$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft File: MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json) Hash identifier: Nb9rfLfBMSWHzkC+A6psTF7wRbAtPuZY2oKJcnawvSg= Subject key identifier: 65:EF:41:E3:5F:12:31:E1:8A:15:14:38:84:1F:66:5B:DF:93:AF:4B Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 Certificate issuer: /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft Manifest number: 07CD Signing time: Mon 30 Jun 2025 21:25:08 +0000 Manifest this update: Mon 30 Jun 2025 21:25:07 +0000 Manifest next update: Mon 07 Jul 2025 21:25:07 +0000 Files and hashes: 1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: rBfomiMgfvj6t7GV587KbPv2zl8j2A4sjOfgxASnavQ=) 2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: LwB2LqDOhHIBTqs2GBEUbqXjt3VBU4kWjANTbQ1spqo=) 3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: +6R7bMqMqpzAOMYELOdkWclWKRtU/auj18n3CAr0V2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881 Validity Not Before: Jun 30 21:25:07 2025 GMT Not After : Jul 7 21:25:07 2025 GMT Subject: CN=686300b4-34b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:62:8c:ac:1a:a8:a3:b9:36:d2:0b:19:fb: 50:38:9d:29:e9:e5:04:81:c1:57:34:13:62:2a:12: af:c7:c0:e0:51:f1:a4:81:79:75:db:eb:2d:b5:0a: 7e:7a:04:16:04:25:d4:be:b4:6f:16:dc:3b:b8:06: 9d:ca:59:f9:89:71:e5:b5:bd:1a:ad:bc:4c:36:98: 9f:88:a7:ce:8c:59:e8:79:8b:e7:14:28:f0:cf:8b: c9:c7:60:21:a2:c4:dd:a2:e6:c6:12:15:3d:3a:e4: fa:e7:e9:1e:0e:3b:a7:70:b0:a7:cc:0c:3d:f5:d8: e0:73:61:87:88:6e:65:2f:00:bc:aa:cd:f7:4d:c5: 39:68:60:60:05:06:4e:f4:c9:f0:e8:68:b0:8c:bb: 47:4c:be:0a:e6:b9:a8:48:fd:05:fe:ec:61:01:11: 4a:e9:ae:e7:2c:9d:58:58:86:78:76:c8:68:b0:dd: ba:9a:5a:f0:ec:b5:cc:ae:ae:ad:dd:e0:f1:21:ef: bb:35:d4:95:9b:82:92:43:08:56:f2:7a:1c:ba:f3: 4f:19:ca:dd:bb:94:e7:11:ed:15:97:ec:25:b1:a3: 05:28:83:5f:0f:4b:b7:11:7d:36:dc:67:a4:63:99: 8e:bb:42:d6:2d:70:10:bb:96:3f:81:dc:22:3c:5a: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EF:41:E3:5F:12:31:E1:8A:15:14:38:84:1F:66:5B:DF:93:AF:4B X509v3 Authority Key Identifier: keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:f2:03:fa:df:df:42:27:b0:8b:c8:0f:d5:29:bf:8e:20:90: 47:29:25:84:7c:86:ac:3d:d6:b9:22:e6:96:28:eb:13:70:09: e8:52:b3:ae:1b:42:6d:c3:9b:3d:17:56:3a:66:46:f8:80:3b: bf:c0:fd:57:33:4c:74:7e:04:fb:82:51:09:de:14:70:78:77: 90:4c:97:e5:d2:be:62:87:3f:70:0e:b8:e4:4d:c8:4f:cb:9c: 1f:b1:0f:f7:88:4c:dc:6e:18:2d:ec:6d:b7:8d:8c:44:38:40: 27:ad:9b:a9:19:71:66:ab:0f:12:eb:47:f8:8a:cb:94:6f:0f: 1a:2e:a0:80:ec:6d:7d:ef:7f:62:de:20:3e:04:24:c6:47:ee: 06:5c:58:3e:b5:c5:e1:1a:f0:33:8d:a3:73:61:92:96:d7:80: 73:74:f0:40:c1:4c:69:c9:92:31:4f:57:7d:e2:02:54:56:5a: a6:4b:11:f5:8c:ab:ef:55:08:0e:dd:cc:19:0e:84:ef:05:f4: 3d:e2:49:82:cc:0e:53:f2:8a:01:ad:53:55:ec:42:12:5e:63: ff:47:d3:50:74:1e:4c:2e:2e:db:0f:1c:e3:47:af:b3:be:da: 52:86:4e:96:24:31:ae:c3:d3:ec:72:38:65:a1:ce:71:21:67: 0d:18:92:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwQTMxMTAvBgNVBAUTKDMyNDJCQUUwMEJBOUYwREY0RTlFREE2RkU1QzA4RjEy OUY5MTY4ODEwHhcNMjUwNjMwMjEyNTA3WhcNMjUwNzA3MjEyNTA3WjAYMRYwFAYD VQQDEw02ODYzMDBiNC0zNGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsw1ijKwaqKO5NtILGftQOJ0p6eUEgcFXNBNiKhKvx8DgUfGkgXl12+sttQp+ egQWBCXUvrRvFtw7uAadyln5iXHltb0arbxMNpifiKfOjFnoeYvnFCjwz4vJx2Ah osTdoubGEhU9OuT65+keDjuncLCnzAw99djgc2GHiG5lLwC8qs33TcU5aGBgBQZO 9Mnw6GiwjLtHTL4K5rmoSP0F/uxhARFK6a7nLJ1YWIZ4dshosN26mlrw7LXMrq6t 3eDxIe+7NdSVm4KSQwhW8nocuvNPGcrdu5TnEe0Vl+wlsaMFKINfD0u3EX023Gek Y5mOu0LWLXAQu5Y/gdwiPFrOuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXvQeNf EjHhihUUOIQfZlvfk69LMB8GA1UdIwQYMBaAFDJCuuALqfDfTp7ab+XAjxKfkWiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy83NTQ1NDVCQzAz QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhOOU9udHB2NWNDUEVwLVJh SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rSzY0QXVwOE45T250cHY1Y0NQRXAtUmFJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjBBMy83NTQ1NDVCQzAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi9Na0s2NEF1cDhO OU9udHB2NWNDUEVwLVJhSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB28gP6399CJ7CLyA/VKb+OIJBHKSWEfIasPda5IuaWKOsTcAnoUrOu G0Jtw5s9F1Y6Zkb4gDu/wP1XM0x0fgT7glEJ3hRweHeQTJfl0r5ihz9wDrjkTchP y5wfsQ/3iEzcbhgt7G23jYxEOEAnrZupGXFmqw8S60f4isuUbw8aLqCA7G19739i 3iA+BCTGR+4GXFg+tcXhGvAzjaNzYZKW14BzdPBAwUxpyZIxT1d94gJUVlqmSxH1 jKvvVQgO3cwZDoTvBfQ94kmCzA5T8ooBrVNV7EISXmP/R9NQdB5MLi7bDxzjR6+z vtpShk6WJDGuw9Pscjhloc5xIWcNGJIj -----END CERTIFICATE-----Generated at Wed Jul 2 15:56:24 2025 by rpki-client