$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft File: X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json) Hash identifier: KtoNtbONS6rQUJVj4834vqrKWNwKtpJKxEB5WigEPQc= Subject key identifier: 6C:BD:EE:4C:8D:C6:89:DE:C7:C3:4D:F1:BF:96:C4:96:1B:5E:CC:42 Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 Certificate issuer: /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Certificate serial: 07EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft Manifest number: 07DD Signing time: Sat 14 Jun 2025 20:53:21 +0000 Manifest this update: Sat 14 Jun 2025 20:53:21 +0000 Manifest next update: Sat 21 Jun 2025 20:53:21 +0000 Files and hashes: 1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: IqVM98eNvcOUu9+/aulKZuuOAdtYgHVpTZhOy+fgk6o=) 2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: Mb3AFxuyqsJCVgV+HTF7n8MDdauyi9spCKyVJmftERQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2030 (0x7ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435 Validity Not Before: Jun 14 20:53:21 2025 GMT Not After : Jun 21 20:53:21 2025 GMT Subject: CN=684de141-e4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:99:d9:34:d1:91:26:29:67:17:1c:5a:79: 6f:34:2c:d4:e4:77:20:10:e1:1c:8c:dc:4f:96:e1: a5:bb:11:70:b4:47:31:d1:e5:3d:81:e0:87:d6:2e: 8a:06:f8:38:90:85:ba:b2:26:28:37:a2:c2:d8:4b: 04:93:05:d9:39:84:9e:45:2a:74:b7:2a:2b:42:e1: ed:0a:8b:1e:f2:53:ae:da:ee:6c:2c:fd:2d:0e:cf: f3:5f:9e:73:ff:ca:d4:8f:dd:39:fb:5b:ed:02:45: dd:91:6a:09:7e:49:a0:eb:e0:a8:97:a3:b9:ef:68: 66:2f:d3:78:09:c9:75:e9:e5:2e:6b:b0:f5:81:1f: 76:56:cd:84:1a:2c:40:42:89:c9:64:52:78:db:3e: 56:61:c3:00:c1:36:33:f4:82:9c:2f:f1:7a:3a:83: 18:0a:c9:16:30:b5:80:39:16:8e:f8:f1:d4:0e:a2: 2c:c6:30:c3:4d:6f:6f:c1:d8:8e:b2:1c:cd:83:2c: af:07:cc:12:2e:28:70:9e:63:ce:6b:55:43:2f:dc: d9:1d:a1:52:82:f1:01:e0:2f:5a:6c:10:32:6b:8a: 36:6e:33:de:2d:bc:a9:07:3b:67:c7:6e:fd:e0:ab: ce:3e:7e:01:02:a6:5f:8b:10:7e:e7:1f:9d:54:27: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BD:EE:4C:8D:C6:89:DE:C7:C3:4D:F1:BF:96:C4:96:1B:5E:CC:42 X509v3 Authority Key Identifier: keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:84:8e:e4:0c:10:d2:c2:16:48:e2:8d:a7:41:38:70:91:a7: 27:c1:88:d0:e0:fc:c1:05:de:c8:77:94:eb:4c:7c:0d:a8:94: 63:11:19:d0:6f:93:2a:b5:56:29:cd:c3:dd:03:ce:cf:bf:54: e0:2a:ef:9f:dc:26:3a:02:3a:f5:35:23:53:f1:6b:fb:95:c0: ff:94:a4:3c:d0:f7:57:55:b1:49:ee:9c:0b:25:93:a2:10:26: 8e:a2:71:96:55:41:7f:76:88:0c:0e:a8:30:30:e5:02:0a:a8: 2f:c3:6e:3e:88:cf:78:b1:ba:d9:0c:35:a2:6b:4e:dd:2f:c2: 41:43:98:8b:23:f9:bd:24:d0:d6:b4:19:8d:ce:2e:4d:60:de: 7d:a2:fe:56:9b:7a:54:fd:ba:b1:16:03:3a:90:0d:52:e7:7f: 80:79:a9:ff:6a:8b:b3:7c:d5:c3:b2:47:c3:2c:c2:33:e2:58: 21:7e:fb:e3:52:1b:5d:b5:56:2e:35:91:06:f2:fd:ff:86:76: db:8f:a0:72:75:5e:18:94:d1:07:6b:76:3a:44:bf:6e:14:22: 7e:20:a2:5b:05:c0:d8:a2:93:36:da:d9:c2:64:ec:ef:63:02: 38:92:d1:e1:82:0e:11:a7:32:55:37:11:50:56:26:8c:4f:1f: e5:d6:c7:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz M0NEMDU0MzUwHhcNMjUwNjE0MjA1MzIxWhcNMjUwNjIxMjA1MzIxWjAYMRYwFAYD VQQDEw02ODRkZTE0MS1lNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7CZ2TTRkSYpZxccWnlvNCzU5HcgEOEcjNxPluGluxFwtEcx0eU9geCH1i6K Bvg4kIW6siYoN6LC2EsEkwXZOYSeRSp0tyorQuHtCose8lOu2u5sLP0tDs/zX55z /8rUj905+1vtAkXdkWoJfkmg6+Col6O572hmL9N4Ccl16eUua7D1gR92Vs2EGixA QonJZFJ42z5WYcMAwTYz9IKcL/F6OoMYCskWMLWAORaO+PHUDqIsxjDDTW9vwdiO shzNgyyvB8wSLihwnmPOa1VDL9zZHaFSgvEB4C9abBAya4o2bjPeLbypBztnx279 4KvOPn4BAqZfixB+5x+dVCcd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy97kyN xonex8NN8b+WxJYbXsxCMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4 QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfhI7kDBDSwhZI4o2nQThwkacnwYjQ4PzBBd7Id5TrTHwNqJRjERnQ b5MqtVYpzcPdA87Pv1TgKu+f3CY6Ajr1NSNT8Wv7lcD/lKQ80PdXVbFJ7pwLJZOi ECaOonGWVUF/dogMDqgwMOUCCqgvw24+iM94sbrZDDWia07dL8JBQ5iLI/m9JNDW tBmNzi5NYN59ov5Wm3pU/bqxFgM6kA1S53+Aean/aouzfNXDskfDLMIz4lghfvvj UhtdtVYuNZEG8v3/hnbbj6BydV4YlNEHa3Y6RL9uFCJ+IKJbBcDYopM22tnCZOzv YwI4ktHhgg4RpzJVNxFQViaMTx/l1sez -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:07 2025 by rpki-client