$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: gHS1jV28qg2gEJxmminpfljeZenhL1cfTzZeNzbrsuc= Subject key identifier: 56:48:09:39:07:7E:3A:81:07:6F:55:F5:32:B8:00:CA:86:D6:47:8B Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 13B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 139B Signing time: Wed 02 Jul 2025 17:10:15 +0000 Manifest this update: Wed 02 Jul 2025 17:10:15 +0000 Manifest next update: Wed 09 Jul 2025 17:10:15 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: au6RDVbd8j1AoMUMhhrUnlYHON/qus6+IG45SPNlNRw=) 2: 337C9CE4314C11F0845D2C39C4F9AE02.roa (hash: vrIMWDHbnqPNLJF4jHYmyNS+GSDUa49JaV3JBKcCD+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5049 (0x13b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Jul 2 17:10:15 2025 GMT Not After : Jul 9 17:10:15 2025 GMT Subject: CN=686567f7-9f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:78:34:58:3c:9d:bb:d5:db:6b:13:4a:c6: 0d:1f:14:3c:17:bb:0f:a1:a3:a8:8c:a6:71:b3:4b: d6:81:90:b8:40:aa:be:26:b0:93:13:6f:06:3a:56: 84:be:34:48:36:83:44:87:42:56:43:d7:e3:c5:4f: 78:3c:65:73:5a:ae:93:37:9f:47:6d:78:79:b0:5e: 32:a4:d1:c0:8b:c5:23:90:4a:0f:ad:6e:22:94:9a: 05:24:4b:8a:67:ca:c4:ef:50:ac:91:42:e8:7d:5d: 1e:ba:95:8a:ed:1d:c0:f3:7a:6d:eb:e4:d2:58:ac: 84:53:bd:fb:fc:05:76:06:78:29:93:ef:e2:24:fe: cf:92:22:53:71:2f:3e:47:98:7a:4c:34:af:34:b1: 9c:61:6e:d5:91:72:53:97:bf:88:14:c9:0a:5d:98: 03:63:c0:78:b9:c6:1d:25:57:38:00:87:e8:86:e8: 25:b8:74:6a:c1:83:b3:76:89:7a:17:53:b4:ca:60: aa:af:2c:05:c8:6d:44:cb:f2:c9:2d:f7:25:2b:97: 46:95:84:0a:1e:92:19:b1:bd:51:7e:29:e8:7c:65: 2e:5c:b7:79:8c:eb:6b:a5:bf:68:e0:9c:ad:dd:3b: 69:58:59:d3:88:c9:2e:29:fd:bf:7d:bb:9d:39:ee: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:48:09:39:07:7E:3A:81:07:6F:55:F5:32:B8:00:CA:86:D6:47:8B X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4b:d1:07:e9:13:fe:25:92:94:b8:01:e7:cb:af:ec:cc:65: 40:9b:d7:11:b9:f6:e9:9c:ba:00:c6:f2:ee:84:a7:5e:ac:06: 19:59:57:91:c8:24:60:a6:fc:d8:b2:c5:ae:7f:a9:25:ba:52: 82:1a:c5:0a:66:96:06:8d:ae:fe:9d:3b:d9:7b:db:5f:44:f3: ac:6d:24:23:bd:1b:75:34:62:26:ee:d7:cf:cb:6d:bb:56:f9: 88:33:02:0b:1a:95:bb:c9:57:5e:39:40:94:d1:5a:c6:b1:91: 19:27:ec:bd:47:7b:3a:20:e3:a5:81:cd:12:54:e2:9b:30:a6: 90:db:a9:8f:3b:f8:f9:89:05:47:b2:c5:84:1d:b1:24:c3:96: 8b:22:98:9f:84:49:5e:4c:f0:64:1c:ae:bd:0a:ed:ff:9b:19: 68:6f:eb:2c:c0:1d:f2:d5:13:2c:cf:8e:75:a1:da:07:a5:44: ff:72:21:73:f2:16:39:f7:8c:4b:c2:e3:48:a2:54:0c:58:42: 8c:40:72:3e:8e:1e:ab:34:dc:68:cd:5f:fe:d9:0d:f0:a1:5f: 7f:16:ad:04:4b:d2:7f:33:e2:8d:28:cf:85:ab:48:61:9e:1b: 01:ec:0d:d6:9a:c3:a0:d4:24:24:da:d9:f2:f2:3a:f6:06:a8: c0:c0:ba:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUwNzAyMTcxMDE1WhcNMjUwNzA5MTcxMDE1WjAYMRYwFAYD VQQDEw02ODY1NjdmNy05ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BJ4NFg8nbvV22sTSsYNHxQ8F7sPoaOojKZxs0vWgZC4QKq+JrCTE28GOlaE vjRINoNEh0JWQ9fjxU94PGVzWq6TN59HbXh5sF4ypNHAi8UjkEoPrW4ilJoFJEuK Z8rE71CskULofV0eupWK7R3A83pt6+TSWKyEU737/AV2Bngpk+/iJP7PkiJTcS8+ R5h6TDSvNLGcYW7VkXJTl7+IFMkKXZgDY8B4ucYdJVc4AIfohugluHRqwYOzdol6 F1O0ymCqrywFyG1Ey/LJLfclK5dGlYQKHpIZsb1RfinofGUuXLd5jOtrpb9o4Jyt 3TtpWFnTiMkuKf2/fbudOe6IcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZICTkH fjqBB29V9TK4AMqG1keLMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdS9EH6RP+JZKUuAHny6/szGVAm9cRufbpnLoAxvLuhKderAYZWVeR yCRgpvzYssWuf6klulKCGsUKZpYGja7+nTvZe9tfRPOsbSQjvRt1NGIm7tfPy227 VvmIMwILGpW7yVdeOUCU0VrGsZEZJ+y9R3s6IOOlgc0SVOKbMKaQ26mPO/j5iQVH ssWEHbEkw5aLIpifhEleTPBkHK69Cu3/mxlob+sswB3y1RMsz451odoHpUT/ciFz 8hY594xLwuNIolQMWEKMQHI+jh6rNNxozV/+2Q3woV9/Fq0ES9J/M+KNKM+Fq0hh nhsB7A3WmsOg1CQk2tny8jr2BqjAwLrO -----END CERTIFICATE-----Generated at Thu Jul 3 07:05:36 2025 by rpki-client