$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: MuaT4TPICuJpTB/uak4pr1GCwdCsfG5mIwrbOcOCa3o= Subject key identifier: 39:B1:CC:09:F5:94:5D:5E:54:C0:D3:3B:AB:9B:90:48:58:74:4F:24 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 07C1 Signing time: Mon 30 Jun 2025 21:21:34 +0000 Manifest this update: Mon 30 Jun 2025 21:21:34 +0000 Manifest next update: Mon 07 Jul 2025 21:21:34 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: hjElIZloIhKXr60NSwRLBp2GifZljupfzCpSN4tQp4s=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Jun 30 21:21:34 2025 GMT Not After : Jul 7 21:21:34 2025 GMT Subject: CN=6862ffde-ff4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:29:64:f8:5e:1f:1a:d9:94:a5:6e:b2:e8: 0e:65:ff:9e:cf:ef:8d:e7:bd:30:f1:ad:62:a3:03: 4e:c1:81:58:85:f6:9b:de:73:99:56:e1:9a:bc:ce: b8:bd:80:5b:29:0c:15:43:1e:6b:4a:9a:b8:be:c9: 23:7a:86:4b:d5:92:27:93:6d:5b:b2:ce:07:81:b3: f7:6c:eb:f7:7f:74:fa:8e:74:c6:e4:75:0a:77:33: 09:2c:f6:8c:57:fa:ca:8c:78:49:45:8a:07:1d:7f: 9f:6e:e0:ac:ef:4b:0b:8b:cc:03:8d:46:8b:fe:12: 64:ce:ab:64:71:d3:6d:f9:56:4a:39:7b:0d:44:11: f2:73:80:f0:e7:aa:11:7d:25:61:91:70:3b:4d:63: 54:2b:a1:ab:3c:73:4f:63:8c:9b:6d:f7:f1:f3:69: 52:76:2e:d7:ca:76:5a:0d:7b:10:cf:e7:23:0f:70: 8b:d3:52:5d:c3:b2:e7:e8:b1:60:13:8a:47:7a:2b: eb:49:db:ee:63:4e:91:12:b6:de:c7:99:8e:ae:75: b8:1d:95:bf:90:2d:9c:6c:03:e7:5c:37:a8:dc:e2: 12:27:52:0e:7a:4f:3a:70:ae:c5:f1:eb:b9:e6:4c: 00:9a:a4:7b:e0:06:95:4f:e0:d0:98:74:2c:c0:e2: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:CC:09:F5:94:5D:5E:54:C0:D3:3B:AB:9B:90:48:58:74:4F:24 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:86:7d:30:78:2d:0a:c4:ae:fa:da:c4:0d:fc:d0:fc:b3:5e: 3b:72:01:50:f4:73:05:4f:bc:4e:e6:25:a0:87:20:9a:62:7a: ef:bc:51:51:04:9d:e5:b4:83:e0:2a:43:c4:80:e4:79:77:57: 6a:a2:31:3d:64:30:b4:de:65:25:6a:e0:eb:da:a2:4a:ea:c9: 19:58:a2:dd:90:df:01:37:bf:39:53:92:d6:3a:d2:1d:4a:32: 3b:8e:d8:02:3f:67:3d:4e:5b:88:c8:b7:e2:7e:64:08:27:8a: e8:00:7e:1b:a8:dc:dd:cb:2f:ac:fb:e8:bb:49:3f:14:ef:fc: ef:19:f6:56:11:30:e6:9d:7b:94:ce:29:a9:6a:f9:5d:40:1e: a4:b7:93:00:d7:71:0f:45:d3:9e:f9:00:be:d8:32:8f:d4:62: e5:c9:33:46:58:97:77:18:f8:cc:0f:c8:25:38:07:44:ee:66: 2e:ae:43:d0:90:24:c8:c0:70:5b:1f:7d:fa:4e:8a:72:25:61: ff:3a:65:da:ef:55:ae:9a:70:61:3e:5a:ee:95:39:c0:f9:81: 6c:f2:65:46:12:73:72:79:da:49:b8:e9:92:2a:24:3a:9b:cb: 4e:13:0d:42:5b:22:a2:8b:aa:44:90:a9:c8:a3:4d:ee:94:20: 70:0c:93:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjUwNjMwMjEyMTM0WhcNMjUwNzA3MjEyMTM0WjAYMRYwFAYD VQQDEw02ODYyZmZkZS1mZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8EpZPheHxrZlKVusugOZf+ez++N570w8a1iowNOwYFYhfab3nOZVuGavM64 vYBbKQwVQx5rSpq4vskjeoZL1ZInk21bss4HgbP3bOv3f3T6jnTG5HUKdzMJLPaM V/rKjHhJRYoHHX+fbuCs70sLi8wDjUaL/hJkzqtkcdNt+VZKOXsNRBHyc4Dw56oR fSVhkXA7TWNUK6GrPHNPY4ybbffx82lSdi7XynZaDXsQz+cjD3CL01Jdw7Ln6LFg E4pHeivrSdvuY06RErbex5mOrnW4HZW/kC2cbAPnXDeo3OISJ1IOek86cK7F8eu5 5kwAmqR74AaVT+DQmHQswOLeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmxzAn1 lF1eVMDTO6ubkEhYdE8kMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJhn0weC0KxK762sQN/ND8s147cgFQ9HMFT7xO5iWghyCaYnrvvFFR BJ3ltIPgKkPEgOR5d1dqojE9ZDC03mUlauDr2qJK6skZWKLdkN8BN785U5LWOtId SjI7jtgCP2c9TluIyLfifmQIJ4roAH4bqNzdyy+s++i7ST8U7/zvGfZWETDmnXuU zimpavldQB6kt5MA13EPRdOe+QC+2DKP1GLlyTNGWJd3GPjMD8glOAdE7mYurkPQ kCTIwHBbH336TopyJWH/OmXa71WumnBhPlrulTnA+YFs8mVGEnNyedpJuOmSKiQ6 m8tOEw1CWyKii6pEkKnIo03ulCBwDJOW -----END CERTIFICATE-----Generated at Wed Jul 2 16:16:34 2025 by rpki-client