$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: xFKAHnyo7anqlWe4Ym7QB1eA8Bf0FBnbiRgKwmZE6tU= Subject key identifier: DB:F0:B4:8D:05:E9:74:B8:64:B4:E9:92:27:10:91:8F:D9:8A:E5:50 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0A53 Signing time: Thu 12 Jun 2025 19:30:51 +0000 Manifest this update: Thu 12 Jun 2025 19:30:51 +0000 Manifest next update: Thu 19 Jun 2025 19:30:51 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: 0mNmJf0CPCzGr2IB+WmLI53VdCa3VOPlEJ9yKHLp+D8=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Jun 12 19:30:51 2025 GMT Not After : Jun 19 19:30:51 2025 GMT Subject: CN=684b2aeb-c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cc:f3:1f:ff:1c:44:a7:e5:30:41:1a:c4:6c: 42:a0:e0:2b:74:ff:c9:85:af:bd:b6:f3:be:b6:f2: 25:01:e5:cc:6c:7a:e8:ec:37:f0:f3:c5:65:c4:20: 8c:8c:f0:11:1c:89:f3:64:70:58:be:fc:43:38:f5: 59:5e:33:5f:7e:06:33:c3:ec:6d:e6:33:39:32:f8: e7:ed:c5:26:6f:c5:30:fd:4d:5c:08:06:81:ba:90: be:d8:db:5c:4e:65:90:e7:c6:cc:dc:1b:fb:6c:44: 8a:32:9a:27:8a:c4:56:ce:05:e8:89:a5:ea:fd:89: 7d:d8:8f:db:d4:f7:15:c5:3a:9e:85:6c:4e:1b:8b: bf:9a:cd:0a:74:a8:df:9d:b8:f5:6c:9f:ea:f6:0e: 89:07:46:56:a1:08:23:6f:0f:1b:ae:53:ff:a7:dc: 87:9d:1e:bc:f8:e9:fc:fc:07:b6:15:02:dc:bb:da: c8:e1:00:58:a3:fb:55:92:33:82:cc:0a:e7:48:73: 40:ae:b1:53:61:81:a9:a9:29:50:47:5c:5c:02:b9: 9a:18:e1:43:9d:a8:7c:2e:03:e5:a7:06:94:31:50: 53:69:93:99:e6:9c:e7:6b:62:e6:00:22:ba:41:6d: 1d:19:da:e2:c5:25:93:9c:bd:8a:f0:d3:f8:a3:22: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:B4:8D:05:E9:74:B8:64:B4:E9:92:27:10:91:8F:D9:8A:E5:50 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3e:6c:a5:41:e9:71:9f:3e:57:79:87:f5:79:4d:e8:bf:b5: 23:ac:e1:20:63:fe:e3:95:e0:81:d2:8e:66:e2:1f:36:2d:61: 80:60:1a:aa:a7:e0:10:43:a9:10:6f:ab:8d:f1:f0:c6:24:7c: c4:f8:3f:2d:b9:89:3b:9e:54:dc:77:10:f5:6f:9b:eb:9e:e5: 77:97:ad:96:58:b6:31:2b:1a:89:7b:f9:d4:9d:b2:79:95:82: f9:20:e6:7a:85:b3:03:33:af:a8:83:d5:3d:47:fd:a7:95:0d: 42:19:4b:1c:ce:48:2e:a7:aa:ed:61:87:50:60:9d:bb:6d:5e: ff:bb:00:f1:6b:35:85:e8:ab:29:85:7e:f9:17:7d:59:ba:d2: a1:7b:05:43:a0:a0:fb:ec:9a:1d:d7:1f:3b:7a:c7:1b:81:37: 47:ec:38:04:7c:f7:63:20:47:4e:0a:78:88:4b:6d:cb:97:d5: d1:18:b9:ef:ad:50:67:b3:72:05:36:85:80:be:bb:7a:f1:50: b1:5f:3a:8b:df:8c:aa:1c:54:38:52:77:d9:bf:ce:3c:c0:5c: 71:71:60:05:64:34:a5:69:ad:71:df:47:60:af:9c:63:4f:08: 1b:fb:94:d8:0b:59:8b:07:5d:a6:7b:df:50:be:d6:8b:01:f8: 9b:0a:3e:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUwNjEyMTkzMDUxWhcNMjUwNjE5MTkzMDUxWjAYMRYwFAYD VQQDEw02ODRiMmFlYi1jNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MzzH/8cRKflMEEaxGxCoOArdP/Jha+9tvO+tvIlAeXMbHro7Dfw88VlxCCM jPARHInzZHBYvvxDOPVZXjNffgYzw+xt5jM5Mvjn7cUmb8Uw/U1cCAaBupC+2Ntc TmWQ58bM3Bv7bESKMponisRWzgXoiaXq/Yl92I/b1PcVxTqehWxOG4u/ms0KdKjf nbj1bJ/q9g6JB0ZWoQgjbw8brlP/p9yHnR68+On8/Ae2FQLcu9rI4QBYo/tVkjOC zArnSHNArrFTYYGpqSlQR1xcArmaGOFDnah8LgPlpwaUMVBTaZOZ5pzna2LmACK6 QW0dGdrixSWTnL2K8NP4oyKMFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvwtI0F 6XS4ZLTpkicQkY/ZiuVQMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuPmylQelxnz5XeYf1eU3ov7UjrOEgY/7jleCB0o5m4h82LWGAYBqq p+AQQ6kQb6uN8fDGJHzE+D8tuYk7nlTcdxD1b5vrnuV3l62WWLYxKxqJe/nUnbJ5 lYL5IOZ6hbMDM6+og9U9R/2nlQ1CGUsczkgup6rtYYdQYJ27bV7/uwDxazWF6Ksp hX75F31ZutKhewVDoKD77Jod1x87escbgTdH7DgEfPdjIEdOCniIS23Ll9XRGLnv rVBns3IFNoWAvrt68VCxXzqL34yqHFQ4UnfZv848wFxxcWAFZDSlaa1x30dgr5xj Twgb+5TYC1mLB12me99QvtaLAfibCj4e -----END CERTIFICATE-----Generated at Sat Jun 14 18:15:29 2025 by rpki-client