$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: 562XxI8u28wFgSQNbc3gm+Pb6J5OBzA9VPjI+G57rs8= Subject key identifier: 31:9B:5B:83:FD:DA:89:44:2A:C8:A3:F1:46:E6:7E:EA:68:A1:B1:E3 Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 02EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02E2 Signing time: Sun 15 Jun 2025 01:02:16 +0000 Manifest this update: Sun 15 Jun 2025 01:02:16 +0000 Manifest next update: Sun 22 Jun 2025 01:02:16 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: spkv8qUIIYtlJ22rC95jJC8knTaH5EUplB0Ytk78mxI=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) 4: 43CEF64C5E7111EDAD328E21C4F9AE02.roa (hash: CMs488Hhl5oLPF4YmVkuRaqJu0RzsjH0FTfUHm+gkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Jun 15 01:02:16 2025 GMT Not After : Jun 22 01:02:16 2025 GMT Subject: CN=684e1b98-627e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:3c:a1:1a:a5:4e:9e:c7:9d:a3:08:19:e8: cf:ef:a4:9a:df:86:76:63:6b:0b:c9:3d:98:18:d4: e8:e6:73:71:65:00:d5:14:91:73:b2:17:e0:6a:49: cf:16:a6:c8:fc:70:3f:27:3b:68:f7:7d:eb:2a:da: ac:0c:60:f8:c0:86:2b:3b:41:c2:c2:d0:4f:cf:95: 4f:56:ee:92:3a:87:f4:7d:6c:25:2d:f0:09:a6:34: 22:a3:75:30:8c:a8:67:11:d1:a8:ff:2b:3b:4b:e1: 01:42:f5:f0:ee:0a:be:66:4a:44:bf:6f:4b:48:03: 5f:67:3e:6c:4c:48:d7:6a:22:3b:5f:6b:07:85:66: 77:b4:b2:8e:59:64:25:53:f4:0c:27:ff:ac:96:b0: c7:7f:89:ef:28:7a:00:ed:44:1c:3a:04:0a:e4:20: 47:6e:7d:30:a7:b5:61:28:eb:62:82:11:6e:48:07: 33:a4:01:e9:d9:e2:8f:82:5a:cf:26:74:ec:a3:8b: a0:97:6e:85:ec:3a:32:c4:74:5c:89:61:48:6d:b8: 8f:6c:a0:21:14:59:a4:3b:bd:df:05:1c:c6:bf:62: 32:bd:48:7d:54:ee:83:7f:39:84:20:7f:13:22:9d: 98:18:91:49:31:95:73:4b:99:7c:d5:7b:79:38:ab: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:5B:83:FD:DA:89:44:2A:C8:A3:F1:46:E6:7E:EA:68:A1:B1:E3 X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bd:b3:3d:f1:d8:3c:cb:21:ef:6f:20:2e:6a:f2:77:cf:d1: 4b:fc:f9:00:66:74:15:f6:92:05:f6:e3:00:87:3e:bb:15:ce: b0:f5:bb:8b:87:13:53:5f:eb:6a:ca:09:c9:ad:09:97:c8:cb: d5:b1:76:72:0d:4a:bf:97:bc:e1:10:c6:46:bf:fd:51:f4:c7: 21:a6:6c:98:e5:c9:65:44:a0:cd:99:ea:80:18:39:9a:89:66: 70:c2:5d:dc:d8:ed:e7:d5:a1:a3:63:09:70:ca:90:2d:aa:6b: 2c:b6:b4:a5:31:51:8e:9d:4a:6f:fd:cb:e9:2e:aa:ab:80:3d: 2c:3e:4d:e8:87:cc:80:b9:cb:2b:03:9e:ad:b3:9e:de:41:25: 76:8e:05:d8:cb:2a:41:d9:6a:0e:9b:ce:26:5f:6f:43:f2:d6: 5a:49:b6:da:33:b7:39:b4:59:a7:37:09:16:9c:dd:85:48:7e: 9b:3a:34:1b:be:4a:84:ef:40:cc:1f:c0:9d:1e:df:32:c7:0b: fa:a2:2b:32:b0:cb:e8:65:ba:42:b3:ce:dd:6e:f4:fb:96:8a: 71:4e:c9:0a:92:1e:36:ec:86:3f:81:07:24:4d:50:65:fe:39: ad:17:6b:d4:af:e9:1e:47:9b:ce:f1:7d:9c:5b:fd:0d:9e:5c: 04:84:1a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwNjE1MDEwMjE2WhcNMjUwNjIyMDEwMjE2WjAYMRYwFAYD VQQDEw02ODRlMWI5OC02MjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFM8oRqlTp7HnaMIGejP76Sa34Z2Y2sLyT2YGNTo5nNxZQDVFJFzshfgaknP FqbI/HA/Jzto933rKtqsDGD4wIYrO0HCwtBPz5VPVu6SOof0fWwlLfAJpjQio3Uw jKhnEdGo/ys7S+EBQvXw7gq+ZkpEv29LSANfZz5sTEjXaiI7X2sHhWZ3tLKOWWQl U/QMJ/+slrDHf4nvKHoA7UQcOgQK5CBHbn0wp7VhKOtighFuSAczpAHp2eKPglrP JnTso4ugl26F7DoyxHRciWFIbbiPbKAhFFmkO73fBRzGv2IyvUh9VO6DfzmEIH8T Ip2YGJFJMZVzS5l81Xt5OKvaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGbW4P9 2olEKsij8UbmfupoobHjMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkvbM98dg8yyHvbyAuavJ3z9FL/PkAZnQV9pIF9uMAhz67Fc6w9buL hxNTX+tqygnJrQmXyMvVsXZyDUq/l7zhEMZGv/1R9MchpmyY5cllRKDNmeqAGDma iWZwwl3c2O3n1aGjYwlwypAtqmsstrSlMVGOnUpv/cvpLqqrgD0sPk3oh8yAucsr A56ts57eQSV2jgXYyypB2WoOm84mX29D8tZaSbbaM7c5tFmnNwkWnN2FSH6bOjQb vkqE70DMH8CdHt8yxwv6oisysMvoZbpCs87dbvT7lopxTskKkh427IY/gQckTVBl /jmtF2vUr+keR5vO8X2cW/0NnlwEhBoE -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:33 2025 by rpki-client