$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft File: DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json) Hash identifier: TjfT3rRbWFuelzNNBbqK9qUkSAXgUgkuPS88PbcNfwI= Subject key identifier: CD:72:73:ED:3D:D8:AC:39:00:F6:65:EF:C5:A0:F8:5A:8B:B9:D2:B6 Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 Certificate issuer: /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft Manifest number: 4C Signing time: Thu 03 Jul 2025 07:32:29 +0000 Manifest this update: Thu 03 Jul 2025 07:32:29 +0000 Manifest next update: Thu 10 Jul 2025 07:32:29 +0000 Files and hashes: 1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: ZJLJTVcCmwZklvvaGGUSTXEGcr2VJ7T51NndabGih0w=) 2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5 Validity Not Before: Jul 3 07:32:29 2025 GMT Not After : Jul 10 07:32:29 2025 GMT Subject: CN=6866320d-a18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:46:37:0f:5e:26:b8:2a:6e:d6:17:dc:a3: 61:62:73:a8:e5:3b:80:1b:2d:fa:24:72:df:96:16: b5:2c:48:86:4b:93:03:b6:3d:7c:02:ca:b7:72:3c: 2e:cd:80:24:15:03:56:bf:04:81:72:c9:7c:66:2a: 78:b5:45:5b:6e:c3:b3:fc:e7:35:ce:96:5b:68:81: b1:16:59:eb:32:a0:39:9c:8a:b9:4b:22:3b:0f:a8: 7f:94:d6:94:f7:ee:0c:14:0f:8f:5f:72:6d:e0:d3: 40:8c:3c:b0:6d:be:28:9b:47:e7:f3:c4:6b:1f:86: b3:92:77:b9:3f:0c:6a:1a:54:ac:04:8e:89:ff:f9: 44:a5:ca:3e:41:ac:dc:44:ae:be:64:fb:0b:02:37: 95:08:5b:b5:1f:2d:67:36:8a:50:4f:47:e2:78:94: 99:31:bb:cd:cd:52:0b:ad:12:b7:d0:3b:54:06:ce: 3e:6e:e2:b2:88:6f:cf:83:20:f5:bb:dd:6e:11:ae: ec:86:c3:ff:f0:42:eb:68:5e:56:9f:a6:43:7c:9a: 73:a0:fa:99:67:f5:1b:83:21:e7:da:6d:2b:7b:9e: 79:31:4e:4f:c9:46:e4:46:18:11:cb:31:6b:e8:14: d7:95:cc:0e:58:31:09:a9:67:c2:77:46:21:4e:2f: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:73:ED:3D:D8:AC:39:00:F6:65:EF:C5:A0:F8:5A:8B:B9:D2:B6 X509v3 Authority Key Identifier: keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:23:27:d5:cd:2e:ef:4b:09:ff:af:0e:30:52:07:bc:dd:67: 82:bd:82:d2:ad:63:87:98:13:73:5d:ad:cf:4a:37:0e:07:77: 1d:d2:c7:c1:96:4d:12:99:e4:b8:3b:85:0f:2c:27:f2:87:ad: 82:25:b4:45:33:35:8d:14:82:d7:25:d9:d7:37:2f:62:4f:e9: 80:fe:a2:8d:28:28:c8:c6:06:72:12:60:96:12:d5:42:11:e4: ed:7c:ba:06:08:cd:e7:38:a1:69:9f:88:71:43:6d:7f:a0:83: fe:75:ff:e5:fb:ec:5b:09:de:55:a0:db:31:2c:79:4c:62:53: 7f:53:2f:6d:d6:96:f3:46:f4:b0:30:ad:aa:65:56:f9:b2:a5: 15:e2:ef:31:4a:84:29:58:40:2b:f7:0c:0d:3f:5b:82:79:45: 5a:35:87:88:dd:37:fe:c2:f1:70:af:59:00:e1:6c:e8:00:fb: 32:97:b8:a7:12:34:1a:89:56:37:4f:c9:a8:33:2c:5d:3e:21: f3:4e:b5:53:14:a3:a4:59:94:39:99:65:6e:af:c6:77:b8:5e: fc:b9:ba:30:85:92:c1:d2:2c:0f:9f:d2:8a:22:a0:6e:bb:ed: 47:e8:cb:2b:3f:07:bf:20:2c:c7:59:c0:1f:d1:9a:f2:2a:e5: 98:c7:e9:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDc5QTExMC8GA1UEBRMoMEQyRDZGMzMyOUM1NkJGNkU4Rjk0MUJERkRBNzQ5NkRC RTI1MzBFNTAeFw0yNTA3MDMwNzMyMjlaFw0yNTA3MTAwNzMyMjlaMBgxFjAUBgNV BAMTDTY4NjYzMjBkLWExOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDATkY3D14muCpu1hfco2Fic6jlO4AbLfokct+WFrUsSIZLkwO2PXwCyrdyPC7N gCQVA1a/BIFyyXxmKni1RVtuw7P85zXOlltogbEWWesyoDmcirlLIjsPqH+U1pT3 7gwUD49fcm3g00CMPLBtviibR+fzxGsfhrOSd7k/DGoaVKwEjon/+USlyj5BrNxE rr5k+wsCN5UIW7UfLWc2ilBPR+J4lJkxu83NUgutErfQO1QGzj5u4rKIb8+DIPW7 3W4RruyGw//wQutoXlafpkN8mnOg+pln9RuDIefabSt7nnkxTk/JRuRGGBHLMWvo FNeVzA5YMQmpZ8J3RiFOL1btAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzXJz7T3Y rDkA9mXvxaD4Wou50rYwHwYDVR0jBBgwFoAUDS1vMynFa/bo+UG9/adJbb4lMOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzI0QTQ4Mzg4RTM3 OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9iby1VRzlfYWRKYmI0bE1P VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRFMxdk15bkZhX2JvLVVHOV9hZEpiYjRsTU9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 NzlBLzI0QTQ4Mzg4RTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9i by1VRzlfYWRKYmI0bE1PVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwjJ9XNLu9LCf+vDjBSB7zdZ4K9gtKtY4eYE3Ndrc9KNw4Hdx3Sx8GW TRKZ5Lg7hQ8sJ/KHrYIltEUzNY0Ugtcl2dc3L2JP6YD+oo0oKMjGBnISYJYS1UIR 5O18ugYIzec4oWmfiHFDbX+gg/51/+X77FsJ3lWg2zEseUxiU39TL23WlvNG9LAw raplVvmypRXi7zFKhClYQCv3DA0/W4J5RVo1h4jdN/7C8XCvWQDhbOgA+zKXuKcS NBqJVjdPyagzLF0+IfNOtVMUo6RZlDmZZW6vxne4Xvy5ujCFksHSLA+f0ooioG67 7Ufoyys/B78gLMdZwB/RmvIq5ZjH6XY= -----END CERTIFICATE-----Generated at Thu Jul 3 22:58:56 2025 by rpki-client