$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json) Hash identifier: 7/BNg7R17Mg1Rwhkj/1amyGR5H/6nt/25eROgJr7qDw= Subject key identifier: AC:05:67:37:5D:31:5A:03:6E:A0:90:CF:34:75:EA:39:14:87:78:29 Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft Manifest number: 2C Signing time: Thu 03 Jul 2025 07:59:20 +0000 Manifest this update: Thu 03 Jul 2025 07:59:19 +0000 Manifest next update: Thu 10 Jul 2025 07:59:19 +0000 Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: iCo0fOPivNb31ZqH+8A54mHdqx8MFGKHYeXsFXwgZlA=) 2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=) 3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Validity Not Before: Jul 3 07:59:19 2025 GMT Not After : Jul 10 07:59:19 2025 GMT Subject: CN=68663857-9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:a8:d3:ff:93:68:1f:1d:66:de:2a:30:f9: 35:c8:32:09:63:e8:8a:94:27:e6:e8:c0:87:89:49: 13:12:19:f0:4a:e7:11:59:2e:85:76:ec:f5:e8:40: ba:54:37:c0:a5:21:86:86:8d:c0:e5:2d:8a:44:f4: 08:ea:c7:0c:9b:e1:ef:81:6d:b9:b8:62:0a:ec:d6: a5:10:7a:db:da:6b:9b:6a:bd:69:f3:6c:60:6a:06: 41:55:74:b7:b9:5a:86:b5:2a:eb:f2:1d:93:18:ba: da:9c:c0:cf:07:8f:98:90:bf:02:77:64:07:1f:4f: 19:be:70:84:e0:3b:6d:cd:c6:b3:3c:38:c4:11:8d: c3:df:6f:2c:3a:0e:8f:fa:4d:d9:92:82:2b:21:91: e1:82:f6:45:82:14:e6:61:24:90:23:af:30:78:ee: c8:ce:7e:81:90:17:65:41:15:1d:ea:e0:5d:28:51: d7:f8:ea:5e:6d:a0:e5:90:69:7e:a9:02:ec:bf:ad: 03:dd:84:22:5a:d8:c7:11:f1:b9:53:37:4b:ae:b1: a5:6b:f8:75:bb:10:15:f0:34:ba:94:ef:50:7b:b0: 51:9f:2a:30:b0:3c:ee:18:43:6d:c4:b7:3b:30:b4: 46:78:0f:e7:e2:d0:3d:76:05:eb:ea:ea:9d:9a:45: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:05:67:37:5D:31:5A:03:6E:A0:90:CF:34:75:EA:39:14:87:78:29 X509v3 Authority Key Identifier: keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:df:8c:4a:f3:49:6e:b1:ec:77:c9:ca:37:02:05:11:fd:95: 73:c9:10:9d:ce:85:99:ce:c1:c0:9d:00:2b:1b:65:94:d4:c3: 33:c7:29:64:cb:70:22:74:0c:d3:bb:7c:14:cc:1d:6c:49:1c: 14:e0:c8:50:2b:66:f1:dc:43:08:b8:b4:e8:f4:f7:0c:3f:f5: 60:82:05:61:28:7c:19:d7:7c:ed:0a:87:60:25:ae:34:33:3b: f4:ab:6f:1d:56:38:93:d2:44:b1:7c:cb:62:b5:32:9e:70:90: a3:dd:7e:42:e6:39:2a:3d:fe:fa:7e:4d:9e:0d:0c:e0:71:a2: 9f:30:f8:eb:7e:33:07:07:08:17:70:1a:70:a0:b4:87:c1:ea: ed:28:2e:4f:a5:b9:97:bf:18:92:f1:c5:ea:71:8d:73:ff:66: d6:cd:47:af:e1:cc:e7:fe:2e:e2:1d:6b:5c:a2:71:0e:41:ba: 95:70:30:84:73:d3:38:cd:bb:c9:e5:74:a1:02:75:73:e0:75: 28:b0:ae:c9:15:0f:a3:e6:ca:84:b3:dd:2f:b6:21:ef:f2:90: d9:b4:5c:c2:66:c0:58:15:89:ad:a5:4f:82:be:04:b7:3e:4e: 0c:2b:04:f0:76:28:83:cd:32:dc:18:6f:fc:1c:c8:94:12:3e: 52:9a:25:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTAxMjExMC8GA1UEBRMoRjlCNDAyMkMwMjlFN0Q5RTVBNjM0OTY4RkRCQTRBMEU5 Q0Q2MjRFNDAeFw0yNTA3MDMwNzU5MTlaFw0yNTA3MTAwNzU5MTlaMBgxFjAUBgNV BAMTDTY4NjYzODU3LTllMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKyqjT/5NoHx1m3iow+TXIMglj6IqUJ+bowIeJSRMSGfBK5xFZLoV27PXoQLpU N8ClIYaGjcDlLYpE9Ajqxwyb4e+Bbbm4Ygrs1qUQetvaa5tqvWnzbGBqBkFVdLe5 Woa1KuvyHZMYutqcwM8Hj5iQvwJ3ZAcfTxm+cITgO23NxrM8OMQRjcPfbyw6Do/6 TdmSgishkeGC9kWCFOZhJJAjrzB47sjOfoGQF2VBFR3q4F0oUdf46l5toOWQaX6p Auy/rQPdhCJa2McR8blTN0uusaVr+HW7EBXwNLqU71B7sFGfKjCwPO4YQ23Etzsw tEZ4D+fi0D12Bevq6p2aRdBpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrAVnN10x WgNuoJDPNHXqORSHeCkwHwYDVR0jBBgwFoAU+bQCLAKefZ5aY0lo/bpKDpzWJOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDEyL0I4MUFBMjU4MTQx MzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWJRQ0xBS2VmWjVhWTBsb19icEtEcHpXSk9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MDEyL0I4MUFBMjU4MTQxMzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1 YVkwbG9fYnBLRHB6V0pPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJTfjErzSW6x7HfJyjcCBRH9lXPJEJ3OhZnOwcCdACsbZZTUwzPHKWTL cCJ0DNO7fBTMHWxJHBTgyFArZvHcQwi4tOj09ww/9WCCBWEofBnXfO0Kh2AlrjQz O/Srbx1WOJPSRLF8y2K1Mp5wkKPdfkLmOSo9/vp+TZ4NDOBxop8w+Ot+MwcHCBdw GnCgtIfB6u0oLk+luZe/GJLxxepxjXP/ZtbNR6/hzOf+LuIda1yicQ5BupVwMIRz 0zjNu8nldKECdXPgdSiwrskVD6PmyoSz3S+2Ie/ykNm0XMJmwFgVia2lT4K+BLc+ TgwrBPB2KIPNMtwYb/wcyJQSPlKaJU4= -----END CERTIFICATE-----Generated at Thu Jul 3 09:43:12 2025 by rpki-client