$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: V35GYwaDnG7dW+G1fecJrXpkT9NF3Pm9sUDAlPvwRwE= Subject key identifier: 47:04:5E:3D:83:BA:49:35:A4:25:B3:9F:16:F8:60:55:37:6A:94:A0 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 48 Signing time: Thu 03 Jul 2025 07:37:26 +0000 Manifest this update: Thu 03 Jul 2025 07:37:26 +0000 Manifest next update: Thu 10 Jul 2025 07:37:26 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 1Svn+xtbseuyD+l0IczoVNpE6sSxuNnlN94nsHfhYBs=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Jul 3 07:37:26 2025 GMT Not After : Jul 10 07:37:26 2025 GMT Subject: CN=68663336-90f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:61:a3:73:83:4a:f8:8e:03:e6:c1:08:ee: 6b:df:a5:70:d0:7f:ba:35:e6:66:79:f5:c6:0e:88: 6f:31:93:f9:76:fb:8d:aa:96:2b:6a:06:d6:f1:6e: d6:55:71:5e:60:7a:e9:be:2d:36:88:dc:f2:64:4f: 5c:04:55:d7:03:99:13:c9:54:48:60:ce:78:10:8a: fa:85:9e:5f:b0:4d:d8:9d:55:2f:f4:cc:f9:86:5b: 46:ba:d0:21:d2:8d:4d:52:74:4b:21:5e:25:20:32: b7:29:f7:6f:20:bb:f7:31:c1:93:d3:77:90:62:b0: 4e:c7:c8:06:fc:75:a2:80:ac:f7:64:d8:b7:33:2b: 3f:be:ee:65:d3:90:3e:70:70:2d:6b:7b:86:81:82: 93:51:78:d7:5c:da:70:5f:e2:d0:aa:98:1c:05:e2: 13:40:60:b5:23:9f:95:ec:c1:05:45:dc:aa:1e:e3: f2:7e:f2:4f:a9:12:b2:82:cd:3d:2b:f2:b8:e6:3d: 34:c2:15:4f:a7:37:28:9f:6a:b7:a6:bf:59:d9:24: 85:49:9a:01:fb:c1:59:6e:56:49:6c:e1:ce:69:9a: 02:e2:93:db:48:7c:f7:da:46:a2:52:0c:b7:47:2b: e4:ca:2d:be:cc:27:71:d3:84:fd:6a:70:cd:c9:b1: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:5E:3D:83:BA:49:35:A4:25:B3:9F:16:F8:60:55:37:6A:94:A0 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:c1:1c:2e:3f:32:49:6f:cd:8f:6d:05:51:42:05:f0:0a: cb:49:db:fd:da:95:fb:c3:93:c5:b3:72:14:42:f1:03:fa:4b: 44:fe:46:5a:47:5c:53:9e:ff:39:34:93:c0:13:f8:e4:1d:ac: 7f:a4:d8:15:d2:ee:55:e4:91:2d:54:b2:9c:8c:5a:e3:5f:a7: da:7c:b1:13:dd:b4:93:3e:12:83:6f:d5:d7:5e:12:62:42:25: c7:e7:09:eb:73:b7:5a:e1:5d:49:fa:52:23:3c:12:78:79:e4: 8f:85:e3:f5:fb:35:ee:e2:8b:7d:df:ea:ef:8a:49:8a:6e:51: c0:d4:1a:1b:84:67:08:77:db:25:d0:fd:07:ce:e8:76:d8:4e: 93:73:67:c5:77:db:44:31:79:28:f4:cd:55:ce:34:e9:f8:28: f0:c5:69:33:75:34:e7:cf:e0:c4:9e:20:68:fe:88:56:4b:fb: f9:1c:5f:a3:46:9b:90:78:e7:94:0a:d5:5c:bd:66:ba:a6:ee: d1:82:f3:f1:1d:8c:cb:e9:55:d5:51:4c:50:61:26:dd:2d:d0: 01:5b:6a:b4:4c:84:7f:80:e1:e4:18:74:fe:a2:de:74:d7:35: 1b:3d:fa:6f:7c:36:65:30:59:68:73:a7:74:00:8c:7b:87:ff: e9:d2:be:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA3MDMwNzM3MjZaFw0yNTA3MTAwNzM3MjZaMBgxFjAUBgNV BAMTDTY4NjYzMzM2LTkwZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEWmGjc4NK+I4D5sEI7mvfpXDQf7o15mZ59cYOiG8xk/l2+42qlitqBtbxbtZV cV5geum+LTaI3PJkT1wEVdcDmRPJVEhgzngQivqFnl+wTdidVS/0zPmGW0a60CHS jU1SdEshXiUgMrcp928gu/cxwZPTd5BisE7HyAb8daKArPdk2LczKz++7mXTkD5w cC1re4aBgpNReNdc2nBf4tCqmBwF4hNAYLUjn5XswQVF3Koe4/J+8k+pErKCzT0r 8rjmPTTCFU+nNyifaremv1nZJIVJmgH7wVluVkls4c5pmgLik9tIfPfaRqJSDLdH K+TKLb7MJ3HThP1qcM3JsdGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURwRePYO6 STWkJbOfFvhgVTdqlKAwHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+SwRwuPzJJb82PbQVRQgXwCstJ2/3alfvDk8WzchRC8QP6S0T+RlpH XFOe/zk0k8AT+OQdrH+k2BXS7lXkkS1UspyMWuNfp9p8sRPdtJM+EoNv1ddeEmJC JcfnCetzt1rhXUn6UiM8Enh55I+F4/X7Ne7ii33f6u+KSYpuUcDUGhuEZwh32yXQ /QfO6HbYTpNzZ8V320QxeSj0zVXONOn4KPDFaTN1NOfP4MSeIGj+iFZL+/kcX6NG m5B455QK1Vy9Zrqm7tGC8/EdjMvpVdVRTFBhJt0t0AFbarRMhH+A4eQYdP6i3nTX NRs9+m98NmUwWWhzp3QAjHuH/+nSvnk= -----END CERTIFICATE-----Generated at Fri Jul 4 18:49:08 2025 by rpki-client