$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: 59K3DI/dm+5ZCgXWnf57CKjzHyiOKK7fiyy+WcruSMo= Subject key identifier: 85:BB:5E:46:00:18:B2:84:03:25:ED:9B:68:2B:81:25:29:57:F8:33 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 04F5 Signing time: Tue 01 Jul 2025 00:07:52 +0000 Manifest this update: Tue 01 Jul 2025 00:07:52 +0000 Manifest next update: Tue 08 Jul 2025 00:07:52 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: os+wrFqbb2349eYyXJofR8YuPu2G/xTillldnaTM2i4=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Jul 1 00:07:52 2025 GMT Not After : Jul 8 00:07:52 2025 GMT Subject: CN=686326d8-1f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:e3:76:0e:f1:7d:c8:5d:5a:b8:ce:f3:c0: 01:5d:db:66:bb:b7:00:06:f7:f4:dd:09:3c:a1:28: 9b:b5:9b:e2:c0:e0:a7:16:23:09:8f:04:9c:ec:24: ad:3d:e7:a6:54:9b:1b:f4:38:b6:be:ec:4e:68:06: 5f:35:9c:df:a9:f3:d6:7c:bf:0f:23:a7:05:4a:73: d7:89:81:02:d4:ce:d4:56:af:77:33:ca:a5:e0:c9: ca:3a:03:0a:33:8c:98:6d:1d:b3:77:c6:26:96:6f: 81:41:86:2b:a5:78:98:7b:fb:00:ab:2c:42:c6:99: e0:e7:95:62:9d:46:d4:5c:23:c1:dc:2c:c7:3a:51: af:32:5b:d4:2b:1d:90:f7:4d:dc:7b:26:26:76:62: 0a:88:bb:d3:4b:07:43:a6:fc:38:5b:c7:18:6f:a5: 8b:5c:d6:84:58:36:8e:15:40:df:a3:7b:73:ed:de: 53:7c:f2:de:e7:6e:f1:07:50:39:0a:d7:0d:d0:2f: f8:9d:34:a4:7d:55:f2:91:59:dd:1a:10:d2:7a:59: 00:c7:91:9b:2d:24:0e:f5:f0:6a:bc:2d:c1:7a:e0: a5:4a:fa:9e:63:53:05:fc:c9:ab:f4:a6:bc:6c:ec: c6:66:26:8d:32:2c:a1:b4:a5:22:56:22:c2:43:af: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:5E:46:00:18:B2:84:03:25:ED:9B:68:2B:81:25:29:57:F8:33 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:51:99:a8:45:9c:6e:0e:c7:65:5e:0c:be:82:4a:52:21:e4: 33:29:fb:71:1b:e7:3b:f1:8c:ba:71:2e:5f:79:3f:1b:45:f3: c4:90:16:cc:78:72:c0:f9:aa:04:75:3f:66:cb:c7:fa:44:8d: b4:fd:04:39:7e:9e:44:20:04:0e:3f:77:f4:ed:b3:0d:59:b2: 27:c8:be:d5:ee:38:c5:89:fb:b0:fc:5e:b2:ff:6c:1e:c8:90: 25:5f:7d:70:78:14:cc:49:3b:61:91:4e:75:5a:67:af:f6:10: 40:7a:a8:35:cd:76:39:93:8d:0e:14:72:84:15:3e:92:88:3c: a5:e3:d8:c0:51:85:c4:8b:ea:cb:84:dd:11:13:f6:1a:4c:fe: 83:64:6c:5f:1e:5d:10:6a:94:52:b6:ca:47:38:e0:55:f4:70: c2:39:d2:89:49:00:93:3f:80:40:ca:69:6b:39:c1:d5:f3:6d: 3c:1c:73:c9:99:6e:d9:5d:58:59:cc:6f:04:83:ae:5c:3c:04: ea:23:04:7d:28:af:5c:26:62:6e:ec:26:f1:16:5f:49:c2:24: ce:df:59:f2:d9:a9:7a:07:d6:3d:94:82:24:78:f2:7d:a6:0b: df:56:c1:2f:02:b0:01:c4:5a:4b:6a:7d:95:dd:96:68:fb:e0: 88:4a:ea:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwNzAxMDAwNzUyWhcNMjUwNzA4MDAwNzUyWjAYMRYwFAYD VQQDEw02ODYzMjZkOC0xZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8Xjdg7xfchdWrjO88ABXdtmu7cABvf03Qk8oSibtZviwOCnFiMJjwSc7CSt PeemVJsb9Di2vuxOaAZfNZzfqfPWfL8PI6cFSnPXiYEC1M7UVq93M8ql4MnKOgMK M4yYbR2zd8Ymlm+BQYYrpXiYe/sAqyxCxpng55VinUbUXCPB3CzHOlGvMlvUKx2Q 903ceyYmdmIKiLvTSwdDpvw4W8cYb6WLXNaEWDaOFUDfo3tz7d5TfPLe527xB1A5 CtcN0C/4nTSkfVXykVndGhDSelkAx5GbLSQO9fBqvC3BeuClSvqeY1MF/Mmr9Ka8 bOzGZiaNMiyhtKUiViLCQ68YZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW7XkYA GLKEAyXtm2grgSUpV/gzMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdUZmoRZxuDsdlXgy+gkpSIeQzKftxG+c78Yy6cS5feT8bRfPEkBbM eHLA+aoEdT9my8f6RI20/QQ5fp5EIAQOP3f07bMNWbInyL7V7jjFifuw/F6y/2we yJAlX31weBTMSTthkU51Wmev9hBAeqg1zXY5k40OFHKEFT6SiDyl49jAUYXEi+rL hN0RE/YaTP6DZGxfHl0QapRStspHOOBV9HDCOdKJSQCTP4BAymlrOcHV8208HHPJ mW7ZXVhZzG8Eg65cPATqIwR9KK9cJmJu7CbxFl9JwiTO31ny2al6B9Y9lIIkePJ9 pgvfVsEvArABxFpLan2V3ZZo++CISuq6 -----END CERTIFICATE-----Generated at Wed Jul 2 06:18:47 2025 by rpki-client