$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: hVlw6tUt5m6oYOsx2InggfqJIZZhQEtUp0n4494g89A= Subject key identifier: 96:55:D6:BA:69:C5:CA:E6:12:51:FE:3F:95:69:E9:C5:F8:77:A3:8F Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: 0158 Signing time: Thu 03 Jul 2025 01:30:58 +0000 Manifest this update: Thu 03 Jul 2025 01:30:58 +0000 Manifest next update: Thu 10 Jul 2025 01:30:58 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: Hcy03tmmGexR+utrtoRv29Pr7W4gBur0IPc1htES1Cc=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: HmUyjBFHI1+/W084EHPJ3tp/TeXvZpxhICsUCVrwFxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Jul 3 01:30:58 2025 GMT Not After : Jul 10 01:30:58 2025 GMT Subject: CN=6865dd52-483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:44:24:c6:23:6e:0e:7d:63:d1:91:a1:84: 03:3a:f7:2a:a5:fa:54:6c:ef:9f:ac:7b:74:23:55: 6f:10:ca:02:c6:fb:a5:a9:e3:d5:39:74:56:ca:a3: 79:de:8d:32:4c:8e:a8:33:a7:47:53:97:1a:ff:a1: f9:4b:d2:fa:ad:fb:7e:e0:1a:6d:a7:d0:f9:45:bb: 44:e1:79:5c:40:63:03:c4:11:f9:44:f7:ef:1d:7c: 98:d1:b0:93:f1:bc:d4:ff:c7:30:e0:e3:5f:ec:1e: 4e:de:1b:31:60:46:32:b1:91:cc:41:66:f7:5c:c4: 3e:3f:55:8c:04:f7:c2:5e:98:44:b4:a7:92:80:42: 7e:02:8e:78:f4:d3:30:c5:0b:8f:37:01:2c:d0:7b: a4:60:22:ad:67:ae:88:32:a1:b2:78:b8:c2:77:e5: 13:39:c5:8e:52:bd:93:f7:ea:6a:56:77:44:9d:af: 62:c5:32:cf:46:83:36:73:d8:0e:9d:a4:fb:6a:d9: c4:06:6d:c1:31:ec:45:95:05:8b:76:0e:34:af:ab: 6e:9e:11:33:0a:60:0b:11:07:ab:40:92:ed:5a:25: b7:8b:a7:06:76:50:21:ce:19:c5:9f:3b:3f:07:a2: 05:20:fe:12:bf:86:c0:97:63:8c:6e:81:bc:2f:33: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:55:D6:BA:69:C5:CA:E6:12:51:FE:3F:95:69:E9:C5:F8:77:A3:8F X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d4:e6:df:9d:b3:74:df:31:29:19:25:3e:3c:43:b6:e1:ec: 67:7f:b3:e4:3b:ab:22:a5:64:48:45:62:d0:09:f0:13:23:45: 17:04:06:a1:bc:0b:c1:4a:4e:63:e4:d3:06:ce:30:45:ef:84: 5b:d2:df:95:2e:f5:38:be:1f:75:9f:66:7c:93:96:7a:e4:a5: 85:82:41:08:02:d1:bc:54:37:b2:97:d0:4d:25:4a:e7:19:01: d1:77:c7:5f:a6:ad:74:80:17:53:3e:d0:f3:6b:e6:a4:f4:97: 3c:af:f6:f9:46:83:ce:d9:7d:b7:9e:69:3d:8c:61:5e:7a:db: 75:72:0a:4a:9b:3c:6a:ff:83:76:2b:0a:c5:1a:80:5d:32:a5: 1e:a6:16:d1:c5:d2:0e:a1:bd:38:85:77:96:bc:3f:0c:c1:96: 46:9a:1f:22:0a:fa:c2:86:cb:14:1a:3c:ab:d7:34:1d:f0:dd: a5:34:55:59:2c:4b:be:b6:4d:24:09:3b:6d:18:9a:a1:51:e0: 9a:67:7d:d7:6e:5a:4a:fa:b8:84:2c:96:fa:49:a2:ac:43:d6: 71:61:fd:06:88:c2:b0:bd:a8:d9:27:63:d7:31:92:0d:f5:4d: ad:d9:7a:4e:24:01:20:6f:dd:ab:c8:e8:c3:5a:a4:19:cc:80: 65:d1:c6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjUwNzAzMDEzMDU4WhcNMjUwNzEwMDEzMDU4WjAYMRYwFAYD VQQDEw02ODY1ZGQ1Mi00ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArX1EJMYjbg59Y9GRoYQDOvcqpfpUbO+frHt0I1VvEMoCxvulqePVOXRWyqN5 3o0yTI6oM6dHU5ca/6H5S9L6rft+4Bptp9D5RbtE4XlcQGMDxBH5RPfvHXyY0bCT 8bzU/8cw4ONf7B5O3hsxYEYysZHMQWb3XMQ+P1WMBPfCXphEtKeSgEJ+Ao549NMw xQuPNwEs0HukYCKtZ66IMqGyeLjCd+UTOcWOUr2T9+pqVndEna9ixTLPRoM2c9gO naT7atnEBm3BMexFlQWLdg40r6tunhEzCmALEQerQJLtWiW3i6cGdlAhzhnFnzs/ B6IFIP4Sv4bAl2OMboG8LzNLHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZV1rpp xcrmElH+P5Vp6cX4d6OPMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB1ObfnbN03zEpGSU+PEO24exnf7PkO6sipWRIRWLQCfATI0UXBAah vAvBSk5j5NMGzjBF74Rb0t+VLvU4vh91n2Z8k5Z65KWFgkEIAtG8VDeyl9BNJUrn GQHRd8dfpq10gBdTPtDza+ak9Jc8r/b5RoPO2X23nmk9jGFeett1cgpKmzxq/4N2 KwrFGoBdMqUephbRxdIOob04hXeWvD8MwZZGmh8iCvrChssUGjyr1zQd8N2lNFVZ LEu+tk0kCTttGJqhUeCaZ33XblpK+riELJb6SaKsQ9ZxYf0GiMKwvajZJ2PXMZIN 9U2t2XpOJAEgb92ryOjDWqQZzIBl0cb9 -----END CERTIFICATE-----Generated at Fri Jul 4 13:36:46 2025 by rpki-client