$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: U6/nJhscSAbJqrLJzUoa3ZwCLW8743CTqZby7Y7D+ZM= Subject key identifier: F4:48:5F:8C:B5:80:DD:34:1A:61:4E:44:CF:39:B8:B5:62:81:8B:10 Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 01AC Signing time: Thu 03 Jul 2025 03:18:28 +0000 Manifest this update: Thu 03 Jul 2025 03:18:28 +0000 Manifest next update: Thu 10 Jul 2025 03:18:28 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: NRZ9WzmdGOwCd4c3bRbVll4u98KmcfWz2acB6t8wBlA=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: wjMufEaDH/y4s6T5wRstNmQqRorcPZgCttuLv7sLSbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Jul 3 03:18:28 2025 GMT Not After : Jul 10 03:18:28 2025 GMT Subject: CN=6865f684-4203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:47:f1:17:b0:5c:e5:f1:64:ae:f2:ba:76: 5a:37:12:63:59:cb:a5:dd:e1:71:1e:7c:88:5d:1d: ba:f4:ab:2c:13:f2:b7:dd:5b:a6:9c:cb:b5:d5:2b: fa:69:b5:1b:18:3f:9e:fa:7a:b8:c7:eb:76:b2:f4: 6c:74:91:8f:30:dc:b8:3a:36:e8:e8:d5:11:94:f6: 39:c1:74:34:46:b5:61:75:e4:14:9d:56:34:33:c7: 3d:33:7a:3c:70:86:2b:fd:53:7a:e0:a9:fc:79:6d: 52:e6:61:28:ab:ec:89:a4:78:c4:c0:d8:9d:31:e9: 7f:84:e3:9a:c9:2e:92:75:03:70:b2:1d:e0:4b:f8: e0:32:16:05:40:f7:f9:6e:3f:4d:96:1d:90:c5:c0: 12:ba:9b:2a:5a:e2:8d:37:96:2d:8f:0f:67:dc:d1: 4f:c4:1e:99:3d:1d:de:59:74:e4:8b:e5:6a:8f:43: e2:da:71:1c:0a:22:f8:01:6e:24:50:3a:3e:83:1a: f2:34:52:e4:6a:41:d8:1b:05:ea:09:49:99:70:2d: bf:5d:58:c9:6c:34:ca:1b:36:c7:93:d6:7d:cf:a6: 7e:6c:21:92:16:f7:0d:a5:ef:40:0e:93:1a:a6:82: ba:b3:d7:d0:7e:cd:59:4a:3b:3d:51:1e:fa:72:ab: c2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:48:5F:8C:B5:80:DD:34:1A:61:4E:44:CF:39:B8:B5:62:81:8B:10 X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:01:c0:05:ce:2f:d9:6d:53:57:df:5a:86:5a:83:64:03:15: 44:4b:88:41:30:f0:19:50:e3:10:df:86:78:0d:ba:82:1d:da: 07:9d:2b:6c:f0:56:83:ff:e3:fc:2d:d3:b3:12:7d:29:8f:f9: 0f:13:dc:4a:03:97:33:d6:1f:ba:60:0c:b3:00:51:69:6b:46: 16:27:2a:df:c8:d6:f7:ae:30:5a:57:37:6b:e8:4e:94:84:d5: 2f:04:5b:a8:de:39:32:10:dc:01:02:56:06:a8:ac:a2:24:97: 42:85:ee:c2:84:6d:a7:4a:c8:6c:21:6c:ba:12:93:4f:14:0d: 7c:d4:d3:ad:4c:07:43:ff:8d:56:bb:bb:24:02:c1:fd:1b:93: a5:a6:13:19:ec:4d:65:82:b6:cc:9b:cd:5b:8b:35:0d:de:2e: 73:88:77:de:e4:b2:64:f7:a2:67:b9:d6:a3:d4:ab:f1:e7:5a: 6f:84:37:d7:6d:9d:e0:ad:54:56:95:8a:bf:a1:98:9a:3a:b2: c5:58:6c:30:5b:fc:13:69:e0:2d:d5:1d:35:2b:8c:db:84:f2: a2:2d:85:b6:f2:cc:1e:7e:8b:58:a6:3e:55:a5:de:5b:20:61: 1c:36:55:4e:69:b0:b1:f7:4c:33:cd:25:fa:ce:90:b2:fd:0d: 81:44:b5:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjUwNzAzMDMxODI4WhcNMjUwNzEwMDMxODI4WjAYMRYwFAYD VQQDEw02ODY1ZjY4NC00MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRBH8RewXOXxZK7yunZaNxJjWcul3eFxHnyIXR269KssE/K33VumnMu11Sv6 abUbGD+e+nq4x+t2svRsdJGPMNy4Ojbo6NURlPY5wXQ0RrVhdeQUnVY0M8c9M3o8 cIYr/VN64Kn8eW1S5mEoq+yJpHjEwNidMel/hOOayS6SdQNwsh3gS/jgMhYFQPf5 bj9Nlh2QxcASupsqWuKNN5Ytjw9n3NFPxB6ZPR3eWXTki+Vqj0Pi2nEcCiL4AW4k UDo+gxryNFLkakHYGwXqCUmZcC2/XVjJbDTKGzbHk9Z9z6Z+bCGSFvcNpe9ADpMa poK6s9fQfs1ZSjs9UR76cqvCCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRIX4y1 gN00GmFORM85uLVigYsQMB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfAcAFzi/ZbVNX31qGWoNkAxVES4hBMPAZUOMQ34Z4DbqCHdoHnSts 8FaD/+P8LdOzEn0pj/kPE9xKA5cz1h+6YAyzAFFpa0YWJyrfyNb3rjBaVzdr6E6U hNUvBFuo3jkyENwBAlYGqKyiJJdChe7ChG2nSshsIWy6EpNPFA181NOtTAdD/41W u7skAsH9G5OlphMZ7E1lgrbMm81bizUN3i5ziHfe5LJk96Jnudaj1Kvx51pvhDfX bZ3grVRWlYq/oZiaOrLFWGwwW/wTaeAt1R01K4zbhPKiLYW28swefotYpj5Vpd5b IGEcNlVOabCx90wzzSX6zpCy/Q2BRLV9 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:15 2025 by rpki-client