$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft File: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft (raw, json) Hash identifier: kLf+u7wOS3vdB+LfPf9gSkBuW+SapFQPiSXYlydSVd8= Subject key identifier: A9:2C:48:BD:1D:72:0F:44:C8:D4:1A:C7:63:B6:F4:D4:26:0A:83:36 Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 Certificate issuer: /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft Manifest number: 0123 Signing time: Sun 29 Jun 2025 03:49:02 +0000 Manifest this update: Sun 29 Jun 2025 03:49:01 +0000 Manifest next update: Sun 06 Jul 2025 03:49:01 +0000 Files and hashes: 1: -wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl (hash: YjVcehgdJFuPECmJft5G19oFPtiUX5Fdz1jLflM6cOw=) 2: D973D5BE97D711EEA1B09A33C4F9AE02.roa (hash: r7m3CbmYBiJqaD0HNr0SYvdrD2KBG4gKkuGM3wdlcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143 Validity Not Before: Jun 29 03:49:01 2025 GMT Not After : Jul 6 03:49:01 2025 GMT Subject: CN=6860b7ad-b185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:15:fd:84:1d:5e:3e:10:ce:8f:b3:b9:b8:41: b5:2d:43:9d:73:41:87:a7:fc:25:2d:00:6d:29:83: d5:c3:af:b6:44:95:e5:8c:79:7f:9d:46:34:69:f9: e9:d3:ce:fb:91:3c:29:9a:06:74:62:bc:07:4c:d6: 4c:37:48:99:d2:92:98:5e:d9:72:fe:64:1d:af:2a: 7c:1f:1a:72:aa:bb:4c:54:2e:19:2d:4e:17:e4:b2: aa:5d:f4:93:68:e2:96:55:19:da:ea:49:88:4b:49: 57:0f:75:e5:56:e7:a1:7a:0e:9c:4d:d5:71:46:0d: a1:e3:c0:9f:d8:37:af:19:b8:e7:76:e6:93:cb:6d: 56:c1:6d:8e:1b:3d:7f:ea:5d:f1:27:5b:c4:43:ba: ed:80:2c:b7:e5:62:3b:c4:96:90:66:54:f1:90:e0: ba:46:e2:b7:6d:e5:9b:fa:1a:38:81:bc:5f:1f:9c: 6b:09:e4:a5:ff:bf:db:3c:52:60:86:7f:9c:89:47: 9b:34:29:86:95:ae:47:94:de:de:19:f9:6e:81:87: f7:3b:63:74:aa:02:c6:59:3a:98:80:b7:03:b1:b7: b9:a2:e7:97:5f:dc:fd:e5:e0:3d:5a:ef:bd:9f:8f: 8d:ea:f8:fc:af:ce:9a:f4:2e:d2:96:5c:4b:a0:be: 3a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2C:48:BD:1D:72:0F:44:C8:D4:1A:C7:63:B6:F4:D4:26:0A:83:36 X509v3 Authority Key Identifier: keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1e:a3:f3:7e:a1:08:7d:a2:c7:1f:0e:80:59:06:c5:3d:88: 3b:c9:61:fb:bf:db:2d:4b:aa:c3:74:c4:14:53:12:c5:11:21: d1:ba:03:48:65:0e:c8:d6:a5:e5:2d:7e:6a:22:51:b2:ed:28: cd:4f:ef:77:98:43:e9:a2:3a:fa:de:0e:e4:68:f1:34:a6:6c: 1a:b1:b3:ed:44:d6:2e:c0:23:33:73:6f:ee:9c:fc:78:d5:a7: 00:7c:55:00:20:f3:dc:8c:9c:2a:c6:e3:59:81:29:19:66:b9: 50:1f:34:69:3d:8a:fd:34:5a:a6:c4:4a:11:09:c6:94:dd:9c: 30:2e:0f:ff:c7:1a:7a:a3:70:c0:95:95:4f:39:e5:bb:d4:7b: af:d9:97:00:74:cd:da:63:c8:5d:7d:a2:2e:7f:b8:d9:91:be: f1:7d:86:14:bf:1f:07:87:fe:7f:48:20:52:e0:15:22:81:b1: 21:3e:39:7e:13:2f:57:17:79:fd:9f:6c:70:03:30:21:06:d8: 92:42:b2:91:9b:b4:5d:47:6b:39:81:d6:39:d7:1a:f0:e6:a0: c7:a4:4c:97:10:61:f7:b1:5e:66:f8:79:56:d3:86:65:73:3b: e1:91:3e:9a:5f:c6:3a:5c:63:84:eb:71:74:b8:75:fe:2f:c0: 0c:e1:dc:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw RTI1MkMxNDMwHhcNMjUwNjI5MDM0OTAxWhcNMjUwNzA2MDM0OTAxWjAYMRYwFAYD VQQDEw02ODYwYjdhZC1iMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBX9hB1ePhDOj7O5uEG1LUOdc0GHp/wlLQBtKYPVw6+2RJXljHl/nUY0afnp 0877kTwpmgZ0YrwHTNZMN0iZ0pKYXtly/mQdryp8HxpyqrtMVC4ZLU4X5LKqXfST aOKWVRna6kmIS0lXD3XlVueheg6cTdVxRg2h48Cf2DevGbjnduaTy21WwW2OGz1/ 6l3xJ1vEQ7rtgCy35WI7xJaQZlTxkOC6RuK3beWb+ho4gbxfH5xrCeSl/7/bPFJg hn+ciUebNCmGla5HlN7eGflugYf3O2N0qgLGWTqYgLcDsbe5oueXX9z95eA9Wu+9 n4+N6vj8r86a9C7SllxLoL46UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKksSL0d cg9EyNQax2O29NQmCoM2MB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3 RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQzNy84MUY2NjlEQzk3RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1q bHJVNlNQcVNRMllPSlN3VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcHqPzfqEIfaLHHw6AWQbFPYg7yWH7v9stS6rDdMQUUxLFESHRugNI ZQ7I1qXlLX5qIlGy7SjNT+93mEPpojr63g7kaPE0pmwasbPtRNYuwCMzc2/unPx4 1acAfFUAIPPcjJwqxuNZgSkZZrlQHzRpPYr9NFqmxEoRCcaU3ZwwLg//xxp6o3DA lZVPOeW71Huv2ZcAdM3aY8hdfaIuf7jZkb7xfYYUvx8Hh/5/SCBS4BUigbEhPjl+ Ey9XF3n9n2xwAzAhBtiSQrKRm7RdR2s5gdY51xrw5qDHpEyXEGH3sV5m+HlW04Zl czvhkT6aX8Y6XGOE63F0uHX+L8AM4dws -----END CERTIFICATE-----Generated at Tue Jul 1 03:28:10 2025 by rpki-client