$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: 3IIO78fF7yhcdvarX9okvinpEOWGz+x3Hh9S7Vy2mtI= Subject key identifier: 66:EC:86:E4:4E:28:BF:24:76:1A:68:E7:74:93:44:75:CE:20:66:F5 Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 0671 Signing time: Wed 02 Jul 2025 22:41:45 +0000 Manifest this update: Wed 02 Jul 2025 22:41:45 +0000 Manifest next update: Wed 09 Jul 2025 22:41:45 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: d6QO+DQRYVSjTBMOgTjQwu8mhfAGHkb8d3Hue6ctlxs=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: Jul 2 22:41:45 2025 GMT Not After : Jul 9 22:41:45 2025 GMT Subject: CN=6865b5a9-ea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:96:57:56:86:0e:0f:62:41:bf:68:a0:ff: 9a:31:96:58:65:20:da:da:f2:cc:0a:7a:30:33:2b: 3a:9b:63:e8:a3:7c:4b:f7:b5:16:93:19:4f:0c:03: 95:08:90:98:4b:dd:91:78:75:85:59:7c:7d:d2:b3: ff:60:28:bd:17:1f:0b:35:ee:1a:66:dc:f1:bd:ef: ca:2d:e8:9d:df:4b:69:1b:27:78:83:ab:fe:90:d7: 8e:4f:6e:6d:70:05:c4:59:88:f6:72:b8:fa:e5:a2: cd:a7:0f:9c:dd:2e:61:12:3b:6f:fb:15:5c:9e:0c: 55:f5:4b:ac:76:77:f5:50:4b:97:54:58:8d:24:3f: aa:6b:91:ad:8f:2d:35:4a:f1:dc:d2:bd:57:2e:34: a9:9b:08:90:7d:29:fa:40:34:18:6f:99:e9:9d:b3: 54:cf:e1:57:3d:12:1e:72:4c:92:0c:97:f1:00:ea: 41:d5:c2:ce:9b:7c:bf:ce:2c:5c:00:90:62:72:78: 74:35:dc:28:18:66:84:4d:65:b1:cf:64:79:6d:f6: 33:94:1e:9d:21:66:69:9b:3f:bc:88:05:36:74:32: f6:3d:84:1f:a4:5c:6a:eb:d6:6d:87:1e:fe:c0:eb: da:2f:ce:4d:7a:60:c6:10:6b:5e:b6:b9:11:34:96: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EC:86:E4:4E:28:BF:24:76:1A:68:E7:74:93:44:75:CE:20:66:F5 X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9d:2a:4f:a9:3e:a6:de:6b:92:a6:a2:c9:2e:df:aa:58:e4: bc:7d:b5:c2:d0:54:7a:40:9c:c4:79:f9:53:55:f9:9c:98:68: 8e:d1:b0:00:00:cc:11:68:bd:c6:e0:a1:d4:f9:bb:f7:a5:84: da:92:83:e2:3b:e9:e5:a4:37:cb:8e:2c:27:d2:0b:6e:c5:75: 51:65:28:f7:31:1e:37:c8:e5:bc:25:6a:c1:b5:09:ad:35:5c: c3:58:06:91:10:61:15:f5:c6:81:3d:0b:9d:32:cc:be:a6:6d: 8f:ff:b6:1e:d5:23:4c:22:68:39:d9:11:5e:3f:bd:ef:0e:74: 76:d4:d6:d6:48:69:a2:eb:bb:2f:2a:82:94:69:15:ba:72:25: f0:59:31:0a:2c:1e:dc:42:50:ad:01:a7:05:fb:1b:99:38:9f: ed:5a:d9:27:79:3e:2a:13:36:70:65:8d:33:54:c6:d1:b1:dd: a3:fd:9a:59:31:02:01:0c:e6:38:62:28:cb:47:aa:be:78:a3: 58:e3:9c:48:e8:fe:a8:a6:e8:f7:d0:8a:eb:e1:6f:d8:df:63: 68:f2:a0:0f:d4:39:12:b7:57:96:7d:c7:f0:c0:56:c5:0d:17: 1c:eb:cf:6c:76:15:86:89:85:f8:1f:47:28:c0:12:9c:73:2d: e8:29:48:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjUwNzAyMjI0MTQ1WhcNMjUwNzA5MjI0MTQ1WjAYMRYwFAYD VQQDEw02ODY1YjVhOS1lYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HOWV1aGDg9iQb9ooP+aMZZYZSDa2vLMCnowMys6m2Poo3xL97UWkxlPDAOV CJCYS92ReHWFWXx90rP/YCi9Fx8LNe4aZtzxve/KLeid30tpGyd4g6v+kNeOT25t cAXEWYj2crj65aLNpw+c3S5hEjtv+xVcngxV9Uusdnf1UEuXVFiNJD+qa5Gtjy01 SvHc0r1XLjSpmwiQfSn6QDQYb5npnbNUz+FXPRIeckySDJfxAOpB1cLOm3y/zixc AJBicnh0NdwoGGaETWWxz2R5bfYzlB6dIWZpmz+8iAU2dDL2PYQfpFxq69Zthx7+ wOvaL85NemDGEGtetrkRNJbcbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbshuRO KL8kdhpo53STRHXOIGb1MB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnSpPqT6m3muSpqLJLt+qWOS8fbXC0FR6QJzEeflTVfmcmGiO0bAA AMwRaL3G4KHU+bv3pYTakoPiO+nlpDfLjiwn0gtuxXVRZSj3MR43yOW8JWrBtQmt NVzDWAaREGEV9caBPQudMsy+pm2P/7Ye1SNMImg52RFeP73vDnR21NbWSGmi67sv KoKUaRW6ciXwWTEKLB7cQlCtAacF+xuZOJ/tWtkneT4qEzZwZY0zVMbRsd2j/ZpZ MQIBDOY4YijLR6q+eKNY45xI6P6opuj30Irr4W/Y32No8qAP1DkSt1eWfcfwwFbF DRcc689sdhWGiYX4H0cowBKccy3oKUgB -----END CERTIFICATE-----Generated at Fri Jul 4 01:29:10 2025 by rpki-client