$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: rI1kh6P9HBPdEbNpOo4FG24eQcG9whk9HnRXYPPIBVg= Subject key identifier: 8A:C2:08:8E:B5:49:64:1E:17:49:64:2B:B8:6A:AF:5D:AC:E1:A2:0F Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02B5 Signing time: Tue 01 Jul 2025 02:08:29 +0000 Manifest this update: Tue 01 Jul 2025 02:08:29 +0000 Manifest next update: Tue 08 Jul 2025 02:08:29 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: R7N92ofJh3FQLg5THoD5gN2fSEeLaUVDcG60ostzRnE=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Jul 1 02:08:29 2025 GMT Not After : Jul 8 02:08:29 2025 GMT Subject: CN=6863431d-1323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:ff:35:56:ee:61:74:52:65:3f:e1:5b:10: 21:2d:63:79:0f:11:11:48:3a:60:59:4e:8d:20:20: 16:fe:f3:b3:d4:e7:24:ce:ad:1f:15:bc:88:f6:c6: ac:9a:76:b4:fa:db:56:be:b6:bb:cb:7f:b4:6a:0b: d8:37:df:30:2d:b7:ea:91:1b:ce:85:9a:40:07:4e: bc:22:79:66:8f:94:71:49:cb:66:63:48:9a:0b:c6: c9:bf:67:48:c7:95:c0:71:97:48:b1:ae:ed:7e:0e: ff:57:99:4e:a5:dd:eb:a4:ec:5c:86:fb:fa:08:78: 72:9c:de:61:85:90:dc:72:b5:dc:ee:8e:c9:27:87: 78:dc:8a:7c:44:35:5d:78:4d:ca:9e:14:7c:90:41: 96:7d:4d:de:4a:ae:df:f0:d8:d3:4e:70:a2:01:d7: 1c:c3:55:31:c7:41:0a:0e:be:11:be:9f:d4:48:6d: 88:81:e4:d5:ba:15:e5:37:59:bc:e9:16:32:bd:c3: 38:8a:7c:9c:72:88:78:fe:82:7b:1e:18:22:92:cb: 55:8c:12:70:66:e8:fe:5b:8b:e1:ea:a6:9f:91:40: d0:04:b0:b0:15:c7:14:ec:38:7c:ff:de:0f:b2:4d: 5c:8c:37:ba:65:51:14:93:46:f7:ac:e6:74:41:3a: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:08:8E:B5:49:64:1E:17:49:64:2B:B8:6A:AF:5D:AC:E1:A2:0F X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6b:1f:6c:dd:bf:65:c8:e5:df:23:72:80:fc:a1:f2:83:27: 3d:eb:23:6c:63:29:93:44:23:0c:6a:b0:f5:32:92:64:16:1f: 30:de:46:c6:d5:4a:6d:b0:0f:8c:1c:c0:38:60:8c:62:5f:b7: 7a:69:d8:a8:f8:b7:58:16:14:e4:01:f0:59:24:37:00:c5:02: 29:7a:a4:33:40:b4:44:50:78:1b:69:25:d3:e4:40:76:64:b9: ae:7b:fa:97:98:20:aa:ec:19:42:de:e4:a1:9f:4f:d0:09:9f: b7:cd:03:2c:6d:b1:05:13:32:fb:34:55:62:43:a3:a2:16:c4: 2d:6f:12:bc:e6:5f:9e:ee:ea:5b:f5:8a:ad:eb:a9:58:64:bf: 3c:4d:b4:7c:bc:49:83:7e:76:43:71:b9:4f:84:11:d6:68:a2: f5:28:ad:e9:3a:dc:bb:1f:10:dd:5a:cb:cc:fd:66:e7:dc:81: ad:a2:34:b7:60:4d:8a:95:de:0b:84:7d:fe:b1:6e:10:12:57: 9f:1c:73:8a:bd:6b:63:e3:31:83:85:a6:07:cc:bf:1b:64:ce: f7:08:55:60:3f:91:40:0a:d4:59:07:36:c5:7c:e1:0b:53:28: 25:c3:16:c2:cf:c4:6a:fd:e1:1b:49:32:b0:36:b0:40:d1:af: 6a:3d:93:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwNzAxMDIwODI5WhcNMjUwNzA4MDIwODI5WjAYMRYwFAYD VQQDEw02ODYzNDMxZC0xMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/T/NVbuYXRSZT/hWxAhLWN5DxERSDpgWU6NICAW/vOz1Ockzq0fFbyI9sas mna0+ttWvra7y3+0agvYN98wLbfqkRvOhZpAB068Inlmj5RxSctmY0iaC8bJv2dI x5XAcZdIsa7tfg7/V5lOpd3rpOxchvv6CHhynN5hhZDccrXc7o7JJ4d43Ip8RDVd eE3KnhR8kEGWfU3eSq7f8NjTTnCiAdccw1Uxx0EKDr4Rvp/USG2IgeTVuhXlN1m8 6RYyvcM4inyccoh4/oJ7HhgikstVjBJwZuj+W4vh6qafkUDQBLCwFccU7Dh8/94P sk1cjDe6ZVEUk0b3rOZ0QTpBAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrCCI61 SWQeF0lkK7hqr12s4aIPMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkax9s3b9lyOXfI3KA/KHygyc96yNsYymTRCMMarD1MpJkFh8w3kbG 1UptsA+MHMA4YIxiX7d6adio+LdYFhTkAfBZJDcAxQIpeqQzQLREUHgbaSXT5EB2 ZLmue/qXmCCq7BlC3uShn0/QCZ+3zQMsbbEFEzL7NFViQ6OiFsQtbxK85l+e7upb 9Yqt66lYZL88TbR8vEmDfnZDcblPhBHWaKL1KK3pOty7HxDdWsvM/Wbn3IGtojS3 YE2Kld4LhH3+sW4QElefHHOKvWtj4zGDhaYHzL8bZM73CFVgP5FACtRZBzbFfOEL UyglwxbCz8Rq/eEbSTKwNrBA0a9qPZMu -----END CERTIFICATE-----Generated at Tue Jul 1 21:02:02 2025 by rpki-client