$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: qR5wO4962j+Qkr5RjwmuTq2wlmYtsWSgMyfL+rsv9Is= Subject key identifier: 39:44:75:03:97:F7:84:38:7E:F2:BC:CB:E9:4C:5E:47:2C:96:66:39 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03DF Signing time: Sat 05 Jul 2025 01:04:34 +0000 Manifest this update: Sat 05 Jul 2025 01:04:34 +0000 Manifest next update: Sat 12 Jul 2025 01:04:34 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: 07vOMyIhPJz2xAfWl+B8aAiUEXKBWYgturyCJsDnxog=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Jul 5 01:04:34 2025 GMT Not After : Jul 12 01:04:34 2025 GMT Subject: CN=68687a22-250a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:65:b3:49:18:26:c6:0d:27:33:9e:77:54: 74:6c:b5:b9:0b:29:c7:1b:05:cb:6a:d1:ee:6a:ee: 89:81:1c:88:ec:96:ac:92:ab:c4:c4:44:eb:f3:0f: 64:ee:a7:42:51:7e:e6:9a:5d:55:ff:4a:8b:55:b4: 78:19:5f:8b:99:3e:e3:28:a0:ac:1a:43:c6:59:0d: 72:eb:fd:ef:f7:33:de:f6:50:9b:5c:3b:7b:cf:5c: 3c:e4:68:50:10:d5:08:a3:b8:33:20:ef:52:b6:3c: 5b:1d:2e:67:35:96:e8:78:b7:01:5f:c6:45:97:b2: 71:fe:c5:a4:df:80:6f:36:73:da:11:a7:f9:f6:8b: 36:b7:7b:ae:f6:0b:e9:92:c4:8a:be:a7:62:7f:61: 57:7f:dd:bf:70:12:33:ee:a9:b1:35:fa:e3:17:e8: 02:af:bf:51:5d:5a:ae:81:4b:2f:70:d6:84:3f:7a: 7a:48:0d:7c:6e:b3:27:b6:be:2a:82:92:95:a0:32: 14:3e:11:56:68:57:bf:ae:55:d1:4e:70:51:09:02: be:1e:60:83:eb:c1:b3:1b:3f:2f:bc:bd:0a:32:83: 68:3e:0f:e1:b5:e4:11:c6:f8:cd:14:a7:ed:d8:a3: 65:1e:c3:02:07:27:6b:53:d4:a2:e5:ef:46:0b:92: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:44:75:03:97:F7:84:38:7E:F2:BC:CB:E9:4C:5E:47:2C:96:66:39 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:b4:ef:d3:51:c3:9c:b3:99:e7:a2:91:bd:ba:49:08:5a:b8: 03:05:90:bb:ef:23:ea:97:e0:04:5a:b1:7c:7b:87:a5:f2:e8: 4c:9b:eb:49:80:f9:57:10:f9:ca:0c:bc:d5:16:66:4e:00:f6: be:5d:95:88:18:83:07:79:b8:77:cb:0d:58:fa:92:71:0f:e7: 7b:7e:ac:74:54:e1:c6:39:a7:f9:5e:6f:86:26:f4:f5:67:0f: 57:16:94:7a:e4:eb:ef:c3:7c:89:67:06:20:9a:1b:b2:97:b3: 53:28:8a:bc:fc:c5:48:3d:89:42:ff:1d:61:d2:48:19:bc:66: 4a:f1:b6:75:96:c6:c5:f2:f9:36:cd:18:ae:7e:14:c8:df:e4: 83:c9:69:c2:02:d5:85:c5:7b:f3:8f:bc:99:90:f6:b1:65:07: b1:a6:a5:21:46:90:5f:f7:74:80:f9:c9:6e:1d:cc:65:57:a5: 8f:f7:be:00:0c:b5:a7:db:69:66:76:f5:75:71:42:41:df:ef: 9e:7e:32:2d:2c:24:d0:28:f7:d6:95:7f:64:65:af:2c:bb:98: 5a:8f:71:14:cc:50:c0:13:fe:86:2f:a1:72:cc:b4:44:2a:c6: 79:05:62:b2:f0:b9:8a:d7:fc:2d:22:85:03:5a:59:64:c5:90: 44:38:02:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNzA1MDEwNDM0WhcNMjUwNzEyMDEwNDM0WjAYMRYwFAYD VQQDEw02ODY4N2EyMi0yNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhdls0kYJsYNJzOed1R0bLW5CynHGwXLatHuau6JgRyI7JaskqvExETr8w9k 7qdCUX7mml1V/0qLVbR4GV+LmT7jKKCsGkPGWQ1y6/3v9zPe9lCbXDt7z1w85GhQ ENUIo7gzIO9StjxbHS5nNZboeLcBX8ZFl7Jx/sWk34BvNnPaEaf59os2t3uu9gvp ksSKvqdif2FXf92/cBIz7qmxNfrjF+gCr79RXVqugUsvcNaEP3p6SA18brMntr4q gpKVoDIUPhFWaFe/rlXRTnBRCQK+HmCD68GzGz8vvL0KMoNoPg/hteQRxvjNFKft 2KNlHsMCBydrU9Si5e9GC5IvwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlEdQOX 94Q4fvK8y+lMXkcslmY5MB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5tO/TUcOcs5nnopG9ukkIWrgDBZC77yPql+AEWrF8e4el8uhMm+tJ gPlXEPnKDLzVFmZOAPa+XZWIGIMHebh3yw1Y+pJxD+d7fqx0VOHGOaf5Xm+GJvT1 Zw9XFpR65Ovvw3yJZwYgmhuyl7NTKIq8/MVIPYlC/x1h0kgZvGZK8bZ1lsbF8vk2 zRiufhTI3+SDyWnCAtWFxXvzj7yZkPaxZQexpqUhRpBf93SA+cluHcxlV6WP974A DLWn22lmdvV1cUJB3++efjItLCTQKPfWlX9kZa8su5haj3EUzFDAE/6GL6FyzLRE KsZ5BWKy8LmK1/wtIoUDWllkxZBEOAKd -----END CERTIFICATE-----Generated at Sun Jul 6 00:45:02 2025 by rpki-client