$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft File: 47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json) Hash identifier: vDsLP2F1l89mYaHvfZZcZ25XBfaSCvMxUL+bqkUxBS8= Subject key identifier: B6:B9:20:E5:19:81:D9:C8:2F:71:1F:89:48:18:9A:E6:1F:B0:C4:FC Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 0749 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft Manifest number: 0743 Signing time: Wed 02 Jul 2025 21:59:11 +0000 Manifest this update: Wed 02 Jul 2025 21:59:10 +0000 Manifest next update: Wed 09 Jul 2025 21:59:10 +0000 Files and hashes: 1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: k0IAsdGljYHKXhBKphrEG2fW/QnUBbPheNFYi7uAF/I=) 2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: xD5zoFxi5V/haijCFX+sW8lJO7TZJGfn2t06N67wG1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: Jul 2 21:59:10 2025 GMT Not After : Jul 9 21:59:10 2025 GMT Subject: CN=6865abae-3270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:df:30:3f:16:d8:6f:75:e3:67:60:69:a1: 77:a1:a7:04:bb:8e:4d:d9:5f:cc:7d:bd:6c:2e:17: e9:e8:b4:78:9a:84:59:4b:a2:ed:c5:cf:e8:7c:87: fa:ec:b6:d0:77:ad:a5:aa:4e:41:a0:14:7f:c3:7a: a7:f5:1b:7e:6f:2a:dc:c7:17:c4:b0:52:94:b6:76: 6a:1c:68:03:97:e1:f2:7a:06:4b:3b:66:ca:f4:a5: 8b:60:2e:b3:d7:e0:13:39:b6:e2:6f:bb:a4:ad:eb: 30:8c:fc:bc:87:91:40:da:6f:29:0c:4a:2a:c3:29: ab:41:66:ea:51:c8:ad:7f:6a:29:e4:b1:46:db:a3: 3a:bd:0a:67:6f:7d:8f:75:4d:7e:67:55:21:17:7a: 72:c8:6d:94:1e:17:07:b5:fd:ea:52:d6:b7:e7:af: 1e:81:b2:85:e0:87:34:90:b6:49:25:4e:0f:a6:3d: 47:1a:e2:55:b7:53:ca:1e:55:99:d2:bc:49:d1:b1: a6:a6:82:46:7a:ac:2e:b4:01:1f:cc:6b:8e:83:53: 83:01:92:95:f5:64:22:27:49:53:b3:a1:97:cc:e5: ac:51:a5:63:a8:a3:22:29:cd:19:73:87:fa:3f:b0: ed:2a:66:d7:b3:63:9a:b5:a2:5b:74:fc:74:7a:ba: 98:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B9:20:E5:19:81:D9:C8:2F:71:1F:89:48:18:9A:E6:1F:B0:C4:FC X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:78:dd:b6:97:34:c2:8e:77:0c:ed:cd:15:df:60:d6:01:9f: 19:f6:fb:3e:94:d2:8b:1d:9f:c2:fc:dc:9f:14:6c:5c:b7:0c: 4a:75:14:9e:fd:e8:d0:d9:81:99:f2:cf:7e:82:81:ef:bb:89: 5f:61:26:eb:08:13:3f:95:f5:bd:1f:22:ae:5e:4c:42:72:a2: e2:01:3d:f3:98:b9:f1:ca:02:28:ce:33:b0:9e:22:86:32:f0: a4:1f:70:56:eb:67:be:e6:54:13:01:f0:ea:7c:ff:1a:8d:b3: c4:29:a9:8a:57:3d:71:13:e1:fc:66:9d:11:f1:5d:04:ec:5e: 3f:98:50:c2:88:13:49:b7:d7:ff:bb:26:06:c0:ed:2b:9c:c5: fb:27:f6:ad:be:86:8a:c5:50:77:80:b0:4c:e9:f8:4f:19:5c: 5b:e7:86:c7:98:d0:c1:18:f4:df:e9:58:8b:d1:e5:44:aa:11: ae:4b:9d:b5:be:37:ad:92:82:a2:c4:c7:bc:f2:49:e0:cc:60: 9f:6c:df:72:e1:58:4f:a1:d6:ee:a2:6f:d0:d0:12:ed:66:67: 11:85:b3:5f:86:c4:16:e8:89:e7:fe:1d:46:a4:b4:6b:f7:a7: ae:6b:1e:99:96:66:24:4b:8a:2b:4b:61:13:cb:2f:31:fd:79: 20:d3:c3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjUwNzAyMjE1OTEwWhcNMjUwNzA5MjE1OTEwWjAYMRYwFAYD VQQDEw02ODY1YWJhZS0zMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ7fMD8W2G9142dgaaF3oacEu45N2V/Mfb1sLhfp6LR4moRZS6Ltxc/ofIf6 7LbQd62lqk5BoBR/w3qn9Rt+byrcxxfEsFKUtnZqHGgDl+HyegZLO2bK9KWLYC6z 1+ATObbib7ukreswjPy8h5FA2m8pDEoqwymrQWbqUcitf2op5LFG26M6vQpnb32P dU1+Z1UhF3pyyG2UHhcHtf3qUta3568egbKF4Ic0kLZJJU4Ppj1HGuJVt1PKHlWZ 0rxJ0bGmpoJGeqwutAEfzGuOg1ODAZKV9WQiJ0lTs6GXzOWsUaVjqKMiKc0Zc4f6 P7DtKmbXs2OataJbdPx0erqY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa5IOUZ gdnIL3EfiUgYmuYfsMT8MB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjU5MS9EMjMzQzY0NjJGNzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJm bGFMVld1ZTdlN2VhVUxTdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBheN22lzTCjncM7c0V32DWAZ8Z9vs+lNKLHZ/C/NyfFGxctwxKdRSe /ejQ2YGZ8s9+goHvu4lfYSbrCBM/lfW9HyKuXkxCcqLiAT3zmLnxygIozjOwniKG MvCkH3BW62e+5lQTAfDqfP8ajbPEKamKVz1xE+H8Zp0R8V0E7F4/mFDCiBNJt9f/ uyYGwO0rnMX7J/atvoaKxVB3gLBM6fhPGVxb54bHmNDBGPTf6ViL0eVEqhGuS521 vjetkoKixMe88kngzGCfbN9y4VhPodbuom/Q0BLtZmcRhbNfhsQW6Inn/h1GpLRr 96euax6ZlmYkS4orS2ETyy8x/Xkg08Nw -----END CERTIFICATE-----Generated at Thu Jul 3 08:09:36 2025 by rpki-client