:cd:44:20:27:4d:31:1d:cd:26:ee:2c:de:74: ba:97:df:bd:bc:a1:2f:b3:b7:10:95:38:12:d9:a0:14:d9:cc: 97:7e:89:d4:64:5a:c5:d5:d7:ad:82:e1:4d:70:46:28:a8:48: cd:c9:b2:3c:3f:8d:19:6a:f2:77:0c:04:a3:3a:42:11:26:ac: 0d:0d:53:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwNzA0MjEzMTA2WhcNMjUwNzExMjEzMTA2WjAYMRYwFAYD VQQDEw02ODY4NDgxYS0yYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7/Sp2eux/kaU8IA2vxXY23nDeBYBbpKLWLzb8Q5ZhzD+09Wl+hnWrpMkq2W S/n2GS+AAbAO5AqZzpAfwVpRPi+3q4Y1eBuaRdxFY+14DAVtYnZnqzvAl3JxKKXY MDEoAganVOkRWRCKHOc9jgzTXMybuWkzb36dRmYlAdlJJZ+DXCkjXKXfWcqnyneJ 7RdiU1hApnZ7fS/mb2ZgYRGHEEoZWzSIGq4KXK92ZLsFPidC2La59E+m36FxHb0j dzbNyUIwkSjgZdbo5CSvBVfehW19RlTXhgQze9PSkwjs0JVX4ReeWgRNchGak5sC T2hjpWPJte6VEvqoAlF5rrc97QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiFYn33 jkeQMRq8AeJgejZPhUxNMB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDawFBRPLyCm7UasHVU5JxpKAd+A/I46B/m7BJTKarZx7KscoLKoOiu n5zePJTdfVtJoxUMB6JhReEPTzKWU0fIDZ441a6Fzlz3NQNUdE0W7oax3iWSty5c MY7dNAYKl3e+0D44DRLx4We3qx6TjkW0ufbq2LKjErid5e39nStVXb/5QLRINNn5 A2wLjYQ4u7UtsMGYrmqvHdwQrNiRGIq1Gr94onR+tZxVPXgidOUtSKMEdzZRHmDm Rc1EICdNMR3NJu4s3nS6l9+9vKEvs7cQlTgS2aAU2cyXfonUZFrF1detguFNcEYo qEjNybI8P40ZavJ3DASjOkIRJqwNDVPD -----END CERTIFICATE-----Generated at Sat Jul 5 05:40:09 2025 by rpki-client