$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json) Hash identifier: EN/nNVQnYhfDMU/XhzJOMWmLlhz68kwMe2tCHZn+lpg= Subject key identifier: 29:C0:3B:9F:72:27:70:DD:BD:1F:EB:01:CA:B4:F4:EC:14:90:14:CE Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft Manifest number: 0367 Signing time: Thu 03 Jul 2025 01:17:32 +0000 Manifest this update: Thu 03 Jul 2025 01:17:31 +0000 Manifest next update: Thu 10 Jul 2025 01:17:31 +0000 Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: 7PTCpWH/l4S5KmVFPIYTw/1u5sKBNwWX+bB+3n8BueA=) 2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: 3vF76S8iWJW8vHG1MAht+7FYZNQsdje1uuqCEx57cyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Validity Not Before: Jul 3 01:17:31 2025 GMT Not After : Jul 10 01:17:31 2025 GMT Subject: CN=6865da2c-fd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:b2:2f:4d:58:72:3f:f6:dd:ce:64:9e:26: ea:20:8a:32:b8:0a:54:12:94:71:1e:aa:b2:9e:37: c0:bc:33:31:4b:8b:9f:71:ea:46:ce:f7:e3:0f:bd: 2e:11:f3:cb:c0:c1:02:cd:93:74:5d:05:e0:2f:a5: 63:21:db:a8:88:a7:36:59:e0:5d:6a:b1:ff:8c:c1: 68:df:7f:2f:34:c9:b5:da:ed:3f:73:23:31:2c:c2: 2a:c8:83:6a:84:9c:20:19:65:94:9f:ae:9c:9f:bd: 3f:dd:5c:1b:70:63:95:7a:55:83:e4:d1:ac:f4:91: 67:1f:c5:95:4a:58:50:ef:ac:32:ec:0c:9e:3f:74: 31:68:4f:da:cd:10:e8:74:d4:ea:d4:59:19:08:36: 8c:61:10:09:79:16:fb:db:b6:03:94:2d:e7:82:fc: 13:64:8b:9b:de:ec:18:8a:5b:c1:ed:1c:84:54:86: b2:ea:4d:ec:f9:30:fc:22:d9:09:dd:61:1e:34:02: 5e:1f:ae:a1:9d:31:14:9c:f6:ad:e9:44:39:65:de: 9b:21:65:5d:ab:d1:c5:35:25:3b:c6:0f:71:8e:0e: a4:c3:f2:9c:85:55:e9:93:ac:bf:98:51:28:a7:5b: 1e:47:f3:5f:de:c0:4f:2f:c8:52:1f:ab:44:09:70: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C0:3B:9F:72:27:70:DD:BD:1F:EB:01:CA:B4:F4:EC:14:90:14:CE X509v3 Authority Key Identifier: keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:60:7a:34:68:ec:44:b5:8e:c8:55:c8:b4:11:01:f8:90:bd: b4:b4:53:d7:26:83:2c:8c:ac:68:1c:54:5e:d4:e7:eb:de:85: 63:5b:55:37:59:4d:19:3a:30:a4:6d:6b:17:a5:3e:41:bb:69: db:97:84:52:fd:fe:26:c2:c7:42:79:1d:24:6c:d8:f9:30:ea: 35:d2:99:7c:71:c3:e0:d5:30:e7:eb:13:9f:7f:e4:0f:48:91: 6f:ab:92:77:5b:f6:3f:10:0b:6c:ed:f0:d3:9b:d9:6d:c3:db: f6:a9:0e:09:96:2a:68:a9:02:7c:7f:4e:c5:62:e0:c1:b3:f0: 19:39:82:2a:3b:9f:f2:2e:43:34:9c:cc:5d:dd:dd:09:fd:c6: e2:36:e5:a0:69:5c:bc:ab:07:1d:14:ed:2e:fa:aa:fd:7a:8f: cd:be:5c:ee:77:90:7c:91:6a:fe:9a:cb:b7:3c:28:e5:2a:bb: a5:5b:5c:67:ce:e8:e0:9e:d9:4e:ec:b3:11:7e:4f:8f:b0:eb: c9:a1:7b:8b:31:ec:b0:99:9d:17:08:33:c5:a6:c5:51:40:f8: 28:39:1b:3d:98:bd:7c:f1:42:09:fd:1e:6c:fe:92:1b:e8:32: c8:4b:57:ce:bb:b6:21:be:5a:14:05:19:74:2e:29:6a:1d:7f: a2:3c:6e:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxQUUxMTAvBgNVBAUTKEU3NjhGQ0M4Qjk2N0Q2RjFDODgxRTBENDlBMEM0MjA4 REYwN0ZCMzcwHhcNMjUwNzAzMDExNzMxWhcNMjUwNzEwMDExNzMxWjAYMRYwFAYD VQQDEw02ODY1ZGEyYy1mZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5yyL01Ycj/23c5knibqIIoyuApUEpRxHqqynjfAvDMxS4ufcepGzvfjD70u EfPLwMECzZN0XQXgL6VjIduoiKc2WeBdarH/jMFo338vNMm12u0/cyMxLMIqyINq hJwgGWWUn66cn70/3VwbcGOVelWD5NGs9JFnH8WVSlhQ76wy7AyeP3QxaE/azRDo dNTq1FkZCDaMYRAJeRb727YDlC3ngvwTZIub3uwYilvB7RyEVIay6k3s+TD8ItkJ 3WEeNAJeH66hnTEUnPat6UQ5Zd6bIWVdq9HFNSU7xg9xjg6kw/KchVXpk6y/mFEo p1seR/Nf3sBPL8hSH6tECXBjjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnAO59y J3DdvR/rAcq09OwUkBTOMB8GA1UdIwQYMBaAFOdo/Mi5Z9bxyIHg1JoMQgjfB/s3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzFBRS81OEQ5OTJERUI2 NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2SElnZURVbWd4Q0NOOEgt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyajh5TGxuMXZISWdlRFVtZ3hDQ044SC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzFBRS81OEQ5OTJERUI2NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2 SElnZURVbWd4Q0NOOEgtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFYHo0aOxEtY7IVci0EQH4kL20tFPXJoMsjKxoHFRe1Ofr3oVjW1U3 WU0ZOjCkbWsXpT5Bu2nbl4RS/f4mwsdCeR0kbNj5MOo10pl8ccPg1TDn6xOff+QP SJFvq5J3W/Y/EAts7fDTm9ltw9v2qQ4JlipoqQJ8f07FYuDBs/AZOYIqO5/yLkM0 nMxd3d0J/cbiNuWgaVy8qwcdFO0u+qr9eo/Nvlzud5B8kWr+msu3PCjlKrulW1xn zujgntlO7LMRfk+PsOvJoXuLMeywmZ0XCDPFpsVRQPgoORs9mL188UIJ/R5s/pIb 6DLIS1fOu7YhvloUBRl0LilqHX+iPG7t -----END CERTIFICATE-----Generated at Thu Jul 3 05:54:50 2025 by rpki-client