$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: nOGnQJ40qU+ZetTKGKvalTpi52zxUxOg5GmWoI7wj2U= Subject key identifier: 71:DE:79:1E:1C:E3:2A:12:00:98:FC:62:3A:B0:0A:14:BF:9A:83:0D Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 01A8 Signing time: Tue 17 Jun 2025 02:27:00 +0000 Manifest this update: Tue 17 Jun 2025 02:26:59 +0000 Manifest next update: Tue 24 Jun 2025 02:26:59 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: /Y+vw4lmRus7zTZDcKNsAFD1fVALqWMxs2E6olxGmdo=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: frHxqt/yG7rr6fCbelfcQdfPa8QFjBnwgHPUnZu57so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Jun 17 02:26:59 2025 GMT Not After : Jun 24 02:26:59 2025 GMT Subject: CN=6850d274-416b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:d6:d4:0a:1b:03:31:dd:eb:b5:34:93:ef: a6:7d:cc:de:b6:69:14:db:67:b0:d9:3f:2e:8f:46: 76:86:1d:90:5e:9d:72:5d:5a:01:0d:6a:20:6c:f8: 88:9e:f4:40:1e:f8:69:79:60:bc:2d:f4:ce:61:ff: 0c:e8:81:6c:9e:4f:d0:91:3d:2a:78:f9:a0:ca:44: 22:a7:ef:5b:b5:71:b4:b6:07:3e:ba:96:06:46:72: e6:c8:5c:ab:81:c2:5f:38:42:fa:ec:df:ec:f3:ae: e9:c2:94:c0:98:19:4f:55:ea:07:80:6c:01:97:d4: dc:f0:28:4c:cb:71:09:fb:cb:39:2b:b2:6a:49:88: e8:52:b6:40:f4:a9:2c:b9:ab:bb:a4:23:50:96:f0: cc:9c:ea:03:b6:0f:1f:e4:7d:07:57:94:47:e0:6f: 78:99:cb:ed:9a:d7:2a:e4:cd:6a:bc:68:38:2c:17: b8:cf:3a:7d:6f:45:2b:b3:7c:ef:49:a6:f7:74:a6: 85:1e:19:17:d9:b6:9f:de:68:36:6f:ac:63:d6:ed: a0:6e:ba:87:2a:a6:d6:26:91:9c:22:60:b9:2f:58: 7e:c3:da:e3:df:16:02:ce:17:e5:75:a6:7a:f6:0f: 8e:54:9d:a0:98:64:69:a5:c5:ce:72:e5:94:15:39: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:79:1E:1C:E3:2A:12:00:98:FC:62:3A:B0:0A:14:BF:9A:83:0D X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8a:1c:d5:20:eb:55:f5:31:32:a0:a4:f4:eb:1a:46:c6:b8: 69:13:44:d2:4d:c0:f7:b0:25:f4:00:55:4e:34:33:66:67:62: e9:27:d6:71:b1:f8:e0:1d:9a:88:6d:2b:c4:6e:09:53:3e:bb: 55:70:ba:5e:90:6b:b7:94:67:9a:2e:97:90:cd:6d:c3:85:7e: be:a5:a7:7d:e6:cd:6a:c0:c2:11:6e:76:f7:82:4a:80:df:ca: 99:41:d8:ea:45:3c:22:84:10:84:51:d5:d1:19:1b:18:96:07: a2:e8:8a:fc:45:b3:c4:e0:ad:a7:41:51:e9:e6:38:83:9a:93: 2e:03:5a:e3:a4:39:41:2d:e5:c1:47:2d:27:e4:13:bf:03:c2: 43:1c:2d:30:e2:1f:24:be:ab:8d:28:d1:f2:00:14:b8:68:5e: bb:24:09:fd:5b:c6:9c:0b:0d:9a:52:95:64:cd:64:a6:47:ec: 92:05:c0:93:fc:98:f1:a3:8f:f0:73:cd:9d:f3:4c:4b:8e:6d: e6:cd:16:f2:0d:2d:0c:c8:15:de:e2:2b:0e:61:63:72:3e:c2: 95:b4:15:9d:28:86:cd:01:cc:98:c6:a2:1c:ab:74:a3:d7:ec: 45:e5:c7:d5:d2:b4:95:d9:50:41:dd:51:4a:3f:c6:49:d3:9d: b2:31:be:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjUwNjE3MDIyNjU5WhcNMjUwNjI0MDIyNjU5WjAYMRYwFAYD VQQDEw02ODUwZDI3NC00MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk+PW1AobAzHd67U0k++mfczetmkU22ew2T8uj0Z2hh2QXp1yXVoBDWogbPiI nvRAHvhpeWC8LfTOYf8M6IFsnk/QkT0qePmgykQip+9btXG0tgc+upYGRnLmyFyr gcJfOEL67N/s867pwpTAmBlPVeoHgGwBl9Tc8ChMy3EJ+8s5K7JqSYjoUrZA9Kks uau7pCNQlvDMnOoDtg8f5H0HV5RH4G94mcvtmtcq5M1qvGg4LBe4zzp9b0Urs3zv Sab3dKaFHhkX2baf3mg2b6xj1u2gbrqHKqbWJpGcImC5L1h+w9rj3xYCzhfldaZ6 9g+OVJ2gmGRppcXOcuWUFTkoSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHeeR4c 4yoSAJj8YjqwChS/moMNMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjihzVIOtV9TEyoKT06xpGxrhpE0TSTcD3sCX0AFVONDNmZ2LpJ9Zx sfjgHZqIbSvEbglTPrtVcLpekGu3lGeaLpeQzW3DhX6+pad95s1qwMIRbnb3gkqA 38qZQdjqRTwihBCEUdXRGRsYlgei6Ir8RbPE4K2nQVHp5jiDmpMuA1rjpDlBLeXB Ry0n5BO/A8JDHC0w4h8kvquNKNHyABS4aF67JAn9W8acCw2aUpVkzWSmR+ySBcCT /Jjxo4/wc82d80xLjm3mzRbyDS0MyBXe4isOYWNyPsKVtBWdKIbNAcyYxqIcq3Sj 1+xF5cfV0rSV2VBB3VFKP8ZJ052yMb4s -----END CERTIFICATE-----Generated at Wed Jun 18 18:13:30 2025 by rpki-client