$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: G07Bqv3FORCZkJHuYlP/M1eFYzjZKFkv2rbd9ph1CBs= Subject key identifier: FA:78:7D:25:BD:20:E5:2A:CB:A8:7E:96:40:7E:F1:E3:05:65:1C:0D Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0799 Signing time: Sat 28 Jun 2025 21:01:15 +0000 Manifest this update: Sat 28 Jun 2025 21:01:15 +0000 Manifest next update: Sat 05 Jul 2025 21:01:15 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: uM2KuSx6qmVqA/GsWTc5px/CcfDd3HIIZugJWvpugds=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Jun 28 21:01:15 2025 GMT Not After : Jul 5 21:01:15 2025 GMT Subject: CN=6860581b-a3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:f4:1c:b4:76:50:aa:fd:f0:ac:5c:52:e3: 07:1a:83:6d:c4:e9:54:6d:e8:1a:96:25:fd:81:48: be:a5:c8:0c:b8:84:eb:8e:03:dc:53:28:c4:1e:ff: 49:90:6e:be:b4:ab:f9:c0:b2:f1:f4:74:ad:ea:1b: f5:89:f0:99:53:14:aa:a5:92:ac:f0:64:d2:50:df: 15:e3:23:c4:38:1a:ca:4d:0f:76:cc:99:b5:4b:95: 78:c3:0f:fb:fd:d6:7b:4c:74:8f:3a:2b:c6:03:8b: dc:b3:02:27:77:46:6d:14:90:12:9d:91:d4:6c:c9: 5c:46:1b:3d:06:49:74:c9:64:62:c4:3d:36:79:a2: eb:ae:3e:63:f9:bb:0d:ca:ac:b3:72:e5:17:93:a9: 33:67:9a:ac:67:58:b5:a4:f4:d7:31:0f:cc:d8:ea: 23:75:5c:d4:05:04:e9:90:1a:f9:a5:a5:5b:08:35: 46:7e:b7:41:64:68:cb:0c:94:6d:6a:4b:ae:5b:11: ed:9d:b2:b8:2c:a7:e5:d2:04:a0:55:0c:01:f0:98: 82:be:fc:3d:e0:e4:58:a3:f3:be:ca:6a:98:71:f7: 10:12:73:97:41:29:a4:6f:87:b6:64:10:75:e1:d5: ab:e5:fe:c7:8e:73:4c:89:a4:22:8e:6f:3c:bb:13: 81:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:78:7D:25:BD:20:E5:2A:CB:A8:7E:96:40:7E:F1:E3:05:65:1C:0D X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:9d:3f:87:1b:57:8a:64:2d:8b:33:7d:6a:40:9c:29:87: cb:9b:c7:dd:5b:2b:3a:98:31:5c:a0:33:38:e0:0a:fc:fb:ea: 44:5c:11:b9:46:ce:77:b0:0a:8a:76:85:fa:a2:24:1f:8d:a9: 44:fa:80:a0:7d:49:e2:0b:db:66:ff:c5:c9:6d:26:00:8e:24: de:73:54:54:dd:77:b4:1e:1f:ab:1e:0a:bf:e4:3f:5e:d9:21: 0a:fa:52:50:36:19:d6:48:61:e8:da:98:35:c1:8b:4a:92:14: 96:74:32:68:57:41:b2:20:70:f5:bf:ca:ea:a1:48:26:fc:0a: 2b:96:e5:ad:25:ea:8b:69:d3:1e:4f:d9:de:ea:3f:7c:90:0c: 1f:56:4d:e8:b2:71:27:86:45:a2:44:cd:04:4a:13:57:8d:29: c2:7c:29:f1:0e:59:fc:dd:44:4a:da:5a:cf:80:28:d2:2f:99: ac:bf:87:f6:46:a0:34:08:f8:45:5e:6e:80:59:a4:8c:fa:f6: 69:05:f6:d9:19:9d:3b:0b:7a:86:6b:e7:dc:df:c0:23:12:28: 37:e0:81:4e:92:26:61:73:0a:bb:ce:de:bb:80:94:36:1b:51: 00:f5:c8:4f:ce:a6:ed:3b:b1:e9:2e:0f:af:81:0e:0f:ca:f5: f6:f0:72:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwNjI4MjEwMTE1WhcNMjUwNzA1MjEwMTE1WjAYMRYwFAYD VQQDEw02ODYwNTgxYi1hM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBz0HLR2UKr98KxcUuMHGoNtxOlUbegaliX9gUi+pcgMuITrjgPcUyjEHv9J kG6+tKv5wLLx9HSt6hv1ifCZUxSqpZKs8GTSUN8V4yPEOBrKTQ92zJm1S5V4ww/7 /dZ7THSPOivGA4vcswInd0ZtFJASnZHUbMlcRhs9Bkl0yWRixD02eaLrrj5j+bsN yqyzcuUXk6kzZ5qsZ1i1pPTXMQ/M2OojdVzUBQTpkBr5paVbCDVGfrdBZGjLDJRt akuuWxHtnbK4LKfl0gSgVQwB8JiCvvw94ORYo/O+ymqYcfcQEnOXQSmkb4e2ZBB1 4dWr5f7HjnNMiaQijm88uxOBfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPp4fSW9 IOUqy6h+lkB+8eMFZRwNMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByU50/hxtXimQtizN9akCcKYfLm8fdWys6mDFcoDM44Ar8++pEXBG5 Rs53sAqKdoX6oiQfjalE+oCgfUniC9tm/8XJbSYAjiTec1RU3Xe0Hh+rHgq/5D9e 2SEK+lJQNhnWSGHo2pg1wYtKkhSWdDJoV0GyIHD1v8rqoUgm/AorluWtJeqLadMe T9ne6j98kAwfVk3osnEnhkWiRM0EShNXjSnCfCnxDln83URK2lrPgCjSL5msv4f2 RqA0CPhFXm6AWaSM+vZpBfbZGZ07C3qGa+fc38AjEig34IFOkiZhcwq7zt67gJQ2 G1EA9chPzqbtO7HpLg+vgQ4PyvX28HK6 -----END CERTIFICATE-----Generated at Sun Jun 29 14:45:18 2025 by rpki-client