$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: z+zkfoAtL7l1kNDPr66qHRcT0U8VOEegX/knJh9PjCo= Subject key identifier: 9C:CE:0D:50:F2:F9:0A:2E:E7:0A:9D:A0:D6:7F:B1:EF:D5:DC:78:88 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 0676 Signing time: Mon 30 Jun 2025 22:40:47 +0000 Manifest this update: Mon 30 Jun 2025 22:40:46 +0000 Manifest next update: Mon 07 Jul 2025 22:40:46 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: UFMoNAQzCS+T9Mru+cboax+2jwG0r+X/V5vKZcAWJ/A=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Jun 30 22:40:46 2025 GMT Not After : Jul 7 22:40:46 2025 GMT Subject: CN=6863126e-7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:6d:77:0c:6c:f3:49:0d:c0:7b:3b:8a:0d: 66:de:3e:49:54:24:90:3b:47:10:97:c0:0a:8b:d1: 15:8b:2c:83:de:1c:08:dd:42:8d:1a:75:2f:72:06: 48:db:78:69:79:d8:d2:10:db:d7:60:4a:77:ee:37: a0:4e:9e:12:28:81:a5:d9:39:20:c7:3e:ca:64:69: 05:96:ce:31:01:f3:56:88:eb:c9:d0:d9:91:b4:56: 26:a3:09:86:d5:e8:43:3c:ca:a5:ec:42:dd:45:58: fc:0d:f8:27:54:ed:91:73:a5:88:6d:01:73:3f:ca: ba:1e:a3:ea:7a:2f:0c:c3:33:37:ee:d2:b3:c3:40: 59:27:59:02:c4:30:65:c6:85:d6:c8:9d:0b:fd:c3: 86:4f:b3:e9:89:58:3c:3b:af:14:56:1a:24:1d:92: c7:a0:81:46:4b:fb:3d:ea:a5:28:9a:d5:3b:19:ea: f6:c6:bb:95:59:c1:11:54:9b:70:c2:b3:8f:0d:5c: cb:ac:68:74:6b:da:fc:02:bc:5d:27:3f:c4:b0:e2: 75:99:bd:06:0d:9a:26:58:bd:2c:07:87:c3:5e:5c: b4:d1:00:94:0b:1d:5f:04:f9:21:92:60:90:18:7e: 1d:47:bd:9a:90:ca:37:f0:19:e2:eb:b2:3e:79:3b: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:0D:50:F2:F9:0A:2E:E7:0A:9D:A0:D6:7F:B1:EF:D5:DC:78:88 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2e:c6:9a:35:c1:33:e3:46:31:40:fb:92:d3:ef:f2:dd:62: 5f:3d:a7:b9:c1:f0:90:ad:c1:8d:f9:d0:ab:fb:93:bf:32:05: c3:4c:e7:dc:91:0c:33:0e:c2:88:74:fb:15:80:d0:b7:61:27: f0:81:28:19:d7:6c:cb:f9:46:e9:d8:0b:6b:ce:6d:93:16:04: 4d:25:52:c7:19:f5:12:1b:30:a3:ec:0f:cf:f3:b6:22:1c:46: 3c:cc:27:76:37:c9:97:61:56:e5:26:76:26:7d:3d:65:1f:a2: 50:dd:78:ae:5d:68:6d:19:1a:ab:69:cb:af:7f:b8:5b:1e:3f: da:94:d6:9f:34:15:73:25:31:ec:34:78:2f:67:8f:15:bc:13: ec:03:83:ac:7b:94:aa:4e:12:b2:fc:d9:69:0f:27:0f:07:cb: fd:c9:f8:97:8f:48:79:0d:12:27:89:00:73:98:04:41:a1:7f: b9:39:94:7c:ef:8b:36:c9:e3:ad:f8:1e:c2:54:c3:30:cf:eb: 58:db:77:46:64:f2:a9:dd:dd:e5:5c:45:09:57:8d:7f:71:17: c7:34:4c:9c:46:dc:17:6d:a1:12:bb:1f:2e:b5:f9:3f:63:22: 21:18:7c:f3:ff:1b:88:95:48:27:f6:de:f6:da:8e:66:75:f4: 2c:c2:4a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwNjMwMjI0MDQ2WhcNMjUwNzA3MjI0MDQ2WjAYMRYwFAYD VQQDEw02ODYzMTI2ZS03YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjBtdwxs80kNwHs7ig1m3j5JVCSQO0cQl8AKi9EViyyD3hwI3UKNGnUvcgZI 23hpedjSENvXYEp37jegTp4SKIGl2Tkgxz7KZGkFls4xAfNWiOvJ0NmRtFYmowmG 1ehDPMql7ELdRVj8DfgnVO2Rc6WIbQFzP8q6HqPqei8MwzM37tKzw0BZJ1kCxDBl xoXWyJ0L/cOGT7PpiVg8O68UVhokHZLHoIFGS/s96qUomtU7Ger2xruVWcERVJtw wrOPDVzLrGh0a9r8ArxdJz/EsOJ1mb0GDZomWL0sB4fDXly00QCUCx1fBPkhkmCQ GH4dR72akMo38Bni67I+eTuegQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzODVDy +Qou5wqdoNZ/se/V3HiIMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLsaaNcEz40YxQPuS0+/y3WJfPae5wfCQrcGN+dCr+5O/MgXDTOfc kQwzDsKIdPsVgNC3YSfwgSgZ12zL+Ubp2Atrzm2TFgRNJVLHGfUSGzCj7A/P87Yi HEY8zCd2N8mXYVblJnYmfT1lH6JQ3XiuXWhtGRqracuvf7hbHj/alNafNBVzJTHs NHgvZ48VvBPsA4Ose5SqThKy/NlpDycPB8v9yfiXj0h5DRIniQBzmARBoX+5OZR8 74s2yeOt+B7CVMMwz+tY23dGZPKp3d3lXEUJV41/cRfHNEycRtwXbaESux8utfk/ YyIhGHzz/xuIlUgn9t722o5mdfQswkrp -----END CERTIFICATE-----Generated at Wed Jul 2 22:29:31 2025 by rpki-client