$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft File: RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json) Hash identifier: 0i33YRY0MUGbp3Ky857iKE1WtugKe/HucA5lHtfUvWY= Subject key identifier: 8F:61:6C:C2:C9:04:F8:44:13:98:FD:9B:00:7C:C3:EF:DB:6C:0C:C4 Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 Certificate issuer: /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft Manifest number: 04F3 Signing time: Tue 01 Jul 2025 00:18:38 +0000 Manifest this update: Tue 01 Jul 2025 00:18:38 +0000 Manifest next update: Tue 08 Jul 2025 00:18:38 +0000 Files and hashes: 1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: J6NyIU7Mhnz3ZLP2d6SZg15BjTZVp2g13+boC3iLsSg=) 2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: EYW2sKPf+G2Sx9ydD4pDWi9he+aSK802wxvxfjM5I2Y=) 3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: 9YEdcRP/xwcEXvASqrHWB8HPt3we6VKlBGcd9dDANWk=) 4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: +6P6AQHkzNOzm6kHVQO5a81bv5yPJUOJbWXMWV3KVfA=) 5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: HwIXxMyVB5TDC6OnRXgKUZIRg3PpPlLxsrzUfJFlIrY=) 6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: eSOO4OZJq9oAUGzG+Jm/RF9DAg/VCtKcVYa1dGAc4zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573 Validity Not Before: Jul 1 00:18:38 2025 GMT Not After : Jul 8 00:18:38 2025 GMT Subject: CN=6863295e-e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:78:10:d1:69:cb:a4:e5:26:91:0f:9e:88: 15:ce:32:60:13:13:20:47:10:33:43:16:bd:8c:be: e0:97:95:16:fc:6e:42:39:8e:68:82:67:ef:5f:c4: 91:af:98:14:04:3c:01:72:e9:36:3c:72:e8:71:f6: da:75:8a:61:b1:88:86:18:ea:fe:42:57:18:f9:3e: 58:bf:02:4f:98:cb:68:d1:76:c4:75:93:91:6c:1e: e3:d9:1e:a2:15:9a:0e:4b:ba:c7:50:66:09:c4:43: 3d:a0:9d:c9:b5:62:18:47:c9:75:8b:e2:28:df:fd: 76:86:c8:41:1c:d5:9d:c7:8d:a9:24:05:ac:cc:b2: da:58:0f:3a:65:8c:fb:5d:9d:ca:55:e9:6f:33:b4: c1:38:22:31:3e:66:ae:47:2b:18:64:74:ac:9c:07: 26:ff:c3:97:2f:46:21:0a:86:b4:2e:56:af:0b:1f: 15:91:ba:34:ce:d4:c6:29:bc:a0:19:7c:c0:5f:68: e2:21:f1:4d:ac:01:34:16:a4:39:80:1e:8b:c3:1d: 9f:51:2e:9b:b3:ae:a5:90:82:f1:47:8d:0a:3e:c0: 00:91:a8:0a:49:0f:31:ea:90:2b:2d:63:6c:7f:0b: 80:73:34:92:3e:42:b7:62:38:82:08:a5:6b:dc:be: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:61:6C:C2:C9:04:F8:44:13:98:FD:9B:00:7C:C3:EF:DB:6C:0C:C4 X509v3 Authority Key Identifier: keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c0:a6:13:23:ec:3b:51:ba:2c:dc:6e:12:87:5a:09:c9:ad: 53:15:dc:ab:61:98:b7:4d:d3:0c:3e:32:77:62:20:5f:50:09: d3:96:98:e6:56:d9:c9:47:e9:bd:09:e6:bb:fa:ba:16:94:61: ff:1e:24:94:6a:b3:a0:3c:e5:50:39:4f:e4:7c:55:78:e6:18: bd:51:e3:98:ea:be:70:b4:55:b5:fc:e0:25:4f:f4:f5:26:dc: f1:3d:89:53:2a:5c:b3:bc:df:14:0d:28:f2:bb:3e:a9:c7:43: 00:1d:40:9a:84:d0:1c:80:e9:eb:44:69:fb:71:dc:b3:74:c7: b7:93:81:1e:43:2c:49:4f:fc:31:a0:d5:5e:f0:68:c0:bf:2f: 92:fb:9b:97:7f:ea:8d:da:33:c8:0a:4e:0a:13:04:2a:23:41: 91:b7:2d:0a:bf:a0:fd:14:47:87:8c:3d:1f:43:24:ad:26:42: 2d:90:2f:2e:ec:7e:53:34:8a:b9:9d:5e:68:09:24:64:84:2a: 57:45:51:61:e5:94:59:eb:e8:5c:d4:3f:4f:43:23:c5:36:11: 5c:74:cd:32:da:80:b5:d3:7c:2b:6c:48:ae:13:23:8f:29:7c: 9e:ff:4b:5b:eb:d1:da:e1:1d:ba:39:dc:42:a0:21:ae:93:b2: 0e:e0:c2:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF QjZGOTI1NzMwHhcNMjUwNzAxMDAxODM4WhcNMjUwNzA4MDAxODM4WjAYMRYwFAYD VQQDEw02ODYzMjk1ZS1lNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr494ENFpy6TlJpEPnogVzjJgExMgRxAzQxa9jL7gl5UW/G5COY5ogmfvX8SR r5gUBDwBcuk2PHLocfbadYphsYiGGOr+QlcY+T5YvwJPmMto0XbEdZORbB7j2R6i FZoOS7rHUGYJxEM9oJ3JtWIYR8l1i+Io3/12hshBHNWdx42pJAWszLLaWA86ZYz7 XZ3KVelvM7TBOCIxPmauRysYZHSsnAcm/8OXL0YhCoa0LlavCx8Vkbo0ztTGKbyg GXzAX2jiIfFNrAE0FqQ5gB6Lwx2fUS6bs66lkILxR40KPsAAkagKSQ8x6pArLWNs fwuAczSSPkK3YjiCCKVr3L7bLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9hbMLJ BPhEE5j9mwB8w+/bbAzEMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJB dlptdjFPTXA3WjNyYjVKWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiwKYTI+w7Ubos3G4Sh1oJya1TFdyrYZi3TdMMPjJ3YiBfUAnTlpjm VtnJR+m9Cea7+roWlGH/HiSUarOgPOVQOU/kfFV45hi9UeOY6r5wtFW1/OAlT/T1 JtzxPYlTKlyzvN8UDSjyuz6px0MAHUCahNAcgOnrRGn7cdyzdMe3k4EeQyxJT/wx oNVe8GjAvy+S+5uXf+qN2jPICk4KEwQqI0GRty0Kv6D9FEeHjD0fQyStJkItkC8u 7H5TNIq5nV5oCSRkhCpXRVFh5ZRZ6+hc1D9PQyPFNhFcdM0y2oC103wrbEiuEyOP KXye/0tb69Ha4R26OdxCoCGuk7IO4MIj -----END CERTIFICATE-----Generated at Wed Jul 2 06:10:35 2025 by rpki-client