$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: 4ZLNcrkhbj4lpTd1+lp3aqGbCFvfhhlWXLhUIg119RU= Subject key identifier: 9C:BB:E5:39:90:72:BE:61:45:2F:CD:B3:C3:1C:2E:BF:3A:BC:12:EC Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 06F8 Signing time: Wed 02 Jul 2025 22:20:32 +0000 Manifest this update: Wed 02 Jul 2025 22:20:31 +0000 Manifest next update: Wed 09 Jul 2025 22:20:31 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: 8o7Yj17FeUqvAeYkZfOvibl2nRX2MZgRKBIQk6IWZPE=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: S6sSUQCmJtkaMtMbA1O0Mmg6DyeiEI+XUAJAroLQzw0=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: 3GgLx+CbNEwoDetwa0xclFosAF0ThnHDNkGy9hkBwHY=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: gFTQhXxxWg+vWFd9YUvmY8166bjE5yYi7F/AL03zQaU=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: e4/df1ZKDr4aEamOFlzJbyomY0cdDHsDrVrwwMv17eI=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4feN6gwvjlguQsUZ0+vuacffttVLy9DJIXoMNN8hWOI=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: zplnnTYrDs6ATh1oYF/06orqoqHtQxFtplLwmc2mqPA=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 53gHj/OrKFXtL8aMTpoTUjSuuGCGwdKOy6cQhgB55pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Jul 2 22:20:31 2025 GMT Not After : Jul 9 22:20:31 2025 GMT Subject: CN=6865b0b0-7b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:13:63:11:21:03:9e:43:da:74:8f:e6:91: 33:4d:46:1d:9a:70:bf:22:d3:1c:b5:13:6d:cf:14: 7a:e4:a9:b0:0b:f5:d3:d5:59:3f:b0:17:9d:0f:bd: f0:f3:c1:b8:44:4a:12:a6:3a:86:25:8e:24:5f:50: 11:c3:57:b4:ce:ed:2b:04:8b:f3:d4:23:d6:14:c0: 2a:8b:11:33:db:cb:b3:e0:12:06:90:40:5a:b5:f1: 1c:c2:d2:8e:9e:d3:6c:60:51:25:2e:13:03:ac:f8: ac:0f:be:f9:d6:03:25:9e:cd:d4:33:2a:c3:06:a3: 59:d1:3c:6b:35:9b:31:c8:c5:f2:08:e0:01:37:71: 52:06:e9:04:69:34:99:94:1f:05:c6:d9:57:d3:0a: 03:0f:cb:54:79:e8:a2:f8:0b:0b:f7:ef:1c:4d:69: 65:d4:21:b9:f8:db:a8:de:6f:a5:df:1a:fb:be:cf: ba:da:ef:f9:ce:21:0e:01:b9:20:ce:e2:7f:14:82: f8:62:bf:5b:5e:6f:e6:33:f4:da:87:bd:0f:d5:bc: 85:da:cb:e0:fd:24:35:7f:0b:16:f0:ff:ed:7c:06: 37:62:09:a5:bd:f8:50:a1:6c:e1:3a:2a:e4:03:cb: 5c:70:91:38:af:30:e6:a8:0b:a6:f6:ef:35:6c:ab: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:E5:39:90:72:BE:61:45:2F:CD:B3:C3:1C:2E:BF:3A:BC:12:EC X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:49:63:2e:4a:0c:c2:a9:17:6b:fb:9a:be:c3:7f:79:1d:50: 14:63:0a:c9:d2:f5:06:a7:bb:86:96:48:33:b8:af:8a:44:28: 21:bc:a7:8d:1e:b7:af:56:ad:f5:9a:a4:62:79:d8:7a:f0:dd: 2c:aa:4e:d0:bd:36:7b:33:b7:be:05:dc:3d:cd:9a:df:8e:c0: 61:76:23:db:fd:53:05:36:4b:69:7d:a9:c6:3f:a3:79:50:ad: a9:4b:c1:42:80:cc:0c:6d:59:56:b7:4a:e3:b3:57:43:88:89: fc:a1:5e:26:2f:7c:1a:60:bc:32:c1:4e:e4:04:8b:22:7c:92: 1e:d0:ad:29:52:39:cd:0c:9e:17:20:17:c4:3d:52:37:b1:cb: 1e:36:37:ad:94:f2:62:5d:3b:03:19:0a:e0:11:60:cd:20:94: 93:59:fa:1c:56:fe:78:a1:c1:4f:e0:fc:cb:4c:ba:59:36:95: 3b:cd:81:a3:7b:e7:61:44:28:a3:21:98:76:c0:46:6c:0c:80: a7:4b:56:15:7c:d2:90:f8:a9:aa:d1:3d:8b:ab:4c:9e:f2:e2: a3:0e:cc:5d:5a:a2:40:2f:d4:82:15:00:ef:b2:67:15:df:eb: 77:85:0b:ff:fc:8b:70:13:33:0f:71:b9:41:64:84:0e:3e:1d: 72:23:7c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUwNzAyMjIyMDMxWhcNMjUwNzA5MjIyMDMxWjAYMRYwFAYD VQQDEw02ODY1YjBiMC03YjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueATYxEhA55D2nSP5pEzTUYdmnC/ItMctRNtzxR65KmwC/XT1Vk/sBedD73w 88G4REoSpjqGJY4kX1ARw1e0zu0rBIvz1CPWFMAqixEz28uz4BIGkEBatfEcwtKO ntNsYFElLhMDrPisD7751gMlns3UMyrDBqNZ0TxrNZsxyMXyCOABN3FSBukEaTSZ lB8FxtlX0woDD8tUeeii+AsL9+8cTWll1CG5+Nuo3m+l3xr7vs+62u/5ziEOAbkg zuJ/FIL4Yr9bXm/mM/Tah70P1byF2svg/SQ1fwsW8P/tfAY3YgmlvfhQoWzhOirk A8tccJE4rzDmqAum9u81bKu+bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy75TmQ cr5hRS/Ns8McLr86vBLsMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChSWMuSgzCqRdr+5q+w395HVAUYwrJ0vUGp7uGlkgzuK+KRCghvKeN HrevVq31mqRiedh68N0sqk7QvTZ7M7e+Bdw9zZrfjsBhdiPb/VMFNktpfanGP6N5 UK2pS8FCgMwMbVlWt0rjs1dDiIn8oV4mL3waYLwywU7kBIsifJIe0K0pUjnNDJ4X IBfEPVI3scseNjetlPJiXTsDGQrgEWDNIJSTWfocVv54ocFP4PzLTLpZNpU7zYGj e+dhRCijIZh2wEZsDICnS1YVfNKQ+Kmq0T2Lq0ye8uKjDsxdWqJAL9SCFQDvsmcV 3+t3hQv//ItwEzMPcblBZIQOPh1yI3xq -----END CERTIFICATE-----Generated at Thu Jul 3 12:15:18 2025 by rpki-client