$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json) Hash identifier: IYw+Ki+7Cfd6AmdE8GqWSt1JvC6Ayn1aqlBCE+usRas= Subject key identifier: 58:08:1E:19:42:11:BD:2B:04:8E:4C:98:36:4C:43:30:62:55:15:0F Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Certificate serial: 05CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft Manifest number: 05BA Signing time: Sat 28 Jun 2025 22:45:01 +0000 Manifest this update: Sat 28 Jun 2025 22:45:01 +0000 Manifest next update: Sat 05 Jul 2025 22:45:01 +0000 Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: pCR/ttGmiI/M8iwn/LBv3NZXwRV4NLhUUF/QJ3grRTc=) 2: 6EEB53FA4BD411EFA40C1971C4F9AE02.roa (hash: jDocMk4D96qeUeR36zLdz9qrn4KaCTEXq3aa/Uuydx8=) 3: 997B94904BD411EFA1F89471C4F9AE02.roa (hash: q0ds7FsW7eLXHWKl5ftWkhv4vOTcZ7TI9DQVIRfT71Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1483 (0x5cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787 Validity Not Before: Jun 28 22:45:01 2025 GMT Not After : Jul 5 22:45:01 2025 GMT Subject: CN=6860706d-e5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:8d:ff:59:74:55:ce:fe:2e:26:b2:b4:8a: dc:a2:9e:a5:79:d0:24:ed:78:dc:cd:d6:b4:a7:2f: fc:e7:96:6d:5c:85:1d:16:f7:38:be:04:dd:8b:b5: 57:d9:a8:77:78:e6:4f:7f:f7:a4:c6:bf:09:f4:5d: 8c:f9:73:f3:6e:95:e2:70:16:92:b6:4e:e2:0b:56: b0:5a:bf:fc:ee:72:66:1f:f4:74:4b:25:15:6c:a3: b0:ef:b5:e4:69:ad:9e:cc:4e:66:48:f2:5f:30:4a: 7f:cd:a0:28:e4:7b:11:69:07:08:5d:6c:cf:4c:f0: f1:07:0e:e4:84:1f:44:49:44:36:0c:96:61:ea:ed: d7:73:06:d7:0e:9a:16:ec:c9:8f:61:8b:a1:d2:15: 8d:c8:e5:39:ee:71:96:2b:65:94:fb:f1:ce:e2:81: 50:87:c7:6f:29:c6:b2:bf:15:c1:91:04:d3:46:31: 06:20:58:e0:db:8d:64:b3:2f:24:e8:a4:81:55:76: 77:ea:e6:ee:2a:c5:e2:78:8c:40:b5:15:a6:fb:21: 87:f2:59:f4:00:ca:9f:c0:0f:de:b0:4b:80:73:96: 77:74:af:42:36:3f:8d:04:e9:3e:43:6c:a5:69:a3: ac:0b:65:ba:cd:db:60:56:a1:b9:52:4e:1a:dc:89: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:1E:19:42:11:BD:2B:04:8E:4C:98:36:4C:43:30:62:55:15:0F X509v3 Authority Key Identifier: keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ef:4c:b1:19:7a:a5:b1:2e:ce:05:ee:5b:81:b8:d2:ef:1d: 6e:7a:6f:c0:4e:d2:04:7b:bb:08:0e:47:df:46:22:7a:f1:4d: 38:39:08:f7:a3:ab:3d:3d:b3:3b:c6:e6:c0:0c:fd:21:4f:65: 6f:70:e9:a1:01:fd:8d:39:4e:c7:d2:60:ec:f7:d5:8b:99:a9: f2:f1:05:ed:7d:57:b3:65:96:33:9b:6c:bc:93:5d:c5:10:bc: b1:8c:e7:eb:f6:a7:eb:cd:fa:91:21:af:81:b7:b8:92:c1:6b: c5:f1:01:c5:57:4e:59:e4:b6:9e:22:97:04:f7:77:e3:af:b4: 1f:2b:cf:45:ea:90:e2:9d:58:54:a9:4c:70:2b:25:78:d8:15: d6:df:83:e9:b0:8a:9b:f3:13:f0:fa:93:ee:c9:cb:26:73:fc: 8e:99:7a:77:08:b8:47:d4:60:52:a8:06:9d:33:21:0c:0e:3e: d2:6f:ac:04:4c:14:99:3d:9c:ac:bd:7e:9e:ae:a7:a2:e8:10: 72:00:62:77:c6:00:a9:3c:ad:09:b2:0d:ef:e5:6a:bc:41:09: 28:db:9d:2f:ad:c6:bb:26:9c:bd:4b:64:dd:2a:65:55:57:3c: 7c:b2:9b:49:82:13:82:49:d2:70:50:d0:a8:54:a9:4e:0a:8c: f2:f2:7d:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE MTFERTE3ODcwHhcNMjUwNjI4MjI0NTAxWhcNMjUwNzA1MjI0NTAxWjAYMRYwFAYD VQQDEw02ODYwNzA2ZC1lNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFCN/1l0Vc7+LiaytIrcop6ledAk7Xjczda0py/855ZtXIUdFvc4vgTdi7VX 2ah3eOZPf/ekxr8J9F2M+XPzbpXicBaStk7iC1awWr/87nJmH/R0SyUVbKOw77Xk aa2ezE5mSPJfMEp/zaAo5HsRaQcIXWzPTPDxBw7khB9ESUQ2DJZh6u3XcwbXDpoW 7MmPYYuh0hWNyOU57nGWK2WU+/HO4oFQh8dvKcayvxXBkQTTRjEGIFjg241ksy8k 6KSBVXZ36ubuKsXieIxAtRWm+yGH8ln0AMqfwA/esEuAc5Z3dK9CNj+NBOk+Q2yl aaOsC2W6zdtgVqG5Uk4a3IlrGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgIHhlC Eb0rBI5MmDZMQzBiVRUPMB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGOS80RUMyQ0Q3NENGNEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRY OGVLZHdSbFJXRjNSSGVGNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH70yxGXqlsS7OBe5bgbjS7x1uem/ATtIEe7sIDkffRiJ68U04OQj3 o6s9PbM7xubADP0hT2VvcOmhAf2NOU7H0mDs99WLmany8QXtfVezZZYzm2y8k13F ELyxjOfr9qfrzfqRIa+Bt7iSwWvF8QHFV05Z5LaeIpcE93fjr7QfK89F6pDinVhU qUxwKyV42BXW34PpsIqb8xPw+pPuycsmc/yOmXp3CLhH1GBSqAadMyEMDj7Sb6wE TBSZPZysvX6erqei6BByAGJ3xgCpPK0Jsg3v5Wq8QQko250vrca7Jpy9S2TdKmVV Vzx8sptJghOCSdJwUNCoVKlOCozy8n0+ -----END CERTIFICATE-----Generated at Sun Jun 29 17:47:16 2025 by rpki-client