$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: Z+yk5xyahJbc2+Gdk1Yk/PlPLAk9Vmu+wjsTA2vk6CU= Subject key identifier: B7:F6:D1:D7:48:BD:40:24:E2:EE:14:37:DD:F2:E8:10:34:0C:77:D3 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01AC Signing time: Thu 03 Jul 2025 03:20:43 +0000 Manifest this update: Thu 03 Jul 2025 03:20:42 +0000 Manifest next update: Thu 10 Jul 2025 03:20:42 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: gjNsWYfN68IpxupREKf4qmbidIpiEBDyEwHQtFzD8ck=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Jul 3 03:20:42 2025 GMT Not After : Jul 10 03:20:42 2025 GMT Subject: CN=6865f70a-2c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:6c:db:a8:dc:ba:84:01:7e:18:b5:ec:24: 49:06:40:1a:64:ab:8f:71:ab:ce:89:15:2e:ff:11: b6:ce:c2:82:8c:19:d4:19:37:f1:2b:b2:fb:dc:bb: d7:f2:ed:15:87:20:20:08:0a:8f:3f:10:04:32:79: 4f:5c:58:57:23:49:43:9b:9f:fd:87:49:ac:cb:ca: cc:fb:31:dc:8d:4d:1a:d5:67:99:b8:e5:c1:f4:a8: 97:9d:ca:6f:69:25:d2:23:23:2e:4f:4b:a3:61:a3: dd:c9:80:6e:16:c0:62:63:2c:35:ee:26:f7:c6:3d: e3:29:7b:c7:99:27:be:47:b2:5a:0d:4e:9a:82:ea: ec:c4:2b:13:e2:ad:ad:58:b0:64:ee:06:c8:4c:00: b5:1d:7a:a2:ed:d2:f1:d3:9c:d0:ec:99:4c:4e:18: 37:a5:4b:32:3c:4d:46:44:7d:df:de:b2:85:6a:11: 5a:d7:d3:e7:d5:a9:12:4d:01:20:2e:d6:38:c6:5b: 3b:1d:d1:90:f3:27:86:b1:ad:22:12:3c:20:e0:b4: 7a:a2:64:70:0f:58:5b:58:86:f7:15:f5:89:eb:11: 86:8e:9a:f0:65:0d:b9:a0:9c:69:be:fa:b3:ac:0e: cb:8c:bb:da:8f:c4:19:49:fa:db:c5:24:04:ca:10: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F6:D1:D7:48:BD:40:24:E2:EE:14:37:DD:F2:E8:10:34:0C:77:D3 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:c7:e9:3b:65:61:f3:3c:a6:ec:b9:d7:88:67:f8:42:c1:72: 3a:34:74:8b:39:d6:37:4c:a8:a4:fe:b4:e1:7f:83:e9:0c:ed: 74:b9:08:d1:08:d9:77:2a:bd:08:d7:c1:f1:03:1a:c0:8f:6b: 54:09:19:fb:40:99:63:48:e3:de:59:14:7e:23:53:0d:d8:52: de:7d:4e:e2:ae:0f:79:e4:2b:99:c3:90:1c:de:a4:d0:d6:7f: c3:de:b7:0e:8c:ae:ce:c3:28:9d:b5:db:56:af:48:4f:f6:c9: d7:40:37:ed:48:72:cf:ed:70:b2:4e:c0:33:2e:5e:cf:fc:4e: 64:ea:72:1c:cc:7b:d1:fd:b9:8e:a3:90:ca:b6:92:b2:6b:00: 98:42:a2:d4:1e:e8:ce:62:9a:3c:51:ce:ca:71:78:a7:81:83: 78:2a:2b:d6:df:e1:34:14:3f:83:4f:23:56:fd:31:bc:b4:f2: 24:06:0a:d7:6f:37:f4:8e:ab:10:f4:40:cc:18:43:da:ab:86: ae:48:d8:d8:b1:72:a5:0a:57:c1:c6:bb:37:f9:a0:f4:48:de: ba:8f:2c:bc:fb:68:68:6f:7e:ee:be:e7:51:4f:ed:90:45:a4: a0:90:27:b8:f1:b8:2a:e5:8b:cd:d6:22:9e:c4:89:15:3b:75: 05:94:24:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwNzAzMDMyMDQyWhcNMjUwNzEwMDMyMDQyWjAYMRYwFAYD VQQDEw02ODY1ZjcwYS0yYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFVs26jcuoQBfhi17CRJBkAaZKuPcavOiRUu/xG2zsKCjBnUGTfxK7L73LvX 8u0VhyAgCAqPPxAEMnlPXFhXI0lDm5/9h0msy8rM+zHcjU0a1WeZuOXB9KiXncpv aSXSIyMuT0ujYaPdyYBuFsBiYyw17ib3xj3jKXvHmSe+R7JaDU6agursxCsT4q2t WLBk7gbITAC1HXqi7dLx05zQ7JlMThg3pUsyPE1GRH3f3rKFahFa19Pn1akSTQEg LtY4xls7HdGQ8yeGsa0iEjwg4LR6omRwD1hbWIb3FfWJ6xGGjprwZQ25oJxpvvqz rA7LjLvaj8QZSfrbxSQEyhCj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf20ddI vUAk4u4UN93y6BA0DHfTMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUx+k7ZWHzPKbsudeIZ/hCwXI6NHSLOdY3TKik/rThf4PpDO10uQjR CNl3Kr0I18HxAxrAj2tUCRn7QJljSOPeWRR+I1MN2FLefU7irg955CuZw5Ac3qTQ 1n/D3rcOjK7OwyidtdtWr0hP9snXQDftSHLP7XCyTsAzLl7P/E5k6nIczHvR/bmO o5DKtpKyawCYQqLUHujOYpo8Uc7KcXingYN4KivW3+E0FD+DTyNW/TG8tPIkBgrX bzf0jqsQ9EDMGEPaq4auSNjYsXKlClfBxrs3+aD0SN66jyy8+2hob37uvudRT+2Q RaSgkCe48bgq5YvN1iKexIkVO3UFlCTc -----END CERTIFICATE-----Generated at Thu Jul 3 05:05:14 2025 by rpki-client