$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: o/CdTIZY3vni2AkCAAtaIM916L85ZCELqAG2SboKHdQ= Subject key identifier: 4A:27:F6:10:F2:DA:F0:48:34:50:66:0E:F1:9C:8C:0B:26:F5:D1:91 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: E7 Signing time: Tue 01 Jul 2025 05:59:15 +0000 Manifest this update: Tue 01 Jul 2025 05:59:14 +0000 Manifest next update: Tue 08 Jul 2025 05:59:14 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: InwB0BfbODsk6JpIw4kfgzyP0nMoA+ltc0nV73tU8ac=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Jul 1 05:59:14 2025 GMT Not After : Jul 8 05:59:14 2025 GMT Subject: CN=68637933-b1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:9f:a9:4d:69:28:77:27:56:9b:66:73:64: 86:0e:97:a6:8a:cc:75:75:10:11:0c:86:1a:7c:18: 5c:5f:5c:1c:86:75:71:a0:86:59:c0:e4:72:34:88: 4c:f7:19:1e:00:16:3a:d2:df:14:bc:82:b3:51:b4: 33:29:ce:c5:9b:c3:0f:22:05:4d:c2:61:b6:44:75: b1:9f:eb:dc:58:86:57:87:54:d0:d6:0a:75:4d:80: 00:59:94:42:fa:2d:f9:d0:1d:e5:ca:10:9c:87:e6: e4:39:d2:47:1b:bd:c1:e7:14:42:fe:12:fa:b9:db: db:1b:08:48:6b:fd:90:07:29:aa:10:72:36:18:67: a4:22:5e:5d:be:ac:c6:69:a9:6a:c4:9f:4b:25:09: b5:64:25:df:01:f2:56:1e:6f:6c:a5:ac:86:a2:79: 8a:bb:41:19:65:0c:0e:b5:20:d7:6b:c3:01:c4:65: 8d:b6:9c:a8:2b:dd:23:e7:08:bc:bb:f9:fd:92:b0: 2a:0c:d8:c0:e3:95:f2:31:a5:73:e6:30:f4:02:16: d5:66:4f:6f:95:8a:77:84:c6:b7:7b:d0:93:11:db: 91:28:8a:36:a5:2e:53:f0:54:08:75:cc:a8:98:f4: 6a:39:82:86:f4:aa:2c:82:96:77:13:8a:3a:8f:aa: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:27:F6:10:F2:DA:F0:48:34:50:66:0E:F1:9C:8C:0B:26:F5:D1:91 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:30:2c:75:82:93:f0:1b:1a:ee:5b:86:cb:80:aa:7e:03:f4: 30:3f:3c:f4:a9:76:c3:1b:71:14:a8:1b:94:24:ff:bc:5a:a1: ff:b3:95:c7:41:f1:8d:92:36:90:a6:c0:e8:d0:c7:fa:d6:94: dd:73:5e:32:0d:85:3f:d6:75:6b:a6:16:1f:a9:b3:a8:88:85: d0:bf:5c:db:b9:a9:df:2b:36:1e:eb:db:75:ce:84:47:c7:26: be:66:02:2e:64:ad:a4:80:2b:9f:43:c7:66:4f:ff:6e:83:c1: db:ef:fa:0e:4e:44:5a:54:9d:62:26:c4:da:b9:70:d2:28:28: 8d:c1:a0:8b:b3:42:07:00:49:d8:e4:d4:c2:e5:7a:14:61:01: 21:00:60:ef:63:ec:40:16:e9:17:78:8c:b2:9c:4e:41:8f:4a: d2:74:54:2c:8d:3a:90:a9:f3:f7:b3:99:0e:72:f2:f3:70:72: ab:93:d3:0e:7e:1c:08:29:1f:8a:17:e9:2e:79:e0:a1:90:55: f2:f3:aa:a9:a9:5d:c2:44:9e:3c:2c:0b:fa:2a:52:c1:4c:7b: 2c:1a:68:8b:7a:d1:84:94:e8:ea:c8:b9:9e:f0:e5:13:96:0f: a0:31:a9:f7:6e:69:c3:25:26:d6:fa:d5:5c:b5:c9:87:7e:97: 7b:66:26:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwNzAxMDU1OTE0WhcNMjUwNzA4MDU1OTE0WjAYMRYwFAYD VQQDEw02ODYzNzkzMy1iMWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIqfqU1pKHcnVptmc2SGDpemisx1dRARDIYafBhcX1wchnVxoIZZwORyNIhM 9xkeABY60t8UvIKzUbQzKc7Fm8MPIgVNwmG2RHWxn+vcWIZXh1TQ1gp1TYAAWZRC +i350B3lyhCch+bkOdJHG73B5xRC/hL6udvbGwhIa/2QBymqEHI2GGekIl5dvqzG aalqxJ9LJQm1ZCXfAfJWHm9spayGonmKu0EZZQwOtSDXa8MBxGWNtpyoK90j5wi8 u/n9krAqDNjA45XyMaVz5jD0AhbVZk9vlYp3hMa3e9CTEduRKIo2pS5T8FQIdcyo mPRqOYKG9KosgpZ3E4o6j6qLaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEon9hDy 2vBINFBmDvGcjAsm9dGRMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChMCx1gpPwGxruW4bLgKp+A/QwPzz0qXbDG3EUqBuUJP+8WqH/s5XH QfGNkjaQpsDo0Mf61pTdc14yDYU/1nVrphYfqbOoiIXQv1zbuanfKzYe69t1zoRH xya+ZgIuZK2kgCufQ8dmT/9ug8Hb7/oOTkRaVJ1iJsTauXDSKCiNwaCLs0IHAEnY 5NTC5XoUYQEhAGDvY+xAFukXeIyynE5Bj0rSdFQsjTqQqfP3s5kOcvLzcHKrk9MO fhwIKR+KF+kueeChkFXy86qpqV3CRJ48LAv6KlLBTHssGmiLetGElOjqyLme8OUT lg+gMan3bmnDJSbW+tVctcmHfpd7ZiaF -----END CERTIFICATE-----Generated at Tue Jul 1 14:41:16 2025 by rpki-client