$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: FkCcszcIdC0LB1KbCYQaVogM5uF0NLEQ6pS5G+WVsb4= Subject key identifier: A2:6A:F1:0E:CE:1A:75:9A:94:F4:3E:39:10:F1:6F:80:8D:F5:60:B3 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 0678 Signing time: Mon 30 Jun 2025 23:20:48 +0000 Manifest this update: Mon 30 Jun 2025 23:20:47 +0000 Manifest next update: Mon 07 Jul 2025 23:20:47 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: GuYWCQxGL82GeQ8xGd38HXEtzOp05UP2y6dOmgVvbFU=) 2: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (hash: GlfshBdHFI+9U59tjjZq1jsOyJPIV4a9fMlu7eZGXqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Jun 30 23:20:47 2025 GMT Not After : Jul 7 23:20:47 2025 GMT Subject: CN=68631bd0-1426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:16:9c:5b:2b:0d:ae:cf:ae:9a:fa:d0:d3: 52:7a:01:d6:05:d3:64:08:34:c3:2a:e5:5d:8a:01: a3:52:af:4d:79:c2:85:92:54:5b:4e:1d:a4:4f:fd: 88:a7:37:21:df:88:87:7a:4e:85:f4:b0:f2:83:8e: 1b:57:3d:c4:59:8f:9b:14:4c:db:11:4f:85:cc:45: cd:9b:ff:53:55:3f:2d:8f:81:eb:b8:bd:62:8a:d8: 50:e3:ee:a2:68:8a:ba:a7:70:ff:05:54:07:94:a0: ac:44:df:fc:9c:5d:c5:f6:d0:e5:43:66:0b:0d:3b: c5:93:ba:51:06:f1:17:7a:cd:79:b7:b7:ba:3d:08: 0e:1b:5e:08:c6:97:44:2a:2e:fb:3a:a0:35:3f:3c: fe:32:e7:d0:1e:b8:32:62:68:66:00:1e:8f:05:6a: 69:91:40:40:6e:83:96:28:ef:71:04:82:69:8a:da: 92:7b:68:04:c6:4c:5c:a9:e3:11:a6:ab:1b:5b:ae: bb:0a:28:32:bb:70:d0:2b:cf:9d:a7:3c:d8:6e:78: 3f:4a:11:ae:54:7f:af:88:0c:9c:a6:0a:86:2b:6f: f2:85:18:a6:a6:f8:68:88:69:ed:30:22:c5:5f:4b: 18:52:d3:69:e6:d1:18:8a:8a:53:41:8a:cc:62:fe: 27:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6A:F1:0E:CE:1A:75:9A:94:F4:3E:39:10:F1:6F:80:8D:F5:60:B3 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c1:d0:10:5b:7b:da:3a:ab:4b:fc:c2:99:02:5a:bf:06:08: ff:5d:91:8b:7d:94:cb:ec:ad:ac:24:94:78:62:17:d3:ef:91: dc:07:43:36:d2:a4:a0:98:0b:6c:c4:e9:02:78:91:92:d2:98: 21:df:2f:88:7a:6e:64:5b:3a:5b:d8:7d:dc:65:01:5b:aa:41: 05:b3:f0:33:93:f9:33:6d:1c:52:50:c2:4b:28:89:dd:53:f3: 89:ec:59:48:51:38:b5:96:5b:a7:b8:02:0d:0a:0e:17:8a:d4: 02:27:83:6a:36:1e:e5:0b:42:e6:7b:b4:bf:e5:2f:df:15:d3: 40:72:ea:88:5c:21:23:68:07:a0:f0:d6:d6:bc:fb:3d:47:4d: c3:07:75:9e:c5:5e:35:1c:08:ad:a4:aa:38:65:d8:99:d6:7c: eb:b2:31:5c:1b:38:09:4c:a6:2c:ce:b1:d5:3b:43:f2:9d:ee: 1d:b3:2c:c6:b8:46:63:36:54:ae:2f:1a:84:84:aa:fe:5e:1c: 91:ab:d0:3a:8c:38:79:3a:0b:e9:5b:76:54:3d:d9:27:20:77: d6:db:86:b5:cc:82:7b:ac:20:64:b9:54:71:9e:52:2e:9e:7d: 30:e0:89:1d:c8:33:67:4c:0d:9e:1f:d4:9e:ed:d2:0a:93:69: 84:dc:be:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUwNjMwMjMyMDQ3WhcNMjUwNzA3MjMyMDQ3WjAYMRYwFAYD VQQDEw02ODYzMWJkMC0xNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1gWnFsrDa7Prpr60NNSegHWBdNkCDTDKuVdigGjUq9NecKFklRbTh2kT/2I pzch34iHek6F9LDyg44bVz3EWY+bFEzbEU+FzEXNm/9TVT8tj4HruL1iithQ4+6i aIq6p3D/BVQHlKCsRN/8nF3F9tDlQ2YLDTvFk7pRBvEXes15t7e6PQgOG14IxpdE Ki77OqA1Pzz+MufQHrgyYmhmAB6PBWppkUBAboOWKO9xBIJpitqSe2gExkxcqeMR pqsbW667Cigyu3DQK8+dpzzYbng/ShGuVH+viAycpgqGK2/yhRimpvhoiGntMCLF X0sYUtNp5tEYiopTQYrMYv4nRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJq8Q7O GnWalPQ+ORDxb4CN9WCzMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBawdAQW3vaOqtL/MKZAlq/Bgj/XZGLfZTL7K2sJJR4YhfT75HcB0M2 0qSgmAtsxOkCeJGS0pgh3y+Iem5kWzpb2H3cZQFbqkEFs/Azk/kzbRxSUMJLKInd U/OJ7FlIUTi1llunuAINCg4XitQCJ4NqNh7lC0Lme7S/5S/fFdNAcuqIXCEjaAeg 8NbWvPs9R03DB3WexV41HAitpKo4ZdiZ1nzrsjFcGzgJTKYszrHVO0Pyne4dsyzG uEZjNlSuLxqEhKr+XhyRq9A6jDh5OgvpW3ZUPdknIHfW24a1zIJ7rCBkuVRxnlIu nn0w4IkdyDNnTA2eH9Se7dIKk2mE3L4B -----END CERTIFICATE-----Generated at Wed Jul 2 12:58:38 2025 by rpki-client