$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: K8APGli13gyBVP09MZXLMwcblis69SlaRvnCBVFd8Nk= Subject key identifier: CD:EA:E9:CA:69:A7:AB:87:8E:62:0A:2B:2A:E4:22:23:BA:2A:71:AA Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0CA3 Signing time: Wed 02 Jul 2025 18:25:51 +0000 Manifest this update: Wed 02 Jul 2025 18:25:50 +0000 Manifest next update: Wed 09 Jul 2025 18:25:50 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: iHVEKA1ICJG4jMe7A2OTh560CbLzPstaZm8h/5jQNEA=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Jul 2 18:25:50 2025 GMT Not After : Jul 9 18:25:50 2025 GMT Subject: CN=686579af-70f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a4:69:29:60:37:93:7a:3c:1a:c3:4e:1a:4b: 64:a2:4b:37:3a:74:1c:5e:de:ae:81:26:3c:3c:14: 15:85:02:a9:0a:42:3b:5e:5f:89:78:e0:b1:f0:7d: 83:e6:9a:17:b4:40:c9:b8:48:cf:db:25:a5:6e:ef: 0b:48:31:b3:cb:d5:bc:5a:3c:31:d7:19:31:4c:df: 1e:e0:22:e3:a7:4a:ae:a5:71:14:48:1d:c8:b3:40: 70:3d:d7:00:c1:c8:77:be:0c:d6:09:a7:2d:d0:5e: 74:6e:c0:3b:b7:5c:ca:a2:24:32:ce:ea:09:c7:65: 53:6b:4b:eb:9d:c6:a4:c0:e1:a1:92:9e:d9:17:19: 51:8e:4c:3d:2e:59:fe:fa:f8:d6:68:08:92:da:ad: 9b:cf:07:ab:6e:95:8f:9a:1b:fd:37:98:02:40:e3: 14:c9:f5:dd:57:bb:14:da:91:7e:91:17:ca:b2:30: bc:2f:61:f6:d6:45:9c:e4:8c:53:15:43:0d:a5:3f: 57:c3:c6:43:6d:06:84:9e:23:52:a0:b8:23:ce:0a: a6:e2:44:c6:ce:35:59:a5:e1:1e:8f:74:b0:f7:c4: 22:68:48:b2:b8:58:e8:ea:f0:65:d2:26:4c:06:51: de:ca:2e:cd:cf:1c:e6:b3:2c:19:84:e9:a5:b6:d8: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EA:E9:CA:69:A7:AB:87:8E:62:0A:2B:2A:E4:22:23:BA:2A:71:AA X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ef:23:72:bb:90:40:d3:58:fb:40:45:15:8c:38:6e:d4:51: 4b:49:28:21:19:c0:aa:fa:51:95:a1:52:32:db:ca:dc:79:45: f3:e7:f0:fe:95:55:4e:08:a3:0c:73:02:fd:ba:4a:d9:cc:1d: f9:c3:81:10:dd:4d:88:b9:db:35:19:21:13:26:93:86:ff:dc: b5:1b:32:75:09:62:d4:d9:aa:0d:f2:ad:ad:16:fe:aa:24:e6: c2:a2:83:4d:18:ce:7b:e6:96:08:dd:10:15:65:64:7a:ff:6b: 05:c9:9c:a2:11:15:73:0b:fa:21:e8:35:8a:41:8a:3d:c8:68: 3d:aa:61:18:ca:45:40:03:d5:dc:1f:29:6f:bb:fd:68:4b:6f: 72:30:dc:b2:2a:99:df:bf:35:cf:8f:58:3d:d6:cd:36:f1:44: 72:f2:2e:99:53:0d:ef:1d:ab:9f:60:e2:63:30:be:8f:fb:dd: cb:65:11:c8:cf:5e:f0:5d:b9:2e:2d:d6:bd:c0:58:24:39:95: 44:45:76:1c:9f:f9:89:8c:a3:6b:a9:4d:65:e3:53:31:bb:26: 6f:f7:77:11:f3:95:fb:36:55:43:21:0d:45:dd:6c:19:1a:af: 9a:36:7d:be:4a:8d:e4:b7:7c:5d:0c:86:5a:99:ac:8a:6a:23: b0:b7:24:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjUwNzAyMTgyNTUwWhcNMjUwNzA5MTgyNTUwWjAYMRYwFAYD VQQDEw02ODY1NzlhZi03MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qRpKWA3k3o8GsNOGktkoks3OnQcXt6ugSY8PBQVhQKpCkI7Xl+JeOCx8H2D 5poXtEDJuEjP2yWlbu8LSDGzy9W8Wjwx1xkxTN8e4CLjp0qupXEUSB3Is0BwPdcA wch3vgzWCact0F50bsA7t1zKoiQyzuoJx2VTa0vrncakwOGhkp7ZFxlRjkw9Lln+ +vjWaAiS2q2bzwerbpWPmhv9N5gCQOMUyfXdV7sU2pF+kRfKsjC8L2H21kWc5IxT FUMNpT9Xw8ZDbQaEniNSoLgjzgqm4kTGzjVZpeEej3Sw98QiaEiyuFjo6vBl0iZM BlHeyi7NzxzmsywZhOmlttiDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3q6cpp p6uHjmIKKyrkIiO6KnGqMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg7yNyu5BA01j7QEUVjDhu1FFLSSghGcCq+lGVoVIy28rceUXz5/D+ lVVOCKMMcwL9ukrZzB35w4EQ3U2Iuds1GSETJpOG/9y1GzJ1CWLU2aoN8q2tFv6q JObCooNNGM575pYI3RAVZWR6/2sFyZyiERVzC/oh6DWKQYo9yGg9qmEYykVAA9Xc Hylvu/1oS29yMNyyKpnfvzXPj1g91s028URy8i6ZUw3vHaufYOJjML6P+93LZRHI z17wXbkuLda9wFgkOZVERXYcn/mJjKNrqU1l41MxuyZv93cR85X7NlVDIQ1F3WwZ Gq+aNn2+So3kt3xdDIZamayKaiOwtyQD -----END CERTIFICATE-----Generated at Thu Jul 3 10:31:33 2025 by rpki-client