$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: f7dxFipfHYYhoRtmS+n+azS6ePuHxlQi8zlI5wGzBow= Subject key identifier: 9C:18:43:8F:52:3E:AB:9B:ED:0C:50:74:98:B8:33:CD:2B:D6:94:DC Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: 5E Signing time: Sun 29 Jun 2025 06:06:13 +0000 Manifest this update: Sun 29 Jun 2025 06:06:12 +0000 Manifest next update: Sun 06 Jul 2025 06:06:12 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: uJpoa8TE/0GGoi0YvDyvm4zski9TZ9HzTjhyg++4ZUU=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: KRcguCIL3wMi3PwztLJpTVhTUzHmH2MqWyforuoA8o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Jun 29 06:06:12 2025 GMT Not After : Jul 6 06:06:12 2025 GMT Subject: CN=6860d7d4-c32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:2f:c8:65:0e:f9:c5:77:c1:1a:d6:54:35: 3d:de:e6:d4:b6:89:85:07:92:7c:97:7c:b2:59:14: f4:8f:02:24:c2:22:6e:ac:f5:1f:6e:28:d2:7f:3c: 8a:cf:74:ee:fb:de:fd:04:f2:a3:f3:e5:4b:a0:86: 86:85:98:a5:52:69:ea:1c:fe:b3:9a:0c:f3:08:9d: c6:e8:a6:ca:29:3c:40:b5:a7:2b:c2:16:1b:89:9f: 48:9e:35:19:36:d1:49:19:b1:0e:a8:73:b3:d7:b7: fe:77:71:f6:37:7c:73:74:91:71:88:76:4d:6d:14: fb:8a:59:b6:ce:5f:d9:e9:90:b0:d8:57:42:e2:f6: 3a:db:ab:88:7d:e1:4a:bd:d6:a7:5f:10:39:f9:c1: d2:e8:81:7b:bf:a8:f9:26:3f:57:c3:6a:c1:ee:3d: a5:ea:52:6c:34:e4:0e:4c:db:74:4b:d8:75:5d:96: 72:c5:37:34:2a:15:04:0f:24:65:7f:9f:81:3e:64: 93:02:9b:fd:f6:c2:ae:a7:71:76:5e:8a:b0:a0:c4: 41:52:65:10:ad:8a:07:20:d8:14:e8:fa:1a:3d:bf: 63:e6:f2:80:43:cb:22:f6:8c:b8:1b:fe:7c:a5:85: 55:f4:af:95:dd:87:2f:95:6f:b6:95:60:17:43:85: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:43:8F:52:3E:AB:9B:ED:0C:50:74:98:B8:33:CD:2B:D6:94:DC X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:08:2a:38:02:13:c8:a3:b7:07:71:d8:6a:b8:1b:d3:0d:9f: 65:a9:4e:d1:a7:b9:0f:ab:98:82:bd:1a:0a:2d:aa:46:0a:94: 1b:c5:cb:9e:b0:96:74:d3:8a:87:ba:d7:83:43:de:75:27:bb: a0:66:e7:91:f4:07:e4:ab:3c:73:6e:74:8a:13:be:28:85:cc: a1:a1:32:9c:0e:9d:cc:71:9c:7c:14:93:11:0d:5e:2b:60:62: c8:14:a0:a6:b7:26:40:c2:d3:d3:f7:d9:ac:c3:84:3b:41:8d: 5c:05:8a:fb:e6:b1:11:e4:ca:f3:e8:dc:34:84:1d:f7:c1:09: 1c:3e:18:ab:44:88:bc:83:96:ab:11:c9:fb:1e:79:01:85:89: 50:9b:55:e6:af:bd:ec:1d:7f:db:74:00:52:7d:03:f0:02:ea: a0:d1:c3:0b:5f:5f:42:9d:dc:12:02:1c:7f:ac:e9:b1:35:e8: 17:6a:1f:28:4a:a3:de:a4:f0:09:89:24:cc:38:41:88:61:24: 08:19:20:2e:43:0b:1d:66:6f:ae:a0:d8:be:19:0d:19:16:bc: 16:d7:24:b6:4f:97:ff:d0:f6:a0:a2:0b:67:f3:45:18:83:4d: 5a:9a:05:c2:1e:17:70:6c:a1:00:93:22:31:f9:6d:bb:af:2a: 4c:e2:3f:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QzdEQzExMC8GA1UEBRMoOTlCNzBCRjIwMjVFRERDREY5MkE0N0QwNENCNzU2QUNC MDczREM0NTAeFw0yNTA2MjkwNjA2MTJaFw0yNTA3MDYwNjA2MTJaMBgxFjAUBgNV BAMTDTY4NjBkN2Q0LWMzMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeTi/IZQ75xXfBGtZUNT3e5tS2iYUHknyXfLJZFPSPAiTCIm6s9R9uKNJ/PIrP dO773v0E8qPz5UughoaFmKVSaeoc/rOaDPMIncbopsopPEC1pyvCFhuJn0ieNRk2 0UkZsQ6oc7PXt/53cfY3fHN0kXGIdk1tFPuKWbbOX9npkLDYV0Li9jrbq4h94Uq9 1qdfEDn5wdLogXu/qPkmP1fDasHuPaXqUmw05A5M23RL2HVdlnLFNzQqFQQPJGV/ n4E+ZJMCm/32wq6ncXZeirCgxEFSZRCtigcg2BTo+ho9v2Pm8oBDyyL2jLgb/nyl hVX0r5Xdhy+Vb7aVYBdDhWZbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnBhDj1I+ q5vtDFB0mLgzzSvWlNwwHwYDVR0jBBgwFoAUmbcL8gJe3c35KkfQTLdWrLBz3EUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDN0RDLzZERUZEQjcwQzU4 QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNF VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWJjTDhnSmUzYzM1S2tmUVRMZFdyTEJ6M0VVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD N0RDLzZERUZEQjcwQzU4QjExRUZCODdFNUYzM0M0RjlBRTAyL21iY0w4Z0plM2Mz NUtrZlFUTGRXckxCejNFVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsIKjgCE8ijtwdx2Gq4G9MNn2WpTtGnuQ+rmIK9GgotqkYKlBvFy56w lnTTioe614ND3nUnu6Bm55H0B+SrPHNudIoTviiFzKGhMpwOncxxnHwUkxENXitg YsgUoKa3JkDC09P32azDhDtBjVwFivvmsRHkyvPo3DSEHffBCRw+GKtEiLyDlqsR yfseeQGFiVCbVeavvewdf9t0AFJ9A/AC6qDRwwtfX0Kd3BICHH+s6bE16BdqHyhK o96k8AmJJMw4QYhhJAgZIC5DCx1mb66g2L4ZDRkWvBbXJLZPl//Q9qCiC2fzRRiD TVqaBcIeF3BsoQCTIjH5bbuvKkziP9k= -----END CERTIFICATE-----Generated at Mon Jun 30 14:59:56 2025 by rpki-client