$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: nW2Ch4GaLQD7q123pKenBU51resoEBm1FBXfJkG1mUc= Subject key identifier: 1D:3A:17:43:C2:81:62:82:4C:C1:0B:39:D3:0A:B4:32:65:09:60:B6 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E5B Signing time: Mon 30 Jun 2025 17:56:00 +0000 Manifest this update: Mon 30 Jun 2025 17:55:59 +0000 Manifest next update: Mon 07 Jul 2025 17:55:59 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: ABOCOlrxCKMM6S8LDBZ4YsxM2/QfgO+b2lX8gQSzPj4=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3683 (0xe63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Jun 30 17:55:59 2025 GMT Not After : Jul 7 17:55:59 2025 GMT Subject: CN=6862cfaf-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:5e:b9:9a:71:74:ea:58:c4:7a:13:92:26: a5:f6:36:a8:b9:07:5e:ea:12:85:41:70:fe:9d:07: 60:e8:b2:f4:aa:a5:3f:a0:fb:57:e4:d1:da:b7:dc: 35:5f:4b:c5:49:c4:1e:ca:74:16:74:e3:2b:fe:bb: 05:ad:5d:fa:84:5c:62:86:b3:51:2f:e6:2d:a1:44: 87:69:d6:37:29:fe:35:c4:d6:15:45:31:22:11:fe: 6d:b4:18:a1:41:f7:2e:aa:22:3f:16:f0:d9:31:1f: 46:c1:95:0e:fe:7e:10:a4:46:61:14:b4:c3:20:44: cb:97:6e:00:71:66:0f:73:32:6c:76:e7:8f:3f:57: a5:6e:91:5b:44:a5:96:eb:57:2f:dc:d1:42:a3:4b: e7:e7:f8:ea:7f:88:a4:bb:e5:a9:9d:58:32:4d:ce: 41:b4:c3:bc:1d:d5:fd:82:eb:1c:29:01:9d:00:cb: 1c:68:43:ab:80:71:3d:63:27:25:f1:2b:bc:7d:dd: e9:2d:52:e6:a7:77:97:9d:06:d9:b5:ed:31:4b:a6: 15:5c:01:53:cb:a8:1f:d2:11:4a:4b:a4:74:95:2b: c0:b3:f7:8b:ef:a9:dc:90:2d:f0:d3:70:6b:49:a2: a1:20:dd:4e:47:33:df:45:57:67:1b:91:0b:55:fa: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:17:43:C2:81:62:82:4C:C1:0B:39:D3:0A:B4:32:65:09:60:B6 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:5e:87:f8:f3:65:54:cc:78:22:5f:dc:b1:a4:38:6c:fb: 9e:dc:70:fb:71:46:9b:06:a9:ba:01:fb:89:33:1b:ba:2e:7c: 01:c7:46:15:e1:7c:11:d1:b9:02:d8:24:34:74:49:a6:44:c2: 5c:b8:29:c1:48:27:26:1a:0e:d4:f4:a7:91:02:91:4a:7e:5b: 55:1e:bf:d1:84:ae:ae:63:71:ca:37:bf:31:52:60:6f:18:85: 4a:0f:54:d8:6d:df:29:47:3d:22:24:d0:f7:7d:fc:66:f6:61: f0:20:28:97:16:60:fd:60:e1:85:40:59:5d:dc:99:c5:2f:38: b9:c2:10:82:16:c5:22:36:46:5d:94:c6:01:8b:92:e0:fc:1c: 89:82:04:57:82:c9:f5:48:95:c1:97:cb:c2:a1:80:92:c1:5b: 46:d9:ca:7c:61:06:19:fa:db:cb:ac:94:02:db:11:fd:cd:3a: 5e:33:27:fa:3e:8a:4a:ae:2c:64:a9:f0:6d:59:f5:fc:2b:06: ab:74:8f:64:bf:09:8b:07:a9:47:e8:15:a4:70:37:35:74:ae: 0e:9b:3b:94:9f:f5:1d:63:ba:84:89:b7:7a:28:7f:6c:60:83: 84:53:68:88:79:8a:c7:a0:e1:81:8f:f9:15:1b:e5:92:7a:f3: 85:c0:35:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwNjMwMTc1NTU5WhcNMjUwNzA3MTc1NTU5WjAYMRYwFAYD VQQDEw02ODYyY2ZhZi1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXFeuZpxdOpYxHoTkial9jaouQde6hKFQXD+nQdg6LL0qqU/oPtX5NHat9w1 X0vFScQeynQWdOMr/rsFrV36hFxihrNRL+YtoUSHadY3Kf41xNYVRTEiEf5ttBih QfcuqiI/FvDZMR9GwZUO/n4QpEZhFLTDIETLl24AcWYPczJsduePP1elbpFbRKWW 61cv3NFCo0vn5/jqf4iku+WpnVgyTc5BtMO8HdX9guscKQGdAMscaEOrgHE9Yycl 8Su8fd3pLVLmp3eXnQbZte0xS6YVXAFTy6gf0hFKS6R0lSvAs/eL76nckC3w03Br SaKhIN1ORzPfRVdnG5ELVfodMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB06F0PC gWKCTMELOdMKtDJlCWC2MB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbY16H+PNlVMx4Il/csaQ4bPue3HD7cUabBqm6AfuJMxu6LnwBx0YV 4XwR0bkC2CQ0dEmmRMJcuCnBSCcmGg7U9KeRApFKfltVHr/RhK6uY3HKN78xUmBv GIVKD1TYbd8pRz0iJND3ffxm9mHwICiXFmD9YOGFQFld3JnFLzi5whCCFsUiNkZd lMYBi5Lg/ByJggRXgsn1SJXBl8vCoYCSwVtG2cp8YQYZ+tvLrJQC2xH9zTpeMyf6 PopKrixkqfBtWfX8KwardI9kvwmLB6lH6BWkcDc1dK4OmzuUn/UdY7qEibd6KH9s YIOEU2iIeYrHoOGBj/kVG+WSevOFwDVR -----END CERTIFICATE-----Generated at Tue Jul 1 18:22:01 2025 by rpki-client