$ rpki-client -vvf rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft File: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft (raw, json) Hash identifier: TXesgaRbacIn4DxVK5iCElHuSYmh2Oe0eoLI2pxEUjg= Subject key identifier: 05:36:D2:E7:C0:0F:7B:2C:39:16:8F:EC:04:AB:79:A6:90:06:5E:60 Authority key identifier: 9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 Certificate issuer: /CN=A915F7E7/serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft Manifest number: 0856 Signing time: Wed 02 Jul 2025 20:58:23 +0000 Manifest this update: Wed 02 Jul 2025 20:58:23 +0000 Manifest next update: Wed 09 Jul 2025 20:58:23 +0000 Files and hashes: 1: mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl (hash: i+In55/j9+h1Ls26lkHazTNEsYFKTdSt5+sXYQHWSec=) 2: F011FBC4CBDF11EAB6162265C4F9AE02.roa (hash: Ec43C0Y3q4p+M8MX6lzreXmsuhfKAufm7Yw2BAr8btg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F7E7, serialNumber=9B0510DF0672E6CFDB7254A99F5274F90DF0EF54 Validity Not Before: Jul 2 20:58:23 2025 GMT Not After : Jul 9 20:58:23 2025 GMT Subject: CN=68659d6f-27db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:71:8f:ad:9c:3b:47:52:b6:14:82:bb:30: 67:2d:55:c5:ff:a0:f8:14:22:cd:f8:dc:0d:bf:f0: 60:f7:8b:13:4a:02:2a:b5:39:cf:b9:3a:de:0e:c1: 9a:41:55:5f:b4:c8:e1:3e:62:5c:fb:5d:a7:16:4f: 82:af:db:8f:c4:c8:37:f6:f9:33:4d:ac:43:7c:3f: 11:79:8c:16:48:72:2e:ab:6c:15:b7:dc:84:b7:dd: 6c:77:5a:78:54:70:b6:0e:69:9a:a5:11:88:23:fa: e7:a0:a2:97:dc:08:ba:67:c5:0f:9b:3e:7e:5c:15: 01:31:bf:fc:d7:1a:76:c2:d1:a5:a9:a6:c0:b9:f2: 32:2b:1f:55:45:c0:06:06:27:90:ee:b2:31:f9:0a: d0:32:4b:ac:e6:2a:f4:47:a9:5a:2c:68:fe:b1:05: 06:59:bb:c1:b1:c8:f2:d9:64:84:d9:b4:d4:c8:0e: e2:21:5a:b6:96:e1:f2:74:a3:38:cc:53:ea:35:c9: 08:cd:41:1c:19:0b:9a:37:e3:25:d6:0b:ed:f2:0c: 0b:f2:34:4e:1a:c2:72:be:11:d9:6e:7e:b4:37:1f: 7e:a6:7d:8a:e4:7d:05:d3:f8:c0:39:b2:b9:e3:b7: a1:d3:ed:2e:d8:25:00:3c:e8:10:04:be:72:fb:b2: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:36:D2:E7:C0:0F:7B:2C:39:16:8F:EC:04:AB:79:A6:90:06:5E:60 X509v3 Authority Key Identifier: keyid:9B:05:10:DF:06:72:E6:CF:DB:72:54:A9:9F:52:74:F9:0D:F0:EF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F7E7/DCD0378ACBDD11EAA61F165FC4F9AE02/mwUQ3wZy5s_bclSpn1J0-Q3w71Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:16:23:76:4d:63:b7:ba:7d:f8:eb:cf:77:fd:89:2f:87:6a: b2:59:b4:92:ca:ad:22:9a:b1:89:5d:11:32:16:84:3b:ef:93: c4:30:d5:42:f1:a2:e7:1a:74:0b:0b:d8:38:9c:4d:5b:7d:04: af:3a:0d:dd:cf:e6:a0:6b:66:ed:cc:2a:2a:9a:e9:00:bf:19: 1b:55:c4:6c:1f:8a:e3:b9:9e:58:9e:94:2e:e8:9a:d9:da:92: 95:4e:0a:53:7d:2d:da:41:0e:ed:c8:b7:c7:88:df:2c:e9:b3: aa:95:2d:7f:32:15:d3:8a:f9:b1:7d:3e:af:99:90:13:f9:61: 2e:7d:8f:1e:4d:e7:ae:73:21:7a:07:bd:1c:39:d5:12:12:f0: 46:50:49:c2:08:2e:d6:63:68:4e:ec:49:17:cf:4f:ea:c6:7b: d9:8a:d9:e2:58:e1:94:92:c4:5f:0e:33:c7:f4:e8:eb:bf:10: 99:a5:73:f3:6c:20:68:4f:14:bd:2c:16:7e:91:70:2c:f7:8a: d7:ae:15:83:6d:90:b2:f2:06:91:d5:19:26:57:98:5f:a1:91: cc:6d:fa:3c:43:bc:c1:2c:80:7d:53:74:53:f2:25:55:a4:a9: b2:b4:cc:31:11:a3:1a:a6:02:82:fc:50:ed:7a:57:19:6e:84: 65:85:9a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY3RTcxMTAvBgNVBAUTKDlCMDUxMERGMDY3MkU2Q0ZEQjcyNTRBOTlGNTI3NEY5 MERGMEVGNTQwHhcNMjUwNzAyMjA1ODIzWhcNMjUwNzA5MjA1ODIzWjAYMRYwFAYD VQQDEw02ODY1OWQ2Zi0yN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrlxj62cO0dSthSCuzBnLVXF/6D4FCLN+NwNv/Bg94sTSgIqtTnPuTreDsGa QVVftMjhPmJc+12nFk+Cr9uPxMg39vkzTaxDfD8ReYwWSHIuq2wVt9yEt91sd1p4 VHC2DmmapRGII/rnoKKX3Ai6Z8UPmz5+XBUBMb/81xp2wtGlqabAufIyKx9VRcAG BieQ7rIx+QrQMkus5ir0R6laLGj+sQUGWbvBscjy2WSE2bTUyA7iIVq2luHydKM4 zFPqNckIzUEcGQuaN+Ml1gvt8gwL8jROGsJyvhHZbn60Nx9+pn2K5H0F0/jAObK5 47eh0+0u2CUAPOgQBL5y+7JIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU20ufA D3ssORaP7ASreaaQBl5gMB8GA1UdIwQYMBaAFJsFEN8GcubP23JUqZ9SdPkN8O9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjdFNy9EQ0QwMzc4QUNC REQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVzX2JjbFNwbjFKMC1RM3c3 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213VVEzd1p5NXNfYmNsU3BuMUowLVEzdzcxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjdFNy9EQ0QwMzc4QUNCREQxMUVBQTYxRjE2NUZDNEY5QUUwMi9td1VRM3daeTVz X2JjbFNwbjFKMC1RM3c3MVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGFiN2TWO3un346893/Ykvh2qyWbSSyq0imrGJXREyFoQ775PEMNVC 8aLnGnQLC9g4nE1bfQSvOg3dz+aga2btzCoqmukAvxkbVcRsH4rjuZ5YnpQu6JrZ 2pKVTgpTfS3aQQ7tyLfHiN8s6bOqlS1/MhXTivmxfT6vmZAT+WEufY8eTeeucyF6 B70cOdUSEvBGUEnCCC7WY2hO7EkXz0/qxnvZitniWOGUksRfDjPH9OjrvxCZpXPz bCBoTxS9LBZ+kXAs94rXrhWDbZCy8gaR1RkmV5hfoZHMbfo8Q7zBLIB9U3RT8iVV pKmytMwxEaMapgKC/FDtelcZboRlhZrp -----END CERTIFICATE-----Generated at Thu Jul 3 17:31:30 2025 by rpki-client