$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: 3G4BwcAopzlOLfN5Fmh4TBp1bQ8d/ROB8VafUY9Kk60= Subject key identifier: D9:17:DC:CA:A9:D0:21:1A:F8:03:50:63:0D:A0:7F:01:61:AC:21:07 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 052D Signing time: Sat 28 Jun 2025 23:10:39 +0000 Manifest this update: Sat 28 Jun 2025 23:10:38 +0000 Manifest next update: Sat 05 Jul 2025 23:10:38 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: 34OpJSDtPZQ0oVEMtGJz9dMWg0uVJ+V2zolVm7qO2hg=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Jun 28 23:10:38 2025 GMT Not After : Jul 5 23:10:38 2025 GMT Subject: CN=6860766e-d8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:61:93:d2:ac:57:e6:0e:b1:d4:a1:96:a7: f5:75:46:5c:f1:44:f2:95:3a:02:d6:70:ff:21:38: 5e:79:a6:f8:ed:14:1d:40:85:30:30:f1:58:89:da: 68:d2:7d:c0:1d:1e:0d:6c:05:78:c3:8d:b3:a4:35: 78:cf:e0:a5:06:43:68:fb:fb:83:53:cc:ef:e3:ed: b8:47:ae:a6:b1:49:f8:1d:10:60:fc:50:a5:f0:7c: 2d:44:32:e6:f9:6f:e9:8f:2e:4f:5a:ce:f5:df:25: 2a:ff:35:2f:d3:a1:c1:bd:d1:50:33:6f:d1:a2:cb: 6c:71:ac:27:10:cd:85:36:0c:c7:51:36:6a:50:67: 8e:c6:d2:23:cc:5f:50:ca:f9:31:ad:08:46:a0:91: e8:f9:8b:ca:93:b3:1e:30:54:ff:e5:5a:cc:da:30: 38:9c:40:44:fa:b8:56:38:b9:b0:0c:2d:5d:9a:33: a3:31:6a:26:5f:c0:29:8e:e3:b5:c2:70:22:2b:88: 2f:f8:68:d1:38:65:ae:49:8f:cf:91:2e:67:6f:e6: 5e:e1:f5:e3:75:0f:c7:8d:35:8d:43:ec:4b:fa:31: d7:8e:32:ea:10:08:19:6f:23:37:a0:b1:6b:83:e5: 80:0f:20:37:a8:50:a1:6c:43:f6:46:f0:4a:de:d0: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:17:DC:CA:A9:D0:21:1A:F8:03:50:63:0D:A0:7F:01:61:AC:21:07 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:57:92:fd:e6:b6:aa:a6:b9:8f:f5:09:0d:2d:0b:49:f8: 75:dd:4b:2c:0d:83:a4:cd:87:5e:25:b8:50:00:31:3c:b1:fe: 1e:63:47:42:6c:0d:fb:bc:ec:91:ba:16:ac:2c:de:0f:f1:61: 96:dc:7c:95:68:62:c4:7e:63:72:f2:b3:00:dd:a2:a3:95:9f: cf:20:f5:a3:cb:b7:aa:e4:fd:40:55:44:4f:92:81:a0:f5:ea: bb:9d:38:4c:df:40:b6:b7:12:44:ce:66:01:4b:63:c4:70:b6: 61:d4:ca:e4:5a:e9:f0:bb:c9:26:0c:2c:0d:ff:af:f1:82:a4: a4:40:cd:43:8e:96:f4:33:d0:15:19:bc:ca:56:93:fd:68:69: 63:1d:d3:b6:48:84:b1:ff:fc:d2:b2:37:6a:62:74:c5:82:b3: e2:cb:5b:ca:e0:c6:af:4f:43:3a:47:67:f3:8f:cb:4c:7c:cd: 89:38:c0:b3:2b:a7:29:d3:e0:ba:93:bd:d1:53:38:4f:a7:38: ea:e7:b6:28:b4:f6:0f:a3:24:38:84:4a:89:61:33:e3:f3:f7: c1:01:d1:01:a1:2f:98:40:2b:a3:10:74:47:66:97:95:9a:22: 26:ee:46:50:94:01:a6:01:8f:1e:f1:b6:a8:fa:a8:24:72:87: 00:9e:fd:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUwNjI4MjMxMDM4WhcNMjUwNzA1MjMxMDM4WjAYMRYwFAYD VQQDEw02ODYwNzY2ZS1kOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdphk9KsV+YOsdShlqf1dUZc8UTylToC1nD/ITheeab47RQdQIUwMPFYidpo 0n3AHR4NbAV4w42zpDV4z+ClBkNo+/uDU8zv4+24R66msUn4HRBg/FCl8HwtRDLm +W/pjy5PWs713yUq/zUv06HBvdFQM2/RostscawnEM2FNgzHUTZqUGeOxtIjzF9Q yvkxrQhGoJHo+YvKk7MeMFT/5VrM2jA4nEBE+rhWOLmwDC1dmjOjMWomX8ApjuO1 wnAiK4gv+GjROGWuSY/PkS5nb+Ze4fXjdQ/HjTWNQ+xL+jHXjjLqEAgZbyM3oLFr g+WADyA3qFChbEP2RvBK3tCucwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkX3Mqp 0CEa+ANQYw2gfwFhrCEHMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6SleS/ea2qqa5j/UJDS0LSfh13UssDYOkzYdeJbhQADE8sf4eY0dC bA37vOyRuhasLN4P8WGW3HyVaGLEfmNy8rMA3aKjlZ/PIPWjy7eq5P1AVURPkoGg 9eq7nThM30C2txJEzmYBS2PEcLZh1MrkWunwu8kmDCwN/6/xgqSkQM1Djpb0M9AV GbzKVpP9aGljHdO2SISx//zSsjdqYnTFgrPiy1vK4MavT0M6R2fzj8tMfM2JOMCz K6cp0+C6k73RUzhPpzjq57YotPYPoyQ4hEqJYTPj8/fBAdEBoS+YQCujEHRHZpeV miIm7kZQlAGmAY8e8bao+qgkcocAnv3k -----END CERTIFICATE-----Generated at Sun Jun 29 16:26:41 2025 by rpki-client