$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: ihH0RB1hsICxBgMLU5louxK2kxWLDdv3kLJUTZANqdE= Subject key identifier: 46:DE:2C:45:68:09:10:AA:5D:62:8B:1A:1E:A2:56:19:28:0B:1E:FD Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 3504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 34C5 Signing time: Fri 04 Jul 2025 14:55:02 +0000 Manifest this update: Fri 04 Jul 2025 14:55:01 +0000 Manifest next update: Fri 11 Jul 2025 14:55:01 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: nCJG3jhiyrl5nT5SCSeDo2HWbnaC7dKtWMbJVIezi1E=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: JRmfeJomvQSzfrIXjYmMHFlugXE6bFe42lyJQeKQfX4=) 3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: CejZncFNpgWH2BgJHmjLHA0HzP35tdBhuZ2TN28KyAw=) 4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: ++KskV0PPNEiZEaTeUOZbL0iJBq0mAX/g0VHSQfJFGU=) 5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: /yUj95kJkPDjakWPdMSLk/tFuL1bJXsSQl7hw6ucO/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13572 (0x3504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Jul 4 14:55:01 2025 GMT Not After : Jul 11 14:55:01 2025 GMT Subject: CN=6867eb46-3549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:09:b3:19:47:2c:ce:52:29:da:2b:70:d4: 7a:b0:f6:0c:87:29:13:e0:a8:b3:96:19:ba:aa:0a: 47:a6:be:02:11:ad:38:a5:e0:08:6c:ca:51:f8:86: cb:f1:17:6c:07:ca:6d:fe:a3:ec:be:30:50:72:58: 05:c4:c7:78:0f:c9:00:48:9b:9f:2f:52:ba:5d:e0: e7:30:da:44:42:6d:29:1b:f3:b7:a6:ed:36:d2:97: 38:7b:3e:b9:11:05:36:76:bd:e3:95:bd:26:81:d0: eb:47:7f:ed:d1:91:4c:ff:29:db:c9:2a:69:11:a1: 82:c1:9c:f8:39:95:a5:ff:22:92:d9:10:bc:ad:4f: 78:81:c2:f6:a3:85:c0:e5:54:32:c1:c7:08:2f:08: ed:fd:49:57:70:a4:f2:dc:04:19:af:69:4a:f0:3b: 3d:02:33:26:94:0b:8c:75:1e:23:0d:e0:bd:ea:ad: ce:63:3f:3d:c0:f4:ee:2f:74:ff:e0:d5:5f:6e:58: 05:53:96:ea:ef:2c:f6:64:01:05:a3:2c:04:6e:74: 3a:ae:57:99:59:ff:4e:23:51:3b:97:a2:c6:47:c2: a9:30:e4:5d:c8:a3:39:de:d3:be:f1:d7:87:4a:c8: c0:2a:29:c6:c5:fe:c2:9a:da:5a:4c:00:27:1f:12: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DE:2C:45:68:09:10:AA:5D:62:8B:1A:1E:A2:56:19:28:0B:1E:FD X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:79:aa:07:19:3e:9f:9d:3c:35:54:79:56:68:e2:5e:35:ae: e2:72:ac:11:7b:4c:bc:67:ba:d4:50:95:71:be:bc:00:27:05: df:12:6c:2c:03:2e:93:af:cf:9c:ec:c1:7c:d0:83:64:b5:82: 59:37:f3:57:18:86:1d:d2:fb:fa:86:1e:d8:1c:30:49:45:3a: 70:3e:68:69:73:1b:6c:f3:4e:25:80:d2:5a:7c:1c:48:e6:71: 48:61:9a:f5:79:ff:6e:40:52:70:bf:58:c1:a5:c0:ed:5c:a1: 99:0a:e1:c7:e2:0e:8c:67:cd:7d:ac:6e:e4:1b:35:a2:c1:5f: db:b2:d9:2f:9a:b8:57:59:1f:aa:1a:7b:5a:4b:37:34:7d:a1: b7:bf:bb:80:70:79:c0:ef:f7:22:88:a9:f1:58:d2:40:6c:7b: 9a:f6:45:b1:74:39:61:01:a5:a1:d1:b6:67:e6:8f:2b:8f:73: 1e:45:83:bd:4d:43:20:98:4f:ef:c6:c3:25:fd:58:be:96:6d: 91:aa:59:08:48:7d:04:6d:bc:d5:71:1b:34:f7:33:86:08:d3: fd:d6:91:27:b2:22:ac:68:1a:eb:75:a4:82:02:18:26:13:0e: 38:11:c8:36:ca:59:e6:09:55:01:67:2e:53:0b:ef:16:21:1f: 85:ff:5e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUwNzA0MTQ1NTAxWhcNMjUwNzExMTQ1NTAxWjAYMRYwFAYD VQQDEw02ODY3ZWI0Ni0zNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LUJsxlHLM5SKdorcNR6sPYMhykT4Kizlhm6qgpHpr4CEa04peAIbMpR+IbL 8RdsB8pt/qPsvjBQclgFxMd4D8kASJufL1K6XeDnMNpEQm0pG/O3pu020pc4ez65 EQU2dr3jlb0mgdDrR3/t0ZFM/ynbySppEaGCwZz4OZWl/yKS2RC8rU94gcL2o4XA 5VQywccILwjt/UlXcKTy3AQZr2lK8Ds9AjMmlAuMdR4jDeC96q3OYz89wPTuL3T/ 4NVfblgFU5bq7yz2ZAEFoywEbnQ6rleZWf9OI1E7l6LGR8KpMORdyKM53tO+8deH SsjAKinGxf7CmtpaTAAnHxKN4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbeLEVo CRCqXWKLGh6iVhkoCx79MB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBleaoHGT6fnTw1VHlWaOJeNa7icqwRe0y8Z7rUUJVxvrwAJwXfEmws Ay6Tr8+c7MF80INktYJZN/NXGIYd0vv6hh7YHDBJRTpwPmhpcxts804lgNJafBxI 5nFIYZr1ef9uQFJwv1jBpcDtXKGZCuHH4g6MZ819rG7kGzWiwV/bstkvmrhXWR+q GntaSzc0faG3v7uAcHnA7/ciiKnxWNJAbHua9kWxdDlhAaWh0bZn5o8rj3MeRYO9 TUMgmE/vxsMl/Vi+lm2RqlkISH0EbbzVcRs09zOGCNP91pEnsiKsaBrrdaSCAhgm Ew44Ecg2ylnmCVUBZy5TC+8WIR+F/16J -----END CERTIFICATE-----Generated at Fri Jul 4 18:04:05 2025 by rpki-client