$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft File: 0dZcikMk4of26pFbOfXTYC0eN6Y.mft (raw, json) Hash identifier: X4FE/hfkwBfLvLN0ieYha0gz9R914V2wltmbNfRE6uM= Subject key identifier: D7:77:4F:DA:E5:7E:23:6F:5E:F6:86:A1:DB:2B:72:FD:56:C4:9F:48 Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Certificate serial: 1821 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft Manifest number: 180F Signing time: Sat 28 Jun 2025 16:25:02 +0000 Manifest this update: Sat 28 Jun 2025 16:25:01 +0000 Manifest next update: Sat 05 Jul 2025 16:25:01 +0000 Files and hashes: 1: 0dZcikMk4of26pFbOfXTYC0eN6Y.crl (hash: U8npjxAQ1lI8mb4QIaoos7wjnwVYgewXGvC7aYy+z2I=) 2: 8B2EE9667A0911EE934F1262C4F9AE02.roa (hash: c58kYquiR7PhXwHG1m2k+88ex1+jC31dtd+q7AHBr2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6177 (0x1821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6 Validity Not Before: Jun 28 16:25:01 2025 GMT Not After : Jul 5 16:25:01 2025 GMT Subject: CN=6860175d-89e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7e:3b:ac:d4:28:32:dc:0b:64:c0:e2:a9:e7: 5b:56:43:d0:98:87:eb:9d:e2:29:c5:0d:23:fa:fd: e5:5b:3f:8d:e8:fc:70:d8:b1:a6:87:0a:14:64:d4: 14:54:25:85:ae:ac:3d:63:26:2f:31:d3:fc:98:85: 28:1b:1f:20:2c:a0:04:00:ca:1d:32:ff:a5:2b:9d: 32:08:04:26:39:ad:d8:84:82:6c:18:41:8e:df:5c: d5:26:5a:1a:a8:12:a5:d2:4d:1e:b7:5e:88:9e:8d: 9c:db:96:04:fc:9d:eb:7c:71:58:35:be:fc:82:69: ec:da:ec:c9:80:81:5e:67:2d:c5:72:d8:cf:01:a7: 5c:0d:95:a4:86:a2:78:aa:29:df:f7:d4:f2:ae:25: 04:7e:6f:61:3b:22:ad:38:7b:9f:ad:a3:c3:82:08: f7:e6:e4:88:26:5c:f1:f1:36:6f:e5:c0:05:a9:42: 27:d7:a4:81:9b:d7:ed:7d:b9:4c:2f:a2:3d:77:cd: c7:00:dc:1c:fb:27:40:ab:8d:c1:3b:4b:75:3a:7f: dd:8a:8c:42:3c:d3:03:27:62:6e:64:cc:f2:ed:a1: 47:72:bd:8e:58:40:bc:f3:a0:02:96:a8:db:aa:b7: cd:6c:1d:81:5b:64:ef:fb:e7:15:08:db:56:d9:ac: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:77:4F:DA:E5:7E:23:6F:5E:F6:86:A1:DB:2B:72:FD:56:C4:9F:48 X509v3 Authority Key Identifier: keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ea:b9:bc:a7:0d:47:a9:9e:e8:94:8b:df:78:a3:21:3c:36: ea:12:1d:80:42:0d:32:34:67:7b:10:40:ea:cc:2c:71:e1:b4: 07:33:6e:d0:36:eb:04:d7:03:ac:7e:04:2f:d1:4d:2f:81:cb: 83:39:71:ee:75:71:d1:41:25:ed:bc:57:89:7c:87:88:f5:5f: 72:c5:be:19:57:e2:18:46:e4:23:50:8a:ea:7b:65:b6:0c:ae: a2:6e:3f:51:16:54:f2:cc:d7:15:ad:6c:09:94:b6:87:24:6f: 10:8e:ad:54:c0:10:6f:42:98:60:5a:ec:66:17:28:cf:d3:70: 04:72:ca:a2:86:62:3b:47:93:51:c5:5a:f7:66:51:3a:67:a4: 08:16:66:9d:6a:de:43:02:67:9e:25:18:5c:0d:80:c6:47:50: d5:a0:85:88:32:37:a0:51:7b:30:98:aa:f7:d7:e0:d3:f0:4a: 39:b0:cc:3c:4f:cf:88:4c:3f:c1:14:f7:1a:5e:eb:e5:4e:54: f9:b5:dd:ac:ca:de:18:18:22:eb:9b:df:37:b3:6f:5b:6c:5e: c6:2c:7d:18:c4:d1:04:7a:83:44:94:ab:20:4f:f7:71:34:18: 19:7f:48:b9:9b:40:f3:a3:4a:a6:39:9f:2f:ca:56:45:0a:72: 81:4e:e5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQzRUYxMTAvBgNVBAUTKEQxRDY1QzhBNDMyNEUyODdGNkVBOTE1QjM5RjVEMzYw MkQxRTM3QTYwHhcNMjUwNjI4MTYyNTAxWhcNMjUwNzA1MTYyNTAxWjAYMRYwFAYD VQQDEw02ODYwMTc1ZC04OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2n47rNQoMtwLZMDiqedbVkPQmIfrneIpxQ0j+v3lWz+N6Pxw2LGmhwoUZNQU VCWFrqw9YyYvMdP8mIUoGx8gLKAEAModMv+lK50yCAQmOa3YhIJsGEGO31zVJloa qBKl0k0et16Ino2c25YE/J3rfHFYNb78gmns2uzJgIFeZy3FctjPAadcDZWkhqJ4 qinf99TyriUEfm9hOyKtOHufraPDggj35uSIJlzx8TZv5cAFqUIn16SBm9ftfblM L6I9d83HANwc+ydAq43BO0t1On/dioxCPNMDJ2JuZMzy7aFHcr2OWEC886AClqjb qrfNbB2BW2Tv++cVCNtW2aztgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd3T9rl fiNvXvaGodsrcv1WxJ9IMB8GA1UdIwQYMBaAFNHWXIpDJOKH9uqRWzn102AtHjem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDNFRi9FNkFCQjAxMEJB NDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRvZjI2cEZiT2ZYVFlDMGVO NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBkWmNpa01rNG9mMjZwRmJPZlhUWUMwZU42WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDNFRi9FNkFCQjAxMEJBNDAxMUU3QTA4RDI2NkZDNEY5QUUwMi8wZFpjaWtNazRv ZjI2cEZiT2ZYVFlDMGVONlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw6rm8pw1HqZ7olIvfeKMhPDbqEh2AQg0yNGd7EEDqzCxx4bQHM27Q NusE1wOsfgQv0U0vgcuDOXHudXHRQSXtvFeJfIeI9V9yxb4ZV+IYRuQjUIrqe2W2 DK6ibj9RFlTyzNcVrWwJlLaHJG8Qjq1UwBBvQphgWuxmFyjP03AEcsqihmI7R5NR xVr3ZlE6Z6QIFmadat5DAmeeJRhcDYDGR1DVoIWIMjegUXswmKr31+DT8Eo5sMw8 T8+ITD/BFPcaXuvlTlT5td2syt4YGCLrm983s29bbF7GLH0YxNEEeoNElKsgT/dx NBgZf0i5m0Dzo0qmOZ8vylZFCnKBTuWM -----END CERTIFICATE-----Generated at Sun Jun 29 10:58:40 2025 by rpki-client