$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: 2ZCNRo/NJ2abyaYobIftdvTdZNAxK9HmYDXQfiIhMEU= Subject key identifier: 0A:A5:E1:26:77:9F:E2:FA:6D:85:3C:03:AE:11:0E:19:3F:FD:4F:3E Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 3474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 3473 Signing time: Wed 02 Jul 2025 15:24:50 +0000 Manifest this update: Wed 02 Jul 2025 15:24:49 +0000 Manifest next update: Wed 09 Jul 2025 15:24:49 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: BDGG36HV6tdxNmgG8l4phvvfi8wG6BdRpaego8MSRX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13428 (0x3474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Jul 2 15:24:49 2025 GMT Not After : Jul 9 15:24:49 2025 GMT Subject: CN=68654f41-fa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:9b:69:ba:97:75:00:e3:ad:5d:31:ac:a5: c3:38:ba:fb:5a:e1:04:6e:28:ea:bc:bf:29:f1:70: b9:03:0a:f0:09:fd:00:48:c8:a1:76:4d:9a:68:11: 1a:a8:b2:d3:42:8b:1b:23:2b:cc:88:ff:e0:34:94: 07:da:a0:a1:95:dd:05:60:ab:88:d9:42:ba:51:d2: 28:8e:da:d6:14:2c:7b:9a:67:2b:a8:a9:37:8a:01: 5a:16:5c:b3:4a:e7:62:5d:da:18:25:21:72:b0:6f: 62:eb:f4:2c:60:30:9a:57:91:9c:65:3b:2f:a6:0a: 9f:5c:2f:a1:20:99:9f:97:04:39:4d:0a:50:5f:b9: 28:7c:5a:9a:f7:45:9f:3c:4b:ec:9e:6d:b7:7d:b1: fd:87:fa:0c:50:fa:50:55:36:69:fc:03:01:0d:c3: 19:a5:01:05:68:11:3c:26:33:04:eb:d0:c5:3b:15: 18:dc:33:f1:01:bc:7d:d8:d1:2f:6c:46:ce:1c:b6: 56:35:f6:86:d3:49:16:65:1e:f6:a3:5f:6c:2f:00: bf:d6:9b:19:1a:6e:4d:81:a1:48:83:f7:12:ad:ee: 67:c4:90:32:8b:32:a5:ae:77:e9:54:79:9e:79:ec: 46:ed:74:63:5b:db:57:c7:fb:b9:68:56:f7:07:5c: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A5:E1:26:77:9F:E2:FA:6D:85:3C:03:AE:11:0E:19:3F:FD:4F:3E X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d0:f3:ff:48:b6:35:df:99:10:c0:cd:85:10:60:ca:2a:9e: ba:90:eb:10:f9:b8:ce:41:63:bc:f5:36:46:dd:ce:72:1a:cc: c1:22:dc:5a:7b:1f:ab:ad:68:2a:2e:2d:a7:2c:4c:58:23:4b: d0:b9:25:c0:2f:3c:71:17:f6:3a:9e:b9:5f:c4:88:bb:e1:b2: 03:28:d8:e0:96:e7:c0:96:2e:2d:66:9e:bc:be:e7:f6:42:9b: 79:e2:6d:0f:46:31:96:81:b5:e3:72:1e:e1:a6:21:0c:ce:04: f9:de:f0:ef:0f:5c:25:fc:a6:84:8d:63:42:94:34:e0:94:08: 7e:3e:fa:29:c0:55:e8:65:3f:9b:f7:5d:f0:be:95:fc:74:83: 70:f4:66:ca:61:f0:b7:2e:c5:d7:4a:3c:df:c0:c0:20:10:c6: 2b:22:a1:31:df:64:18:f8:32:4c:8c:dd:3e:b9:7c:b4:16:b1: da:ac:dc:f7:c8:a1:98:62:1e:19:26:e5:66:9f:f9:64:33:cf: 40:c4:20:0c:bf:b6:55:a9:dc:d4:29:8b:c8:03:01:8c:fe:87: be:cd:00:04:6a:28:22:1b:b3:08:85:e3:b3:f5:62:34:7b:4d: 5d:37:f0:59:d7:f5:3e:0b:40:c1:55:f3:77:24:95:7a:ae:42: ca:5c:71:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwNzAyMTUyNDQ5WhcNMjUwNzA5MTUyNDQ5WjAYMRYwFAYD VQQDEw02ODY1NGY0MS1mYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGubabqXdQDjrV0xrKXDOLr7WuEEbijqvL8p8XC5AwrwCf0ASMihdk2aaBEa qLLTQosbIyvMiP/gNJQH2qChld0FYKuI2UK6UdIojtrWFCx7mmcrqKk3igFaFlyz SudiXdoYJSFysG9i6/QsYDCaV5GcZTsvpgqfXC+hIJmflwQ5TQpQX7kofFqa90Wf PEvsnm23fbH9h/oMUPpQVTZp/AMBDcMZpQEFaBE8JjME69DFOxUY3DPxAbx92NEv bEbOHLZWNfaG00kWZR72o19sLwC/1psZGm5NgaFIg/cSre5nxJAyizKlrnfpVHme eexG7XRjW9tXx/u5aFb3B1yY5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAql4SZ3 n+L6bYU8A64RDhk//U8+MB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ0PP/SLY135kQwM2FEGDKKp66kOsQ+bjOQWO89TZG3c5yGszBItxa ex+rrWgqLi2nLExYI0vQuSXALzxxF/Y6nrlfxIi74bIDKNjglufAli4tZp68vuf2 Qpt54m0PRjGWgbXjch7hpiEMzgT53vDvD1wl/KaEjWNClDTglAh+PvopwFXoZT+b 913wvpX8dINw9GbKYfC3LsXXSjzfwMAgEMYrIqEx32QY+DJMjN0+uXy0FrHarNz3 yKGYYh4ZJuVmn/lkM89AxCAMv7ZVqdzUKYvIAwGM/oe+zQAEaigiG7MIheOz9WI0 e01dN/BZ1/U+C0DBVfN3JJV6rkLKXHGJ -----END CERTIFICATE-----Generated at Thu Jul 3 01:03:42 2025 by rpki-client