$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: 6K9BSoEmWANzaNj+OJpY0d9daJLvyXh0eMgk0R4ELWA= Subject key identifier: 15:62:49:02:47:B8:57:B0:02:57:14:B0:86:59:E9:2F:9A:35:09:09 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D34 Signing time: Wed 02 Jul 2025 18:18:28 +0000 Manifest this update: Wed 02 Jul 2025 18:18:27 +0000 Manifest next update: Wed 09 Jul 2025 18:18:27 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: YmqSBBw3Dg8emOUMyRQmp0uBMZL5IfN4OStTERQhc9Y=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jul 2 18:18:27 2025 GMT Not After : Jul 9 18:18:27 2025 GMT Subject: CN=686577f4-34be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:47:85:38:eb:59:09:47:d7:33:bb:52:ca: 7e:3f:14:9c:10:95:7a:ab:e4:62:3b:ff:2d:df:db: 2b:3b:1d:82:64:53:61:46:4e:65:a9:70:66:17:d3: 80:7e:d6:82:51:d1:e7:68:82:e3:f4:3b:b0:83:68: d4:cd:b9:6e:63:9f:65:f9:20:7a:c4:a1:d9:d5:bf: 91:10:48:44:32:38:e4:35:45:06:27:5f:4f:53:c1: f9:ae:43:81:f2:2c:10:94:19:68:97:38:ef:49:d8: a3:86:80:ec:50:34:1a:e0:87:a3:64:b7:32:d4:2b: 11:ae:6c:66:78:f4:7d:59:76:46:ff:11:f9:5d:d4: 12:b5:e3:f7:ea:b0:64:11:95:85:5d:5e:5e:8d:90: 5e:b1:d6:6b:c1:7f:35:11:a0:9b:45:ff:e1:3d:f4: d6:00:29:c1:53:15:36:ae:04:ae:80:0f:5b:40:94: 13:43:69:3c:54:0b:98:18:f1:cf:27:e8:a5:c4:81: 81:a4:c8:5c:54:c1:12:5b:e7:fb:9e:2f:ac:c5:20: 55:5d:57:91:05:f8:fa:45:c3:f4:fe:72:ae:a7:d0: 42:38:2f:f9:17:a5:5a:df:b6:e8:54:58:28:0c:b5: aa:fd:06:7a:7a:97:cf:48:da:43:3a:96:7e:a2:bb: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:49:02:47:B8:57:B0:02:57:14:B0:86:59:E9:2F:9A:35:09:09 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:e6:64:f6:b4:83:4c:35:6b:1c:f3:db:39:4f:63:c1:fd:9b: 88:1f:23:73:92:31:a1:44:65:70:88:87:db:8d:d4:33:d2:4d: d3:75:17:26:44:2d:cb:11:64:8f:26:e6:4a:f1:56:d2:24:4b: 3d:3a:80:35:2c:e2:84:17:14:65:73:ed:8c:cf:c0:88:6a:6d: 39:80:14:dd:07:99:49:3c:ca:36:89:4a:89:76:e0:17:5b:ae: 51:8a:c4:74:03:fe:72:22:4b:45:1b:58:1b:9a:82:5e:20:be: 0e:39:61:21:39:11:f5:58:55:b7:47:5e:90:2d:52:0a:85:c9: 23:5a:31:40:e7:6f:ef:ef:b9:78:b7:63:f0:c0:70:cf:9f:04: 9a:f3:a6:e9:7b:8c:75:a6:e7:73:29:e7:c8:cf:47:88:fd:3b: 97:e0:23:a1:78:a0:24:3d:0c:91:5e:3a:1a:12:77:7e:e2:8d: c9:4c:bd:fa:a4:83:a2:a1:c7:72:06:18:01:03:5a:bf:ab:d7: 76:bb:30:d7:58:45:bc:96:e6:c6:ed:07:ad:be:e9:06:66:37: cc:23:51:3e:6d:de:70:be:5d:c2:fb:aa:bd:5f:9c:5d:24:82: 6b:10:86:5d:28:51:e3:d2:96:01:58:c7:69:bb:68:53:f2:08: f4:58:d7:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwNzAyMTgxODI3WhcNMjUwNzA5MTgxODI3WjAYMRYwFAYD VQQDEw02ODY1NzdmNC0zNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArptHhTjrWQlH1zO7Usp+PxScEJV6q+RiO/8t39srOx2CZFNhRk5lqXBmF9OA ftaCUdHnaILj9Duwg2jUzbluY59l+SB6xKHZ1b+REEhEMjjkNUUGJ19PU8H5rkOB 8iwQlBlolzjvSdijhoDsUDQa4IejZLcy1CsRrmxmePR9WXZG/xH5XdQSteP36rBk EZWFXV5ejZBesdZrwX81EaCbRf/hPfTWACnBUxU2rgSugA9bQJQTQ2k8VAuYGPHP J+ilxIGBpMhcVMESW+f7ni+sxSBVXVeRBfj6RcP0/nKup9BCOC/5F6Va37boVFgo DLWq/QZ6epfPSNpDOpZ+orvkywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBViSQJH uFewAlcUsIZZ6S+aNQkJMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz5mT2tINMNWsc89s5T2PB/ZuIHyNzkjGhRGVwiIfbjdQz0k3TdRcm RC3LEWSPJuZK8VbSJEs9OoA1LOKEFxRlc+2Mz8CIam05gBTdB5lJPMo2iUqJduAX W65RisR0A/5yIktFG1gbmoJeIL4OOWEhORH1WFW3R16QLVIKhckjWjFA52/v77l4 t2PwwHDPnwSa86bpe4x1pudzKefIz0eI/TuX4COheKAkPQyRXjoaEnd+4o3JTL36 pIOiocdyBhgBA1q/q9d2uzDXWEW8lubG7QetvukGZjfMI1E+bd5wvl3C+6q9X5xd JIJrEIZdKFHj0pYBWMdpu2hT8gj0WNep -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:41 2025 by rpki-client