$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: 2N6q9mMPEKP0xI5L4/5FIq0LCZhWAjpKH/MTntd5xjk= Subject key identifier: 51:D8:FA:1E:BB:A5:DB:A6:71:DB:F7:61:39:FE:80:2E:3E:0E:CB:67 Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 01FE Signing time: Thu 03 Jul 2025 02:27:07 +0000 Manifest this update: Thu 03 Jul 2025 02:27:07 +0000 Manifest next update: Thu 10 Jul 2025 02:27:07 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: qeUyqkqva6gbtlzKmPwPQihtac3cSwQwr4XB6opoZ3w=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: Jul 3 02:27:07 2025 GMT Not After : Jul 10 02:27:07 2025 GMT Subject: CN=6865ea7b-adbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:94:d5:86:d4:15:2d:3a:25:33:ea:bc:ac:98: 80:c8:fd:6a:b2:49:1f:f6:a0:e7:82:bd:81:c4:4e: c0:45:ce:f7:43:ec:ef:7a:e1:b5:6c:2c:00:c7:a0: 8b:1a:12:d7:8c:99:34:bc:a1:5c:05:58:d0:3d:3c: d5:50:15:9d:63:66:3e:b2:d2:05:83:f0:50:86:74: b6:2e:21:84:ee:5b:7c:68:8a:8b:ad:e7:bb:f3:5a: f6:34:1a:34:48:64:23:ac:b4:70:cc:d4:61:ec:24: f1:37:3e:4c:bf:bb:a4:9a:05:c2:21:dd:20:2d:3a: 2d:12:77:07:96:09:e8:60:8f:04:63:45:91:1f:93: 33:ea:42:80:7f:8c:76:fa:71:37:f7:ac:96:05:9b: 5e:2d:8c:c4:d7:32:81:24:0b:67:c7:e3:26:90:16: b7:91:ba:33:44:84:22:13:f5:af:ac:21:f2:05:4e: 05:7c:26:fb:2b:ec:d4:27:3b:5c:0e:50:29:fa:b2: d5:d9:79:57:17:73:e0:ef:98:1c:db:a4:5b:b2:bb: 00:f1:e2:3d:8e:94:00:ef:71:f5:e6:62:31:4f:87: 92:0a:31:29:69:4d:dc:3d:13:7b:dd:9c:f8:d2:ad: e6:46:51:4d:49:6c:e8:2e:ef:c7:5c:53:71:bc:3a: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D8:FA:1E:BB:A5:DB:A6:71:DB:F7:61:39:FE:80:2E:3E:0E:CB:67 X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:e5:e8:0b:5c:60:5e:ef:bd:97:85:00:8c:ad:80:cc:a5:84: a8:80:fd:5c:08:6e:85:4c:04:3b:0c:16:35:11:d3:61:bc:4d: 16:3f:d6:c8:fb:92:de:b0:26:fd:99:e3:98:c8:7a:a8:ae:b1: 25:9e:dc:65:bd:7d:d6:84:0b:9d:da:a3:24:9d:f8:a9:66:49: 93:81:5c:23:86:3d:a9:4c:62:6d:1a:31:1a:72:d8:92:b1:75: 91:7a:61:bd:19:d0:64:c8:4c:7c:68:aa:cf:29:b7:ec:5a:c9: 2c:e2:3d:9e:34:bd:d4:b8:60:25:e8:c4:01:93:68:4f:00:38: fd:b7:c9:cb:62:d8:9e:0c:3f:58:2c:8b:17:66:ce:49:13:f7: af:99:90:45:b0:81:af:30:97:7f:3c:86:5b:80:11:be:19:74: 79:d4:9e:fe:3d:5a:88:7e:2e:cc:ba:09:83:87:10:5a:81:49: 2d:eb:a2:46:b8:85:ce:62:31:fc:7d:a8:cd:c4:a8:a7:1d:b2: 85:53:9e:9e:61:62:ca:89:d6:2c:0b:70:2e:a1:d6:bf:4e:0a: 41:3a:a0:a9:4c:3e:7b:29:b4:23:f2:47:22:b9:29:13:4b:d3: 08:79:9a:6d:8f:27:c8:43:7e:90:62:16:60:2e:14:64:0b:6b: 29:e6:ef:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjUwNzAzMDIyNzA3WhcNMjUwNzEwMDIyNzA3WjAYMRYwFAYD VQQDEw02ODY1ZWE3Yi1hZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8pTVhtQVLTolM+q8rJiAyP1qskkf9qDngr2BxE7ARc73Q+zveuG1bCwAx6CL GhLXjJk0vKFcBVjQPTzVUBWdY2Y+stIFg/BQhnS2LiGE7lt8aIqLree781r2NBo0 SGQjrLRwzNRh7CTxNz5Mv7ukmgXCId0gLTotEncHlgnoYI8EY0WRH5Mz6kKAf4x2 +nE396yWBZteLYzE1zKBJAtnx+MmkBa3kbozRIQiE/WvrCHyBU4FfCb7K+zUJztc DlAp+rLV2XlXF3Pg75gc26RbsrsA8eI9jpQA73H15mIxT4eSCjEpaU3cPRN73Zz4 0q3mRlFNSWzoLu/HXFNxvDpXHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHY+h67 pdumcdv3YTn+gC4+DstnMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx5egLXGBe772XhQCMrYDMpYSogP1cCG6FTAQ7DBY1EdNhvE0WP9bI +5LesCb9meOYyHqorrElntxlvX3WhAud2qMknfipZkmTgVwjhj2pTGJtGjEactiS sXWRemG9GdBkyEx8aKrPKbfsWsks4j2eNL3UuGAl6MQBk2hPADj9t8nLYtieDD9Y LIsXZs5JE/evmZBFsIGvMJd/PIZbgBG+GXR51J7+PVqIfi7MugmDhxBagUkt66JG uIXOYjH8fajNxKinHbKFU56eYWLKidYsC3Auoda/TgpBOqCpTD57KbQj8kciuSkT S9MIeZptjyfIQ36QYhZgLhRkC2sp5u/o -----END CERTIFICATE-----Generated at Thu Jul 3 15:20:46 2025 by rpki-client