$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft File: 76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json) Hash identifier: aECbIDQ/f0k4dtZl+NfL/AVbFzuVm8I/D1aZeEUytS0= Subject key identifier: 00:81:1F:29:67:5F:68:37:FB:15:BC:39:F5:94:21:FE:8D:8D:05:46 Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 Certificate issuer: /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft Manifest number: 0878 Signing time: Wed 02 Jul 2025 20:55:21 +0000 Manifest this update: Wed 02 Jul 2025 20:55:21 +0000 Manifest next update: Wed 09 Jul 2025 20:55:21 +0000 Files and hashes: 1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: H8rC5uca6BtGVoLj7go9Eox7e28Eit20j/sTrZlueUM=) 2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: xKyisYvUwmSw7aw37XhK5iMVyY2+rghDJ4s9FMBG+wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54 Validity Not Before: Jul 2 20:55:21 2025 GMT Not After : Jul 9 20:55:21 2025 GMT Subject: CN=68659cb9-615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:48:89:be:1c:1c:4d:70:16:03:10:e6:55: 48:dd:8f:14:d0:c8:62:ce:1e:87:bd:08:d1:9c:93: fe:96:71:07:c1:96:be:4d:16:eb:d0:80:80:07:4a: ec:94:64:f3:ab:f3:bb:0e:c3:ab:62:21:ca:13:84: 1a:b7:99:74:c4:bc:78:ef:b1:40:45:3e:80:35:f2: 8e:cf:c1:12:3b:63:95:fe:7d:25:5c:62:3c:c4:bd: 4a:06:fc:74:81:45:b2:d4:96:03:05:bb:a5:9a:7e: 81:58:b5:26:78:16:99:d0:d6:66:b8:fc:80:1a:63: d0:a7:5a:53:75:0e:1e:0c:52:0f:60:a7:4c:cb:7a: d9:d9:fb:da:0d:71:38:ef:f8:d0:97:49:97:1e:cc: 33:50:89:b8:cb:47:42:49:b3:0a:04:f0:29:57:97: d7:73:38:5a:d4:0a:3f:3a:4d:d7:c8:0b:2e:2f:41: 1b:15:78:52:0b:0f:fb:b4:04:cd:c5:e6:70:56:13: 7e:1e:7f:bc:38:6b:52:6b:f3:29:59:17:b1:e2:e1: 85:0d:e1:75:89:3c:3c:57:fe:45:66:36:23:30:43: 82:59:0c:e5:c5:33:94:e0:76:30:8f:1e:7a:66:f4: 73:b9:87:1f:c4:68:36:c1:20:5f:30:f8:c4:6a:06: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:1F:29:67:5F:68:37:FB:15:BC:39:F5:94:21:FE:8D:8D:05:46 X509v3 Authority Key Identifier: keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:2f:1c:ad:89:36:7f:46:fd:f7:e9:b9:dd:89:0c:05:7e:12: 0a:cc:87:73:70:b5:c7:8a:ed:8a:a8:32:20:ba:fe:f8:ad:c0: f9:63:76:91:b3:4f:0b:bc:ab:00:29:13:92:97:58:17:42:d0: 5b:d1:26:5f:33:d3:55:99:a2:91:ad:71:ef:4f:b8:09:57:cc: 00:32:9f:57:ca:77:88:e4:d9:f7:1b:8c:c2:ae:c6:68:2a:cd: dc:fb:9d:77:fd:55:d8:23:24:e8:f9:c8:ba:40:c1:79:bc:5e: 6b:63:f6:06:9c:17:1c:a6:80:dd:c7:fb:a3:17:54:99:83:a7: fd:58:f8:c2:95:de:8b:8f:63:ed:0d:9c:e6:05:54:5c:6d:08: 34:dc:4f:90:53:7e:1a:af:ec:e7:ca:27:33:4a:73:96:25:71: fd:df:15:88:ff:32:f6:31:91:ff:ae:75:80:3b:76:15:77:4c: ec:cc:79:f5:8a:5b:62:44:e3:48:6c:1b:ff:11:34:aa:15:87: ae:e8:5b:b0:3d:57:77:f6:3b:cc:05:3b:fd:70:70:7c:0b:bb: 62:b3:d8:17:93:b8:7d:f8:55:3e:bb:3c:29:fd:2c:8e:e0:8b: e1:3b:9a:21:2a:1c:27:9c:2d:5a:66:81:81:c2:d1:54:4d:df: bd:5c:03:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE5MjExMTAvBgNVBAUTKEVGQTZDMUU2RUNGQUQxRTg4QTlGNDREMjgwMDJFRUQ2 MzlCMkJBNTQwHhcNMjUwNzAyMjA1NTIxWhcNMjUwNzA5MjA1NTIxWjAYMRYwFAYD VQQDEw02ODY1OWNiOS02MTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NNIib4cHE1wFgMQ5lVI3Y8U0Mhizh6HvQjRnJP+lnEHwZa+TRbr0ICAB0rs lGTzq/O7DsOrYiHKE4Qat5l0xLx477FART6ANfKOz8ESO2OV/n0lXGI8xL1KBvx0 gUWy1JYDBbulmn6BWLUmeBaZ0NZmuPyAGmPQp1pTdQ4eDFIPYKdMy3rZ2fvaDXE4 7/jQl0mXHswzUIm4y0dCSbMKBPApV5fXczha1Ao/Ok3XyAsuL0EbFXhSCw/7tATN xeZwVhN+Hn+8OGtSa/MpWRex4uGFDeF1iTw8V/5FZjYjMEOCWQzlxTOU4HYwjx56 ZvRzuYcfxGg2wSBfMPjEagbhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACBHyln X2g3+xW8OfWUIf6NjQVGMB8GA1UdIwQYMBaAFO+mwebs+tHoip9E0oAC7tY5srpU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTkyMS9FMzhEMTgyRUM1 QjQxMUVBOTkyNkM4MURDNEY5QUUwMi83NmJCNXV6NjBlaUtuMFRTZ0FMdTFqbXl1 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YkI1dXo2MGVpS24wVFNnQUx1MWpteXVsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTkyMS9FMzhEMTgyRUM1QjQxMUVBOTkyNkM4MURDNEY5QUUwMi83NmJCNXV6NjBl aUtuMFRTZ0FMdTFqbXl1bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDELxytiTZ/Rv336bndiQwFfhIKzIdzcLXHiu2KqDIguv74rcD5Y3aR s08LvKsAKROSl1gXQtBb0SZfM9NVmaKRrXHvT7gJV8wAMp9XyneI5Nn3G4zCrsZo Ks3c+513/VXYIyTo+ci6QMF5vF5rY/YGnBccpoDdx/ujF1SZg6f9WPjCld6Lj2Pt DZzmBVRcbQg03E+QU34ar+znyiczSnOWJXH93xWI/zL2MZH/rnWAO3YVd0zszHn1 iltiRONIbBv/ETSqFYeu6FuwPVd39jvMBTv9cHB8C7tis9gXk7h9+FU+uzwp/SyO 4IvhO5ohKhwnnC1aZoGBwtFUTd+9XAPV -----END CERTIFICATE-----Generated at Thu Jul 3 05:07:45 2025 by rpki-client