$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: B+EW+UWan+G0R5REri3W1W4ASBWSj52jyCtB5WLvqWM= Subject key identifier: 4F:0F:56:19:32:FB:C7:0D:85:E9:EF:63:9C:44:08:5A:93:55:9B:FD Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0C6D Signing time: Mon 30 Jun 2025 18:33:28 +0000 Manifest this update: Mon 30 Jun 2025 18:33:28 +0000 Manifest next update: Mon 07 Jul 2025 18:33:28 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: 51VjWjQdmObhOAau/IT3jladcWob7Tllw8TbZCIdya0=) 2: BD34B926367911F083BF6873C4F9AE02.roa (hash: m+EkNRFDxHj1FPyZ5U1ENnB32M/tNvWOK6leRT4D3kc=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: LsbbSClw7moIgeVgU48ZXAlLRVTQAq+PWzm9OXhRWr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Jun 30 18:33:28 2025 GMT Not After : Jul 7 18:33:28 2025 GMT Subject: CN=6862d878-4002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:27:6c:62:07:89:5b:8c:40:0a:2e:1d:7c:83: 5a:e6:c3:c3:83:65:ba:b2:c0:be:8d:1c:85:26:f5: 70:cf:03:59:32:a8:19:87:3d:0e:34:ce:b8:36:be: 40:2d:33:54:f8:49:67:75:a6:f8:77:72:f4:a2:5f: bf:d3:69:ca:64:f9:92:a9:03:fc:e0:ea:0b:f1:39: 18:6c:e8:20:b6:08:ed:98:3c:55:f9:c3:d9:67:98: 54:fd:c3:42:3c:1f:5f:8a:0c:8a:7e:5a:07:34:7e: cc:a2:eb:13:7b:97:8a:89:4b:60:2b:67:cf:69:bb: 70:a1:83:f2:c7:25:6b:a0:74:6a:1f:a5:ab:f6:1c: 7e:d5:93:b5:e3:b4:47:24:9a:b2:32:c7:1f:60:84: 51:c4:0a:45:3d:9f:0b:41:b0:4c:e6:d6:6e:5b:b7: d7:84:ea:06:60:a5:18:6a:f0:d0:23:68:ee:ed:d1: f4:8a:1f:c8:50:17:2e:67:96:bd:da:a4:be:76:b0: 0c:5b:95:80:03:93:a2:72:ff:21:56:d9:f7:94:22: 0d:6f:18:a4:6f:87:56:a4:14:4e:b6:0b:39:12:3e: 43:4f:e5:7c:48:4f:a9:82:01:a2:39:ad:59:11:df: d4:6e:ae:da:09:94:61:da:13:bc:e8:f0:c3:ad:4d: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:56:19:32:FB:C7:0D:85:E9:EF:63:9C:44:08:5A:93:55:9B:FD X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:21:fa:de:c8:ef:70:f9:34:21:db:3e:28:ec:b7:57:f4:cc: f7:d2:34:2f:18:56:3e:0c:b5:fd:37:b8:7b:fd:7b:09:04:ab: 27:0e:eb:93:f8:1e:90:b2:5a:4c:e4:3c:26:d4:90:e2:c5:b3: 48:97:b6:b2:2c:1a:8c:4e:f6:66:e6:93:dd:8f:76:8f:07:fa: 9b:8c:97:0d:41:a5:0e:ef:0d:f1:bd:2c:1f:88:46:f9:cf:fc: 5d:b1:3c:4d:91:40:02:a4:a6:59:6f:3a:4c:0a:94:d1:f9:ad: 13:0b:b4:ad:e5:c2:d3:7f:af:99:a0:6e:da:f9:7d:b3:28:c0: e9:00:c4:77:aa:f5:3c:87:00:d3:a5:a1:2a:6e:1a:45:fe:9c: 5b:3b:28:83:2b:56:c6:7a:f8:23:fe:79:21:98:11:3d:09:2f: 2a:31:39:7e:ab:2c:1f:ca:3a:80:78:3f:0f:a7:ba:61:fd:c6: 2c:4a:6f:8d:39:4c:f3:32:04:20:80:cc:4f:35:a6:e2:06:7b: 3d:4b:a3:d7:9e:53:05:ad:ae:62:80:76:7a:f0:77:c4:99:de: 83:b3:df:73:ac:4d:80:c8:6b:ae:ac:55:bc:e5:7e:1e:74:04: 2b:aa:30:7a:02:df:60:f7:84:90:a9:5c:ea:27:01:7a:eb:7b: 37:8c:cc:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUwNjMwMTgzMzI4WhcNMjUwNzA3MTgzMzI4WjAYMRYwFAYD VQQDEw02ODYyZDg3OC00MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CdsYgeJW4xACi4dfINa5sPDg2W6ssC+jRyFJvVwzwNZMqgZhz0ONM64Nr5A LTNU+Elndab4d3L0ol+/02nKZPmSqQP84OoL8TkYbOggtgjtmDxV+cPZZ5hU/cNC PB9figyKfloHNH7MousTe5eKiUtgK2fPabtwoYPyxyVroHRqH6Wr9hx+1ZO147RH JJqyMscfYIRRxApFPZ8LQbBM5tZuW7fXhOoGYKUYavDQI2ju7dH0ih/IUBcuZ5a9 2qS+drAMW5WAA5Oicv8hVtn3lCINbxikb4dWpBROtgs5Ej5DT+V8SE+pggGiOa1Z Ed/Ubq7aCZRh2hO86PDDrU3TBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8PVhky +8cNhenvY5xECFqTVZv9MB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYIfreyO9w+TQh2z4o7LdX9Mz30jQvGFY+DLX9N7h7/XsJBKsnDuuT +B6QslpM5Dwm1JDixbNIl7ayLBqMTvZm5pPdj3aPB/qbjJcNQaUO7w3xvSwfiEb5 z/xdsTxNkUACpKZZbzpMCpTR+a0TC7St5cLTf6+ZoG7a+X2zKMDpAMR3qvU8hwDT paEqbhpF/pxbOyiDK1bGevgj/nkhmBE9CS8qMTl+qywfyjqAeD8Pp7ph/cYsSm+N OUzzMgQggMxPNabiBns9S6PXnlMFra5igHZ68HfEmd6Ds99zrE2AyGuurFW85X4e dAQrqjB6At9g94SQqVzqJwF663s3jMzf -----END CERTIFICATE-----Generated at Tue Jul 1 19:57:55 2025 by rpki-client