$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: 51b/PpPubCLA2i5ZLOA7vx2vfzitvv6D1qsiE5Gt2XM= Subject key identifier: 68:5A:74:BD:38:6B:D3:C4:12:7D:E5:97:0A:C8:7D:5A:7B:57:76:9F Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 8D Signing time: Sat 05 Jul 2025 06:49:57 +0000 Manifest this update: Sat 05 Jul 2025 06:49:56 +0000 Manifest next update: Sat 12 Jul 2025 06:49:56 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: BxA2jzmBdfrF2BnedsLT16gZGKPeRAUBXnPIQFgT3LM=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Jul 5 06:49:56 2025 GMT Not After : Jul 12 06:49:56 2025 GMT Subject: CN=6868cb15-bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:81:53:0f:ef:ef:39:91:92:16:e2:46:c9: 0f:02:93:ef:84:b2:fd:e3:6f:5d:4a:8e:58:5c:e7: 23:4b:47:0f:a5:94:1f:20:14:8b:be:88:79:a1:dd: 5d:ee:88:5c:6b:a5:de:7c:15:21:55:1e:71:4e:53: c1:44:5e:79:94:3a:02:7e:be:4a:62:d2:44:4c:58: be:65:71:b1:9d:26:b4:13:17:6e:5a:df:d6:84:4c: a6:64:8c:20:95:0d:cd:83:e6:68:cf:a7:db:cf:f8: 0b:7a:06:94:4e:26:4b:30:c1:d1:0a:50:1e:9f:46: d1:16:58:b4:7a:f3:e6:96:4b:b2:e5:b7:6a:f5:49: c4:b6:df:20:8d:c4:c4:5b:16:56:a7:06:ad:5b:10: b6:f6:9c:b2:be:2d:d3:13:c1:df:02:3d:4a:27:9e: 94:58:74:c6:d5:c5:da:59:b1:a4:ec:e7:48:69:e6: 0b:34:ee:c1:52:2f:bd:b6:a3:00:c2:ab:5b:02:b2: 37:b8:aa:e3:e2:ef:ff:be:51:2a:ce:8c:a7:0c:a8: e8:33:14:69:09:46:7d:79:ad:02:7a:00:1a:15:32: 3d:62:e9:53:8f:40:14:58:56:c4:cd:df:6e:a5:eb: 7f:8d:d7:0d:44:93:7a:09:d1:6c:27:e8:bb:cb:08: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5A:74:BD:38:6B:D3:C4:12:7D:E5:97:0A:C8:7D:5A:7B:57:76:9F X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a9:a0:92:ca:5f:2f:3e:ce:03:80:6f:3e:fa:b0:e3:07:8d: 2d:f7:9f:90:01:e9:11:8d:45:ac:12:9f:a0:4c:fb:b8:95:8d: 86:5f:79:00:ff:c6:f6:55:89:be:57:9a:1b:f4:b7:6a:ac:6f: 20:8e:fe:cc:01:5c:94:21:2f:b0:7b:9a:d3:c2:be:7f:79:47: 4d:47:2c:b6:1b:47:ad:91:8f:5b:7b:b2:8f:7c:91:ec:dd:19: 42:67:8e:75:9f:79:91:ea:81:59:c5:64:49:59:44:f2:07:e1: 54:35:95:f2:a9:37:92:4a:b8:26:fb:7a:44:30:f9:42:8c:76: 65:64:4b:0a:f4:e5:41:4b:db:eb:ce:66:1a:b1:b3:57:26:5c: 4d:d2:ce:27:9f:43:7c:cc:29:65:fa:5e:cb:6c:c0:a8:26:4a: f2:e4:c1:4d:87:d6:16:1b:0a:4f:65:25:f4:b8:05:dc:f1:b3: 7e:c8:a9:fb:aa:51:6e:79:8b:2a:8e:6c:82:89:d0:12:e7:b5: 4a:eb:84:23:f5:b8:f6:42:a2:39:d8:63:94:e4:82:65:7f:dd: 0e:5f:c6:67:39:aa:8a:32:7e:20:9b:c1:70:ac:c9:76:c5:05: b5:43:54:3c:79:71:70:d3:28:14:09:a6:b9:1a:ea:4b:cd:33: 18:b6:d8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUwNzA1MDY0OTU2WhcNMjUwNzEyMDY0OTU2WjAYMRYwFAYD VQQDEw02ODY4Y2IxNS1iYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1SBUw/v7zmRkhbiRskPApPvhLL9429dSo5YXOcjS0cPpZQfIBSLvoh5od1d 7ohca6XefBUhVR5xTlPBRF55lDoCfr5KYtJETFi+ZXGxnSa0ExduWt/WhEymZIwg lQ3Ng+Zoz6fbz/gLegaUTiZLMMHRClAen0bRFli0evPmlkuy5bdq9UnEtt8gjcTE WxZWpwatWxC29pyyvi3TE8HfAj1KJ56UWHTG1cXaWbGk7OdIaeYLNO7BUi+9tqMA wqtbArI3uKrj4u//vlEqzoynDKjoMxRpCUZ9ea0CegAaFTI9YulTj0AUWFbEzd9u pet/jdcNRJN6CdFsJ+i7ywi4LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhadL04 a9PEEn3llwrIfVp7V3afMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfqaCSyl8vPs4DgG8++rDjB40t95+QAekRjUWsEp+gTPu4lY2GX3kA /8b2VYm+V5ob9LdqrG8gjv7MAVyUIS+we5rTwr5/eUdNRyy2G0etkY9be7KPfJHs 3RlCZ451n3mR6oFZxWRJWUTyB+FUNZXyqTeSSrgm+3pEMPlCjHZlZEsK9OVBS9vr zmYasbNXJlxN0s4nn0N8zCll+l7LbMCoJkry5MFNh9YWGwpPZSX0uAXc8bN+yKn7 qlFueYsqjmyCidAS57VK64Qj9bj2QqI52GOU5IJlf90OX8ZnOaqKMn4gm8FwrMl2 xQW1Q1Q8eXFw0ygUCaa5GupLzTMYttiw -----END CERTIFICATE-----Generated at Sat Jul 5 22:49:54 2025 by rpki-client