$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: XE6eNY841yrHJ3aMc6dnuS2pvCEwZT3/NnqviwT7xHE= Subject key identifier: 39:6B:BF:42:8E:63:E8:EA:56:9A:CB:DA:AD:D9:17:86:B0:AE:9E:B4 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 0115 Signing time: Tue 01 Jul 2025 05:25:00 +0000 Manifest this update: Tue 01 Jul 2025 05:24:59 +0000 Manifest next update: Tue 08 Jul 2025 05:24:59 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: O0bHfFgHVizAYrvHMOGqjCAfpF0K84eURMDDt/dx3hs=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Jul 1 05:24:59 2025 GMT Not After : Jul 8 05:24:59 2025 GMT Subject: CN=6863712c-760c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:57:6c:5a:50:24:79:c5:91:03:1d:f4:46: 01:fa:51:d1:1a:88:5b:fc:9d:84:b7:1c:2f:af:c6: e8:4d:97:45:15:57:11:18:5f:a8:c3:4b:f2:ae:2a: 2a:8f:a9:05:b6:f9:01:31:6e:e1:23:5a:46:95:f6: 42:88:9a:b3:3a:8d:33:29:56:05:19:d2:55:7b:ac: 38:3d:29:ba:e8:b6:45:4d:e0:19:bb:4a:c8:61:3c: b0:e4:65:ca:5b:e2:6d:d4:95:75:c1:48:4b:00:cd: 5c:dd:fe:71:ad:2b:31:8c:c1:49:e7:f5:47:bf:62: 42:61:43:b7:34:af:f1:0a:18:dd:31:24:71:8e:a1: 5e:05:95:46:90:c5:07:69:3c:18:38:b7:50:68:48: a4:af:94:28:df:78:95:1c:dd:6b:eb:1d:1a:9b:c2: ee:b0:d6:a0:1b:0a:fc:df:5b:14:40:de:92:4e:fd: fb:10:56:19:bf:55:e6:fe:fd:f2:43:3d:58:6b:89: 5e:e1:63:c7:dd:c3:76:87:eb:45:00:1e:7a:df:b8: 0d:bb:0d:88:ae:46:1f:14:53:88:95:47:1b:3b:52: 73:06:32:95:92:3a:7e:87:e1:51:97:4d:0b:9c:2b: ad:32:56:85:e4:2f:10:3e:68:83:b0:9b:af:5d:62: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6B:BF:42:8E:63:E8:EA:56:9A:CB:DA:AD:D9:17:86:B0:AE:9E:B4 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e7:de:58:26:8f:a4:2f:6e:f8:cb:49:ad:ab:b6:e4:27:b7: 68:bd:2b:1b:b7:38:8d:12:33:a3:a4:1c:f8:cc:5b:7c:52:d7: 5d:e2:bf:e3:de:bb:91:1e:40:42:89:af:58:9e:75:32:00:3b: c5:e8:ff:54:e6:cd:02:83:bf:f7:62:63:a1:88:64:5b:f8:19: ad:25:75:30:5b:3b:de:83:89:3b:e6:9d:03:2b:1f:06:3c:bd: 71:60:c4:ed:21:b3:2f:9a:6e:4b:18:b1:9c:3f:9f:ba:83:8d: 46:0d:a0:c0:47:f4:22:8c:c3:fc:4f:c4:68:83:cc:68:0c:c5: c3:c6:41:f1:9a:1c:14:b1:39:be:e8:3b:5e:d6:02:c4:b1:3d: bf:03:42:ee:a6:1f:0c:2f:42:9e:ed:29:c5:5c:25:af:63:36: 69:56:b7:11:2c:64:f0:f4:40:73:06:dd:28:b4:dd:d5:72:49: ea:90:39:b7:ea:91:fa:ad:7d:c9:3d:54:02:54:00:13:e9:38: 89:3c:75:bd:b3:13:88:ff:04:28:50:f6:a6:c1:4a:30:39:fb: 7a:9f:5c:50:a2:74:3e:bb:ee:16:f0:f7:b6:66:ce:c4:41:6f: 7f:f0:3c:ca:cc:88:87:66:9c:79:63:84:5b:40:44:d5:c5:a0: c0:4d:d7:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwNzAxMDUyNDU5WhcNMjUwNzA4MDUyNDU5WjAYMRYwFAYD VQQDEw02ODYzNzEyYy03NjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBZXbFpQJHnFkQMd9EYB+lHRGohb/J2Etxwvr8boTZdFFVcRGF+ow0vyrioq j6kFtvkBMW7hI1pGlfZCiJqzOo0zKVYFGdJVe6w4PSm66LZFTeAZu0rIYTyw5GXK W+Jt1JV1wUhLAM1c3f5xrSsxjMFJ5/VHv2JCYUO3NK/xChjdMSRxjqFeBZVGkMUH aTwYOLdQaEikr5Qo33iVHN1r6x0am8LusNagGwr831sUQN6STv37EFYZv1Xm/v3y Qz1Ya4le4WPH3cN2h+tFAB5637gNuw2IrkYfFFOIlUcbO1JzBjKVkjp+h+FRl00L nCutMlaF5C8QPmiDsJuvXWK+pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlrv0KO Y+jqVprL2q3ZF4awrp60MB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG595YJo+kL274y0mtq7bkJ7dovSsbtziNEjOjpBz4zFt8Utdd4r/j 3ruRHkBCia9YnnUyADvF6P9U5s0Cg7/3YmOhiGRb+BmtJXUwWzveg4k75p0DKx8G PL1xYMTtIbMvmm5LGLGcP5+6g41GDaDAR/QijMP8T8Rog8xoDMXDxkHxmhwUsTm+ 6Dte1gLEsT2/A0Luph8ML0Ke7SnFXCWvYzZpVrcRLGTw9EBzBt0otN3VcknqkDm3 6pH6rX3JPVQCVAAT6TiJPHW9sxOI/wQoUPamwUowOft6n1xQonQ+u+4W8Pe2Zs7E QW9/8DzKzIiHZpx5Y4RbQETVxaDATddL -----END CERTIFICATE-----Generated at Tue Jul 1 11:49:11 2025 by rpki-client