$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: Ip7DfAbjNNoFRAvG9wlXQrXqjaS3eFF4w3rkZ9SB9ac= Subject key identifier: 52:AF:6E:77:01:34:91:EF:37:A3:4B:ED:41:04:8B:AF:F0:E5:87:F9 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 0816 Signing time: Wed 18 Jun 2025 20:39:12 +0000 Manifest this update: Wed 18 Jun 2025 20:39:11 +0000 Manifest next update: Wed 25 Jun 2025 20:39:11 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: f30Ra4eDIjc0Yk6+2afkaOAavE9sCF9RLcXS3pEwCwk=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Jun 18 20:39:11 2025 GMT Not After : Jun 25 20:39:11 2025 GMT Subject: CN=685323f0-2d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:24:e0:37:52:9f:9e:c5:bf:10:a5:7c:98:ad: 15:1f:e4:56:c7:a7:1d:b7:cb:9f:89:a1:87:3c:18: 34:10:80:07:89:b1:a1:75:49:b8:f1:b6:2f:b8:c6: e3:25:c8:b0:7d:9f:d2:19:72:e5:3f:26:4d:c8:98: f3:b3:62:e2:e9:2b:cb:c4:57:7c:71:e2:f5:77:98: 32:30:f4:5b:d8:39:57:22:fb:bc:31:66:76:96:65: 8a:56:f8:26:0b:03:72:79:96:26:59:78:be:d7:e1: 57:73:48:ba:59:e4:aa:da:6e:5c:5d:17:b1:04:12: 95:e7:96:36:24:03:5c:7a:bf:3d:8b:cb:eb:6a:77: c7:d6:7f:24:f7:e1:84:98:65:97:09:ce:c9:38:9f: 15:06:52:61:17:57:08:f3:19:7d:cd:33:c7:6d:b4: 83:7c:25:52:ba:18:a9:22:47:a5:20:8b:6a:a1:57: c8:fa:09:43:e4:a7:7f:d0:97:de:c9:c7:79:84:c4: 4b:fa:ae:ca:18:c0:63:06:1f:bc:4d:e1:8e:1a:99: a7:b0:83:64:a6:f7:c9:ee:31:fd:85:12:ff:9d:d0: 44:af:86:9a:7d:35:6e:1b:5b:4c:17:4f:f4:fc:44: b1:51:0b:a3:a7:40:b9:bb:a0:bf:ac:9b:ba:df:21: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AF:6E:77:01:34:91:EF:37:A3:4B:ED:41:04:8B:AF:F0:E5:87:F9 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1d:f3:6b:9b:32:17:aa:20:49:78:1f:ff:a2:56:87:bf:9c: 5b:03:2e:17:84:36:6f:93:cb:cf:1f:fd:cb:73:03:63:b7:56: 4d:e7:61:30:1e:db:b7:4d:42:d2:f3:be:c1:de:e5:fc:32:36: 13:48:cc:9a:41:86:0a:a2:d2:a4:ae:1b:c7:91:6d:99:80:d4: b0:0b:9e:18:9e:ab:62:ae:8b:d0:94:d8:2f:bc:89:71:1e:98: e6:6b:b6:61:b1:bb:f8:23:8f:11:a9:dc:13:d8:17:b8:c3:fd: 25:f6:cc:70:33:65:fa:c4:8d:f4:fe:be:ca:a2:ef:b1:b2:3b: ed:14:94:c6:55:6a:9f:71:dc:c4:f8:dc:6a:41:c0:49:6d:64: 39:e0:3f:05:ac:39:c3:c5:3a:9b:91:8d:3e:4f:d0:e2:12:8d: cb:85:50:43:9b:11:8a:e8:d1:c9:ae:dc:b2:7a:8e:fb:09:17: 71:53:56:0e:13:09:03:c2:9e:c3:69:b7:fc:58:05:c3:61:f6: 2b:dc:7c:37:54:3f:4a:56:d9:cd:e8:22:af:58:12:d0:f4:32: f2:8f:1f:f1:0c:d4:27:5a:30:10:a7:aa:24:d4:fb:a0:29:0d: 5a:1a:a6:9a:bb:86:8b:92:8f:5e:09:cd:c0:21:92:51:c1:ce: 19:69:d5:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUwNjE4MjAzOTExWhcNMjUwNjI1MjAzOTExWjAYMRYwFAYD VQQDEw02ODUzMjNmMC0yZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9iTgN1KfnsW/EKV8mK0VH+RWx6cdt8ufiaGHPBg0EIAHibGhdUm48bYvuMbj JciwfZ/SGXLlPyZNyJjzs2Li6SvLxFd8ceL1d5gyMPRb2DlXIvu8MWZ2lmWKVvgm CwNyeZYmWXi+1+FXc0i6WeSq2m5cXRexBBKV55Y2JANcer89i8vranfH1n8k9+GE mGWXCc7JOJ8VBlJhF1cI8xl9zTPHbbSDfCVSuhipIkelIItqoVfI+glD5Kd/0Jfe ycd5hMRL+q7KGMBjBh+8TeGOGpmnsINkpvfJ7jH9hRL/ndBEr4aafTVuG1tMF0/0 /ESxUQujp0C5u6C/rJu63yHWXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKvbncB NJHvN6NL7UEEi6/w5Yf5MB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjHfNrmzIXqiBJeB//olaHv5xbAy4XhDZvk8vPH/3LcwNjt1ZN52Ew Htu3TULS877B3uX8MjYTSMyaQYYKotKkrhvHkW2ZgNSwC54YnqtirovQlNgvvIlx Hpjma7Zhsbv4I48RqdwT2Be4w/0l9sxwM2X6xI30/r7Kou+xsjvtFJTGVWqfcdzE +NxqQcBJbWQ54D8FrDnDxTqbkY0+T9DiEo3LhVBDmxGK6NHJrtyyeo77CRdxU1YO EwkDwp7Dabf8WAXDYfYr3Hw3VD9KVtnN6CKvWBLQ9DLyjx/xDNQnWjAQp6ok1Pug KQ1aGqaau4aLko9eCc3AIZJRwc4ZadWd -----END CERTIFICATE-----Generated at Thu Jun 19 20:12:41 2025 by rpki-client