$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: ejDUxM3ZTUgkUNFvH/GjnobbqRCsYJ1+DSNzJii0acQ= Subject key identifier: 78:97:12:BF:26:AB:F4:84:C4:83:2C:4B:51:12:32:FF:B8:D3:17:DE Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 0150 Signing time: Sun 29 Jun 2025 03:19:43 +0000 Manifest this update: Sun 29 Jun 2025 03:19:42 +0000 Manifest next update: Sun 06 Jul 2025 03:19:42 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: +QfqFrj0uo1vm0PvZj2mtpdMITQlyxQETZhsQBSCtLg=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Jun 29 03:19:42 2025 GMT Not After : Jul 6 03:19:42 2025 GMT Subject: CN=6860b0ce-47e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:e1:b9:5e:37:b3:53:eb:c0:8c:20:07:bf: 9e:9d:5f:36:94:5c:05:af:62:f3:15:5e:03:18:3a: ea:f4:60:21:e4:ad:52:97:dc:a1:86:40:80:11:04: 8b:70:cf:e0:f7:e6:e1:f6:dd:8d:4b:c6:ef:4b:91: ef:24:3b:cc:cd:58:68:35:4d:70:b2:0f:3b:ab:c4: 47:09:7f:a9:18:60:6c:8f:31:0c:8e:09:de:c5:31: 37:c8:d5:c8:ed:4d:33:43:a7:8f:78:05:2e:39:09: 8d:39:33:ef:a9:36:1a:f4:bc:2b:ef:00:2c:ad:df: 85:28:30:64:7e:3b:59:a1:2c:9d:0c:34:64:46:31: c9:f6:a0:9b:5e:8f:23:2e:46:a7:02:b8:98:f1:a6: 2f:1a:c6:9c:5a:65:59:e3:28:73:21:d4:7a:25:4b: d5:dd:99:4c:4b:ef:bc:c7:3b:28:5a:d0:96:7a:4a: 89:dd:5c:05:7f:51:50:92:65:1c:f7:33:3a:e5:85: 30:fe:34:2b:86:07:27:c6:33:f7:da:5b:e0:6e:bb: da:ac:d4:c8:8d:28:28:77:36:c6:4a:a0:2a:3c:8e: ff:84:f5:c6:fc:bc:17:e8:1b:e6:f4:67:21:84:de: b2:90:7e:9c:af:9e:f2:d1:4f:7e:fa:75:4a:47:c7: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:97:12:BF:26:AB:F4:84:C4:83:2C:4B:51:12:32:FF:B8:D3:17:DE X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:49:26:54:97:8c:e8:76:10:69:8f:f5:13:d8:03:c0:6e:e4: f2:95:67:9f:0f:d7:b8:2b:66:99:39:3b:23:e7:ca:03:59:37: a4:a4:ce:34:6f:b6:2e:0b:f3:7e:8f:ca:4f:bc:40:b7:96:e2: 5b:9d:69:3f:9f:20:7e:b9:b4:0f:7a:5f:dd:07:2f:79:48:1a: db:99:7a:01:e3:4c:fb:59:7f:ac:79:93:78:ff:f2:de:e9:98: 26:2e:c0:80:3b:34:6c:91:69:a0:c6:6b:3a:37:8a:27:ac:b4: 30:7a:c7:30:37:2b:e3:45:b8:e2:3a:ce:28:31:47:01:45:32: c2:da:15:10:3b:de:bc:f6:49:74:58:29:21:2f:79:e6:52:d4: 30:df:27:e6:08:34:f1:44:c1:66:26:1a:7f:0d:74:89:6d:31: 54:71:6c:0f:6c:eb:f7:1f:f1:00:73:30:85:44:2e:e2:89:07: 6d:af:1d:e2:fc:9e:39:55:0e:d7:62:7b:d0:7c:b6:2c:bd:83: 42:f4:e2:02:b4:8c:8b:1d:f8:1b:7a:21:62:01:a3:32:5e:9a: f6:6b:37:28:aa:11:66:13:c5:89:f4:4c:36:c7:fc:8a:c4:82: 40:a8:a4:eb:4b:ca:4e:4c:91:48:c1:84:c1:e6:79:29:49:30: 0d:91:0e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNjI5MDMxOTQyWhcNMjUwNzA2MDMxOTQyWjAYMRYwFAYD VQQDEw02ODYwYjBjZS00N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK/huV43s1PrwIwgB7+enV82lFwFr2LzFV4DGDrq9GAh5K1Sl9yhhkCAEQSL cM/g9+bh9t2NS8bvS5HvJDvMzVhoNU1wsg87q8RHCX+pGGBsjzEMjgnexTE3yNXI 7U0zQ6ePeAUuOQmNOTPvqTYa9Lwr7wAsrd+FKDBkfjtZoSydDDRkRjHJ9qCbXo8j LkanAriY8aYvGsacWmVZ4yhzIdR6JUvV3ZlMS++8xzsoWtCWekqJ3VwFf1FQkmUc 9zM65YUw/jQrhgcnxjP32lvgbrvarNTIjSgodzbGSqAqPI7/hPXG/LwX6Bvm9Gch hN6ykH6cr57y0U9++nVKR8fvawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiXEr8m q/SExIMsS1ESMv+40xfeMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzSSZUl4zodhBpj/UT2APAbuTylWefD9e4K2aZOTsj58oDWTekpM40 b7YuC/N+j8pPvEC3luJbnWk/nyB+ubQPel/dBy95SBrbmXoB40z7WX+seZN4//Le 6ZgmLsCAOzRskWmgxms6N4onrLQwescwNyvjRbjiOs4oMUcBRTLC2hUQO9689kl0 WCkhL3nmUtQw3yfmCDTxRMFmJhp/DXSJbTFUcWwPbOv3H/EAczCFRC7iiQdtrx3i /J45VQ7XYnvQfLYsvYNC9OICtIyLHfgbeiFiAaMyXpr2azcoqhFmE8WJ9Ew2x/yK xIJAqKTrS8pOTJFIwYTB5nkpSTANkQ5l -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:53 2025 by rpki-client