$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: IAD/r1jsTX1M9KIcfaEQXmFpgIOtfuDx/aUwHVw4bSU= Subject key identifier: E7:EB:94:9A:94:00:15:49:E9:0C:D1:51:8E:EF:EB:D7:B9:53:28:FB Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 1555 Signing time: Wed 02 Jul 2025 17:22:23 +0000 Manifest this update: Wed 02 Jul 2025 17:22:23 +0000 Manifest next update: Wed 09 Jul 2025 17:22:23 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: jsdSmbH9I2w7bS5kiUsXLUI7dSsUUWya10NvYi/5DIM=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: KOsbjywXzZ/K7+FGj90ZwsSdzCoQ00cqJTdWfVz1UHo=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: XdNJgDmkOAWh0JRm8SzUVD6J0pIjuQDztKGWx3vGffA=) 4: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: Pc10a6GPcU3p3R3kb/3/eOvdX0ZEnj42VYzm9PFnls8=) 5: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: PpfeoNLGQRLdh5JBWtYvIsWk1BQGQBviJdo1MDzsyAk=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: 01GRE88klqRtpUQjt3HlR4NOfDaQxEKnYlzo//41TJA=) 7: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: +tASM1DYkwX/+xUea6kyerySpW2PmjdXvmrb5qzV+gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5977 (0x1759) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Jul 2 17:22:23 2025 GMT Not After : Jul 9 17:22:23 2025 GMT Subject: CN=68656acf-8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:ef:2b:e4:d1:ae:a0:69:14:e6:5e:eb:08: 88:1a:95:09:29:ca:4d:da:3e:b6:70:8c:b1:6c:b4: b1:80:bb:f8:2e:fb:15:20:13:73:bb:06:5f:ee:4f: 31:a7:f3:68:b3:cf:9b:f9:61:6d:6e:e3:01:cd:fc: 38:32:31:5f:87:1e:e6:03:40:43:16:25:a2:22:4c: 76:23:3e:9b:65:cc:7c:6a:c0:10:50:05:b8:b1:b5: 39:77:a9:f0:28:b2:df:40:04:d9:05:58:51:31:22: 5e:eb:12:43:40:10:43:c0:43:43:42:06:3c:ac:61: 63:9e:39:50:b6:11:ca:c6:81:59:9a:96:e3:a6:50: 19:47:5c:15:7b:3d:6d:0a:13:cb:cc:25:29:65:2c: 99:8f:e4:07:a0:69:22:74:f0:98:65:be:e0:84:77: b0:b5:f7:72:14:3d:61:b1:3d:1b:bb:65:5c:e1:40: 6b:4b:a6:d4:75:b3:fd:4c:fe:8b:10:ea:d0:1b:5a: ec:90:50:c0:e5:73:db:44:72:26:f0:9d:b5:de:4a: 39:6b:fe:78:80:15:1b:18:7a:b5:7f:ed:d1:98:81: a8:04:9b:22:66:f3:76:cd:b2:72:2d:0e:8d:ee:09: 73:cc:09:9a:97:1a:d3:05:9a:59:ce:42:2a:57:20: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:94:9A:94:00:15:49:E9:0C:D1:51:8E:EF:EB:D7:B9:53:28:FB X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:2a:00:3b:d5:9c:9c:90:44:58:0a:9e:12:45:e0:38:c4:56: c7:b1:84:81:9e:51:92:d9:e0:63:b1:8d:6d:3b:96:48:b2:e1: 53:66:68:06:a1:6d:8a:54:c2:da:a1:00:55:58:c5:72:30:9d: 47:99:70:05:3a:61:62:fa:bf:a1:d3:f1:66:c1:0e:0a:30:c6: e7:20:f8:d4:21:c7:e8:04:fd:d9:b3:94:01:54:22:ab:6a:92: 9d:11:60:f4:ff:38:f2:b6:7d:4d:27:ca:51:b2:82:6c:0e:13: d6:30:ac:96:38:c5:d6:ab:66:90:53:1d:ee:ce:1e:60:5b:9b: 8d:19:32:a2:3b:b3:29:2e:88:d4:7b:5d:e9:7f:9d:bf:32:7b: f5:d0:4c:9b:91:dc:37:1b:4c:18:f1:c5:97:2e:e8:76:bf:38: fc:d7:16:62:9d:34:cc:3d:ac:f1:9b:c4:85:9e:8d:32:ec:75: d7:a7:63:c6:ad:3e:f1:6b:31:cc:37:21:1c:5f:49:da:84:da: c8:cd:2a:b4:6f:50:ed:0e:6c:79:0b:5b:e1:80:b6:91:78:cf: e6:ad:f3:90:32:1f:08:d3:14:21:1e:de:98:3b:0c:46:39:89: 92:a6:47:f0:dd:9c:c8:96:04:3e:32:b8:a4:8d:93:df:67:88: 6e:89:69:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjUwNzAyMTcyMjIzWhcNMjUwNzA5MTcyMjIzWjAYMRYwFAYD VQQDEw02ODY1NmFjZi04MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1RPvK+TRrqBpFOZe6wiIGpUJKcpN2j62cIyxbLSxgLv4LvsVIBNzuwZf7k8x p/Nos8+b+WFtbuMBzfw4MjFfhx7mA0BDFiWiIkx2Iz6bZcx8asAQUAW4sbU5d6nw KLLfQATZBVhRMSJe6xJDQBBDwENDQgY8rGFjnjlQthHKxoFZmpbjplAZR1wVez1t ChPLzCUpZSyZj+QHoGkidPCYZb7ghHewtfdyFD1hsT0bu2Vc4UBrS6bUdbP9TP6L EOrQG1rskFDA5XPbRHIm8J213ko5a/54gBUbGHq1f+3RmIGoBJsiZvN2zbJyLQ6N 7glzzAmalxrTBZpZzkIqVyCOMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfrlJqU ABVJ6QzRUY7v69e5Uyj7MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBKgA71ZyckERYCp4SReA4xFbHsYSBnlGS2eBjsY1tO5ZIsuFTZmgG oW2KVMLaoQBVWMVyMJ1HmXAFOmFi+r+h0/FmwQ4KMMbnIPjUIcfoBP3Zs5QBVCKr apKdEWD0/zjytn1NJ8pRsoJsDhPWMKyWOMXWq2aQUx3uzh5gW5uNGTKiO7MpLojU e13pf52/Mnv10Eybkdw3G0wY8cWXLuh2vzj81xZinTTMPazxm8SFno0y7HXXp2PG rT7xazHMNyEcX0nahNrIzSq0b1DtDmx5C1vhgLaReM/mrfOQMh8I0xQhHt6YOwxG OYmSpkfw3ZzIlgQ+MrikjZPfZ4huiWky -----END CERTIFICATE-----Generated at Thu Jul 3 05:15:52 2025 by rpki-client