$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: KHT4t6sGmeE7KkSA4uMwuCvUBxEj6DkvfraS5tspyTU= Subject key identifier: 32:EF:CC:B0:06:00:82:DA:B8:87:E5:B5:10:C0:0F:34:AA:7B:DA:1D Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 0112 Signing time: Thu 03 Jul 2025 05:04:28 +0000 Manifest this update: Thu 03 Jul 2025 05:04:27 +0000 Manifest next update: Thu 10 Jul 2025 05:04:27 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: wJXGMb43YtvjdJ//AAU7/KjXB2nuHqgYLUVMbZnYC8Q=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Jul 3 05:04:27 2025 GMT Not After : Jul 10 05:04:27 2025 GMT Subject: CN=68660f5c-e3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:9e:89:da:76:54:3f:60:38:1f:b8:84:5d: f8:35:ad:91:d3:35:fc:ba:25:86:46:19:20:f8:d0: d6:23:34:24:82:3e:e3:fa:8e:05:f7:77:31:c5:71: 63:05:52:8b:2a:f7:38:30:13:1a:f0:91:74:07:c7: 61:9d:6b:9f:45:76:03:35:5f:b7:b9:0e:5d:77:5f: 9d:a8:89:54:24:96:82:63:4c:5b:2e:ac:57:cc:c3: ea:be:84:1e:83:77:cd:b7:c7:4c:a2:2c:55:f6:bc: 74:46:2b:b2:ff:9c:a4:e8:ae:09:6e:dc:7b:79:de: f7:54:36:24:e8:bd:02:6e:9c:61:15:4a:15:37:03: e0:6b:af:2e:c1:fe:f5:e6:e6:bf:da:c0:4b:84:bc: 4f:35:4b:d7:1d:fd:b6:11:d7:d3:f9:a4:d2:1c:47: af:9f:d2:26:42:60:53:37:69:9f:33:da:5f:70:48: 29:93:c9:f7:ca:6b:95:df:3c:2c:7b:ee:a7:9a:93: 8d:23:a2:f4:b8:fd:71:cf:89:b1:b8:44:64:48:3e: c7:f8:09:62:2d:c6:e7:ac:11:de:47:b8:a5:a8:7e: 2e:d9:53:12:4f:c7:94:86:84:1d:01:e6:9b:e3:b5: dd:2b:34:09:2c:4a:33:dd:69:9d:3b:99:56:e2:09: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:CC:B0:06:00:82:DA:B8:87:E5:B5:10:C0:0F:34:AA:7B:DA:1D X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:67:22:ff:6f:02:62:76:50:9b:3e:97:a5:0e:e4:34:8a:0d: b5:26:60:eb:05:0f:68:87:4c:96:fd:f5:72:da:e7:88:6a:59: 51:22:05:68:49:66:f2:8d:43:4f:86:07:a8:5e:ae:93:b0:ae: bc:4c:59:b1:eb:05:dc:45:e2:14:43:8b:5f:b2:5a:e5:9e:65: fc:e7:9f:ca:c4:7a:20:65:b9:da:7a:01:82:5c:ee:67:4d:d2: a5:ff:c2:76:a6:9a:dd:39:0e:f5:ed:13:d1:f1:50:94:81:96: 1e:03:59:6c:07:f4:b0:39:5f:25:3b:0a:00:bf:e6:d3:a1:ac: 21:8b:67:21:b0:b6:1f:0f:5e:44:1c:8f:4e:5f:1d:1f:f2:ba: 6c:88:89:86:9e:bb:4f:88:02:4e:f4:3d:1b:b0:40:af:65:f7: 95:2f:12:27:03:8e:b3:16:e8:9d:4a:9b:3e:97:a2:df:c9:2a: f5:a7:d9:14:29:da:d7:29:e8:ae:67:85:4d:81:a3:34:bc:f6: 27:2a:fd:26:22:7b:78:70:ec:e3:56:a4:3a:62:e0:b9:47:10: 52:1a:94:92:fb:a7:18:22:43:b9:54:18:4b:f3:8a:c0:d7:d7: a8:e6:86:1f:c2:9a:fd:ec:12:4e:e9:5a:fa:44:ab:00:69:da: a4:bb:ec:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUwNzAzMDUwNDI3WhcNMjUwNzEwMDUwNDI3WjAYMRYwFAYD VQQDEw02ODY2MGY1Yy1lM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmeeidp2VD9gOB+4hF34Na2R0zX8uiWGRhkg+NDWIzQkgj7j+o4F93cxxXFj BVKLKvc4MBMa8JF0B8dhnWufRXYDNV+3uQ5dd1+dqIlUJJaCY0xbLqxXzMPqvoQe g3fNt8dMoixV9rx0Riuy/5yk6K4Jbtx7ed73VDYk6L0CbpxhFUoVNwPga68uwf71 5ua/2sBLhLxPNUvXHf22EdfT+aTSHEevn9ImQmBTN2mfM9pfcEgpk8n3ymuV3zws e+6nmpONI6L0uP1xz4mxuERkSD7H+AliLcbnrBHeR7ilqH4u2VMST8eUhoQdAeab 47XdKzQJLEoz3WmdO5lW4gkwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLvzLAG AILauIfltRDADzSqe9odMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpZyL/bwJidlCbPpelDuQ0ig21JmDrBQ9oh0yW/fVy2ueIallRIgVo SWbyjUNPhgeoXq6TsK68TFmx6wXcReIUQ4tfslrlnmX855/KxHogZbnaegGCXO5n TdKl/8J2pprdOQ717RPR8VCUgZYeA1lsB/SwOV8lOwoAv+bToawhi2chsLYfD15E HI9OXx0f8rpsiImGnrtPiAJO9D0bsECvZfeVLxInA46zFuidSps+l6LfySr1p9kU KdrXKeiuZ4VNgaM0vPYnKv0mInt4cOzjVqQ6YuC5RxBSGpSS+6cYIkO5VBhL84rA 19eo5oYfwpr97BJO6Vr6RKsAadqku+zf -----END CERTIFICATE-----Generated at Thu Jul 3 08:02:26 2025 by rpki-client