$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json) Hash identifier: IWzTVTF+UJpwQfJ/Vmtx2ziyJ+JPJiIqdqn/wzTkl5k= Subject key identifier: A7:E0:AA:E5:30:4F:E2:B3:35:93:62:65:48:53:7B:87:1F:55:95:A3 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft Manifest number: D1 Signing time: Tue 01 Jul 2025 06:13:41 +0000 Manifest this update: Tue 01 Jul 2025 06:13:40 +0000 Manifest next update: Tue 08 Jul 2025 06:13:40 +0000 Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: pVTRv5/8gJE5Mf582dcx4Y9G7Dh6LiWT+J/DFXXyANw=) 2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: Jul 1 06:13:40 2025 GMT Not After : Jul 8 06:13:40 2025 GMT Subject: CN=68637c94-95ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:96:d0:7f:ac:18:ba:a8:35:f0:71:2a:ca: 93:e9:46:53:18:a8:d5:00:35:53:f8:f5:ef:23:66: c7:e1:4c:51:1b:11:91:ae:60:7f:c8:b1:ca:b2:98: 18:35:c4:4e:4a:3f:92:81:a4:d4:2e:17:a3:08:fb: ea:41:60:ef:4c:65:ed:c4:be:28:53:b1:36:b8:ea: 53:70:65:b8:22:cb:7f:d5:11:80:fb:35:cc:5d:22: c0:62:36:f5:20:7a:19:f0:96:d7:6a:42:a8:bf:67: ac:fd:44:5c:1b:a6:ff:a4:2e:16:45:53:6a:19:54: b2:03:3d:91:f5:c8:c9:2b:d9:83:6a:59:71:88:6c: 96:19:7d:95:8d:68:8b:42:58:72:27:68:4b:47:b4: 48:49:f1:ef:85:ab:9c:d2:ef:ae:52:9a:93:e6:1b: 09:ec:9a:34:6d:16:fc:62:e6:b7:a7:ac:a3:25:57: 49:3d:d7:d1:5c:c2:e7:ab:e1:6b:2a:7b:86:dd:4e: 5b:38:a7:7a:55:ba:0c:c4:3d:cd:09:e8:95:fb:0f: 4d:e4:29:05:94:31:cc:a2:ee:25:64:46:99:20:43: a6:71:17:8a:73:f7:66:47:24:a3:00:5f:14:9b:9e: ff:17:59:cb:32:8b:f3:18:97:93:e6:f1:85:56:95: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E0:AA:E5:30:4F:E2:B3:35:93:62:65:48:53:7B:87:1F:55:95:A3 X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4d:36:ea:42:d9:cd:6c:eb:d5:76:e8:bc:2e:66:8c:95:0a: e6:56:df:af:a1:c4:0f:0e:71:c4:fa:43:34:6d:67:24:44:74: b8:fa:54:ad:ea:2b:3a:47:57:da:76:00:a1:c4:dd:7c:86:72: 86:ce:c7:f3:e4:4c:c6:d0:36:ce:5d:f5:bc:a0:a8:34:f7:29: 58:19:65:a0:ae:de:af:07:1c:8d:2d:7f:ea:06:5b:6d:30:a9: 81:0e:9b:02:04:b6:db:89:0f:12:77:9a:d0:36:cf:75:54:4a: dc:e2:74:21:7c:48:49:97:69:f7:5e:ce:3e:d0:32:03:63:a0: 74:9c:bb:d1:67:90:c9:e2:8e:82:93:75:74:e1:f2:5d:57:59: 95:f4:12:78:39:e4:fd:73:a3:0d:65:37:e4:a7:e6:b3:2e:38: af:9a:f8:a9:3b:11:69:26:bd:76:05:fc:f2:13:e9:01:f9:43: 9a:f6:d8:0e:78:8b:7b:44:58:0c:e6:87:d9:22:58:8f:7e:a0: 75:5a:e7:e4:cb:67:9f:2b:19:30:99:50:08:96:0f:15:14:c5: 93:a2:db:fc:47:e0:62:9b:e0:9b:31:ec:b2:99:2b:4c:7e:9d: 37:d9:2d:b4:22:e9:95:c0:c9:f7:71:81:39:d3:ec:10:4d:b4: b7:fa:ed:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjUwNzAxMDYxMzQwWhcNMjUwNzA4MDYxMzQwWjAYMRYwFAYD VQQDEw02ODYzN2M5NC05NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybGW0H+sGLqoNfBxKsqT6UZTGKjVADVT+PXvI2bH4UxRGxGRrmB/yLHKspgY NcROSj+SgaTULhejCPvqQWDvTGXtxL4oU7E2uOpTcGW4Ist/1RGA+zXMXSLAYjb1 IHoZ8JbXakKov2es/URcG6b/pC4WRVNqGVSyAz2R9cjJK9mDallxiGyWGX2VjWiL QlhyJ2hLR7RISfHvhauc0u+uUpqT5hsJ7Jo0bRb8Yua3p6yjJVdJPdfRXMLnq+Fr KnuG3U5bOKd6VboMxD3NCeiV+w9N5CkFlDHMou4lZEaZIEOmcReKc/dmRySjAF8U m57/F1nLMovzGJeT5vGFVpVQFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfgquUw T+KzNZNiZUhTe4cfVZWjMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN MzFTdkZuNG0xV0pLVWs0dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqTTbqQtnNbOvVdui8LmaMlQrmVt+vocQPDnHE+kM0bWckRHS4+lSt 6is6R1fadgChxN18hnKGzsfz5EzG0DbOXfW8oKg09ylYGWWgrt6vBxyNLX/qBltt MKmBDpsCBLbbiQ8Sd5rQNs91VErc4nQhfEhJl2n3Xs4+0DIDY6B0nLvRZ5DJ4o6C k3V04fJdV1mV9BJ4OeT9c6MNZTfkp+azLjivmvipOxFpJr12BfzyE+kB+UOa9tgO eIt7RFgM5ofZIliPfqB1Wufky2efKxkwmVAIlg8VFMWTotv8R+Bim+CbMeyymStM fp032S20IumVwMn3cYE50+wQTbS3+u39 -----END CERTIFICATE-----Generated at Thu Jul 3 02:48:49 2025 by rpki-client