$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: oPbAchGn6PWjeZKZzC18vKaUWUSE6VzzzWIB53T7YAw= Subject key identifier: B7:7C:E2:87:54:BE:0C:F5:6E:D6:F9:65:D6:36:6F:A7:2B:42:95:D7 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 055B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 0553 Signing time: Wed 02 Jul 2025 23:43:22 +0000 Manifest this update: Wed 02 Jul 2025 23:43:21 +0000 Manifest next update: Wed 09 Jul 2025 23:43:21 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: jxDTT/d+vIy87IlemsGXcZ40UJEsB/9SQdIgUTrhh4Y=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: QOFOeJ0/TitkOVKuCtknVXKhDl8rDuqKOlqBjNU794M=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: Kg31LYu7Durk6j8slLyu/vJtO9Dfls9nej9ZAhspvEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Jul 2 23:43:21 2025 GMT Not After : Jul 9 23:43:21 2025 GMT Subject: CN=6865c419-e726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:75:d1:98:f7:98:f2:04:86:c4:e9:6b:62: f9:f3:6b:68:0f:6c:72:63:d4:37:b3:02:cd:f4:8b: 8e:80:a9:0c:1b:9b:f8:4c:d1:51:d3:92:ad:0c:f8: 2d:84:4a:0f:d5:e4:8a:9e:9b:85:b5:ee:e9:fe:e9: 11:2f:43:7a:9e:78:f2:af:d2:90:74:b9:1a:9b:56: 9d:92:4c:a3:08:e4:28:2b:ec:7f:de:23:1c:64:69: 7c:13:a8:81:36:4f:cf:e6:65:bb:de:08:30:cd:d1: ac:06:28:b0:e0:0d:dc:4e:99:43:92:ab:b3:f8:f5: c8:10:25:a5:08:fe:ed:a9:10:c9:47:0c:76:65:f0: 6c:e1:34:ef:98:f0:db:ef:ac:17:9b:0e:d1:57:4e: 8f:b4:67:8b:7e:04:43:7a:31:0b:05:ee:e4:39:4d: dd:03:42:3c:2c:cf:97:35:8c:47:26:56:95:3b:24: 13:a4:17:24:07:0f:88:29:c2:2a:51:9a:c4:f7:a2: fd:76:8d:63:e6:dc:2f:bc:ff:53:34:65:f5:e0:0f: 8e:f0:b3:ea:36:4a:cf:89:ac:d3:cd:d5:e1:46:7b: a8:3b:c2:61:d6:e4:75:86:82:af:8b:ed:2f:42:73: 28:f5:6f:44:53:99:02:f0:2e:aa:9e:6d:37:f9:a1: fe:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:E2:87:54:BE:0C:F5:6E:D6:F9:65:D6:36:6F:A7:2B:42:95:D7 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5f:e5:25:3b:91:6c:19:c5:70:7d:88:e0:a7:bb:20:2e:71: 1d:73:12:f9:bc:a7:1f:7f:c0:8a:11:5b:b9:24:db:10:30:46: 6d:d6:24:47:8f:26:67:10:95:07:88:05:34:83:a8:24:39:16: f6:e2:9b:c9:4d:86:26:be:e2:8d:a1:52:ca:7b:05:b3:7b:a8: 2e:ee:f1:27:6f:15:56:ff:69:86:65:b4:1d:70:ee:c2:4e:f3: 04:c2:8f:a2:db:68:c5:af:17:59:dc:dc:2c:fd:cc:df:c3:d8: 99:d8:66:3c:e3:97:0a:04:25:ed:92:65:00:a6:f8:30:8a:94: 8e:cf:c1:ac:dc:20:2c:4a:4b:4c:1f:f0:81:86:e6:81:96:1c: ee:fe:54:5e:91:95:6f:bb:c0:8f:06:2d:fe:5e:69:d5:bf:66: c5:e1:25:6d:4d:0b:8c:c8:01:9e:5b:e6:fa:ae:f9:2c:a6:9f: be:49:47:c8:b7:aa:35:0d:c8:80:a6:ef:e4:7c:a6:ca:50:3d: 24:af:1a:a2:8e:cf:40:6f:70:2a:6c:d7:6b:cb:83:e9:16:45: dd:cb:7e:0f:9d:bf:b1:f9:63:b1:f1:77:9b:a6:d3:36:52:c3: 80:f5:5f:9e:5a:8a:42:db:03:c7:ac:d0:4e:f6:3e:45:79:79: 32:09:ee:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjUwNzAyMjM0MzIxWhcNMjUwNzA5MjM0MzIxWjAYMRYwFAYD VQQDEw02ODY1YzQxOS1lNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1Z10Zj3mPIEhsTpa2L582toD2xyY9Q3swLN9IuOgKkMG5v4TNFR05KtDPgt hEoP1eSKnpuFte7p/ukRL0N6nnjyr9KQdLkam1adkkyjCOQoK+x/3iMcZGl8E6iB Nk/P5mW73ggwzdGsBiiw4A3cTplDkquz+PXIECWlCP7tqRDJRwx2ZfBs4TTvmPDb 76wXmw7RV06PtGeLfgRDejELBe7kOU3dA0I8LM+XNYxHJlaVOyQTpBckBw+IKcIq UZrE96L9do1j5twvvP9TNGX14A+O8LPqNkrPiazTzdXhRnuoO8Jh1uR1hoKvi+0v QnMo9W9EU5kC8C6qnm03+aH+xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd84odU vgz1btb5ZdY2b6crQpXXMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuX+UlO5FsGcVwfYjgp7sgLnEdcxL5vKcff8CKEVu5JNsQMEZt1iRH jyZnEJUHiAU0g6gkORb24pvJTYYmvuKNoVLKewWze6gu7vEnbxVW/2mGZbQdcO7C TvMEwo+i22jFrxdZ3Nws/czfw9iZ2GY845cKBCXtkmUApvgwipSOz8Gs3CAsSktM H/CBhuaBlhzu/lRekZVvu8CPBi3+XmnVv2bF4SVtTQuMyAGeW+b6rvkspp++SUfI t6o1DciApu/kfKbKUD0krxqijs9Ab3AqbNdry4PpFkXdy34Pnb+x+WOx8XebptM2 UsOA9V+eWopC2wPHrNBO9j5FeXkyCe5D -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:12 2025 by rpki-client