$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: SGft/5AyJ87NZygAZuZw0ij3M5YD5eRMHjD7oSkuzl0= Subject key identifier: A1:9A:A4:77:66:C7:B3:17:9E:91:2B:FE:D1:63:C1:F4:C4:A7:99:17 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 040C Signing time: Thu 03 Jul 2025 00:47:24 +0000 Manifest this update: Thu 03 Jul 2025 00:47:24 +0000 Manifest next update: Thu 10 Jul 2025 00:47:24 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: Mr9mIyvOHRFcH2Gp7VJkvGV+uC/X4C00XB6Jn0+pDCE=) 2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: 0k/cIYnPQXwy+zTSkxTlGjeXYEeYNzK6r8YzvtnE4aQ=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Jul 3 00:47:24 2025 GMT Not After : Jul 10 00:47:24 2025 GMT Subject: CN=6865d31c-e5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:77:85:51:51:3a:ea:95:f1:10:d5:06:c6:75: ae:61:cb:f6:13:e2:fd:f8:8e:54:2a:08:bb:78:d8: 02:4b:d1:b8:f5:fd:c7:27:2b:32:a6:f7:cc:b0:52: 0c:53:dc:d9:f6:43:82:f6:9c:8d:a6:c9:c3:51:16: a6:b7:30:2a:4e:1b:08:30:f3:7a:d7:dd:08:89:a2: e1:5b:c9:6e:38:60:02:25:8f:89:df:ce:55:b9:c5: 75:87:65:ac:83:6b:ea:89:e4:c5:68:fb:e2:7e:65: 73:c4:8c:8d:a8:ad:69:47:c1:74:dc:9b:4c:ce:ea: 83:cf:f9:90:d4:ab:41:d0:8e:1c:e4:c2:a5:b3:18: 12:8e:a4:46:18:03:ec:ae:0c:e7:1a:2c:f1:22:85: d4:8c:bc:c9:55:59:10:6e:61:c6:f6:93:5d:cf:78: 71:aa:61:74:65:56:98:86:19:8b:32:ec:37:03:e0: 17:b7:d6:48:c6:12:e0:5a:20:67:8b:96:18:ec:9f: 9c:07:0c:7b:2e:94:dd:8e:06:be:93:19:75:92:6a: 23:b3:58:81:c8:24:42:ad:3f:23:66:ca:42:df:bb: fd:e4:2c:e1:df:8f:98:c3:c5:fa:92:50:a2:03:72: f0:27:6e:30:81:ed:ae:4f:00:2e:3e:79:ae:1d:46: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9A:A4:77:66:C7:B3:17:9E:91:2B:FE:D1:63:C1:F4:C4:A7:99:17 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:6d:32:20:21:94:e9:3c:6e:bd:a3:fc:82:7c:d6:53:be:47: a2:8c:9d:7e:39:6e:79:f3:5e:9a:75:73:d6:06:8c:a1:32:05: d6:9e:df:82:f6:e5:3e:57:48:62:80:f4:bc:56:2b:d4:c9:af: 37:1c:ea:7d:5e:70:67:e0:4e:96:b4:fe:c9:09:01:1a:c4:f4: 50:a6:9d:3c:6b:b8:ca:34:2d:1d:f4:7e:1e:6e:f3:d0:93:8b: 40:cf:70:59:cd:b2:f7:5c:ef:dd:9a:99:d8:64:c0:e1:d5:5d: 0b:c8:4c:31:f5:98:ca:52:40:7c:0b:3e:94:1f:b7:7b:08:54: af:79:50:91:8b:ec:a1:e5:7e:bd:44:9a:31:9e:6d:5f:5c:59: ec:e2:b8:19:57:66:55:8a:4f:ac:0c:c4:02:9a:0d:84:64:6f: 52:76:85:3c:eb:91:89:0c:65:26:46:f5:e3:04:3b:2e:71:2b: 04:c4:e0:76:7d:7d:9b:5e:97:4a:48:78:14:9e:b0:13:60:dd: 35:a1:58:64:e5:f2:9d:37:1c:e5:59:d9:f0:40:ba:35:55:bb: 9e:33:1e:ca:74:bf:d4:d1:73:62:74:f4:6d:cc:1e:ce:64:a6: 8e:64:d6:83:b5:15:59:9a:68:06:a5:29:46:12:48:ce:ba:83: 19:52:4a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwNzAzMDA0NzI0WhcNMjUwNzEwMDA0NzI0WjAYMRYwFAYD VQQDEw02ODY1ZDMxYy1lNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XeFUVE66pXxENUGxnWuYcv2E+L9+I5UKgi7eNgCS9G49f3HJysypvfMsFIM U9zZ9kOC9pyNpsnDURamtzAqThsIMPN6190IiaLhW8luOGACJY+J385VucV1h2Ws g2vqieTFaPvifmVzxIyNqK1pR8F03JtMzuqDz/mQ1KtB0I4c5MKlsxgSjqRGGAPs rgznGizxIoXUjLzJVVkQbmHG9pNdz3hxqmF0ZVaYhhmLMuw3A+AXt9ZIxhLgWiBn i5YY7J+cBwx7LpTdjga+kxl1kmojs1iByCRCrT8jZspC37v95Czh34+Yw8X6klCi A3LwJ24wge2uTwAuPnmuHUa9lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGapHdm x7MXnpEr/tFjwfTEp5kXMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3bTIgIZTpPG69o/yCfNZTvkeijJ1+OW55816adXPWBoyhMgXWnt+C 9uU+V0higPS8VivUya83HOp9XnBn4E6WtP7JCQEaxPRQpp08a7jKNC0d9H4ebvPQ k4tAz3BZzbL3XO/dmpnYZMDh1V0LyEwx9ZjKUkB8Cz6UH7d7CFSveVCRi+yh5X69 RJoxnm1fXFns4rgZV2ZVik+sDMQCmg2EZG9SdoU865GJDGUmRvXjBDsucSsExOB2 fX2bXpdKSHgUnrATYN01oVhk5fKdNxzlWdnwQLo1VbueMx7KdL/U0XNidPRtzB7O ZKaOZNaDtRVZmmgGpSlGEkjOuoMZUkpd -----END CERTIFICATE-----Generated at Fri Jul 4 08:04:15 2025 by rpki-client