$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json) Hash identifier: Zi6eYVUZBxVIzfT8MD000Ayk2GrMUCybjtdK9ChwrKo= Subject key identifier: 76:54:05:30:CD:73:22:08:FA:42:D9:C4:C0:44:A4:2B:87:EC:8A:4C Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft Manifest number: AC Signing time: Tue 01 Jul 2025 06:47:30 +0000 Manifest this update: Tue 01 Jul 2025 06:47:29 +0000 Manifest next update: Tue 08 Jul 2025 06:47:29 +0000 Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: okIcjwfB52IVEtU9JVjNVd12tSvAb6FZYnHaHd0psow=) 2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: Jul 1 06:47:29 2025 GMT Not After : Jul 8 06:47:29 2025 GMT Subject: CN=68638482-8cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:a4:7f:7c:93:3f:ec:a6:54:45:ac:92:5f: bd:b2:a2:c3:d6:02:9a:1b:ae:1d:f2:31:87:3b:31: 3a:a3:f5:d5:4a:78:e2:30:3f:67:e0:d0:8d:52:31: 09:62:8f:61:5a:87:e8:07:80:0d:78:b1:d9:6a:c7: 71:15:ae:47:fa:38:a1:1e:c1:f7:16:10:26:4c:30: 94:72:0a:84:17:26:ef:7f:0f:ea:39:ce:b8:1f:00: bc:be:1e:f5:2e:1c:0b:91:e7:de:6d:3f:03:00:83: 5c:96:b1:8e:69:c5:19:f1:f6:cc:d4:a3:45:d9:bd: a2:7c:4d:a6:5c:0e:ea:68:35:38:83:c1:02:fa:8b: 41:7b:aa:f2:cb:5b:0f:e7:8f:d2:ad:bb:8e:7d:b5: df:98:3f:c7:ca:60:f8:ca:95:88:fe:c4:89:31:db: 76:6f:8e:6a:a7:d8:34:b4:f3:ba:bb:45:3f:05:ff: 2e:67:61:56:99:15:4d:5d:c4:6c:7c:42:78:ec:ae: 12:c5:33:51:3c:72:fb:28:79:90:0d:02:29:3d:bf: cd:2b:50:a4:86:9e:be:c7:5b:95:a7:02:17:ee:01: 79:de:c0:68:e7:cc:5a:72:ed:dc:95:12:7c:9a:75: 25:6f:99:7b:5b:c0:a9:bd:28:6e:8e:63:ed:bd:94: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:54:05:30:CD:73:22:08:FA:42:D9:C4:C0:44:A4:2B:87:EC:8A:4C X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c3:89:65:62:66:ea:83:23:55:92:6c:80:64:3c:85:64:8f: a6:c8:1d:fb:6f:29:64:bc:2e:53:59:4c:48:11:07:87:1e:da: 30:b0:a6:6e:67:ce:aa:a4:c0:f5:a9:d9:bc:5b:b6:0d:56:97: 86:75:c4:24:72:84:9c:fc:f5:da:94:c7:b4:6f:54:4e:a9:79: 2f:b4:10:48:a0:1c:0b:96:ea:3b:86:52:34:b0:ba:0d:7c:0b: f9:e3:4e:62:44:68:3a:d7:ec:e0:a6:83:db:c2:b4:72:fd:0c: 87:3b:8e:02:0e:94:f7:c8:99:85:42:64:a2:a2:3d:73:ac:45: 21:7d:cf:9b:85:3b:1e:0f:b0:56:43:0d:20:2e:33:5e:9f:06: 98:0b:a6:16:f6:3c:94:c3:c2:90:a3:89:5d:52:7e:c3:ae:f3: 90:7a:99:b9:00:ad:15:b6:3d:88:82:ce:d5:8e:74:9d:10:b9: 44:ff:96:87:aa:71:c4:e0:0e:34:e1:29:18:7e:77:7a:43:81: 34:59:bf:00:ff:d7:88:b1:ad:16:59:b8:dd:02:2b:f9:f1:e3: 79:a9:4a:0a:07:84:e8:af:b4:06:40:bc:9f:0e:c3:01:b5:90: d9:db:07:7e:36:30:55:0f:d2:44:8e:e2:0f:ec:f6:58:b5:24: d9:60:e6:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF OEI2QzUyMDQwHhcNMjUwNzAxMDY0NzI5WhcNMjUwNzA4MDY0NzI5WjAYMRYwFAYD VQQDEw02ODYzODQ4Mi04Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq36kf3yTP+ymVEWskl+9sqLD1gKaG64d8jGHOzE6o/XVSnjiMD9n4NCNUjEJ Yo9hWofoB4ANeLHZasdxFa5H+jihHsH3FhAmTDCUcgqEFybvfw/qOc64HwC8vh71 LhwLkefebT8DAINclrGOacUZ8fbM1KNF2b2ifE2mXA7qaDU4g8EC+otBe6ryy1sP 54/SrbuOfbXfmD/HymD4ypWI/sSJMdt2b45qp9g0tPO6u0U/Bf8uZ2FWmRVNXcRs fEJ47K4SxTNRPHL7KHmQDQIpPb/NK1Ckhp6+x1uVpwIX7gF53sBo58xacu3clRJ8 mnUlb5l7W8CpvShujmPtvZTNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZUBTDN cyII+kLZxMBEpCuH7IpMMB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4 OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2w4llYmbqgyNVkmyAZDyFZI+myB37bylkvC5TWUxIEQeHHtowsKZu Z86qpMD1qdm8W7YNVpeGdcQkcoSc/PXalMe0b1ROqXkvtBBIoBwLluo7hlI0sLoN fAv5405iRGg61+zgpoPbwrRy/QyHO44CDpT3yJmFQmSioj1zrEUhfc+bhTseD7BW Qw0gLjNenwaYC6YW9jyUw8KQo4ldUn7DrvOQepm5AK0Vtj2Igs7VjnSdELlE/5aH qnHE4A404SkYfnd6Q4E0Wb8A/9eIsa0WWbjdAiv58eN5qUoKB4Tor7QGQLyfDsMB tZDZ2wd+NjBVD9JEjuIP7PZYtSTZYOYh -----END CERTIFICATE-----Generated at Thu Jul 3 05:50:32 2025 by rpki-client