$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: Q515hRtBpv6eogPU06MlkWvXMX0QpxO9VE2IuAwuCPI= Subject key identifier: 3D:81:B8:EE:2B:F4:42:52:94:7D:68:DE:0E:28:B1:DC:B0:5E:FB:75 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 0820 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 081A Signing time: Mon 30 Jun 2025 21:02:14 +0000 Manifest this update: Mon 30 Jun 2025 21:02:13 +0000 Manifest next update: Mon 07 Jul 2025 21:02:13 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: +XUCDZrkk7eUvSvQcLTaJGE3XgGCKhV2xx5WBeYUGF4=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: fmTA3xXjU3MtioARHLhk0XmrYZWzaoGTX30tUFAbkPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Jun 30 21:02:13 2025 GMT Not After : Jul 7 21:02:13 2025 GMT Subject: CN=6862fb56-82e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:40:fb:76:c8:a1:fc:68:c0:9e:cf:04:80: cf:25:7b:50:2e:1e:e3:ca:60:d4:b5:c2:7b:c9:ae: ad:70:1f:ac:23:88:66:64:50:d8:02:66:bd:0c:e4: fb:6b:f1:20:b6:ec:15:0c:ef:2e:2b:c6:0e:e0:21: ec:bb:60:de:32:9a:2e:70:0f:c3:7c:fe:b9:95:0d: 72:b4:85:f4:10:a8:6c:ba:00:2a:96:03:a9:f1:51: 26:08:d9:1e:4d:18:fc:dc:b5:e4:8a:6f:46:13:f8: 31:48:98:de:83:88:56:09:2f:11:ef:0b:f9:94:10: 3f:5e:5e:3a:b0:16:d8:18:f3:92:6c:6e:69:d0:ab: dc:f1:b1:02:8c:a7:43:43:20:fa:bd:de:3c:4f:03: 91:48:c5:92:63:26:2e:37:7d:74:b2:8d:95:e3:86: 39:46:61:28:e7:81:65:59:bd:20:b8:e2:70:61:7f: 8f:0a:cb:4b:8c:ec:ff:ac:09:5e:f1:cf:32:55:c8: f8:d5:aa:33:74:3c:d5:d2:63:c9:42:83:ff:98:bb: 20:ed:2e:04:e3:e1:9e:2e:78:0a:9a:ff:98:3b:9f: c0:50:be:91:45:39:cd:a4:f1:1c:96:30:f3:37:87: 61:13:05:bd:aa:ab:e7:ab:37:4c:73:15:17:d1:58: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:81:B8:EE:2B:F4:42:52:94:7D:68:DE:0E:28:B1:DC:B0:5E:FB:75 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b2:34:aa:f8:24:6a:02:34:3e:39:3b:74:08:03:3c:71:59: b0:51:9d:dd:05:0f:2c:a8:66:38:2e:d5:86:11:bd:62:a3:65: 8b:c5:9b:74:34:be:79:e2:ff:d5:23:02:8c:cb:fa:fd:cb:cf: c9:ad:4a:69:19:7b:47:6a:a1:d9:22:41:b0:d4:03:93:7a:87: b9:8c:42:41:3d:7f:31:42:5e:46:c7:72:fa:86:8f:61:fe:4d: 78:19:c1:fb:8a:be:ba:d5:99:cf:5e:7f:d1:40:85:69:ab:ce: 60:04:3e:84:95:60:81:0e:76:4e:0d:4f:b1:d5:d7:50:c0:df: 62:e2:b3:bb:39:8c:07:87:73:ca:7c:b5:e8:55:69:23:0f:07: a0:fe:aa:df:1b:da:57:a9:dc:86:8f:1a:28:1d:f5:da:4d:e1: 90:ca:30:e0:3e:03:15:f3:84:50:5c:8c:a6:03:01:50:08:3c: 6a:d6:98:c2:5d:0a:e3:f7:d9:de:60:bf:cd:17:35:98:ad:6a: f7:da:5d:4f:f9:27:c4:c8:84:34:30:dc:20:e4:b3:96:88:c0: 33:cc:10:7a:44:cc:ef:6d:46:1a:b4:65:78:09:58:ef:a7:31: 13:83:8d:a5:1e:31:45:25:a6:2d:5a:08:b5:6c:bc:68:62:63: ee:9d:2d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjUwNjMwMjEwMjEzWhcNMjUwNzA3MjEwMjEzWjAYMRYwFAYD VQQDEw02ODYyZmI1Ni04MmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/JA+3bIofxowJ7PBIDPJXtQLh7jymDUtcJ7ya6tcB+sI4hmZFDYAma9DOT7 a/EgtuwVDO8uK8YO4CHsu2DeMpoucA/DfP65lQ1ytIX0EKhsugAqlgOp8VEmCNke TRj83LXkim9GE/gxSJjeg4hWCS8R7wv5lBA/Xl46sBbYGPOSbG5p0Kvc8bECjKdD QyD6vd48TwORSMWSYyYuN310so2V44Y5RmEo54FlWb0guOJwYX+PCstLjOz/rAle 8c8yVcj41aozdDzV0mPJQoP/mLsg7S4E4+GeLngKmv+YO5/AUL6RRTnNpPEcljDz N4dhEwW9qqvnqzdMcxUX0VhCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2BuO4r 9EJSlH1o3g4osdywXvt1MB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfsjSq+CRqAjQ+OTt0CAM8cVmwUZ3dBQ8sqGY4LtWGEb1io2WLxZt0 NL554v/VIwKMy/r9y8/JrUppGXtHaqHZIkGw1AOTeoe5jEJBPX8xQl5Gx3L6ho9h /k14GcH7ir661ZnPXn/RQIVpq85gBD6ElWCBDnZODU+x1ddQwN9i4rO7OYwHh3PK fLXoVWkjDweg/qrfG9pXqdyGjxooHfXaTeGQyjDgPgMV84RQXIymAwFQCDxq1pjC XQrj99neYL/NFzWYrWr32l1P+SfEyIQ0MNwg5LOWiMAzzBB6RMzvbUYatGV4CVjv pzETg42lHjFFJaYtWgi1bLxoYmPunS2t -----END CERTIFICATE-----Generated at Wed Jul 2 05:21:21 2025 by rpki-client