$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: YFc1u3U0egMkqvJ9V/UoiB6+3hLgFCbqgJfqA2ljbxo= Subject key identifier: 9E:80:CE:1F:89:81:C1:23:41:BF:6A:89:25:CA:BC:C0:66:2B:55:43 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: A6 Signing time: Tue 01 Jul 2025 06:48:45 +0000 Manifest this update: Tue 01 Jul 2025 06:48:44 +0000 Manifest next update: Tue 08 Jul 2025 06:48:44 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: oB8/GYE/dIqlq7c/l1zMl6Mk85Xoc+BlapFiRD7hoOY=) 2: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: FQoFMhaO39gGEcc2pn8CyPB8yz5sPKJ5LS8scOVr+nU=) 3: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: UGCPOMHQWDHdKMVZEIClF1yCBQsAp0GOZkBRwsHoCKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Jul 1 06:48:44 2025 GMT Not After : Jul 8 06:48:44 2025 GMT Subject: CN=686384cc-c9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:e6:91:fc:00:c7:58:12:f1:3c:4e:79:83: a9:74:2a:b4:ab:0f:b4:f3:ab:2c:eb:c0:06:66:fa: f6:47:89:15:45:36:34:45:82:0c:27:fa:a8:92:ae: 6c:d6:e6:6b:9d:87:79:be:12:e3:92:c3:f7:32:41: b2:60:aa:d1:fe:5e:77:bc:4f:f1:c5:64:bd:05:b4: 60:56:a2:54:98:90:8d:c3:d2:45:d7:2e:90:65:b9: 84:65:b1:0d:cf:9c:93:d3:2d:37:bc:14:9a:f7:c7: 28:1f:d8:e9:bb:51:a5:d3:7d:22:55:7e:f5:16:d6: d9:82:1e:79:26:9c:c0:fe:23:62:94:1f:1a:44:43: b6:c7:61:c3:2b:45:98:2a:82:bc:fa:47:80:15:a6: 01:97:f2:72:3c:1f:94:58:36:8e:33:31:37:aa:ec: 32:da:4a:c0:4a:0c:90:45:4e:32:eb:0a:fc:2d:a2: ef:e6:4f:61:f5:7f:5c:f5:59:4b:74:7f:d7:40:5a: 51:17:ff:f5:eb:0d:fd:82:8e:b8:64:3d:6a:6f:e6: e2:21:36:88:18:36:cc:32:5d:f8:a4:ee:e0:9a:ff: 0d:19:bb:fe:b7:31:a0:6e:b8:60:a7:22:bc:c1:ac: 27:31:13:c7:bc:cb:c5:06:92:d0:15:4f:a6:30:25: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:80:CE:1F:89:81:C1:23:41:BF:6A:89:25:CA:BC:C0:66:2B:55:43 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:c7:8f:5d:ce:a2:7d:b8:74:a8:56:bc:30:48:c7:c2:3d:c1: a3:cf:f4:c6:dd:15:e0:32:18:18:5d:e7:ae:04:3a:7a:e8:5f: 12:08:c7:da:af:60:b3:ff:86:3d:a9:0c:b6:1d:97:9e:a2:30: 7a:47:be:c4:83:d8:af:b7:fb:3e:96:84:f2:99:5c:01:4b:e8: 3b:28:20:d8:ce:6b:fa:af:83:8e:11:d4:06:72:e4:7d:b6:f4: 18:bb:e3:fe:8d:f6:3d:9f:72:8a:97:09:eb:44:c4:1c:fe:a5: ed:57:2e:2e:bf:a2:28:5a:71:c7:03:b3:44:b4:1a:79:ac:2b: 4d:ee:36:bf:3f:3b:16:fe:ae:29:c0:d6:97:1a:92:a8:48:13: 92:20:02:45:e3:66:c4:3c:67:93:0d:e2:11:d6:ab:d0:b6:32: 57:1f:c0:cc:de:9d:2e:d5:c9:5c:fa:e9:f8:9a:58:0e:86:b4: 77:9c:c4:45:2b:31:46:28:a0:58:41:fd:c8:07:18:c9:08:3e: 46:d3:5a:e9:16:d3:0c:b5:2b:94:f0:dc:3f:11:de:bc:d5:5d: bc:89:ce:90:e9:57:ba:58:07:84:5f:35:cb:62:41:b6:10:a1: a5:a8:94:f8:bf:7c:33:4b:fe:d8:50:f5:a3:cd:40:53:12:15: e5:55:70:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjUwNzAxMDY0ODQ0WhcNMjUwNzA4MDY0ODQ0WjAYMRYwFAYD VQQDEw02ODYzODRjYy1jOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj7mkfwAx1gS8TxOeYOpdCq0qw+086ss68AGZvr2R4kVRTY0RYIMJ/qokq5s 1uZrnYd5vhLjksP3MkGyYKrR/l53vE/xxWS9BbRgVqJUmJCNw9JF1y6QZbmEZbEN z5yT0y03vBSa98coH9jpu1Gl030iVX71FtbZgh55JpzA/iNilB8aREO2x2HDK0WY KoK8+keAFaYBl/JyPB+UWDaOMzE3quwy2krASgyQRU4y6wr8LaLv5k9h9X9c9VlL dH/XQFpRF//16w39go64ZD1qb+biITaIGDbMMl34pO7gmv8NGbv+tzGgbrhgpyK8 wawnMRPHvMvFBpLQFU+mMCU2dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6Azh+J gcEjQb9qiSXKvMBmK1VDMB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWx49dzqJ9uHSoVrwwSMfCPcGjz/TG3RXgMhgYXeeuBDp66F8SCMfa r2Cz/4Y9qQy2HZeeojB6R77Eg9ivt/s+loTymVwBS+g7KCDYzmv6r4OOEdQGcuR9 tvQYu+P+jfY9n3KKlwnrRMQc/qXtVy4uv6IoWnHHA7NEtBp5rCtN7ja/PzsW/q4p wNaXGpKoSBOSIAJF42bEPGeTDeIR1qvQtjJXH8DM3p0u1clc+un4mlgOhrR3nMRF KzFGKKBYQf3IBxjJCD5G01rpFtMMtSuU8Nw/Ed681V28ic6Q6Ve6WAeEXzXLYkG2 EKGlqJT4v3wzS/7YUPWjzUBTEhXlVXDq -----END CERTIFICATE-----Generated at Tue Jul 1 13:11:57 2025 by rpki-client