$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: T5gRQ23p6PrP90anB8jGZGHptU/D1Vexv+r4gAch+1Y= Subject key identifier: 7A:67:75:45:1F:F2:C3:30:2F:A4:FB:24:BA:79:D9:DA:2C:61:0F:A3 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: D3 Signing time: Sat 05 Jul 2025 05:57:56 +0000 Manifest this update: Sat 05 Jul 2025 05:57:55 +0000 Manifest next update: Sat 12 Jul 2025 05:57:55 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: WctHNMjvGHXppEuX/fvY0K/jgvSWj1ypTQQe5AOL0bY=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Jul 5 05:57:55 2025 GMT Not After : Jul 12 05:57:55 2025 GMT Subject: CN=6868bee4-6e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:d6:8b:8d:cf:09:81:2b:3a:5b:e1:4f:9f: 84:45:e8:f5:8a:74:09:9a:95:51:4a:96:2b:21:c8: 57:80:ba:a0:6d:dc:77:f0:bc:66:07:2a:76:94:fd: 02:24:38:fd:dc:f2:18:0f:68:af:2f:d3:cb:9a:dc: 57:97:63:cf:23:60:f5:d5:4e:1c:d9:c0:ea:42:c4: 2b:31:0e:9b:9b:1a:c0:29:a9:8b:93:8e:e4:13:54: 96:9e:86:87:7e:ca:26:a2:d5:c6:00:6e:42:3a:c9: 6f:b3:16:e2:cd:87:05:71:e6:9a:fb:44:5c:25:e5: d0:49:71:ad:d5:c3:da:ad:43:bb:6f:62:82:bb:46: 12:fb:71:66:2c:61:b3:21:83:35:0f:7d:c5:55:a9: 30:ac:d4:9f:a2:7e:f7:80:2a:a9:d0:e9:ad:54:8b: 26:4c:61:14:05:37:5c:be:21:9f:1e:6f:68:d9:38: 76:ba:72:89:48:31:26:df:ab:5d:dd:7d:63:07:32: 07:f0:28:eb:1c:c8:3c:fb:15:c2:53:97:dc:39:c0: bc:06:58:4e:45:fc:49:33:8c:f7:47:94:d2:eb:ec: 0f:4e:8e:6d:0e:e7:5e:bf:ed:15:fe:84:e9:e0:f6: b6:81:a8:1a:33:44:33:8d:b2:83:e7:db:ed:e7:50: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:67:75:45:1F:F2:C3:30:2F:A4:FB:24:BA:79:D9:DA:2C:61:0F:A3 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c1:b5:7d:97:31:9c:41:9e:e7:92:86:10:96:6e:76:ef:0a: b0:a0:ad:3a:a4:ba:dc:7c:29:ab:30:05:e5:34:89:e1:32:d5: 85:e4:0d:45:fe:37:99:f0:40:50:7c:8b:ee:2a:a3:e1:9b:12: 3a:5a:3d:5b:29:a0:e7:5c:06:47:a9:49:98:c6:fb:49:55:ef: e0:43:b8:e8:08:0b:d7:7f:9a:57:4a:33:d2:85:9e:9c:44:26: b2:cf:ea:c2:7c:80:40:36:8f:d0:c1:7e:ef:8e:d8:54:8a:8b: 5e:2a:09:44:ee:f0:f7:aa:a1:15:20:7a:6a:b5:2f:59:07:15: 46:dc:cd:62:16:2b:89:e3:25:96:a9:c6:09:9e:f8:c7:54:4a: 51:35:fa:9a:93:51:70:da:57:72:ac:f1:2b:e0:2f:c4:78:8b: 9a:34:09:33:44:16:5a:30:36:f5:72:0f:37:93:a3:1d:31:b5: ad:9c:78:62:cc:13:9a:c5:f6:5e:70:43:fc:88:f4:c7:34:ce: 80:a0:5b:fb:81:f9:1b:92:1f:31:47:e0:1f:d2:b4:e1:6b:b2: 3a:ef:d8:da:b5:ba:e5:f9:03:9c:d9:97:25:0d:60:58:77:f2: ce:c4:82:1f:e9:e1:9a:02:ee:d9:a3:f4:97:c4:76:c1:f8:ad: 56:ef:3b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwNzA1MDU1NzU1WhcNMjUwNzEyMDU1NzU1WjAYMRYwFAYD VQQDEw02ODY4YmVlNC02ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhXWi43PCYErOlvhT5+ERej1inQJmpVRSpYrIchXgLqgbdx38LxmByp2lP0C JDj93PIYD2ivL9PLmtxXl2PPI2D11U4c2cDqQsQrMQ6bmxrAKamLk47kE1SWnoaH fsomotXGAG5COslvsxbizYcFceaa+0RcJeXQSXGt1cParUO7b2KCu0YS+3FmLGGz IYM1D33FVakwrNSfon73gCqp0OmtVIsmTGEUBTdcviGfHm9o2Th2unKJSDEm36td 3X1jBzIH8CjrHMg8+xXCU5fcOcC8BlhORfxJM4z3R5TS6+wPTo5tDudev+0V/oTp 4Pa2gagaM0QzjbKD59vt51B6VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpndUUf 8sMwL6T7JLp52dosYQ+jMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMwbV9lzGcQZ7nkoYQlm527wqwoK06pLrcfCmrMAXlNInhMtWF5A1F /jeZ8EBQfIvuKqPhmxI6Wj1bKaDnXAZHqUmYxvtJVe/gQ7joCAvXf5pXSjPShZ6c RCayz+rCfIBANo/QwX7vjthUioteKglE7vD3qqEVIHpqtS9ZBxVG3M1iFiuJ4yWW qcYJnvjHVEpRNfqak1Fw2ldyrPEr4C/EeIuaNAkzRBZaMDb1cg83k6MdMbWtnHhi zBOaxfZecEP8iPTHNM6AoFv7gfkbkh8xR+Af0rTha7I679jatbrl+QOc2ZclDWBY d/LOxIIf6eGaAu7Zo/SXxHbB+K1W7zs8 -----END CERTIFICATE-----Generated at Sat Jul 5 11:34:55 2025 by rpki-client