$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: A84P6H/D8y8Qo/3ApMKrBOnYS3V+t4kmNIPjVSyYUak= Subject key identifier: 78:DE:B3:3E:77:AF:26:BE:99:B3:78:3C:88:98:05:F1:9D:69:B6:43 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: F3 Signing time: Tue 01 Jul 2025 05:48:53 +0000 Manifest this update: Tue 01 Jul 2025 05:48:52 +0000 Manifest next update: Tue 08 Jul 2025 05:48:52 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: bsfaYFJ39gAefjnZpSicHYORMdMYyBSUjmD6n1823s4=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Jul 1 05:48:52 2025 GMT Not After : Jul 8 05:48:52 2025 GMT Subject: CN=686376c5-6368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:68:a1:3b:43:13:30:0a:49:c6:20:4a:21: 58:51:04:ef:9f:86:0d:1e:88:9a:56:76:88:73:96: a8:34:82:0e:30:2b:54:a6:a8:68:a3:30:86:d9:0f: 66:f5:a5:9a:5d:e7:19:ef:22:3b:a4:bd:04:55:4e: a1:8f:35:8d:d2:83:7a:aa:80:d1:15:07:c2:76:05: 14:f6:f0:d4:4d:c9:e6:af:eb:97:35:0b:33:e0:37: 65:bb:7b:66:dd:3f:15:63:a6:3e:ac:c8:e0:8d:2a: 2c:e4:a7:55:92:2f:1c:1f:f3:a4:03:ee:f3:61:df: e9:5c:5b:a0:3f:00:7a:e1:99:92:bb:e6:f0:9c:f2: 96:f0:76:c3:61:a6:f9:fb:5c:0e:2f:36:e9:56:bc: cd:71:26:c7:4c:86:04:a5:a9:2d:62:b8:22:2a:6e: 46:8d:6d:81:93:55:c8:c6:9a:20:dd:85:aa:19:1a: c8:60:e8:9d:d5:48:81:72:5f:26:bb:35:05:f5:8b: 58:09:14:6e:ea:ba:04:11:31:b7:64:d4:16:32:f8: 76:95:83:d7:fb:76:c4:92:3f:8f:63:08:60:88:4f: 99:15:0c:08:28:88:09:dc:a9:97:8c:5d:95:62:37: d6:7e:19:84:cd:f6:b5:f7:17:9a:f1:a6:f6:ba:9a: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:B3:3E:77:AF:26:BE:99:B3:78:3C:88:98:05:F1:9D:69:B6:43 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8a:b2:12:4e:d6:19:44:c7:df:37:e2:49:5f:d8:31:d3:b3: b5:ba:7a:63:96:c4:38:96:e9:d4:1c:4d:7e:fb:6d:8b:03:53: 45:95:84:19:36:e4:f4:2d:aa:ec:dd:1b:3b:68:7b:dd:a3:12: a4:db:4c:e2:e8:51:c0:ed:d4:f9:d2:b3:a8:19:b5:52:30:b3: 57:22:ec:bb:b7:c3:b3:b7:3d:53:4e:ef:ab:87:72:30:9d:1e: f9:17:df:54:33:d1:d9:fc:fe:83:e5:87:c5:d1:72:0a:6d:96: c9:d6:55:df:31:76:dd:3f:04:8f:02:a8:b2:92:0c:79:c3:33: 18:f8:f4:1f:d6:aa:3f:39:60:f8:92:21:68:a6:e0:50:0f:5f: 22:1c:0e:18:2e:71:9e:72:b9:0f:2c:8a:29:2e:4b:35:3d:86: 4b:2f:5d:9f:c4:19:f9:e4:a1:e9:b0:c3:af:d0:4b:3e:6e:c4: fd:94:6d:7d:87:69:44:4a:20:67:99:cc:c8:d0:a0:05:4b:d6: 3d:51:3c:fd:5b:d3:65:43:22:2f:7c:d0:9b:82:04:9d:13:ee: f9:1a:3b:f7:f0:1e:91:dd:88:6d:3e:2c:9f:1d:4c:ad:a2:09: b8:10:84:66:76:71:5e:42:04:fa:b0:a0:1f:f6:38:12:8c:ee: d4:18:61:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwNzAxMDU0ODUyWhcNMjUwNzA4MDU0ODUyWjAYMRYwFAYD VQQDEw02ODYzNzZjNS02MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pNooTtDEzAKScYgSiFYUQTvn4YNHoiaVnaIc5aoNIIOMCtUpqhoozCG2Q9m 9aWaXecZ7yI7pL0EVU6hjzWN0oN6qoDRFQfCdgUU9vDUTcnmr+uXNQsz4Ddlu3tm 3T8VY6Y+rMjgjSos5KdVki8cH/OkA+7zYd/pXFugPwB64ZmSu+bwnPKW8HbDYab5 +1wOLzbpVrzNcSbHTIYEpaktYrgiKm5GjW2Bk1XIxpog3YWqGRrIYOid1UiBcl8m uzUF9YtYCRRu6roEETG3ZNQWMvh2lYPX+3bEkj+PYwhgiE+ZFQwIKIgJ3KmXjF2V YjfWfhmEzfa19xea8ab2uprMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjesz53 rya+mbN4PIiYBfGdabZDMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApirISTtYZRMffN+JJX9gx07O1unpjlsQ4lunUHE1++22LA1NFlYQZ NuT0Lars3Rs7aHvdoxKk20zi6FHA7dT50rOoGbVSMLNXIuy7t8Oztz1TTu+rh3Iw nR75F99UM9HZ/P6D5YfF0XIKbZbJ1lXfMXbdPwSPAqiykgx5wzMY+PQf1qo/OWD4 kiFopuBQD18iHA4YLnGecrkPLIopLks1PYZLL12fxBn55KHpsMOv0Es+bsT9lG19 h2lESiBnmczI0KAFS9Y9UTz9W9NlQyIvfNCbggSdE+75Gjv38B6R3YhtPiyfHUyt ogm4EIRmdnFeQgT6sKAf9jgSjO7UGGFE -----END CERTIFICATE-----Generated at Tue Jul 1 11:51:47 2025 by rpki-client