$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json) Hash identifier: uDC7ZEZEWqSP8lWWr0pNSN4IfxbO8GvIRWY/anJIZcU= Subject key identifier: 2B:9C:AA:FE:B5:D0:A2:F8:0C:28:36:78:8D:96:43:96:4D:74:C1:DB Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Certificate serial: 1DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft Manifest number: 1DD3 Signing time: Mon 30 Jun 2025 16:16:26 +0000 Manifest this update: Mon 30 Jun 2025 16:16:26 +0000 Manifest next update: Mon 07 Jul 2025 16:16:26 +0000 Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: 53xR6OTBgiXD8Zi7dtp0umuhAuhkAGzx4DgMPSz+3DI=) 2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7648 (0x1de0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Validity Not Before: Jun 30 16:16:26 2025 GMT Not After : Jul 7 16:16:26 2025 GMT Subject: CN=6862b85a-3744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ba:1c:08:bc:04:52:f4:36:eb:11:19:3a:17: 07:73:ca:41:a3:ee:4c:8b:0d:d9:ae:79:d7:5a:18: 4c:89:bb:49:82:79:ac:9a:6d:43:49:37:eb:5a:23: 91:8b:f3:4d:0e:1c:39:f6:48:5a:93:98:d0:91:6a: 02:85:95:4c:0a:5d:37:6b:a9:d8:ff:ed:25:15:38: 27:d4:a0:fa:b8:c9:25:13:bf:fe:28:44:aa:1e:56: b2:af:16:77:bb:a2:80:f7:e8:4c:56:6e:98:25:9c: 6c:1c:d8:40:b1:b4:db:b9:fd:d5:68:aa:90:1c:9b: cc:d5:69:49:16:b9:15:0f:22:1e:a0:af:fa:6d:9d: 2a:50:99:09:09:e9:06:9d:f4:fa:6b:1f:e5:a9:cb: c3:10:f3:fe:1f:22:9c:1e:82:4c:d9:6f:fe:1b:2e: bd:b2:8f:7f:60:67:e8:b3:f8:ca:3a:a4:d1:31:30: 79:d0:28:45:59:fb:4b:fc:5b:0e:5e:18:dc:5a:c6: b8:d8:68:8f:89:55:9c:4e:2a:0a:a6:ba:21:2a:f7: a8:2a:15:1b:03:b6:59:6f:11:55:bf:18:48:b8:49: 61:45:b4:e7:39:ed:c1:f4:8b:57:dd:c8:3a:06:50: a8:41:17:8e:86:ee:bb:68:02:c5:9d:b0:a5:5f:50: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:AA:FE:B5:D0:A2:F8:0C:28:36:78:8D:96:43:96:4D:74:C1:DB X509v3 Authority Key Identifier: keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c5:a8:cd:46:1f:ba:60:86:3c:3c:71:f7:7b:58:09:b4:22: 21:c7:ab:65:15:d6:83:95:f5:13:44:fb:b3:83:dc:05:77:ff: 4a:c8:73:bc:69:d9:3f:7b:26:1e:d4:6e:b5:55:0c:f0:7c:d3: c6:d3:74:f1:bd:da:f0:c5:50:dd:0a:34:61:8f:d9:2c:27:13: 7e:f9:01:c8:44:73:1d:20:9d:3d:10:e4:81:22:e8:a4:59:32: f6:b9:42:4f:3f:80:30:2c:94:60:eb:f5:fc:56:f6:94:25:4f: 3a:a0:f7:04:67:18:36:bb:23:21:c3:6f:f5:de:72:68:17:28: 81:9a:7a:2d:29:bf:50:56:be:8a:c6:01:9b:81:c0:f5:5f:ba: 28:c8:52:3c:a2:2f:87:70:d6:4e:ba:4f:0f:68:6f:1b:02:d5: 56:88:7b:39:d6:b8:fb:c4:f8:6d:c3:e1:b2:2c:e9:ac:85:3b: 19:c2:6e:db:91:20:fe:62:3c:d4:e1:53:07:73:06:0c:85:fa: 27:ec:a3:07:54:32:a8:55:1c:88:43:28:38:17:17:f5:03:c5: a5:a3:34:7d:43:65:aa:f4:e0:60:cc:60:31:7b:01:bb:64:30: 62:f2:26:2a:95:fb:b3:e5:3f:ad:d5:59:e3:6d:04:99:d9:08: 03:ac:5a:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4MEMxMTAvBgNVBAUTKDlBNjY1MjAxRDYxNjBGMzFENzZCOUQyMTdBMURGRkVB RDEyQ0JBODIwHhcNMjUwNjMwMTYxNjI2WhcNMjUwNzA3MTYxNjI2WjAYMRYwFAYD VQQDEw02ODYyYjg1YS0zNzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5bocCLwEUvQ26xEZOhcHc8pBo+5Miw3ZrnnXWhhMibtJgnmsmm1DSTfrWiOR i/NNDhw59khak5jQkWoChZVMCl03a6nY/+0lFTgn1KD6uMklE7/+KESqHlayrxZ3 u6KA9+hMVm6YJZxsHNhAsbTbuf3VaKqQHJvM1WlJFrkVDyIeoK/6bZ0qUJkJCekG nfT6ax/lqcvDEPP+HyKcHoJM2W/+Gy69so9/YGfos/jKOqTRMTB50ChFWftL/FsO XhjcWsa42GiPiVWcTioKprohKveoKhUbA7ZZbxFVvxhIuElhRbTnOe3B9ItX3cg6 BlCoQReOhu67aALFnbClX1DrTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCucqv61 0KL4DCg2eI2WQ5ZNdMHbMB8GA1UdIwQYMBaAFJpmUgHWFg8x12udIXod/+rRLLqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTgwQy85QTdDRDNFQTk2 QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6SFhhNTBoZWgzXzZ0RXN1 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tWlNBZFlXRHpIWGE1MGhlaDNfNnRFc3VvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTgwQy85QTdDRDNFQTk2QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6 SFhhNTBoZWgzXzZ0RXN1b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpxajNRh+6YIY8PHH3e1gJtCIhx6tlFdaDlfUTRPuzg9wFd/9KyHO8 adk/eyYe1G61VQzwfNPG03TxvdrwxVDdCjRhj9ksJxN++QHIRHMdIJ09EOSBIuik WTL2uUJPP4AwLJRg6/X8VvaUJU86oPcEZxg2uyMhw2/13nJoFyiBmnotKb9QVr6K xgGbgcD1X7ooyFI8oi+HcNZOuk8PaG8bAtVWiHs51rj7xPhtw+GyLOmshTsZwm7b kSD+YjzU4VMHcwYMhfon7KMHVDKoVRyIQyg4Fxf1A8WlozR9Q2Wq9OBgzGAxewG7 ZDBi8iYqlfuz5T+t1VnjbQSZ2QgDrFq7 -----END CERTIFICATE-----Generated at Tue Jul 1 03:16:55 2025 by rpki-client