$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: N91WbkEzJzHWxfwSo0za7Suc7PeUxzjteiBJpqhRhHc= Subject key identifier: 50:34:50:5C:FB:C7:51:19:5A:64:FF:5E:20:82:27:76:C5:FD:DB:B7 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: 9A Signing time: Thu 03 Jul 2025 06:42:01 +0000 Manifest this update: Thu 03 Jul 2025 06:42:00 +0000 Manifest next update: Thu 10 Jul 2025 06:42:00 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: zf7QFmsWC1GEjqXOXnMnEk23g0MeO0jfuTwiwL5p/PI=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: 3DRrxdG8LfKAYdtHGcco//4+Q6X+ndXhUkgJbiWj/MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Jul 3 06:42:00 2025 GMT Not After : Jul 10 06:42:00 2025 GMT Subject: CN=68662639-c0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:5f:61:aa:6f:ba:3b:f9:d0:34:ab:10:30: f3:67:8c:ff:e5:0f:53:17:ad:f4:46:b0:94:47:25: e4:d6:49:dc:16:be:c1:8a:2f:44:f3:e2:a7:c2:03: 27:55:0f:cd:18:d9:07:b9:62:1a:51:57:9e:91:f4: 57:05:77:9f:01:56:62:29:13:30:4b:41:c9:a0:1d: c8:63:dd:2a:6f:59:89:17:34:6c:8c:89:4d:cf:eb: 30:b8:b9:c1:27:80:83:55:a2:1d:05:17:08:fd:85: e3:61:ef:7c:9a:fa:37:27:8e:c9:e2:13:6a:c2:ea: 81:5f:b2:df:ba:07:3b:70:b6:a9:e5:7f:e6:e7:6e: 15:71:56:1f:86:88:fe:15:90:2c:de:7d:6f:93:5e: 1d:12:c6:17:70:7d:bb:31:52:7d:fa:0e:99:3b:79: bb:d3:90:fc:26:39:4b:90:5e:e5:f8:61:89:4c:86: 3b:62:89:66:32:4f:0e:67:33:3c:f3:32:23:fa:f9: d3:08:dc:d2:93:d3:91:fa:75:51:76:61:4d:50:ce: e4:ab:c7:f7:b5:4c:f0:2d:e6:39:3d:42:e5:6f:8f: 36:f7:47:f1:62:65:d0:e0:4b:ed:1c:7e:71:8a:e1: c3:1f:2b:7f:2c:a8:ad:97:30:60:82:a1:54:98:b6: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:50:5C:FB:C7:51:19:5A:64:FF:5E:20:82:27:76:C5:FD:DB:B7 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:39:b2:7d:f5:ba:f7:f5:59:eb:8d:7f:90:1d:84:9f:ef:59: 68:17:c9:94:e4:7a:8b:7d:bd:4e:22:c4:46:63:18:4d:70:b2: a5:2c:d4:6b:cd:33:4d:2e:e2:65:98:e7:92:2f:31:5b:c9:a0: 61:80:70:5b:0a:25:00:5f:d3:8f:86:17:2d:f3:31:a0:ca:6e: 3b:75:32:20:d3:c1:bc:0f:6a:e0:36:00:14:a3:57:27:19:33: 5a:e5:b2:be:df:80:97:1b:f4:3f:0c:8f:0a:85:68:41:b7:12: ca:40:96:e5:cd:b1:92:11:00:f8:a1:33:38:8f:32:bb:54:81: 2a:27:2c:ea:94:b0:84:a8:f0:68:c7:7a:85:cf:10:17:4b:6f: e3:cd:aa:f6:31:ff:95:57:83:5e:86:0b:e8:5d:0c:da:e3:99: fa:4e:bc:25:c0:f1:d6:0c:bf:77:9e:8c:71:05:e4:fa:f8:08: e7:97:a9:81:cc:c0:fe:25:ea:d2:d5:5a:e3:4e:95:59:b3:b7: 19:f1:3f:7d:cf:87:03:45:92:0e:07:49:9d:66:82:95:3a:00: 76:03:d0:b6:49:61:5b:d2:cb:8c:d5:ff:d2:e3:c9:01:f1:11: ea:3e:1f:b9:77:11:26:0f:32:a2:71:dd:ea:66:f4:37:0e:a2: bc:08:ed:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MTUxMTAvBgNVBAUTKEZCNUFDRkJDRjlGQ0VGMDM0QjhBOTNCRDMxOUU2MjA0 NDJENjY2N0YwHhcNMjUwNzAzMDY0MjAwWhcNMjUwNzEwMDY0MjAwWjAYMRYwFAYD VQQDEw02ODY2MjYzOS1jMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw1fYapvujv50DSrEDDzZ4z/5Q9TF630RrCURyXk1kncFr7Bii9E8+KnwgMn VQ/NGNkHuWIaUVeekfRXBXefAVZiKRMwS0HJoB3IY90qb1mJFzRsjIlNz+swuLnB J4CDVaIdBRcI/YXjYe98mvo3J47J4hNqwuqBX7Lfugc7cLap5X/m524VcVYfhoj+ FZAs3n1vk14dEsYXcH27MVJ9+g6ZO3m705D8JjlLkF7l+GGJTIY7YolmMk8OZzM8 8zIj+vnTCNzSk9OR+nVRdmFNUM7kq8f3tUzwLeY5PULlb48290fxYmXQ4EvtHH5x iuHDHyt/LKitlzBggqFUmLZzmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFA0UFz7 x1EZWmT/XiCCJ3bF/du3MB8GA1UdIwQYMBaAFPtaz7z5/O8DS4qTvTGeYgRC1mZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUxNS8zRDNDQTMwODc0 QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3TkxpcE85TVo1aUJFTFda bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1puOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUxNS8zRDNDQTMwODc0QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3 TkxpcE85TVo1aUJFTFdabjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSObJ99br39VnrjX+QHYSf71loF8mU5HqLfb1OIsRGYxhNcLKlLNRr zTNNLuJlmOeSLzFbyaBhgHBbCiUAX9OPhhct8zGgym47dTIg08G8D2rgNgAUo1cn GTNa5bK+34CXG/Q/DI8KhWhBtxLKQJblzbGSEQD4oTM4jzK7VIEqJyzqlLCEqPBo x3qFzxAXS2/jzar2Mf+VV4NehgvoXQza45n6TrwlwPHWDL93noxxBeT6+Ajnl6mB zMD+JerS1VrjTpVZs7cZ8T99z4cDRZIOB0mdZoKVOgB2A9C2SWFb0suM1f/S48kB 8RHqPh+5dxEmDzKicd3qZvQ3DqK8CO0n -----END CERTIFICATE-----Generated at Thu Jul 3 18:17:54 2025 by rpki-client