$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft File: oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft (raw, json) Hash identifier: WkW7YSSEvEHZCOzNBbGGyevIIFi+L1QhBRsT1o+A/WM= Subject key identifier: 2B:62:70:2F:BE:FB:58:E4:E0:DE:E9:84:23:BD:CE:7C:17:75:57:C2 Authority key identifier: A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 Certificate issuer: /CN=A915BF4F/serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft Manifest number: 02A4 Signing time: Tue 01 Jul 2025 02:12:16 +0000 Manifest this update: Tue 01 Jul 2025 02:12:15 +0000 Manifest next update: Tue 08 Jul 2025 02:12:15 +0000 Files and hashes: 1: oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl (hash: Y8BuLH+50uOV5X/StBjcNqwcbPCC74xPTUOdBAPMLq4=) 2: 42D236F0042111ED888BB024C4F9AE02.roa (hash: idGZCp14CeJ+hgIGhq15biNKPAF3xFUAz3T9o9jel9U=) 3: 41F88F22042111ED888BB024C4F9AE02.roa (hash: u7Xzmc+Z0Bg/MwCVSoDiBZBPaHlbZugtPr2Bm1jVv2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF4F, serialNumber=A0DE572A46CF324BAE08C3E930BCAFE739A015D1 Validity Not Before: Jul 1 02:12:15 2025 GMT Not After : Jul 8 02:12:15 2025 GMT Subject: CN=68634400-f730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:ce:86:65:24:fa:b4:93:93:94:3b:f8:d6: 93:8c:cf:b3:67:51:3b:40:a0:3f:2d:eb:e0:45:f0: 65:77:42:d6:a5:1a:2c:32:15:63:a4:2c:68:de:3a: 8d:2b:db:ff:e9:b1:c7:04:4d:8d:af:1f:04:b3:7a: 31:db:f6:ee:1c:f9:e0:f8:9f:fb:4a:75:e8:e0:ac: 82:ac:0f:f7:67:e5:36:5f:0a:6a:2a:41:cf:c4:a8: 62:6e:04:96:87:41:dd:a1:8d:96:73:8d:5d:a8:58: 4d:f5:ba:ae:75:1b:33:fa:d5:7c:8f:53:98:31:4e: b5:4c:ad:a1:f7:6e:82:99:75:05:b1:a1:2f:23:3b: cd:bc:80:32:98:87:05:03:fb:e8:fd:bd:68:d1:d9: 18:4b:c3:6a:aa:d9:63:c4:cd:e0:07:30:81:84:ab: 34:48:d6:fa:ba:36:26:dd:58:c9:65:b7:69:b2:f9: 4f:ee:eb:26:fa:29:b4:7b:88:83:c1:c6:76:7c:ba: 97:67:f1:44:ec:41:1e:88:c7:22:bf:f0:fc:53:99: fa:b7:b6:45:75:82:9b:de:a6:51:33:bb:64:b8:6a: e4:47:a4:a9:41:b1:c4:cd:0b:be:34:2a:2a:86:eb: c6:4b:f2:8d:c6:f9:ab:05:fa:c0:7d:23:b3:cc:7b: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:62:70:2F:BE:FB:58:E4:E0:DE:E9:84:23:BD:CE:7C:17:75:57:C2 X509v3 Authority Key Identifier: keyid:A0:DE:57:2A:46:CF:32:4B:AE:08:C3:E9:30:BC:AF:E7:39:A0:15:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oN5XKkbPMkuuCMPpMLyv5zmgFdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF4F/C5E2D71E041911ED91576528C4F9AE02/oN5XKkbPMkuuCMPpMLyv5zmgFdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:7f:78:bd:9f:e0:c8:d4:81:6f:ac:02:ec:49:28:6a:9f:13: 01:9b:bb:4f:86:1f:69:65:8e:66:54:1f:01:ab:7f:80:27:c5: 1e:b1:c6:8d:77:86:81:dc:f3:1f:4d:5e:d8:71:b1:34:16:12: 0a:97:32:17:b3:32:4e:5e:bd:53:e1:b2:48:d8:ed:5e:fa:27: fd:d0:9b:dd:1c:b1:78:c2:f1:1d:4b:5e:95:a0:70:d0:c7:85: 49:89:8c:90:98:ba:2a:ef:f7:33:f3:66:24:b5:28:52:c1:e1: ec:ef:75:37:90:89:94:6f:cd:df:6e:2d:df:94:91:77:dc:6f: 5c:63:5c:ee:d3:88:87:fe:74:80:c8:bd:75:19:f4:89:dd:d6: a7:ab:1a:99:c2:43:fc:0d:06:78:55:1d:d9:3c:80:3e:34:e1: af:50:5e:94:4c:62:0f:8c:89:ef:dc:18:b6:fa:fd:a4:b6:e6: 9d:d8:4d:38:0e:54:c3:16:06:09:3c:20:4c:49:eb:21:75:92: ea:0b:ae:76:0e:ef:9f:93:f4:74:07:8a:7c:bb:9f:d6:0f:20: 2b:5a:57:c5:77:df:8c:8f:63:31:8c:a6:74:ec:8b:e2:52:51: 26:8c:c2:84:32:eb:9d:71:e0:9f:7f:d4:03:dd:5a:48:cc:f5: 21:69:0b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNEYxMTAvBgNVBAUTKEEwREU1NzJBNDZDRjMyNEJBRTA4QzNFOTMwQkNBRkU3 MzlBMDE1RDEwHhcNMjUwNzAxMDIxMjE1WhcNMjUwNzA4MDIxMjE1WjAYMRYwFAYD VQQDEw02ODYzNDQwMC1mNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0TOhmUk+rSTk5Q7+NaTjM+zZ1E7QKA/LevgRfBld0LWpRosMhVjpCxo3jqN K9v/6bHHBE2Nrx8Es3ox2/buHPng+J/7SnXo4KyCrA/3Z+U2XwpqKkHPxKhibgSW h0HdoY2Wc41dqFhN9bqudRsz+tV8j1OYMU61TK2h926CmXUFsaEvIzvNvIAymIcF A/vo/b1o0dkYS8NqqtljxM3gBzCBhKs0SNb6ujYm3VjJZbdpsvlP7usm+im0e4iD wcZ2fLqXZ/FE7EEeiMciv/D8U5n6t7ZFdYKb3qZRM7tkuGrkR6SpQbHEzQu+NCoq huvGS/KNxvmrBfrAfSOzzHvhxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCticC++ +1jk4N7phCO9znwXdVfCMB8GA1UdIwQYMBaAFKDeVypGzzJLrgjD6TC8r+c5oBXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY0Ri9DNUUyRDcxRTA0 MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1rdXVDTVBwTUx5djV6bWdG ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ONVhLa2JQTWt1dUNNUHBNTHl2NXptZ0ZkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY0Ri9DNUUyRDcxRTA0MTkxMUVEOTE1NzY1MjhDNEY5QUUwMi9vTjVYS2tiUE1r dXVDTVBwTUx5djV6bWdGZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxf3i9n+DI1IFvrALsSShqnxMBm7tPhh9pZY5mVB8Bq3+AJ8UescaN d4aB3PMfTV7YcbE0FhIKlzIXszJOXr1T4bJI2O1e+if90JvdHLF4wvEdS16VoHDQ x4VJiYyQmLoq7/cz82YktShSweHs73U3kImUb83fbi3flJF33G9cY1zu04iH/nSA yL11GfSJ3danqxqZwkP8DQZ4VR3ZPIA+NOGvUF6UTGIPjInv3Bi2+v2ktuad2E04 DlTDFgYJPCBMSeshdZLqC652Du+fk/R0B4p8u5/WDyArWlfFd9+Mj2MxjKZ07Ivi UlEmjMKEMuudceCff9QD3VpIzPUhaQs4 -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:01 2025 by rpki-client