$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: ybe5MnqBpmPCDgjKwtqp8uTIWr13uNFhL5QlNdhGANE= Subject key identifier: 58:1D:C0:75:C5:39:57:ED:47:3D:FC:8E:21:D6:D2:33:0C:AC:72:FD Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 2213 Signing time: Wed 02 Jul 2025 15:59:56 +0000 Manifest this update: Wed 02 Jul 2025 15:59:55 +0000 Manifest next update: Wed 09 Jul 2025 15:59:55 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: V6dhS/V2VGpLwXu3GXRxy0ATCM8CLpF2/IB9rFBGRcs=) 2: B770D0C64F3611F0BB61297BC4F9AE02.roa (hash: Q2vWAp5rNQfVlxNPgNCkSM+CSqEg1XjqZ2D0lXJ11KM=) 3: D358B3804F3611F0BF36F00EC4F9AE02.roa (hash: 5ulq+1QknQJTgHvfsWDJiaY0hEFpf2cI+46jrEBDVEY=) 4: B937CBBA6DD411EF977CA52AC4F9AE02.roa (hash: fE0umNnJvdXLanVJxxLnguv+68JgjMwDQM/fBcaFIgY=) 5: 722285E02F6111F08D90CD1BC4F9AE02.roa (hash: Mlvm4A3sHMT8TjKLsESvcI+NpOJCscRsP28t9MfdGE4=) 6: FD2941A0BBC311EEBE58430EC4F9AE02.roa (hash: y9g4n21UCTqNjGbPSMXx3pzlzLx/iVjZI0pRarDixiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8802 (0x2262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jul 2 15:59:55 2025 GMT Not After : Jul 9 15:59:55 2025 GMT Subject: CN=6865577b-c147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:21:97:67:ad:ac:6f:3f:c5:c4:67:c6:ae: ce:c6:6d:86:83:6a:af:58:0a:9a:7d:a9:c5:f6:fe: a1:35:9f:91:02:05:36:70:e6:1e:fb:f9:44:f0:24: 5b:eb:92:09:74:fe:1a:c4:b9:9b:eb:22:91:4d:d7: 9c:17:8a:19:20:de:f9:eb:11:80:ec:68:3f:e4:c7: 3b:12:cd:8a:dd:a6:3d:be:53:f6:9a:a4:23:14:14: 1a:eb:af:bf:9d:8b:39:84:01:f4:db:ba:77:a3:9b: 05:14:a6:77:7d:49:5c:9b:a7:52:ff:2b:5e:ab:80: fc:4b:25:25:56:43:bf:99:79:23:9c:d0:82:6f:7e: 6f:e2:1f:54:1e:56:a8:85:ce:7c:7f:2b:03:1c:89: ba:1a:02:bf:94:9f:e9:3b:5c:1b:d1:70:43:5a:f3: ec:60:6d:dd:42:0e:3a:39:c7:90:f3:6f:57:30:a8: 75:b5:16:e5:90:50:78:57:11:5c:a2:a1:31:25:ca: 61:64:8d:19:af:ad:83:d1:0c:fe:a9:46:7f:ca:72: 59:74:37:86:6c:d2:a4:a7:b3:06:cb:41:2c:84:93: 39:af:56:2c:b6:6d:16:b8:08:f0:f4:92:ec:04:c6: 67:b1:92:be:0a:36:81:f1:18:97:37:fa:74:75:48: c1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1D:C0:75:C5:39:57:ED:47:3D:FC:8E:21:D6:D2:33:0C:AC:72:FD X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:66:d5:a6:b4:ff:f7:cf:0b:59:71:e1:66:bc:6b:15:a5: 6e:17:73:7d:0e:e6:c1:43:44:ba:33:f8:ae:41:f4:6b:b6:16: 21:0e:f9:2b:d2:4e:c9:2d:6f:5a:f3:c8:9c:b9:84:0a:81:4d: ef:f9:49:22:bf:70:8d:86:9f:32:19:b5:50:f9:48:6d:01:73: 71:d0:8e:95:71:61:02:3a:5d:e0:a5:28:13:82:f8:53:8e:57: e2:65:9e:84:cd:e5:54:a8:d2:9d:0d:2c:85:b7:45:a0:c7:fd: 84:ce:28:8b:95:94:78:f5:cd:18:b9:c5:92:6c:e9:d8:06:fb: 4c:ed:f6:b5:71:f6:86:8e:e6:83:21:01:68:2b:45:a5:69:35: ba:b5:5e:f5:04:fd:a5:fd:05:ab:01:48:9d:b1:a6:62:d9:5f: 2b:1c:83:a9:f8:29:27:14:1a:b9:41:d0:78:e6:35:27:a6:45: 95:77:aa:4c:02:88:bd:51:04:1c:11:a0:7e:cd:c5:f4:ff:a2: 66:1a:26:2c:81:64:bb:4e:9a:a7:99:86:75:e6:a5:72:32:9c: 02:ad:3f:e9:fe:f1:ac:b9:8f:b4:10:45:40:b1:b4:0e:88:9a: a2:ac:de:0a:95:6f:be:8d:d1:b2:fc:ba:85:aa:4b:7e:6a:24: 5d:e2:3d:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICImIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwNzAyMTU1OTU1WhcNMjUwNzA5MTU1OTU1WjAYMRYwFAYD VQQDEw02ODY1NTc3Yi1jMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl4hl2etrG8/xcRnxq7Oxm2Gg2qvWAqafanF9v6hNZ+RAgU2cOYe+/lE8CRb 65IJdP4axLmb6yKRTdecF4oZIN756xGA7Gg/5Mc7Es2K3aY9vlP2mqQjFBQa66+/ nYs5hAH027p3o5sFFKZ3fUlcm6dS/yteq4D8SyUlVkO/mXkjnNCCb35v4h9UHlao hc58fysDHIm6GgK/lJ/pO1wb0XBDWvPsYG3dQg46OceQ829XMKh1tRblkFB4VxFc oqExJcphZI0Zr62D0Qz+qUZ/ynJZdDeGbNKkp7MGy0EshJM5r1Ystm0WuAjw9JLs BMZnsZK+CjaB8RiXN/p0dUjBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgdwHXF OVftRz38jiHW0jMMrHL9MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayWbVprT/988LWXHhZrxrFaVuF3N9DubBQ0S6M/iuQfRrthYhDvkr 0k7JLW9a88icuYQKgU3v+Ukiv3CNhp8yGbVQ+UhtAXNx0I6VcWECOl3gpSgTgvhT jlfiZZ6EzeVUqNKdDSyFt0Wgx/2EziiLlZR49c0YucWSbOnYBvtM7fa1cfaGjuaD IQFoK0WlaTW6tV71BP2l/QWrAUidsaZi2V8rHIOp+CknFBq5QdB45jUnpkWVd6pM Aoi9UQQcEaB+zcX0/6JmGiYsgWS7TpqnmYZ15qVyMpwCrT/p/vGsuY+0EEVAsbQO iJqirN4KlW++jdGy/LqFqkt+aiRd4j16 -----END CERTIFICATE-----Generated at Thu Jul 3 09:34:14 2025 by rpki-client