$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: 5gCASdkrMGKEPbVkhrkM4IpjgAs8MzLmZIap1y5Dhks= Subject key identifier: 4B:CD:E3:EF:0A:5B:EC:A6:93:76:0B:67:D3:31:9D:10:DB:5E:64:BA Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 0680 Signing time: Sat 14 Jun 2025 22:26:42 +0000 Manifest this update: Sat 14 Jun 2025 22:26:41 +0000 Manifest next update: Sat 21 Jun 2025 22:26:41 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: 4agYf6Fc49R/zyf6WSTl/SfDOED9ojACioaNpdO+OBw=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: T0CswBD2KIPNfh8TN7kP5VLd+HEy8GI9WMF69x1b8Qc=) 5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=) 6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: Jun 14 22:26:41 2025 GMT Not After : Jun 21 22:26:41 2025 GMT Subject: CN=684df721-6477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:29:50:fe:48:c2:ec:57:4d:09:5f:42:3d: da:8f:b7:03:86:e6:40:2e:5d:f0:8f:88:a3:ec:3b: 6c:cc:27:53:e1:4a:ac:fb:a9:ec:06:28:6e:88:9a: 64:71:15:63:3f:89:01:87:05:32:c3:a6:f6:cd:68: 8c:2f:c9:42:65:72:c5:96:76:b9:de:ca:69:fd:2a: fb:be:9d:99:b5:18:16:82:06:f7:90:75:9f:8d:c6: f0:38:c7:b2:80:ca:bc:a6:27:69:27:61:97:7a:d4: 51:92:28:78:4f:26:8f:1a:83:8c:e1:a7:b6:b5:1d: 9d:01:6c:76:99:53:62:c2:25:5d:65:57:3f:ad:7a: de:79:2c:c7:1b:39:c1:7e:d6:dc:ce:60:93:21:5c: 01:38:d3:a2:d1:01:ec:6a:f7:ef:49:67:fd:bf:15: a8:ac:cc:20:1f:24:d4:23:7d:8b:4f:5d:13:57:8b: 20:69:20:ad:b8:b9:97:ee:dc:55:0b:07:5a:fe:61: 59:31:8f:7e:5d:5f:10:9c:40:d8:b6:a8:69:51:4a: 48:75:b0:e6:6e:23:e1:e0:18:70:bf:a0:fb:fe:cb: c0:b4:b4:fd:96:40:cc:40:c4:91:52:b2:59:ec:a0: 0b:6f:dd:b8:af:f4:24:7f:73:d1:22:a1:ee:24:c4: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CD:E3:EF:0A:5B:EC:A6:93:76:0B:67:D3:31:9D:10:DB:5E:64:BA X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:26:5b:1c:9b:84:c5:d3:fc:09:51:43:c0:01:2f:87:02:01: 11:5f:f3:1e:78:6b:fc:d8:9f:7d:03:22:cb:cc:1b:71:38:6a: 31:3c:37:65:1f:6e:38:70:7d:8e:6e:f1:75:aa:49:37:68:0b: ba:73:37:83:38:6b:2a:6c:07:61:72:a0:6b:77:9c:dc:78:fe: 37:7f:92:19:e9:3f:3a:13:c1:0c:7a:c4:01:b7:de:c1:c7:99: e8:25:76:8c:5e:94:10:b5:97:cc:c2:be:92:1a:e5:ed:94:cf: 34:56:d3:f9:b8:9f:11:56:d3:6a:88:dd:dc:b2:67:a2:72:a6: 3d:f8:86:20:8e:3f:9f:f1:2f:60:7c:aa:1f:f0:c8:af:db:77: a9:f0:06:41:d8:b0:5a:d8:0e:ac:bb:37:31:3a:10:8a:43:e3: 49:28:86:93:fd:3a:7c:d9:06:9a:e0:fd:14:b3:ac:86:66:88: 00:d2:c8:79:7a:65:3c:34:72:8f:81:77:c7:50:c5:bd:2c:e7: cd:2a:13:3e:98:16:03:64:98:65:75:d6:e9:d8:76:13:48:70: 04:e9:53:fd:8c:f6:f1:9c:ec:4f:11:ab:85:a7:dd:09:0e:8d: 0b:a9:1a:39:b7:5b:c4:d0:7f:b3:06:9b:fd:15:3a:b5:20:3f: f4:73:ae:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUwNjE0MjIyNjQxWhcNMjUwNjIxMjIyNjQxWjAYMRYwFAYD VQQDEw02ODRkZjcyMS02NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCopUP5IwuxXTQlfQj3aj7cDhuZALl3wj4ij7DtszCdT4Uqs+6nsBihuiJpk cRVjP4kBhwUyw6b2zWiML8lCZXLFlna53spp/Sr7vp2ZtRgWggb3kHWfjcbwOMey gMq8pidpJ2GXetRRkih4TyaPGoOM4ae2tR2dAWx2mVNiwiVdZVc/rXreeSzHGznB ftbczmCTIVwBONOi0QHsavfvSWf9vxWorMwgHyTUI32LT10TV4sgaSCtuLmX7txV Cwda/mFZMY9+XV8QnEDYtqhpUUpIdbDmbiPh4Bhwv6D7/svAtLT9lkDMQMSRUrJZ 7KALb924r/Qkf3PRIqHuJMR5TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvN4+8K W+ymk3YLZ9MxnRDbXmS6MB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbJlscm4TF0/wJUUPAAS+HAgERX/MeeGv82J99AyLLzBtxOGoxPDdl H244cH2ObvF1qkk3aAu6czeDOGsqbAdhcqBrd5zceP43f5IZ6T86E8EMesQBt97B x5noJXaMXpQQtZfMwr6SGuXtlM80VtP5uJ8RVtNqiN3csmeicqY9+IYgjj+f8S9g fKof8Miv23ep8AZB2LBa2A6suzcxOhCKQ+NJKIaT/Tp82Qaa4P0Us6yGZogA0sh5 emU8NHKPgXfHUMW9LOfNKhM+mBYDZJhlddbp2HYTSHAE6VP9jPbxnOxPEauFp90J Do0LqRo5t1vE0H+zBpv9FTq1ID/0c64m -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:20 2025 by rpki-client