$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json) Hash identifier: 4K3QwGecchp2QXwPYJgNKsHgjO6migUNxwxHFu0/jbY= Subject key identifier: 14:FC:E1:FC:FE:D5:47:07:80:0D:37:78:CE:A2:5C:12:46:95:41:1A Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft Manifest number: 71 Signing time: Thu 03 Jul 2025 07:05:58 +0000 Manifest this update: Thu 03 Jul 2025 07:05:57 +0000 Manifest next update: Thu 10 Jul 2025 07:05:57 +0000 Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: oapjK5qDBjKaCnHygBJkSO7ahFE24sHAw8A/+8GRzQ0=) 2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Jul 3 07:05:57 2025 GMT Not After : Jul 10 07:05:57 2025 GMT Subject: CN=68662bd6-e5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:48:87:fc:a8:9f:b1:54:0b:48:13:4e:68:6c: f0:c9:5c:79:7a:a2:23:47:a7:a5:87:13:7c:f6:8a: 9e:6d:dc:b5:25:09:88:4c:23:6a:4e:f3:93:72:80: 49:b8:89:e5:f7:a0:56:0a:ca:39:0c:dd:d7:0e:68: 64:c2:e1:77:a6:cb:70:42:c0:7f:23:24:f3:cb:44: 0f:94:3f:07:08:6e:bb:09:a3:7b:1d:10:95:f3:63: 09:37:67:0e:88:6d:96:db:d2:3c:3c:6c:b8:db:4c: 11:a5:47:4e:c7:be:9b:5b:36:6d:39:ed:11:7b:65: f3:a7:7d:b8:14:14:95:73:74:60:13:85:d3:a0:56: eb:75:05:e9:cc:9a:54:73:bc:88:85:ed:7d:69:db: 6f:f1:c5:41:5e:cc:46:dd:e7:35:7c:c7:44:ab:dc: 1e:b8:c0:ce:eb:e7:03:77:16:75:86:03:1c:d5:0a: e6:29:6f:1f:86:71:70:6e:4d:2b:5e:0c:5c:4e:53: ff:e0:6d:0c:21:e4:49:41:08:81:2c:e2:b8:a6:73: 19:1b:33:39:41:aa:af:13:74:42:ad:9e:5d:bc:b5: 6b:e9:2c:bc:b5:34:99:e9:8f:c5:83:49:4d:9c:d4: a6:d1:5e:ce:1a:4f:91:14:04:b6:e5:1b:19:9e:64: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:E1:FC:FE:D5:47:07:80:0D:37:78:CE:A2:5C:12:46:95:41:1A X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1a:7a:f8:51:f4:87:81:0b:fb:de:ac:f9:b1:7a:a1:ef:4c: 3d:04:6d:e9:eb:46:d4:9b:ba:3e:f4:8e:71:1c:57:ef:a6:b9: 87:97:bf:90:21:6f:36:44:d2:98:3d:90:aa:a6:36:43:60:45: f2:49:73:20:59:33:44:0e:bf:f1:c3:9c:10:b6:46:4d:86:97: b8:3b:e5:0e:ae:79:70:2f:e0:11:37:c7:11:23:4b:ec:dc:a5: da:f4:88:fc:db:d4:87:e5:72:47:9a:4e:c5:98:32:0d:15:1d: 23:56:6b:85:4a:56:98:af:dd:dd:b9:bf:58:e3:47:2c:0c:55: 3a:09:77:2e:8e:c7:6f:99:df:12:f9:15:fb:7c:28:0f:ad:8d: b9:e1:ca:2c:7d:8e:3a:a0:aa:ec:bd:3a:09:23:1c:c4:f6:97: a8:3c:4a:35:db:fa:f7:e9:a0:ab:ff:33:76:fb:33:b6:d2:a4: c6:76:95:92:50:52:4c:32:10:c3:f6:d3:5f:be:df:7b:bd:81: d2:78:67:ec:e2:4d:2c:a2:a5:4e:42:1b:e9:7f:41:5b:5e:4c: d0:f9:fa:2b:74:a6:51:bb:b5:f3:73:60:26:5e:a8:96:5c:21: 64:fc:e5:83:60:eb:fd:a7:9f:cd:0e:8d:75:37:f3:ec:99:49: bf:3e:45:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNTA3MDMwNzA1NTdaFw0yNTA3MTAwNzA1NTdaMBgxFjAUBgNV BAMTDTY4NjYyYmQ2LWU1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiSIf8qJ+xVAtIE05obPDJXHl6oiNHp6WHE3z2ip5t3LUlCYhMI2pO85NygEm4 ieX3oFYKyjkM3dcOaGTC4Xemy3BCwH8jJPPLRA+UPwcIbrsJo3sdEJXzYwk3Zw6I bZbb0jw8bLjbTBGlR07HvptbNm057RF7ZfOnfbgUFJVzdGAThdOgVut1BenMmlRz vIiF7X1p22/xxUFezEbd5zV8x0Sr3B64wM7r5wN3FnWGAxzVCuYpbx+GcXBuTSte DFxOU//gbQwh5ElBCIEs4rimcxkbMzlBqq8TdEKtnl28tWvpLLy1NJnpj8WDSU2c 1KbRXs4aT5EUBLblGxmeZBbzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFPzh/P7V RweADTd4zqJcEkaVQRowHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIaevhR9IeBC/verPmxeqHvTD0EbenrRtSbuj70jnEcV++muYeXv5Ah bzZE0pg9kKqmNkNgRfJJcyBZM0QOv/HDnBC2Rk2Gl7g75Q6ueXAv4BE3xxEjS+zc pdr0iPzb1IflckeaTsWYMg0VHSNWa4VKVpiv3d25v1jjRywMVToJdy6Ox2+Z3xL5 Fft8KA+tjbnhyix9jjqgquy9OgkjHMT2l6g8SjXb+vfpoKv/M3b7M7bSpMZ2lZJQ UkwyEMP201++33u9gdJ4Z+ziTSyipU5CG+l/QVteTND5+it0plG7tfNzYCZeqJZc IWT85YNg6/2nn80OjXU38+yZSb8+Rf8= -----END CERTIFICATE-----Generated at Thu Jul 3 19:48:37 2025 by rpki-client