$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: gCZgfuw+yrklx98A2lwjMBRBcGpXA6ZJS+UmoOkmtRc= Subject key identifier: 3C:D4:E8:2C:8E:E6:4D:F8:FE:36:5C:4F:4C:A6:2D:E0:63:E4:CC:DA Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 07DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 07BE Signing time: Thu 12 Jun 2025 20:51:16 +0000 Manifest this update: Thu 12 Jun 2025 20:51:16 +0000 Manifest next update: Thu 19 Jun 2025 20:51:16 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: I/eBHM4Ghqd3KIqjF6vdTebwkF+0M6rZYdkjZQnKweM=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2010 (0x7da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Jun 12 20:51:16 2025 GMT Not After : Jun 19 20:51:16 2025 GMT Subject: CN=684b3dc4-b9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:2e:00:da:ae:cf:06:a5:20:a2:a8:70:a7: 1f:36:20:e6:a7:79:75:89:19:e2:bf:26:eb:c0:d0: 85:5e:84:5e:f5:41:d9:c2:f6:a0:82:85:be:d9:c1: 31:3f:86:cf:96:03:77:ff:33:6b:04:4e:66:b1:56: 2f:20:f5:22:8b:c7:c2:89:1e:6f:ba:dc:7e:53:01: 90:75:70:70:a9:03:34:15:80:a6:ee:92:30:33:e8: c1:87:d2:a0:20:49:00:16:20:6b:68:e5:84:7f:60: f7:f9:0a:37:83:9a:49:58:c4:9d:e9:39:3f:88:6b: ee:91:28:b2:6c:1f:35:67:af:74:ee:59:33:3e:a2: dc:f5:49:06:62:55:6a:74:6a:6f:45:c1:34:91:fd: e2:02:dd:4c:99:ff:42:a0:a5:7b:48:26:09:b7:fb: 4e:d7:45:8d:df:f7:3f:23:2f:87:d5:2f:d5:b9:5f: b1:d3:42:b9:22:39:fc:c4:27:ec:ba:56:fd:ef:7c: 22:72:d2:04:6e:62:ba:e0:21:d5:c1:34:22:ce:e8: 2a:c2:44:1f:2b:c4:42:13:0a:e3:90:31:b1:fa:c8: 36:ac:92:5d:e2:73:8b:ff:05:ca:8e:50:eb:15:96: 21:56:84:4f:70:e9:4f:7d:43:3c:21:2a:0a:25:02: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:E8:2C:8E:E6:4D:F8:FE:36:5C:4F:4C:A6:2D:E0:63:E4:CC:DA X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:d2:f2:ad:0c:36:d8:2a:47:51:d1:6d:14:3d:44:2a:a9: 75:ef:a9:31:37:98:4c:95:78:46:e3:52:ec:70:19:44:64:71: 58:27:bb:ad:33:73:61:a4:45:a6:b8:f0:e7:b2:3d:f2:2a:bc: 2b:50:26:32:37:62:fb:82:32:2f:cf:91:c6:c9:ca:c6:94:2c: ab:94:68:e1:98:5a:d6:9b:30:19:23:68:fa:5a:38:01:34:79: 0f:c4:b6:a5:c8:74:06:68:3c:06:50:0c:01:d5:18:74:66:4d: 4e:ef:7b:9e:79:aa:33:c4:ba:42:7e:dd:c3:04:76:22:51:00: 11:79:a4:68:d0:4f:c5:a3:9d:09:88:c4:ae:a3:cb:6a:55:ed: f4:75:a3:1a:11:6a:e2:8a:f7:6b:ab:50:06:fd:11:75:23:39: b9:df:b0:b4:f0:26:e5:3e:da:4c:a1:08:ce:63:12:db:1b:4f: 6e:bf:90:e6:80:e2:40:af:20:4b:d4:44:95:f8:92:65:ac:14: bb:5f:00:2d:dd:9b:33:d5:ac:af:96:4c:c6:5e:f4:b0:6b:f5: 6e:f4:b7:b3:c2:d2:68:c7:c9:6c:e9:cb:40:b8:cf:c5:ee:49: 1c:7e:f0:a8:89:94:27:8f:2d:57:af:1d:25:13:86:e2:7d:5d: 8b:51:83:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjUwNjEyMjA1MTE2WhcNMjUwNjE5MjA1MTE2WjAYMRYwFAYD VQQDEw02ODRiM2RjNC1iOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RsuANquzwalIKKocKcfNiDmp3l1iRnivybrwNCFXoRe9UHZwvaggoW+2cEx P4bPlgN3/zNrBE5msVYvIPUii8fCiR5vutx+UwGQdXBwqQM0FYCm7pIwM+jBh9Kg IEkAFiBraOWEf2D3+Qo3g5pJWMSd6Tk/iGvukSiybB81Z6907lkzPqLc9UkGYlVq dGpvRcE0kf3iAt1Mmf9CoKV7SCYJt/tO10WN3/c/Iy+H1S/VuV+x00K5Ijn8xCfs ulb973wictIEbmK64CHVwTQizugqwkQfK8RCEwrjkDGx+sg2rJJd4nOL/wXKjlDr FZYhVoRPcOlPfUM8ISoKJQIb+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzU6CyO 5k34/jZcT0ymLeBj5MzaMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWltLyrQw22CpHUdFtFD1EKql176kxN5hMlXhG41LscBlEZHFYJ7ut M3NhpEWmuPDnsj3yKrwrUCYyN2L7gjIvz5HGycrGlCyrlGjhmFrWmzAZI2j6WjgB NHkPxLalyHQGaDwGUAwB1Rh0Zk1O73ueeaozxLpCft3DBHYiUQAReaRo0E/Fo50J iMSuo8tqVe30daMaEWriivdrq1AG/RF1Izm537C08CblPtpMoQjOYxLbG09uv5Dm gOJAryBL1ESV+JJlrBS7XwAt3Zsz1ayvlkzGXvSwa/Vu9LezwtJox8ls6ctAuM/F 7kkcfvCoiZQnjy1Xrx0lE4bifV2LUYN6 -----END CERTIFICATE-----Generated at Sat Jun 14 18:02:35 2025 by rpki-client