$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: paxDJ6RbfDTt/wCImPd0lvt5Nc0TG6zTsHgq7PwC4yI= Subject key identifier: 97:A0:95:0C:45:BB:9A:F4:49:96:E1:86:AC:40:54:10:C7:7C:94:24 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: 91 Signing time: Thu 19 Jun 2025 05:49:12 +0000 Manifest this update: Thu 19 Jun 2025 05:49:12 +0000 Manifest next update: Thu 26 Jun 2025 05:49:12 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: DVWB8Q3iORR9V/bAT1piklvNxi/nyyhYKZU6001QvfU=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: apEkxffopCeqovMKL+kWef8zz6F2P5gxUW9hlBfV7TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Jun 19 05:49:12 2025 GMT Not After : Jun 26 05:49:12 2025 GMT Subject: CN=6853a4d8-c298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:64:a5:eb:23:c6:d2:16:f4:3e:73:1b:24: e2:15:4c:df:84:7f:1d:c3:40:b0:c1:11:71:2c:d7: 19:f1:16:04:6f:52:27:36:98:61:80:5d:18:6d:f3: 2f:45:d7:32:d3:60:ae:25:69:b0:a5:34:5d:b3:58: 87:7c:d2:77:6d:7f:c9:6d:65:e4:b4:d2:8c:46:9f: a7:4f:41:4f:95:24:60:f2:38:27:e3:c5:46:40:2a: c4:c4:47:23:82:15:55:04:f6:48:a7:ab:00:66:13: 7f:ec:34:d6:d1:d4:70:68:98:73:e0:98:37:89:98: 84:68:f3:c2:a7:54:19:41:a4:e4:8d:47:b3:c9:36: 6b:97:b1:a2:1c:f6:cc:43:b2:97:2b:54:78:af:fa: 7e:49:a1:75:84:d0:1e:a3:cd:e0:e4:d5:e7:26:91: 2a:57:3c:69:74:88:c1:8b:c0:a7:59:1e:33:7c:e4: 47:ad:4f:69:d3:d3:8b:f7:63:75:f5:bd:77:d6:33: 3c:27:9c:de:a9:03:23:ea:58:bc:c5:af:8c:9e:c9: 95:bc:a7:b7:a8:ce:07:fa:68:3c:8b:26:13:27:49: 96:98:08:47:44:d1:17:15:bd:a7:4d:3d:ed:c3:26: b1:d6:e7:d0:b3:0a:b8:34:71:a9:6a:e0:19:34:12: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A0:95:0C:45:BB:9A:F4:49:96:E1:86:AC:40:54:10:C7:7C:94:24 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:7f:d3:4f:a1:e6:f0:4d:00:7d:1e:bd:80:8e:9c:65:42:81: 1b:1b:7b:bc:9d:21:ec:64:b8:53:44:f7:da:fa:06:00:13:ad: 6e:f1:bf:ae:61:ca:c0:64:b7:cf:01:41:3e:a9:05:25:1c:cd: 47:f2:a3:ff:1c:33:c3:90:ac:69:22:b8:36:9e:cb:53:14:c4: a9:a3:98:8d:5c:ef:34:f9:5d:c7:48:52:8e:51:e9:42:98:eb: 6d:f6:9d:28:f5:b8:25:4c:aa:aa:fc:32:65:28:2d:0b:b1:46: 15:f2:ac:6d:ab:3d:85:a5:ae:67:6d:42:92:64:80:d7:60:a0: 2e:15:88:49:54:13:b4:c3:f9:22:f4:9d:10:62:8f:6b:a2:cf: fa:f5:fc:15:41:b9:64:1c:91:78:6c:24:bd:a8:e0:ea:a1:c4: 90:46:fa:65:d0:46:a5:2f:13:de:04:00:57:69:79:85:c1:0b: 60:69:b1:26:79:b1:e2:f5:46:71:c3:36:f6:98:86:1c:ca:19: f4:da:49:32:32:44:10:8c:9d:39:3d:a3:b7:08:0e:f5:82:4f: d2:11:8f:0b:b6:ba:ed:18:99:87:0c:d8:81:e5:66:11:e1:2a: 54:e5:41:6b:6d:8a:3e:b0:18:b6:6a:f9:ff:cf:db:bc:1e:5e: 06:08:50:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MTUxMTAvBgNVBAUTKEZCNUFDRkJDRjlGQ0VGMDM0QjhBOTNCRDMxOUU2MjA0 NDJENjY2N0YwHhcNMjUwNjE5MDU0OTEyWhcNMjUwNjI2MDU0OTEyWjAYMRYwFAYD VQQDEw02ODUzYTRkOC1jMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxlkpesjxtIW9D5zGyTiFUzfhH8dw0CwwRFxLNcZ8RYEb1InNphhgF0YbfMv Rdcy02CuJWmwpTRds1iHfNJ3bX/JbWXktNKMRp+nT0FPlSRg8jgn48VGQCrExEcj ghVVBPZIp6sAZhN/7DTW0dRwaJhz4Jg3iZiEaPPCp1QZQaTkjUezyTZrl7GiHPbM Q7KXK1R4r/p+SaF1hNAeo83g5NXnJpEqVzxpdIjBi8CnWR4zfORHrU9p09OL92N1 9b131jM8J5zeqQMj6li8xa+MnsmVvKe3qM4H+mg8iyYTJ0mWmAhHRNEXFb2nTT3t wyax1ufQswq4NHGpauAZNBKygwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeglQxF u5r0SZbhhqxAVBDHfJQkMB8GA1UdIwQYMBaAFPtaz7z5/O8DS4qTvTGeYgRC1mZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUxNS8zRDNDQTMwODc0 QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3TkxpcE85TVo1aUJFTFda bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1puOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUxNS8zRDNDQTMwODc0QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3 TkxpcE85TVo1aUJFTFdabjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsf9NPoebwTQB9Hr2AjpxlQoEbG3u8nSHsZLhTRPfa+gYAE61u8b+u YcrAZLfPAUE+qQUlHM1H8qP/HDPDkKxpIrg2nstTFMSpo5iNXO80+V3HSFKOUelC mOtt9p0o9bglTKqq/DJlKC0LsUYV8qxtqz2Fpa5nbUKSZIDXYKAuFYhJVBO0w/ki 9J0QYo9ros/69fwVQblkHJF4bCS9qODqocSQRvpl0EalLxPeBABXaXmFwQtgabEm ebHi9UZxwzb2mIYcyhn02kkyMkQQjJ05PaO3CA71gk/SEY8LtrrtGJmHDNiB5WYR 4SpU5UFrbYo+sBi2avn/z9u8Hl4GCFBz -----END CERTIFICATE-----Generated at Sat Jun 21 00:34:21 2025 by rpki-client