$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: rGlF/8O/eqs2wTNTi/jgxUv6wlIsWpYGaYXD8QmD9BY= Subject key identifier: 62:75:E0:DC:DD:F1:66:26:24:EF:EF:B0:F0:6C:84:7E:E3:EE:13:FA Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02EA Signing time: Tue 01 Jul 2025 01:56:53 +0000 Manifest this update: Tue 01 Jul 2025 01:56:52 +0000 Manifest next update: Tue 08 Jul 2025 01:56:52 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: zrlAVnZ4h+meg6Rw8Ywf9NMNbDgBtRoTHnLZI0XOMpM=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Jul 1 01:56:52 2025 GMT Not After : Jul 8 01:56:52 2025 GMT Subject: CN=68634065-9d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:db:9b:9d:97:d6:16:5d:fd:1e:bb:53:0a: 84:04:84:45:52:e8:ca:62:de:4e:74:0b:93:4d:dd: 7a:97:23:e9:db:a5:51:a1:d8:b2:74:97:72:78:fc: d1:38:41:b8:15:a8:6b:38:9b:71:dd:29:85:1c:10: 84:69:18:d7:79:3e:64:c5:a4:08:e7:8f:9e:74:38: f5:ec:9b:e9:90:85:67:3f:2c:e4:05:96:9b:35:48: 47:19:df:d3:e6:99:61:d7:4b:72:19:66:c6:1a:d9: 27:b6:11:b6:c7:21:98:47:ce:c7:ab:79:0f:45:bb: 57:26:19:fc:26:24:8b:e7:42:59:a0:f5:49:4d:ca: ce:f7:0c:2a:7e:c5:12:91:34:b8:ef:ce:fe:58:3d: 0c:10:dc:b6:10:ca:45:2f:c7:41:94:08:9f:a4:e0: 0e:0a:da:8c:4f:0f:5a:47:7e:fe:9b:4f:3a:b3:61: 1f:9a:08:69:c2:f8:3c:f0:77:a2:a5:21:90:e3:51: 59:1a:38:ce:ad:fa:89:53:c6:f3:25:39:18:bf:83: 5e:88:f5:a4:24:22:1f:cb:a5:8a:1a:70:a1:40:5f: bc:d3:b7:a6:d6:81:f7:be:2d:5c:2b:f3:9b:37:ab: f3:b3:5d:18:bd:c2:f3:57:92:8c:ae:b5:61:ad:55: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:E0:DC:DD:F1:66:26:24:EF:EF:B0:F0:6C:84:7E:E3:EE:13:FA X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b1:5d:df:2f:3c:bc:54:bf:bb:a3:09:06:be:e9:55:53:5a: 01:b1:b6:e5:26:a1:30:b1:d4:97:34:e0:25:5c:9c:f6:0a:1f: 33:e4:33:21:86:17:bd:5c:f0:7f:e4:af:58:06:73:8f:fa:69: 90:97:3f:f2:b5:d2:61:aa:5d:10:c4:4b:62:7d:ac:48:0a:e4: e9:e1:f5:1f:e9:14:71:27:66:90:61:d3:2c:9b:4d:e2:6d:27: 9e:76:56:ff:95:ef:e1:60:2f:16:24:4e:ea:88:f7:90:ce:3f: dc:80:77:d0:24:f2:2a:eb:fe:6f:5e:a9:c5:7a:b8:e3:88:9d: 51:b1:88:87:c9:6f:00:e7:60:0c:60:83:b0:22:bb:93:73:56: e9:13:7c:c0:ec:81:6b:18:61:ac:76:94:6b:03:46:05:0c:fd: f3:94:2d:42:22:07:6f:18:34:15:57:95:22:9c:45:eb:f4:b4: e6:19:ab:31:85:30:cf:c7:10:03:92:24:4f:61:6d:76:cd:75: 0a:da:60:a5:7e:06:ec:24:2d:7a:26:0f:36:7c:4a:49:c3:51: ae:61:e5:5a:63:99:44:50:de:5f:40:40:06:64:2d:10:13:0e: d4:24:2b:f3:5d:de:6b:d1:40:b2:14:96:d6:35:60:01:ca:61: 7d:17:8b:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNzAxMDE1NjUyWhcNMjUwNzA4MDE1NjUyWjAYMRYwFAYD VQQDEw02ODYzNDA2NS05ZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBDbm52X1hZd/R67UwqEBIRFUujKYt5OdAuTTd16lyPp26VRodiydJdyePzR OEG4FahrOJtx3SmFHBCEaRjXeT5kxaQI54+edDj17JvpkIVnPyzkBZabNUhHGd/T 5plh10tyGWbGGtknthG2xyGYR87Hq3kPRbtXJhn8JiSL50JZoPVJTcrO9wwqfsUS kTS4787+WD0MENy2EMpFL8dBlAifpOAOCtqMTw9aR37+m086s2Efmghpwvg88Hei pSGQ41FZGjjOrfqJU8bzJTkYv4NeiPWkJCIfy6WKGnChQF+807em1oH3vi1cK/Ob N6vzs10YvcLzV5KMrrVhrVXfWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJ14Nzd 8WYmJO/vsPBshH7j7hP6MB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtsV3fLzy8VL+7owkGvulVU1oBsbblJqEwsdSXNOAlXJz2Ch8z5DMh hhe9XPB/5K9YBnOP+mmQlz/ytdJhql0QxEtifaxICuTp4fUf6RRxJ2aQYdMsm03i bSeedlb/le/hYC8WJE7qiPeQzj/cgHfQJPIq6/5vXqnFerjjiJ1RsYiHyW8A52AM YIOwIruTc1bpE3zA7IFrGGGsdpRrA0YFDP3zlC1CIgdvGDQVV5UinEXr9LTmGasx hTDPxxADkiRPYW12zXUK2mClfgbsJC16Jg82fEpJw1GuYeVaY5lEUN5fQEAGZC0Q Ew7UJCvzXd5r0UCyFJbWNWABymF9F4v7 -----END CERTIFICATE-----Generated at Wed Jul 2 23:29:52 2025 by rpki-client