$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: 8mCvMQeOlZAYBSg45m5RsLHO6zBDdV/BtXRkigENmGk= Subject key identifier: AE:2F:E1:37:2A:EF:4E:FD:90:72:07:89:8E:04:06:FF:C9:77:2D:91 Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 1013 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 0FE1 Signing time: Wed 02 Jul 2025 17:44:14 +0000 Manifest this update: Wed 02 Jul 2025 17:44:14 +0000 Manifest next update: Wed 09 Jul 2025 17:44:14 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: L2NBeoyBGe9NChI0iuO1onSIB4siG7OkUwi7kZAorps=) 2: AA2BE0CC359B11F08F8F7E4AC4F9AE02.roa (hash: cZwW8tsmFD2xtwPfekSh582VRbEv6Jvu1sqyXeWPy+U=) 3: CF949C10359A11F0AFFF2848C4F9AE02.roa (hash: cIB0S20gV/ZhV77XZTzfCkZr/IsCbhpCdfiUC7S/47s=) 4: 57128B16347911F0B5AFA587C4F9AE02.roa (hash: WKrNLnQSQf3mdrreiH8iEoIheF7qvuIgUI+Ro9y3tro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4115 (0x1013) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Jul 2 17:44:14 2025 GMT Not After : Jul 9 17:44:14 2025 GMT Subject: CN=68656fee-a99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:1b:9b:e3:4b:6e:d2:30:45:0e:98:fc:49: 7a:7d:b9:e3:67:fb:40:b5:28:77:b0:b0:6a:91:02: 21:c4:06:84:1b:85:34:7c:64:f5:62:7e:45:30:48: f1:b2:ac:aa:e1:a3:c2:c1:b4:ca:22:02:4d:98:60: e1:41:da:0a:a4:cd:8b:8b:53:0b:f0:f9:72:0f:66: 35:26:16:62:6e:6a:8d:88:44:9e:1b:aa:1a:5b:55: 9b:63:8f:0c:fa:34:5d:88:4d:b9:b8:60:6c:05:71: ce:9b:29:f2:5e:dd:d6:fe:06:48:d4:1c:ba:d3:ec: ee:06:16:5b:8e:c5:55:ce:52:a2:a8:73:94:43:56: df:85:28:ae:c4:1f:91:88:84:22:97:c5:cb:b1:18: 9a:7e:10:bf:0e:e6:d0:9c:83:6f:27:cb:21:05:be: 59:91:89:f6:34:6e:5f:1a:d5:0c:1d:71:42:57:20: bd:16:70:98:54:b3:7d:1a:be:62:8a:1a:92:51:83: 68:03:ef:26:62:16:bf:bb:74:a7:95:71:b8:3a:09: 89:8f:25:4f:b5:84:fe:28:16:37:c2:71:53:62:03: f6:b1:a5:a5:77:72:81:fa:0d:ec:4f:ee:57:d1:f6: 7c:62:b1:1a:be:f5:8c:24:4e:de:a5:f0:0e:40:4c: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2F:E1:37:2A:EF:4E:FD:90:72:07:89:8E:04:06:FF:C9:77:2D:91 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4e:71:2c:ea:13:4c:4d:67:7b:ae:f6:fa:58:ff:6b:8d:1e: b5:cc:dc:82:82:e5:5d:ac:d1:ac:d5:71:f3:48:30:52:8a:c1: b5:c8:e4:c1:bd:7c:9d:5a:7a:a9:9e:57:d2:a5:8e:e9:0a:aa: 04:87:d3:18:89:30:bc:cf:a4:91:90:61:3b:86:f8:b1:de:0b: 25:a6:62:ab:0d:66:89:a7:c4:a5:0f:67:79:04:7a:48:c9:e1: 8e:b5:3a:05:0f:ec:d6:49:8b:e3:d4:2d:48:bb:99:4d:ff:76: d9:b9:87:fb:7c:13:60:44:1d:e8:78:a7:41:2e:9f:ef:f2:0d: 54:c2:dc:9c:ac:4f:0d:9c:eb:7e:b7:1b:ba:65:be:37:07:9d: 51:89:eb:46:3a:6b:2b:7e:e9:97:bb:9e:a6:a7:34:70:e6:6d: ea:e3:2b:a1:19:81:72:bf:0b:79:4e:2e:bd:f1:41:b7:c6:9b: d6:41:69:59:9c:b9:ec:81:98:74:83:9a:8c:6c:33:36:0b:93: 87:d4:da:72:b4:d3:3e:99:f8:63:6a:59:4e:82:3f:07:03:8d: c3:b0:ed:2d:4a:c1:19:bb:64:1e:20:58:26:af:bc:41:02:68: d0:4e:f4:5e:e7:ba:ae:9f:4c:06:b3:52:88:b1:31:27:4d:48: 0b:c1:08:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwNzAyMTc0NDE0WhcNMjUwNzA5MTc0NDE0WjAYMRYwFAYD VQQDEw02ODY1NmZlZS1hOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ocbm+NLbtIwRQ6Y/El6fbnjZ/tAtSh3sLBqkQIhxAaEG4U0fGT1Yn5FMEjx sqyq4aPCwbTKIgJNmGDhQdoKpM2Li1ML8PlyD2Y1JhZibmqNiESeG6oaW1WbY48M +jRdiE25uGBsBXHOmynyXt3W/gZI1By60+zuBhZbjsVVzlKiqHOUQ1bfhSiuxB+R iIQil8XLsRiafhC/DubQnINvJ8shBb5ZkYn2NG5fGtUMHXFCVyC9FnCYVLN9Gr5i ihqSUYNoA+8mYha/u3SnlXG4OgmJjyVPtYT+KBY3wnFTYgP2saWld3KB+g3sT+5X 0fZ8YrEavvWMJE7epfAOQEzVqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4v4Tcq 7079kHIHiY4EBv/Jdy2RMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSTnEs6hNMTWd7rvb6WP9rjR61zNyCguVdrNGs1XHzSDBSisG1yOTB vXydWnqpnlfSpY7pCqoEh9MYiTC8z6SRkGE7hvix3gslpmKrDWaJp8SlD2d5BHpI yeGOtToFD+zWSYvj1C1Iu5lN/3bZuYf7fBNgRB3oeKdBLp/v8g1UwtycrE8NnOt+ txu6Zb43B51RietGOmsrfumXu56mpzRw5m3q4yuhGYFyvwt5Ti698UG3xpvWQWlZ nLnsgZh0g5qMbDM2C5OH1NpytNM+mfhjallOgj8HA43DsO0tSsEZu2QeIFgmr7xB AmjQTvRe57qun0wGs1KIsTEnTUgLwQhO -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:33 2025 by rpki-client