$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: gaj1/0w+052XMdECCnmHBNBlbcwTeiHQ5x+7O0utcTI= Subject key identifier: 12:3B:74:31:BD:9B:17:4F:24:FB:E4:6F:3C:D2:3D:87:7F:04:C4:C2 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0282 Signing time: Thu 03 Jul 2025 02:04:08 +0000 Manifest this update: Thu 03 Jul 2025 02:04:07 +0000 Manifest next update: Thu 10 Jul 2025 02:04:07 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: dRwzPKrNoj9tSJuubuGM2c3H64Ph2Ws6Pl5EKgbWba4=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Jul 3 02:04:07 2025 GMT Not After : Jul 10 02:04:07 2025 GMT Subject: CN=6865e518-a2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:06:1d:e0:d8:24:97:4a:61:8e:31:bf:ed: 79:62:93:a5:9e:8a:fa:5c:bf:f5:c5:6a:9e:d8:70: 1f:5d:0d:55:a0:90:96:71:dc:1f:46:c4:90:5a:58: 61:18:60:2a:3f:d8:b8:d6:f3:a4:b5:c0:50:65:8e: 5b:02:51:42:55:a4:2b:73:b5:f3:c3:4f:84:2d:e3: 1d:b2:57:5d:2f:a3:f0:b4:19:34:5e:5e:f1:8f:f1: 24:c3:6d:81:9c:8e:a6:46:38:ca:c6:17:1c:fd:e7: c4:f9:a5:c3:c4:46:63:32:01:e1:55:22:07:c7:bc: 53:a2:23:59:f3:c9:61:bf:73:27:9b:7a:a5:6e:92: 1f:19:de:e1:d7:69:c9:49:b8:0f:80:11:a5:93:09: 4c:8f:8a:da:c4:11:13:97:71:f0:3b:7e:40:6c:25: e2:fb:d7:2b:fb:4e:42:60:06:8a:fa:ca:01:c9:0f: c3:52:4a:b5:0f:f4:cd:bb:14:00:b4:7d:e2:25:f4: 61:2b:7e:fb:99:22:a9:2f:97:6b:49:26:97:ec:0a: 68:aa:0d:a7:89:c2:eb:66:32:b6:3d:32:75:d0:80: c1:c6:f2:cd:8c:d1:44:bc:5d:67:8d:c3:85:09:89: ac:e9:1e:12:a5:85:6c:ad:b4:06:e9:e4:81:0c:f3: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:74:31:BD:9B:17:4F:24:FB:E4:6F:3C:D2:3D:87:7F:04:C4:C2 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0c:9a:9b:f2:6c:28:81:80:7b:9d:a0:75:33:29:c7:e3:51: 2f:e6:10:42:56:4a:c1:39:fc:90:5b:24:74:d6:99:73:4f:56: 1e:2f:d2:91:59:0b:f7:0f:1f:89:46:53:80:d4:40:ac:05:c2: 2b:d2:0d:49:dd:b8:0f:4f:d8:63:e3:fc:86:4f:d0:25:da:38: 73:5c:ac:45:22:c2:7a:0f:e6:39:e2:de:96:80:45:39:75:db: bf:ce:7d:4f:48:5d:d8:60:c4:33:fe:a5:c2:e3:9c:08:be:35: 37:b7:80:dc:81:e1:64:b4:d9:8f:1a:c7:52:8f:0d:9a:e0:ab: 47:32:64:3a:44:b2:ce:71:45:b8:31:de:6b:d1:40:86:de:50: b3:ba:b8:9d:f9:dd:9b:18:7a:ce:0b:42:6e:09:40:e4:5e:a7: f5:8c:1d:f7:fd:1e:94:81:8b:1e:25:a5:f7:b3:fc:45:2b:46: 1c:64:64:3d:a1:57:d4:50:4a:7b:b8:32:76:71:62:c4:5e:49: 17:17:64:99:b7:7d:86:38:7d:cf:96:c9:f6:a5:d7:5a:dc:77: 7f:cd:1d:ce:97:fa:a9:4f:ad:7a:e6:2b:d2:1d:f9:b9:e8:67: 2a:30:ee:1e:63:96:a7:13:87:8f:9b:27:df:f0:16:dd:77:07: ef:da:41:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNzAzMDIwNDA3WhcNMjUwNzEwMDIwNDA3WjAYMRYwFAYD VQQDEw02ODY1ZTUxOC1hMmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoogGHeDYJJdKYY4xv+15YpOlnor6XL/1xWqe2HAfXQ1VoJCWcdwfRsSQWlhh GGAqP9i41vOktcBQZY5bAlFCVaQrc7Xzw0+ELeMdslddL6PwtBk0Xl7xj/Ekw22B nI6mRjjKxhcc/efE+aXDxEZjMgHhVSIHx7xToiNZ88lhv3Mnm3qlbpIfGd7h12nJ SbgPgBGlkwlMj4raxBETl3HwO35AbCXi+9cr+05CYAaK+soByQ/DUkq1D/TNuxQA tH3iJfRhK377mSKpL5drSSaX7Apoqg2nicLrZjK2PTJ10IDBxvLNjNFEvF1njcOF CYms6R4SpYVsrbQG6eSBDPNwIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI7dDG9 mxdPJPvkbzzSPYd/BMTCMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeDJqb8mwogYB7naB1MynH41Ev5hBCVkrBOfyQWyR01plzT1YeL9KR WQv3Dx+JRlOA1ECsBcIr0g1J3bgPT9hj4/yGT9Al2jhzXKxFIsJ6D+Y54t6WgEU5 ddu/zn1PSF3YYMQz/qXC45wIvjU3t4DcgeFktNmPGsdSjw2a4KtHMmQ6RLLOcUW4 Md5r0UCG3lCzurid+d2bGHrOC0JuCUDkXqf1jB33/R6UgYseJaX3s/xFK0YcZGQ9 oVfUUEp7uDJ2cWLEXkkXF2SZt32GOH3Plsn2pdda3Hd/zR3Ol/qpT6165ivSHfm5 6GcqMO4eY5anE4ePmyff8Bbddwfv2kHc -----END CERTIFICATE-----Generated at Fri Jul 4 10:40:33 2025 by rpki-client