$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: J77kEW+6RdQjZtkDguhGHPipnBbNnS2JIiiBuiAsens= Subject key identifier: 3C:AF:E7:65:77:C0:4D:BB:DC:F4:9B:40:71:99:64:55:B3:59:82:2F Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 07C7 Signing time: Mon 30 Jun 2025 21:19:02 +0000 Manifest this update: Mon 30 Jun 2025 21:19:01 +0000 Manifest next update: Mon 07 Jul 2025 21:19:01 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: 9ggBwSwPBf/KWwXq0nrBn5OfJw2ywCm5q5JlJrzaJpo=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Jun 30 21:19:01 2025 GMT Not After : Jul 7 21:19:01 2025 GMT Subject: CN=6862ff46-733f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3b:be:bc:b9:f4:ce:47:c0:13:ab:39:2f:ad: 94:95:1f:0b:f0:cb:76:31:16:00:16:6c:5e:85:55: 77:af:26:33:09:70:94:ba:f7:a1:ce:8b:c8:5a:eb: c9:af:c4:71:88:01:10:d8:24:47:dd:08:0f:d3:88: 86:97:57:83:47:15:1e:47:ec:52:5d:b7:69:3a:e2: fc:bc:d9:a7:5e:36:96:0a:cc:a0:b1:c0:9c:f8:4f: 79:76:3b:ea:da:cf:59:ce:51:ed:ee:e4:9a:62:58: 71:66:89:44:d0:c8:53:61:6d:89:c6:01:ae:44:8c: 41:ab:90:02:66:75:48:76:b7:0c:51:95:0f:5a:90: 35:1a:48:48:e5:c9:56:45:90:6d:a5:67:2c:cc:e8: 29:cc:a4:e7:fd:92:48:18:79:a5:df:77:6b:ee:f2: 4c:84:9e:c0:e8:4d:58:92:88:ee:2f:ab:24:68:81: 7d:7f:17:a1:2f:9d:d1:04:6a:f5:26:bc:84:96:1a: 29:94:dc:83:98:51:05:03:c4:97:a2:5d:94:91:6d: ca:66:3f:8c:f4:3b:b1:f1:ad:df:78:c5:58:d3:78: 33:f0:bb:68:1d:11:8f:61:22:ea:f1:46:cf:cb:a6: 4d:dc:da:25:ac:70:e1:05:4e:e5:bf:47:00:aa:04: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AF:E7:65:77:C0:4D:BB:DC:F4:9B:40:71:99:64:55:B3:59:82:2F X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:2a:ad:5b:ac:63:4d:7b:c1:c8:37:98:79:fa:d6:31:f2:86: 95:40:1d:fb:87:18:3c:c6:30:d3:3c:bb:bd:2c:66:d4:2a:04: 7a:82:fd:81:2b:5f:b9:6c:80:56:23:6e:52:93:e9:7d:a7:b4: 9c:62:23:73:cc:1c:ea:9c:37:38:98:c8:c6:39:7b:2a:ee:14: 61:b2:7b:66:a3:d6:0f:9a:74:4c:78:15:97:78:84:4e:4b:94: 74:fe:e8:2f:95:7e:75:62:06:24:17:67:30:62:53:a8:68:87: 8c:1e:72:e6:1b:64:30:b7:3a:04:f9:99:15:2d:e4:1e:8d:40: 6e:b5:f1:be:90:c3:22:d3:98:64:11:43:2d:7a:07:89:f9:68: e5:5d:81:9b:07:b2:41:17:7e:e5:4c:53:a1:60:51:58:64:82: 17:5e:2b:1f:bd:cb:2f:7a:27:44:03:68:90:d6:88:ba:9d:17: b5:36:1c:c0:e2:2d:a2:78:6f:2b:be:2a:12:20:5a:86:17:40: d3:60:21:f8:3f:6f:7c:62:a0:84:63:de:16:e3:41:93:f1:58: 3b:35:d5:3f:e0:0c:9c:7f:f9:72:e0:35:e7:fe:bc:ad:5a:ac: 8d:64:f7:97:a1:45:c1:36:ac:ce:bf:a0:cc:c0:05:ea:85:12: 2f:28:05:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUwNjMwMjExOTAxWhcNMjUwNzA3MjExOTAxWjAYMRYwFAYD VQQDEw02ODYyZmY0Ni03MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTu+vLn0zkfAE6s5L62UlR8L8Mt2MRYAFmxehVV3ryYzCXCUuvehzovIWuvJ r8RxiAEQ2CRH3QgP04iGl1eDRxUeR+xSXbdpOuL8vNmnXjaWCsygscCc+E95djvq 2s9ZzlHt7uSaYlhxZolE0MhTYW2JxgGuRIxBq5ACZnVIdrcMUZUPWpA1GkhI5clW RZBtpWcszOgpzKTn/ZJIGHml33dr7vJMhJ7A6E1YkojuL6skaIF9fxehL53RBGr1 JryElhoplNyDmFEFA8SXol2UkW3KZj+M9Dux8a3feMVY03gz8LtoHRGPYSLq8UbP y6ZN3NolrHDhBU7lv0cAqgS3yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyv52V3 wE273PSbQHGZZFWzWYIvMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLKq1brGNNe8HIN5h5+tYx8oaVQB37hxg8xjDTPLu9LGbUKgR6gv2B K1+5bIBWI25Sk+l9p7ScYiNzzBzqnDc4mMjGOXsq7hRhsntmo9YPmnRMeBWXeIRO S5R0/ugvlX51YgYkF2cwYlOoaIeMHnLmG2QwtzoE+ZkVLeQejUButfG+kMMi05hk EUMtegeJ+WjlXYGbB7JBF37lTFOhYFFYZIIXXisfvcsveidEA2iQ1oi6nRe1NhzA 4i2ieG8rvioSIFqGF0DTYCH4P298YqCEY94W40GT8Vg7NdU/4Aycf/ly4DXn/ryt WqyNZPeXoUXBNqzOv6DMwAXqhRIvKAUR -----END CERTIFICATE-----Generated at Wed Jul 2 19:14:06 2025 by rpki-client