$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: bBLFvVk5lVXtiWG8HpLCmrZR0inOaEtGa6Lsch0REOg= Subject key identifier: 5E:FC:C5:AF:0F:CD:89:B1:88:A4:6B:06:89:29:83:09:3B:CD:C4:0C Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BA5 Signing time: Mon 30 Jun 2025 19:07:55 +0000 Manifest this update: Mon 30 Jun 2025 19:07:54 +0000 Manifest next update: Mon 07 Jul 2025 19:07:54 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: GzltZv0ptrLDYynpPN5/NNmDDbRSyuM5sfBeOLUbgU0=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Jun 30 19:07:54 2025 GMT Not After : Jul 7 19:07:54 2025 GMT Subject: CN=6862e08b-8ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:65:69:72:9a:64:34:e2:c5:d7:69:4a:2e: fc:07:4d:50:8f:05:15:89:9c:2f:f1:3b:6c:50:50: 00:25:e8:a5:93:79:06:06:3d:a7:6a:94:4e:e6:37: cf:dd:e3:b5:61:32:90:49:9c:82:e0:96:d7:9d:19: 13:64:df:6b:b5:cf:f9:9e:dd:ad:d7:ab:b8:3a:4c: 9f:7e:16:d2:21:81:50:23:73:99:01:36:7c:32:7b: 31:4e:81:4a:3e:0b:5c:2a:df:8d:e8:31:6c:82:35: 34:ae:c1:24:ed:72:b7:69:bf:be:a4:26:07:e7:b7: 7b:c0:fa:9b:9c:a4:2f:37:28:48:44:83:6c:a8:d1: 5b:06:76:9e:38:70:bb:f5:2e:ad:1f:d4:7e:ac:8a: 43:bb:06:94:10:b0:ee:db:36:43:33:c8:10:9f:d9: af:05:05:cb:29:4c:06:8f:2c:f3:14:ef:96:29:f7: 48:83:a5:15:48:12:f0:e6:04:c9:a6:2c:7e:05:0e: 0a:5f:5b:27:55:5a:14:90:5e:0d:95:a6:24:f8:37: 14:1e:2a:96:1e:36:72:c8:ca:56:af:23:bf:d0:5a: 70:67:54:08:85:83:95:ae:21:76:45:23:87:6f:4d: 83:00:96:ec:98:2c:e6:6f:59:4e:af:70:2b:a6:5e: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FC:C5:AF:0F:CD:89:B1:88:A4:6B:06:89:29:83:09:3B:CD:C4:0C X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ce:af:86:7c:8e:a0:8a:f1:43:85:27:06:f7:bf:7d:4f:36: 8f:cf:07:dd:e7:7d:d3:71:26:48:66:be:09:19:21:81:2a:5c: 9e:ef:a6:ec:41:86:ac:06:1a:52:66:9b:e7:72:12:8b:44:a2: 8e:7c:ad:04:e6:36:9a:d8:09:2d:d7:5d:61:90:95:13:bd:28: a8:d9:8d:e9:7c:d6:38:a7:e5:98:dc:62:c6:fe:08:2a:d6:4f: 9f:7a:6d:ec:65:42:44:73:68:d6:5f:cb:e6:dc:a1:8c:9e:2d: 24:91:fd:84:f5:cc:86:2a:b0:9c:1a:b5:83:b3:fe:61:14:1e: f8:0d:a8:75:2f:f2:ef:ab:96:e8:1a:d2:2e:ca:3f:e5:6c:e2: 30:dc:6b:60:9a:ae:ef:49:27:4d:c4:22:7e:4b:52:fd:5f:f9: 7c:46:c8:11:97:1c:51:54:2e:9c:a7:d7:36:98:27:1e:7b:d4: ae:2d:bd:de:e4:97:9d:49:c5:eb:2a:94:32:b9:6d:d5:2d:33: d1:df:db:0f:e3:d0:a1:ef:fd:04:9b:88:56:6c:a1:4c:62:bb: 72:98:bc:1b:b5:7b:a9:af:94:4a:4c:5c:0f:e9:3d:5a:13:69: 13:47:58:30:da:13:94:9c:f1:10:04:77:e6:5a:a3:e5:8a:30: d4:2a:9a:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUwNjMwMTkwNzU0WhcNMjUwNzA3MTkwNzU0WjAYMRYwFAYD VQQDEw02ODYyZTA4Yi04YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnz5laXKaZDTixddpSi78B01QjwUViZwv8TtsUFAAJeilk3kGBj2napRO5jfP 3eO1YTKQSZyC4JbXnRkTZN9rtc/5nt2t16u4OkyffhbSIYFQI3OZATZ8MnsxToFK PgtcKt+N6DFsgjU0rsEk7XK3ab++pCYH57d7wPqbnKQvNyhIRINsqNFbBnaeOHC7 9S6tH9R+rIpDuwaUELDu2zZDM8gQn9mvBQXLKUwGjyzzFO+WKfdIg6UVSBLw5gTJ pix+BQ4KX1snVVoUkF4NlaYk+DcUHiqWHjZyyMpWryO/0FpwZ1QIhYOVriF2RSOH b02DAJbsmCzmb1lOr3Arpl6YhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF78xa8P zYmxiKRrBokpgwk7zcQMMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxzq+GfI6givFDhScG9799TzaPzwfd533TcSZIZr4JGSGBKlye76bs QYasBhpSZpvnchKLRKKOfK0E5jaa2Akt111hkJUTvSio2Y3pfNY4p+WY3GLG/ggq 1k+fem3sZUJEc2jWX8vm3KGMni0kkf2E9cyGKrCcGrWDs/5hFB74Dah1L/Lvq5bo GtIuyj/lbOIw3Gtgmq7vSSdNxCJ+S1L9X/l8RsgRlxxRVC6cp9c2mCcee9SuLb3e 5JedScXrKpQyuW3VLTPR39sP49Ch7/0Em4hWbKFMYrtymLwbtXupr5RKTFwP6T1a E2kTR1gw2hOUnPEQBHfmWqPlijDUKpoc -----END CERTIFICATE-----Generated at Wed Jul 2 06:52:36 2025 by rpki-client