$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: Slna4540/HFaT6kFmSRTJeLh59XEH+o/1hshyA7hz2E= Subject key identifier: D2:C2:42:9A:DA:24:DE:07:C1:0C:1D:36:5A:55:CF:6B:ED:28:05:20 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03A5 Signing time: Sat 05 Jul 2025 01:17:06 +0000 Manifest this update: Sat 05 Jul 2025 01:17:06 +0000 Manifest next update: Sat 12 Jul 2025 01:17:06 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: DLqAWbX027D3xwGeo4qvzAl/er1/QTV9/XUncF6sZIA=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Jul 5 01:17:06 2025 GMT Not After : Jul 12 01:17:06 2025 GMT Subject: CN=68687d12-3622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:42:be:0a:e6:f1:4d:c0:f9:7a:68:16:3e:f6: 1f:c2:40:f2:cf:b8:71:3e:28:4a:e0:ad:09:1b:68: 3f:95:61:d2:f7:2c:bc:dd:9f:3c:60:53:8a:a5:70: f2:1b:d3:54:05:7d:ae:be:e6:9d:1d:54:8c:a8:31: b6:4d:11:b4:76:be:56:e4:45:6d:47:ba:09:f5:d7: cf:31:c7:27:23:42:cc:06:3e:05:3e:47:f2:09:d2: fd:d0:36:0a:eb:b2:02:93:97:84:53:c9:ff:5a:4e: ab:7c:c7:37:25:c3:17:f3:8d:be:00:18:4d:90:a2: c2:2a:fb:e4:92:aa:0e:11:86:7d:4e:00:fd:30:3d: d7:54:91:7c:2c:a3:64:e1:f8:85:86:8d:b1:b4:82: e0:ff:01:bd:b7:36:ab:c7:59:ff:ad:b5:36:47:77: c9:ac:e8:af:18:41:10:2d:bc:fb:22:e0:60:65:7d: b4:c8:99:46:bb:05:d2:d4:33:06:14:be:ef:d7:4e: f7:8e:08:2b:b9:b7:37:bf:e6:ec:af:cd:1b:50:b1: 15:49:5d:92:b4:34:e2:06:93:b7:80:39:fb:2e:16: b6:62:31:d6:44:70:8f:66:e5:45:21:4e:ac:9f:c7: 1a:c7:93:f9:c8:f1:65:ad:15:69:ea:10:06:77:d8: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C2:42:9A:DA:24:DE:07:C1:0C:1D:36:5A:55:CF:6B:ED:28:05:20 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:02:bb:d0:13:fb:f3:67:0f:10:6f:14:ee:f2:07:63:a7: c8:65:ec:bd:6b:fe:2c:7c:72:4a:14:dc:c3:ea:4c:37:e7:bd: 36:6a:70:72:2e:d0:fa:41:30:e7:ed:b1:83:2e:09:bd:58:7b: fa:67:f6:fe:3a:f5:f5:cb:27:dc:79:fe:54:d8:4e:18:01:68: d1:96:ad:a1:1e:0e:38:4c:86:2e:f8:bb:96:da:bf:97:fc:aa: b9:22:74:bc:b9:0a:67:64:2d:e1:38:5e:40:db:4e:70:8a:20: 0c:a9:2f:9d:df:e8:06:27:21:64:57:93:4a:82:b2:c6:9d:3b: 69:fe:f8:d3:52:25:14:15:a0:6b:35:29:59:63:66:b0:58:c5: a7:e9:cc:41:a2:01:ce:96:25:1c:ba:bb:3f:32:f0:db:34:04: 6d:68:b7:4f:3a:cd:5b:74:70:b6:4b:d5:0d:61:d1:df:66:ad: a9:b4:fd:95:64:43:d9:e2:41:12:1d:86:63:7e:7e:93:37:1e: 0a:cb:0c:09:a1:70:9f:c1:59:7a:12:74:ba:ee:1e:aa:fb:32: 7b:71:f4:90:02:bf:71:17:d0:f4:94:d9:b4:12:1b:5e:93:89: ad:32:90:9f:da:fc:c7:bd:a8:ab:51:fe:cc:39:4b:b9:29:98: 9f:52:33:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNzA1MDExNzA2WhcNMjUwNzEyMDExNzA2WjAYMRYwFAYD VQQDEw02ODY4N2QxMi0zNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UK+CubxTcD5emgWPvYfwkDyz7hxPihK4K0JG2g/lWHS9yy83Z88YFOKpXDy G9NUBX2uvuadHVSMqDG2TRG0dr5W5EVtR7oJ9dfPMccnI0LMBj4FPkfyCdL90DYK 67ICk5eEU8n/Wk6rfMc3JcMX842+ABhNkKLCKvvkkqoOEYZ9TgD9MD3XVJF8LKNk 4fiFho2xtILg/wG9tzarx1n/rbU2R3fJrOivGEEQLbz7IuBgZX20yJlGuwXS1DMG FL7v1073jggrubc3v+bsr80bULEVSV2StDTiBpO3gDn7Lha2YjHWRHCPZuVFIU6s n8cax5P5yPFlrRVp6hAGd9iTpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLCQpra JN4HwQwdNlpVz2vtKAUgMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXHwK70BP782cPEG8U7vIHY6fIZey9a/4sfHJKFNzD6kw35702anBy LtD6QTDn7bGDLgm9WHv6Z/b+OvX1yyfcef5U2E4YAWjRlq2hHg44TIYu+LuW2r+X /Kq5InS8uQpnZC3hOF5A205wiiAMqS+d3+gGJyFkV5NKgrLGnTtp/vjTUiUUFaBr NSlZY2awWMWn6cxBogHOliUcurs/MvDbNARtaLdPOs1bdHC2S9UNYdHfZq2ptP2V ZEPZ4kESHYZjfn6TNx4KywwJoXCfwVl6EnS67h6q+zJ7cfSQAr9xF9D0lNm0Ehte k4mtMpCf2vzHvairUf7MOUu5KZifUjPZ -----END CERTIFICATE-----Generated at Sat Jul 5 21:47:26 2025 by rpki-client