$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json) Hash identifier: VKVHJnyk3ws7zwN9k45xTQO+9EF2muM58hOf3MAy16s= Subject key identifier: 2C:B2:69:E2:CE:54:9A:BE:83:1F:FD:C6:49:E3:39:5C:89:5E:C8:4A Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 10D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft Manifest number: 10BC Signing time: Wed 02 Jul 2025 17:31:00 +0000 Manifest this update: Wed 02 Jul 2025 17:31:00 +0000 Manifest next update: Wed 09 Jul 2025 17:31:00 +0000 Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: dTosaPK1m2dRZ4RQabg941h57HnTUmvvAn2suU0XvXI=) 2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: lCmO2moRnEyFjHn2T0RrSpJHfoRMsDo8flibJ/q1im8=) 3: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: tpKBG2KlXfT/Zt122B62y1RWSYubHmXeyHELnt2EtS4=) 4: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4311 (0x10d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Jul 2 17:31:00 2025 GMT Not After : Jul 9 17:31:00 2025 GMT Subject: CN=68656cd4-91d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:be:65:a1:75:26:21:1b:36:15:b9:83:4c:50: 98:3d:dc:1c:d6:97:20:72:89:00:cd:31:94:e4:ac: ca:06:df:b1:bd:c8:9a:65:50:d7:3b:7e:30:8d:53: 3a:27:83:1f:a6:4b:47:0d:a4:87:ba:06:30:62:0b: 69:e9:3b:ab:1a:5d:9c:92:de:79:bb:e5:68:39:dc: 41:d4:a2:d4:91:92:37:82:c8:3d:9f:64:ca:ac:a5: 3e:33:17:18:b3:e6:e6:ab:ba:79:90:5d:ef:7d:cf: 1b:6c:d8:72:4f:8b:08:31:de:e7:a9:02:cb:84:51: d7:08:1a:ac:08:9e:08:d0:c5:e7:6d:fe:e3:1e:72: 0c:91:d3:cd:4a:1b:0e:29:d2:4a:47:27:b4:bc:6d: f0:f1:44:5f:ea:8b:30:0e:ee:d5:d5:37:55:fc:0c: 81:d9:d6:1c:2e:e5:4b:13:a5:4c:8e:6b:1b:85:56: a2:4a:21:59:ed:da:3b:5f:2e:e5:b4:07:31:d2:c2: 61:81:fc:b3:04:1f:27:54:f4:4f:f4:3f:95:07:ea: 57:a4:ba:58:b0:28:28:6c:c1:cb:64:84:44:0d:b8: 89:38:c5:3e:b7:4b:94:49:b8:78:13:e9:b5:9c:ba: e6:cb:3a:67:41:16:84:84:31:2c:83:9d:59:ae:c0: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B2:69:E2:CE:54:9A:BE:83:1F:FD:C6:49:E3:39:5C:89:5E:C8:4A X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ef:01:e1:e1:98:97:f3:c0:17:9e:e1:e4:b7:ba:ee:57:28: 41:91:e3:df:ee:30:5d:34:6f:df:e0:98:0e:94:38:67:69:bd: 1c:dc:32:29:5f:21:c5:6e:7d:cd:ab:e9:c1:52:7a:55:1c:47: fe:ae:73:3d:b6:40:f1:5c:f5:ce:f2:d9:14:c7:c1:5b:70:75: 41:5c:38:3b:dc:5d:60:c2:e4:8e:40:fb:60:05:db:3c:c3:55: f4:5c:62:ca:89:76:36:ab:9c:cf:d4:25:19:72:e2:cd:19:a8: 88:1e:19:2c:b0:24:9f:e0:22:39:38:98:6d:cb:6e:d9:3e:5e: 5f:39:4f:80:45:9d:2e:84:43:db:dc:93:52:20:eb:7a:15:7f: 38:87:46:08:d1:b6:c6:68:c4:7a:1c:c1:1c:09:96:dd:e8:cc: f2:e8:58:05:c1:ee:d1:6d:d9:fd:95:a9:67:d1:8d:8e:36:87: 31:00:99:65:2b:cf:64:cf:85:d9:49:1e:47:a1:7b:2e:59:5b: b0:43:e1:81:1b:24:1d:29:cc:b6:37:08:af:bb:2f:6e:14:3e: 02:0c:ac:5d:52:3c:6d:46:07:0a:03:95:25:58:2f:da:92:28: d7:21:3b:5c:7b:40:6e:ef:6c:a2:f5:a2:91:27:01:3a:92:77: da:de:7f:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjUwNzAyMTczMTAwWhcNMjUwNzA5MTczMTAwWjAYMRYwFAYD VQQDEw02ODY1NmNkNC05MWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4b5loXUmIRs2FbmDTFCYPdwc1pcgcokAzTGU5KzKBt+xvciaZVDXO34wjVM6 J4MfpktHDaSHugYwYgtp6TurGl2ckt55u+VoOdxB1KLUkZI3gsg9n2TKrKU+MxcY s+bmq7p5kF3vfc8bbNhyT4sIMd7nqQLLhFHXCBqsCJ4I0MXnbf7jHnIMkdPNShsO KdJKRye0vG3w8URf6oswDu7V1TdV/AyB2dYcLuVLE6VMjmsbhVaiSiFZ7do7Xy7l tAcx0sJhgfyzBB8nVPRP9D+VB+pXpLpYsCgobMHLZIREDbiJOMU+t0uUSbh4E+m1 nLrmyzpnQRaEhDEsg51ZrsAPrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCyyaeLO VJq+gx/9xknjOVyJXshKMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjA4RC84MTA3M0EzMDI4NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdY bDhJZm4yQWxJMFZrWXhzX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7wHh4ZiX88AXnuHkt7ruVyhBkePf7jBdNG/f4JgOlDhnab0c3DIp XyHFbn3Nq+nBUnpVHEf+rnM9tkDxXPXO8tkUx8FbcHVBXDg73F1gwuSOQPtgBds8 w1X0XGLKiXY2q5zP1CUZcuLNGaiIHhkssCSf4CI5OJhty27ZPl5fOU+ARZ0uhEPb 3JNSIOt6FX84h0YI0bbGaMR6HMEcCZbd6Mzy6FgFwe7Rbdn9laln0Y2ONocxAJll K89kz4XZSR5HoXsuWVuwQ+GBGyQdKcy2Nwivuy9uFD4CDKxdUjxtRgcKA5UlWC/a kijXITtce0Bu72yi9aKRJwE6knfa3n+7 -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:18 2025 by rpki-client