$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: J5MQhpPb8MnKMg8dQhUYLB97N1GWurG4LFVVwkZUgmU= Subject key identifier: AC:8D:36:5E:23:C4:FD:D3:79:17:8E:20:CF:72:A5:98:64:1E:3E:DC Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: DF Signing time: Sun 15 Jun 2025 04:41:10 +0000 Manifest this update: Sun 15 Jun 2025 04:41:10 +0000 Manifest next update: Sun 22 Jun 2025 04:41:10 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: eoT/iq4SUC3MZNoRHo6q1v8Qx/bE5v9szm2K83Y/muY=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Jun 15 04:41:10 2025 GMT Not After : Jun 22 04:41:10 2025 GMT Subject: CN=684e4ee6-3849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:1a:f3:d2:26:ca:59:fc:46:a0:0b:db:c5: 26:98:8d:aa:8c:a7:93:e0:f5:e8:a4:5f:47:d3:72: 17:ac:08:08:41:6b:99:0a:eb:39:3f:cb:15:14:2b: c3:3c:9f:2f:01:de:6f:00:04:f9:ab:5c:f3:6c:b9: ea:9b:6e:3e:3a:5f:2d:2c:db:6d:e0:d9:4a:6a:b0: f3:de:35:6e:ea:e4:cf:0c:42:4a:7e:ee:7d:a3:7e: 15:8a:c1:14:45:34:44:a6:bc:c7:2b:b7:8b:ad:49: 6f:26:f2:aa:04:15:cd:25:ac:0a:95:d0:fa:ab:38: cc:e8:61:89:de:80:8c:98:a5:73:2a:f8:ea:4a:59: a3:5f:e4:53:af:06:19:a5:30:cc:37:d9:0e:4c:e7: 1c:bc:da:10:bd:38:7a:f7:38:18:7a:63:51:b1:cf: cd:d2:52:d2:6d:bf:60:f1:44:fe:62:9d:99:34:4a: f5:c6:b2:fd:39:e0:cd:fb:c5:7d:43:d7:8b:4d:a3: 83:d1:86:f6:59:5b:a4:3c:b5:a3:b2:4f:dc:28:4c: 29:f7:84:ec:b3:f6:b8:55:0b:37:5f:c9:d1:2b:00: 03:95:5b:b7:ff:1e:8e:c7:90:d1:0c:b2:17:b1:38: d9:9c:7f:b9:22:13:aa:6a:74:a1:5a:be:32:d1:94: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:36:5E:23:C4:FD:D3:79:17:8E:20:CF:72:A5:98:64:1E:3E:DC X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:47:2a:33:69:bd:af:5c:02:78:53:80:ea:cc:33:88:de:05: 42:a4:2c:9d:75:f8:f4:b6:02:7d:70:f8:2b:b0:c7:e8:22:88: 62:01:e5:41:1e:fe:7d:87:30:b1:8f:b2:d6:e7:c9:88:8d:35: c8:82:70:af:57:24:af:33:2f:0b:d7:f3:a7:4d:c1:5f:93:00: dc:bb:68:94:9d:34:67:8a:60:04:3d:9d:7d:02:c2:ed:9e:37: 76:e3:93:ea:a0:b2:4d:a6:18:d9:a3:00:b0:ae:7a:42:10:36: a7:7f:ee:4d:57:ff:ec:3c:88:f0:89:fa:d2:64:52:c7:f7:3b: fc:a8:40:42:de:9c:30:05:4e:66:32:e1:8d:49:12:f7:34:75: c8:49:37:83:38:30:3d:69:fb:37:44:24:8f:ad:29:d7:2c:82: 0d:4e:6c:66:dd:77:7e:55:a1:1c:34:61:4e:0d:5d:58:bd:bd: 27:d0:ef:20:d2:99:85:d8:b5:8c:1e:1c:15:c4:95:9e:87:9d: 99:c1:56:ca:ee:49:b8:23:27:64:1f:c4:0b:f7:cf:41:ac:a3: 58:87:5d:7a:64:d4:fa:80:06:70:68:f9:2c:aa:0a:28:be:53: 4b:b4:b3:34:8e:ea:5a:45:43:df:a7:47:15:2f:63:02:2e:02: fd:98:c4:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwNjE1MDQ0MTEwWhcNMjUwNjIyMDQ0MTEwWjAYMRYwFAYD VQQDEw02ODRlNGVlNi0zODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Hwa89Imyln8RqAL28UmmI2qjKeT4PXopF9H03IXrAgIQWuZCus5P8sVFCvD PJ8vAd5vAAT5q1zzbLnqm24+Ol8tLNtt4NlKarDz3jVu6uTPDEJKfu59o34VisEU RTREprzHK7eLrUlvJvKqBBXNJawKldD6qzjM6GGJ3oCMmKVzKvjqSlmjX+RTrwYZ pTDMN9kOTOccvNoQvTh69zgYemNRsc/N0lLSbb9g8UT+Yp2ZNEr1xrL9OeDN+8V9 Q9eLTaOD0Yb2WVukPLWjsk/cKEwp94Tss/a4VQs3X8nRKwADlVu3/x6Ox5DRDLIX sTjZnH+5IhOqanShWr4y0ZSKCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyNNl4j xP3TeReOIM9ypZhkHj7cMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHRyozab2vXAJ4U4DqzDOI3gVCpCyddfj0tgJ9cPgrsMfoIohiAeVB Hv59hzCxj7LW58mIjTXIgnCvVySvMy8L1/OnTcFfkwDcu2iUnTRnimAEPZ19AsLt njd245PqoLJNphjZowCwrnpCEDanf+5NV//sPIjwifrSZFLH9zv8qEBC3pwwBU5m MuGNSRL3NHXISTeDODA9afs3RCSPrSnXLIINTmxm3Xd+VaEcNGFODV1Yvb0n0O8g 0pmF2LWMHhwVxJWeh52ZwVbK7km4IydkH8QL989BrKNYh116ZNT6gAZwaPksqgoo vlNLtLM0jupaRUPfp0cVL2MCLgL9mMSR -----END CERTIFICATE-----Generated at Tue Jun 17 01:01:18 2025 by rpki-client