$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft File: cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json) Hash identifier: UURTRIs27SirInom9PaiSwPY2lX+CUDrBZeDaKj4/qw= Subject key identifier: 5D:C4:95:5F:26:38:4D:27:A4:E1:EF:24:3B:3D:6E:F0:ED:11:03:53 Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 Certificate issuer: /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft Manifest number: 0148 Signing time: Tue 01 Jul 2025 04:48:22 +0000 Manifest this update: Tue 01 Jul 2025 04:48:21 +0000 Manifest next update: Tue 08 Jul 2025 04:48:21 +0000 Files and hashes: 1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: QhBhkpL5pgBLCWLhcNlqRy/jEoKkIJQw2XzTf+3My9Q=) 2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: YwXGuIwLbAOZzPiPRemoc11a6IYzMpgzJQrMI7kN5fw=) 3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: NFu6vOIdrlQETQmdi2ziHOwoF9spOq/YA6DUc9jHTPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39 Validity Not Before: Jul 1 04:48:21 2025 GMT Not After : Jul 8 04:48:21 2025 GMT Subject: CN=68636896-2283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:ba:18:59:33:99:e4:bc:47:fb:0a:f6:6a: 87:5a:2a:15:ca:9e:a1:57:8c:12:25:6a:3c:5d:3b: 4b:d8:8b:0b:12:73:d0:de:59:8e:93:59:ee:fc:c1: 2d:c7:9c:eb:d9:16:bb:36:f5:04:19:61:6b:a5:33: 1e:71:b4:ee:a2:6a:7a:f2:a3:62:07:29:05:39:8b: b9:d0:ff:a9:2e:9a:1d:d8:c3:a6:db:ac:96:3e:70: b9:ae:c5:bf:f2:11:23:e3:35:44:7e:d2:32:ac:cb: 7b:ef:f8:df:86:73:44:91:63:e5:33:e7:2f:45:95: 1c:cc:f3:3d:db:0e:bf:8f:7b:ef:c8:f3:d0:d2:fb: 58:3c:65:ed:6f:22:0c:63:4d:6a:53:84:56:b6:52: c8:0e:b7:4d:56:f6:d3:ef:5d:84:03:4e:62:af:34: af:97:80:17:e7:56:2b:6f:91:d1:85:a6:9a:eb:23: 61:11:e7:c3:52:26:04:3b:0d:7e:b3:f1:6b:92:ea: 09:0a:7c:8f:a8:26:e1:09:93:c2:79:52:26:95:47: 65:3f:59:d1:41:ae:f6:dd:1c:f2:b0:6a:a0:6c:f7: 7e:cc:31:c7:2c:f6:37:9f:59:cd:50:d9:18:da:8b: ce:e2:a4:82:c1:91:6f:55:94:7c:6f:00:5c:db:92: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:95:5F:26:38:4D:27:A4:E1:EF:24:3B:3D:6E:F0:ED:11:03:53 X509v3 Authority Key Identifier: keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2b:97:a7:cc:72:3f:f2:55:69:02:53:66:15:69:c6:68:67: cc:cd:1b:04:07:b5:94:ff:cf:f3:74:3e:e0:b3:71:54:76:c2: 0d:db:17:f3:01:b0:bd:ea:48:a1:7e:ad:90:26:a7:5b:58:89: 09:8a:e7:10:15:8d:3f:0b:15:00:62:29:3c:67:38:d9:d7:c9: d7:fa:bd:13:79:31:92:23:63:d9:e3:42:8d:b0:db:64:da:6b: 07:fc:d4:df:8a:2c:72:c4:8d:40:e0:47:fe:d8:cd:ce:f6:d4: 08:7b:bb:6b:67:76:4b:ca:cb:4a:b1:52:7d:4f:5d:0c:53:b6: bb:6e:c4:6d:10:26:ca:ab:4d:db:dc:26:85:ae:2c:e2:63:38: 6e:4e:00:74:0a:57:29:09:ae:80:a0:e7:a7:10:ec:be:8c:40: c3:f6:66:9d:87:2e:c4:4d:2f:b7:23:c9:bf:df:d5:76:b8:88: 1a:d2:a1:23:0b:ed:74:0a:42:d9:d6:c4:64:08:20:64:f4:e6: 24:54:23:76:18:6b:21:34:c8:0b:a6:33:cf:ab:2e:a5:70:57: cb:ba:6c:4c:30:bf:e8:bd:d1:b0:f0:3f:a1:16:4d:70:12:2d: f5:f0:72:fc:ab:ed:17:4e:30:11:a4:57:6d:a5:5c:4d:80:c5: 46:13:2b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVEOTMxMTAvBgNVBAUTKDcyRUYzMkRBRjRFODNGOTAxOTI5NjMyMDg3NEUzQjQ0 NTAwOEVDMzkwHhcNMjUwNzAxMDQ0ODIxWhcNMjUwNzA4MDQ0ODIxWjAYMRYwFAYD VQQDEw02ODYzNjg5Ni0yMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfe6GFkzmeS8R/sK9mqHWioVyp6hV4wSJWo8XTtL2IsLEnPQ3lmOk1nu/MEt x5zr2Ra7NvUEGWFrpTMecbTuomp68qNiBykFOYu50P+pLpod2MOm26yWPnC5rsW/ 8hEj4zVEftIyrMt77/jfhnNEkWPlM+cvRZUczPM92w6/j3vvyPPQ0vtYPGXtbyIM Y01qU4RWtlLIDrdNVvbT712EA05irzSvl4AX51Yrb5HRhaaa6yNhEefDUiYEOw1+ s/FrkuoJCnyPqCbhCZPCeVImlUdlP1nRQa723RzysGqgbPd+zDHHLPY3n1nNUNkY 2ovO4qSCwZFvVZR8bwBc25I4cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3ElV8m OE0npOHvJDs9bvDtEQNTMB8GA1UdIwQYMBaAFHLvMtr06D+QGSljIIdOO0RQCOw5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUQ5My9BMzZDNjhGNDY4 QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1QVpLV01naDA0N1JGQUk3 RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N1OHkydlRvUDVBWktXTWdoMDQ3UkZBSTdEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUQ5My9BMzZDNjhGNDY4QzYxMUVFOTU5NjRGN0NDNEY5QUUwMi9jdTh5MnZUb1A1 QVpLV01naDA0N1JGQUk3RGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9K5enzHI/8lVpAlNmFWnGaGfMzRsEB7WU/8/zdD7gs3FUdsIN2xfz AbC96kihfq2QJqdbWIkJiucQFY0/CxUAYik8ZzjZ18nX+r0TeTGSI2PZ40KNsNtk 2msH/NTfiixyxI1A4Ef+2M3O9tQIe7trZ3ZLystKsVJ9T10MU7a7bsRtECbKq03b 3CaFriziYzhuTgB0ClcpCa6AoOenEOy+jEDD9madhy7ETS+3I8m/39V2uIga0qEj C+10CkLZ1sRkCCBk9OYkVCN2GGshNMgLpjPPqy6lcFfLumxMML/ovdGw8D+hFk1w Ei318HL8q+0XTjARpFdtpVxNgMVGEysf -----END CERTIFICATE-----Generated at Tue Jul 1 08:55:03 2025 by rpki-client