$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft File: 39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json) Hash identifier: RFlFGrEBZzoaOmdZsBBBW3R4HFrIUWMIEjOY/cR6qa4= Subject key identifier: D2:ED:F9:0B:A4:CD:54:91:56:7D:3F:34:A9:04:66:27:0E:4C:3F:B2 Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 Certificate issuer: /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft Manifest number: 0337 Signing time: Thu 03 Jul 2025 01:34:40 +0000 Manifest this update: Thu 03 Jul 2025 01:34:39 +0000 Manifest next update: Thu 10 Jul 2025 01:34:39 +0000 Files and hashes: 1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: x3tQI5J8xIR7xhy4zSG6oF+BzKquVPpQuJNX/6rWf0E=) 2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: BKZDdCu5I5Bny2FjLb1mBVpCgzMTIVhQtDH+2UKX5kU=) 3: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (hash: HyDmzwiWOExy2YJsgokVPHZS5Evkr13x2XepJOzvoNk=) 4: 748FD068C11011EFB6161F67C4F9AE02.roa (hash: 1JpkCoiTyutFLV6xbj39GXkCqodZPTBI6jWeSNGeps8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6 Validity Not Before: Jul 3 01:34:39 2025 GMT Not After : Jul 10 01:34:39 2025 GMT Subject: CN=6865de2f-d246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:88:83:2f:30:9f:19:d3:28:0e:81:0f:43:69: 3d:eb:ea:ca:75:75:22:b1:cf:a8:30:b6:f1:a2:9c: 50:29:cc:6a:99:55:be:8c:48:52:35:29:b2:43:fb: e7:68:e6:4b:32:7e:5c:2d:5f:0f:12:8a:fb:90:7b: 0e:3d:ee:f6:05:12:bc:1a:7c:a1:39:1d:bb:ff:98: a2:eb:dd:82:86:a5:dc:b0:93:72:50:8b:e2:8f:d8: 94:a2:73:a1:23:5f:9d:fe:7e:ed:c6:e1:60:8b:5d: c4:7e:44:67:de:2e:aa:1b:a6:a0:4f:80:19:e4:a7: 95:d5:76:68:66:d8:22:30:72:61:14:83:76:f3:2c: 39:e3:d8:85:6f:47:ef:63:f8:49:26:d7:06:5a:b4: ce:0a:56:15:cb:cb:b6:72:6e:51:0d:ac:45:00:4a: 42:dd:c0:ac:69:cd:a7:94:9c:1b:8d:fb:6b:c5:10: 56:83:d0:de:5b:de:d6:29:83:7c:42:f3:a5:45:1f: 55:dd:81:24:f6:b2:62:4d:b4:67:3f:c0:66:bb:a6: 06:93:83:2c:de:6f:84:0f:13:ff:7e:e2:dc:a1:27: e7:b4:50:0e:df:23:eb:30:86:d7:e9:e2:6b:17:71: 2f:72:c4:fb:3a:75:d0:e6:75:1f:d8:07:b6:89:4d: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:F9:0B:A4:CD:54:91:56:7D:3F:34:A9:04:66:27:0E:4C:3F:B2 X509v3 Authority Key Identifier: keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b4:7e:01:49:0f:76:8a:b1:d5:4a:5f:7d:fe:94:93:34:0f: 40:bf:21:3e:d1:09:34:82:25:af:2c:ca:ce:a8:bc:d0:de:61: d8:65:d9:39:02:70:3c:5f:2d:79:95:42:0f:13:70:d7:ba:d4: 9d:ce:eb:d5:f2:91:f7:c1:71:31:60:e6:c7:41:c5:4c:26:d1: 5b:74:41:44:63:15:74:33:16:f9:1a:2a:46:f5:10:47:06:2d: a8:3b:d3:aa:c4:8d:11:bf:77:8b:a6:df:cb:bf:02:1b:a0:8c: 8a:07:3f:7f:dc:88:9c:46:0c:72:78:7c:5b:b6:6e:c8:2d:1b: ee:20:1e:c8:d7:55:28:62:43:ad:b6:e6:2a:70:af:47:d0:1a: 40:ec:f4:87:05:e4:ce:58:93:33:b2:ed:c2:8c:5f:1b:cb:77: a7:d3:9a:82:98:e9:88:42:39:dd:f8:ba:cd:a6:01:f8:9d:10: ca:fc:ea:01:c5:1d:e2:a7:76:52:08:0b:9f:bb:cf:e9:4e:04: 33:39:c2:4e:54:2d:e4:a7:93:8c:94:e7:68:40:72:61:26:e3: c4:6e:7e:a7:84:22:b2:b3:9f:c9:99:4b:e5:b1:77:1a:de:ab: cf:b7:f9:2a:d2:c6:f6:b3:39:c0:a8:36:2c:59:1b:06:07:ba: b6:dc:5e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1QjExMTAvBgNVBAUTKERGREMzQURCMzNDQUE4NTkxRUZBRjI3NzZDM0IwQzU1 NkMwOEEyQjYwHhcNMjUwNzAzMDEzNDM5WhcNMjUwNzEwMDEzNDM5WjAYMRYwFAYD VQQDEw02ODY1ZGUyZi1kMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14iDLzCfGdMoDoEPQ2k96+rKdXUisc+oMLbxopxQKcxqmVW+jEhSNSmyQ/vn aOZLMn5cLV8PEor7kHsOPe72BRK8GnyhOR27/5ii692ChqXcsJNyUIvij9iUonOh I1+d/n7txuFgi13EfkRn3i6qG6agT4AZ5KeV1XZoZtgiMHJhFIN28yw549iFb0fv Y/hJJtcGWrTOClYVy8u2cm5RDaxFAEpC3cCsac2nlJwbjftrxRBWg9DeW97WKYN8 QvOlRR9V3YEk9rJiTbRnP8Bmu6YGk4Ms3m+EDxP/fuLcoSfntFAO3yPrMIbX6eJr F3EvcsT7OnXQ5nUf2Ae2iU0u7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLt+Quk zVSRVn0/NKkEZicOTD+yMB8GA1UdIwQYMBaAFN/cOtszyqhZHvryd2w7DFVsCKK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjVCMS9FRDYyOUYwQ0Q3 RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FGa2UtdkozYkRzTVZXd0lv clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM5dzYyelBLcUZrZS12SjNiRHNNVld3SW9yWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjVCMS9FRDYyOUYwQ0Q3RTgxMUVDOTJBOTRGNENDNEY5QUUwMi8zOXc2MnpQS3FG a2UtdkozYkRzTVZXd0lvclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCStH4BSQ92irHVSl99/pSTNA9AvyE+0Qk0giWvLMrOqLzQ3mHYZdk5 AnA8Xy15lUIPE3DXutSdzuvV8pH3wXExYObHQcVMJtFbdEFEYxV0Mxb5GipG9RBH Bi2oO9OqxI0Rv3eLpt/LvwIboIyKBz9/3IicRgxyeHxbtm7ILRvuIB7I11UoYkOt tuYqcK9H0BpA7PSHBeTOWJMzsu3CjF8by3en05qCmOmIQjnd+LrNpgH4nRDK/OoB xR3ip3ZSCAufu8/pTgQzOcJOVC3kp5OMlOdoQHJhJuPEbn6nhCKys5/JmUvlsXca 3qvPt/kq0sb2sznAqDYsWRsGB7q23F6Z -----END CERTIFICATE-----Generated at Thu Jul 3 10:30:18 2025 by rpki-client