$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft File: 48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json) Hash identifier: 24sUWQbfARNWH/LjlRZVBzpJO6+NLxLzs0xICTM83+c= Subject key identifier: 71:3B:BB:0A:19:24:18:24:4B:89:A9:EE:8E:27:77:3B:E8:99:97:59 Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 Certificate issuer: /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft Manifest number: 07BC Signing time: Wed 02 Jul 2025 21:28:45 +0000 Manifest this update: Wed 02 Jul 2025 21:28:44 +0000 Manifest next update: Wed 09 Jul 2025 21:28:44 +0000 Files and hashes: 1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: 164vtlUsw5RYbJaDdZw9sgpcVR7n/Ta++h4mBbt297Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74 Validity Not Before: Jul 2 21:28:44 2025 GMT Not After : Jul 9 21:28:44 2025 GMT Subject: CN=6865a48c-99dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:09:c9:3a:be:f1:08:0a:32:04:56:9a:7f: 97:38:73:05:d1:bc:f7:c2:b9:68:70:eb:2b:0d:75: f0:c9:3e:c0:9e:c8:6e:fa:06:22:06:e8:7a:49:2e: 20:ef:08:57:c8:64:bd:02:50:5a:03:9f:b0:27:f7: a1:6e:66:5a:32:20:ea:c1:16:ba:da:7f:cc:b3:98: 5b:0e:9b:6a:ec:4a:59:8b:56:d7:23:a6:6c:67:b7: 6e:f2:52:42:ae:e0:ba:fd:3a:9b:41:9a:a1:0a:b9: 99:2a:b6:b8:00:46:51:72:cb:32:da:b5:85:91:91: 78:b3:b8:d8:8d:aa:f3:c8:61:d1:fe:a8:bf:e6:61: df:bf:0b:49:9d:49:59:4d:c6:88:0f:0e:0e:fb:75: 8c:17:ab:de:60:a4:e0:08:10:a6:ef:df:89:52:ab: 6b:5a:c9:f8:cd:02:e1:9e:cd:2c:2e:46:1f:ce:a5: 45:61:b9:a9:cf:4b:41:bf:f7:56:7b:6b:63:64:50: e2:22:61:fe:fa:c1:aa:e4:ea:08:48:61:6d:cf:7e: 28:9e:22:68:5f:2b:f7:ed:e8:dc:cf:ef:f9:21:32: db:d1:57:bf:d8:4b:2b:80:63:6d:c2:24:2e:4c:f0: 51:ae:71:b5:d0:ca:27:72:97:70:d2:10:d6:86:22: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:BB:0A:19:24:18:24:4B:89:A9:EE:8E:27:77:3B:E8:99:97:59 X509v3 Authority Key Identifier: keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:bb:fd:12:7d:c4:82:60:77:17:a8:86:45:82:ba:c2:ac:85: 78:03:5a:a7:0e:7e:1e:0d:c3:c2:76:98:91:9e:49:c1:32:16: 2f:3d:53:83:67:5d:72:a2:33:98:f3:83:56:80:43:7f:07:b7: 9a:55:8d:aa:80:55:51:99:e1:83:0b:c5:1e:d0:93:18:71:97: 10:88:81:d4:59:a4:14:23:3f:b9:0e:07:94:4b:cd:ba:9a:35: e8:fc:ed:6e:a2:5d:99:a0:5d:36:12:09:95:3e:69:8e:40:cb: ce:10:08:e5:16:98:39:ca:19:18:42:db:3b:a8:a8:db:b9:e4: ee:40:0d:54:34:13:f8:51:5d:6a:30:b3:80:68:0d:21:be:b9: 48:22:9c:fb:1d:59:11:bd:70:90:56:63:2d:68:09:ae:86:76: 4b:ce:cb:bb:57:62:4b:44:17:c8:a8:56:f1:38:d5:90:49:9e: 21:7d:20:b8:9e:c7:25:2d:49:f0:b4:33:fe:ad:ce:63:87:b8: d0:b4:a5:fa:11:98:a0:18:23:21:c5:db:7e:9e:4a:dc:b4:a2: 1b:07:90:ec:2e:88:e3:bf:19:cd:bb:14:ad:80:18:4a:ae:c9: e0:ce:b1:86:49:43:78:af:6b:fb:3e:eb:b8:1b:03:f5:ed:c5: bc:b8:16:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz NTMwNzJDNzQwHhcNMjUwNzAyMjEyODQ0WhcNMjUwNzA5MjEyODQ0WjAYMRYwFAYD VQQDEw02ODY1YTQ4Yy05OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRUJyTq+8QgKMgRWmn+XOHMF0bz3wrlocOsrDXXwyT7Anshu+gYiBuh6SS4g 7whXyGS9AlBaA5+wJ/ehbmZaMiDqwRa62n/Ms5hbDptq7EpZi1bXI6ZsZ7du8lJC ruC6/TqbQZqhCrmZKra4AEZRcssy2rWFkZF4s7jYjarzyGHR/qi/5mHfvwtJnUlZ TcaIDw4O+3WMF6veYKTgCBCm79+JUqtrWsn4zQLhns0sLkYfzqVFYbmpz0tBv/dW e2tjZFDiImH++sGq5OoISGFtz34oniJoXyv37ejcz+/5ITLb0Ve/2EsrgGNtwiQu TPBRrnG10Moncpdw0hDWhiJb9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE7uwoZ JBgkS4mp7o4ndzvomZdZMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn cVRYSjFWWGx0dDAxTUhMSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsu/0SfcSCYHcXqIZFgrrCrIV4A1qnDn4eDcPCdpiRnknBMhYvPVOD Z11yojOY84NWgEN/B7eaVY2qgFVRmeGDC8Ue0JMYcZcQiIHUWaQUIz+5DgeUS826 mjXo/O1uol2ZoF02EgmVPmmOQMvOEAjlFpg5yhkYQts7qKjbueTuQA1UNBP4UV1q MLOAaA0hvrlIIpz7HVkRvXCQVmMtaAmuhnZLzsu7V2JLRBfIqFbxONWQSZ4hfSC4 nsclLUnwtDP+rc5jh7jQtKX6EZigGCMhxdt+nkrctKIbB5DsLojjvxnNuxStgBhK rsngzrGGSUN4r2v7Puu4GwP17cW8uBah -----END CERTIFICATE-----Generated at Fri Jul 4 00:30:52 2025 by rpki-client