$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: JaVlfUsLG/XMy9WhXFRa5gdQg2UkZ5i7R/9z77xSTvU= Subject key identifier: AD:4F:AE:35:A9:8C:C0:32:00:B2:65:B8:7B:B0:D9:94:76:1F:47:18 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 04EE Signing time: Mon 16 Jun 2025 23:20:57 +0000 Manifest this update: Mon 16 Jun 2025 23:20:56 +0000 Manifest next update: Mon 23 Jun 2025 23:20:56 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: tQBVTSclfiyzfFCPTFfrP2endBZ12rpggaHOW266K2g=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Jun 16 23:20:56 2025 GMT Not After : Jun 23 23:20:56 2025 GMT Subject: CN=6850a6d8-992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:ed:1d:8d:9e:bb:98:d6:35:d3:ee:3b:5b: b6:62:a7:c4:10:d3:6d:c6:3c:fe:48:75:8a:f4:f5: ae:c3:d9:79:f2:6f:c6:86:d8:e0:d3:b9:0e:e5:10: c4:d1:96:d2:b2:80:63:33:63:65:b0:21:73:4f:21: 71:db:4a:f8:d3:45:1b:9a:6b:c6:8c:48:33:33:77: d7:0a:13:e0:a8:61:fb:d6:b2:c7:ea:2f:37:05:00: 02:dd:80:75:83:c0:ac:66:da:f3:0c:27:55:00:0e: bb:20:77:21:89:b3:a1:e2:d1:4b:13:6d:29:1b:88: df:53:db:47:fd:bd:99:71:68:32:46:cc:a9:55:e2: c2:3d:01:fb:ec:f1:7a:41:cf:a2:ef:4d:36:29:e6: 70:54:b6:8c:ba:98:d2:4d:5b:ef:ea:09:72:45:2a: de:41:41:17:87:ec:77:dd:87:c6:6c:5b:be:a3:43: 73:40:69:a5:44:0f:c8:5d:ec:18:a9:cb:25:1d:4d: 28:aa:eb:97:81:4b:11:04:0a:6a:da:d0:dd:93:4d: 5a:69:64:88:5a:43:37:0e:a4:80:b2:e3:57:4c:46: c6:89:6a:ba:f6:f2:04:fe:e4:e0:69:72:2e:2f:0f: 41:e2:16:b9:1d:ad:f8:4f:c4:02:0f:2e:f6:a1:2d: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4F:AE:35:A9:8C:C0:32:00:B2:65:B8:7B:B0:D9:94:76:1F:47:18 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:80:56:ec:15:0a:ea:3b:6e:09:d6:e1:3c:ef:c5:55:96: fe:56:12:30:c6:c2:3b:d1:4b:f6:36:95:c2:a4:82:f7:c9:9b: 4d:ad:fd:f8:d3:08:de:e4:e8:be:e9:34:10:d1:00:db:df:2d: 39:fd:a8:89:0a:d4:19:9f:3b:5d:b6:71:d5:e1:2f:a4:c2:0e: 7b:a5:d8:bc:c9:8e:65:30:6e:6c:4e:3a:31:9f:35:98:5e:eb: 53:81:31:db:20:16:78:bd:21:e3:5d:3d:3a:2a:af:d5:77:a7: a4:60:1e:51:c0:d6:68:2d:dc:54:e0:4e:db:5e:bf:3f:79:24: 30:53:f7:cb:bc:26:1e:be:32:91:74:98:1b:0a:71:fc:38:e1: ef:16:eb:24:9c:be:c4:83:ab:0b:50:3f:90:a5:a2:ed:97:48: b8:c6:43:a6:8c:73:38:43:e9:ff:20:1f:4a:b4:fe:90:05:cc: a6:0f:57:ba:e2:32:d8:86:1d:4b:8e:1f:63:02:32:2e:61:c9: 89:e4:13:81:dc:d9:bb:b7:e1:b2:6b:df:4f:88:e4:4a:45:66: 90:90:5a:ba:3b:03:0f:f7:7c:f2:73:c0:bf:5d:5d:db:9f:70: 9c:15:34:62:d4:4f:41:68:4f:98:4b:4f:9b:40:a2:3c:94:d6: 3a:03:fe:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjUwNjE2MjMyMDU2WhcNMjUwNjIzMjMyMDU2WjAYMRYwFAYD VQQDEw02ODUwYTZkOC05OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHvtHY2eu5jWNdPuO1u2YqfEENNtxjz+SHWK9PWuw9l58m/Ghtjg07kO5RDE 0ZbSsoBjM2NlsCFzTyFx20r400UbmmvGjEgzM3fXChPgqGH71rLH6i83BQAC3YB1 g8CsZtrzDCdVAA67IHchibOh4tFLE20pG4jfU9tH/b2ZcWgyRsypVeLCPQH77PF6 Qc+i7002KeZwVLaMupjSTVvv6glyRSreQUEXh+x33YfGbFu+o0NzQGmlRA/IXewY qcslHU0oquuXgUsRBApq2tDdk01aaWSIWkM3DqSAsuNXTEbGiWq69vIE/uTgaXIu Lw9B4ha5Ha34T8QCDy72oS0lmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1PrjWp jMAyALJluHuw2ZR2H0cYMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdA4BW7BUK6jtuCdbhPO/FVZb+VhIwxsI70Uv2NpXCpIL3yZtNrf34 0wje5Oi+6TQQ0QDb3y05/aiJCtQZnztdtnHV4S+kwg57pdi8yY5lMG5sTjoxnzWY XutTgTHbIBZ4vSHjXT06Kq/Vd6ekYB5RwNZoLdxU4E7bXr8/eSQwU/fLvCYevjKR dJgbCnH8OOHvFusknL7Eg6sLUD+QpaLtl0i4xkOmjHM4Q+n/IB9KtP6QBcymD1e6 4jLYhh1Ljh9jAjIuYcmJ5BOB3Nm7t+Gya99PiORKRWaQkFq6OwMP93zyc8C/XV3b n3CcFTRi1E9BaE+YS0+bQKI8lNY6A/6j -----END CERTIFICATE-----Generated at Wed Jun 18 16:02:23 2025 by rpki-client