$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: wVmUKeFIGMoBoBrU7u0uUlwtCk41tfXsbgkGaP92HMQ= Subject key identifier: ED:90:A8:60:26:2C:7D:FA:61:A7:16:15:73:76:DE:6E:DE:7A:B1:49 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 2205 Signing time: Sat 14 Jun 2025 15:51:35 +0000 Manifest this update: Sat 14 Jun 2025 15:51:35 +0000 Manifest next update: Sat 21 Jun 2025 15:51:34 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: LFXOzhkMy7pQm0L6QsTPc6t3evL1ynboPp1GxklZlUw=) 2: 434C7B222F6111F0AB3C5B1BC4F9AE02.roa (hash: fwOU6SMuGIfnRx8ElM0s5UgERJgy1IXQoBAamSLc/Tc=) 3: B937CBBA6DD411EF977CA52AC4F9AE02.roa (hash: fE0umNnJvdXLanVJxxLnguv+68JgjMwDQM/fBcaFIgY=) 4: 722285E02F6111F08D90CD1BC4F9AE02.roa (hash: Mlvm4A3sHMT8TjKLsESvcI+NpOJCscRsP28t9MfdGE4=) 5: FD2941A0BBC311EEBE58430EC4F9AE02.roa (hash: y9g4n21UCTqNjGbPSMXx3pzlzLx/iVjZI0pRarDixiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8784 (0x2250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jun 14 15:51:35 2025 GMT Not After : Jun 21 15:51:34 2025 GMT Subject: CN=684d9a87-5304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:c3:d9:71:e7:af:92:bd:5a:dc:9c:75:64: fc:69:d1:bd:2f:e8:da:80:47:df:1c:04:c7:aa:b9: d9:5b:83:19:16:d7:cf:8b:39:0c:aa:e7:39:37:14: 20:95:01:fd:a0:e6:74:82:5b:9f:00:2e:32:6a:94: b0:ce:48:9b:5d:cf:7e:8c:6b:60:33:67:4b:c7:96: 82:ec:24:6a:23:b4:65:fe:26:b9:b6:db:42:05:31: aa:36:c6:7a:f8:6b:05:c8:35:58:16:f6:80:65:f0: 2a:98:a2:8a:2e:09:46:32:30:53:40:17:f2:b2:e1: 76:3e:60:90:1e:1f:e2:94:21:ec:a7:70:bd:d7:08: 39:44:1a:34:ea:f3:16:97:be:06:02:42:38:76:a5: 62:da:21:5a:28:d6:e9:77:fd:0a:a9:f3:a4:43:9d: ef:33:8b:86:5c:c5:54:9c:e6:29:da:e1:33:a8:d3: 2c:00:c1:b2:d4:4a:50:2f:4a:f2:b7:0d:b2:43:c6: f6:d6:51:00:53:92:65:5c:ae:fe:13:16:8f:63:7c: 35:b5:a7:0d:62:c2:9f:d4:07:04:38:9f:22:d7:12: 3f:6d:e6:24:cc:fa:1d:e1:20:35:77:99:57:8e:f3: d5:2f:a3:a2:fc:1f:8d:b5:b2:fe:fe:c2:6b:06:72: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:90:A8:60:26:2C:7D:FA:61:A7:16:15:73:76:DE:6E:DE:7A:B1:49 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:7b:1a:e8:13:9b:48:05:34:e7:ff:84:b4:b4:62:8b:d8:22: ca:30:56:c1:47:30:be:e1:1e:20:7e:fd:ee:b1:a5:26:f5:81: 43:6c:6c:45:e0:bf:26:11:4a:d7:3b:91:92:3b:59:2f:31:6a: 21:21:67:85:19:a4:df:c2:9b:ba:a8:23:71:f6:e0:19:33:3f: 1b:fe:f5:eb:5e:77:fe:c2:fe:be:a4:6e:5a:1b:cb:7a:0d:3f: 3a:6c:cb:ca:42:b9:14:ac:db:62:58:2f:ed:8a:6d:65:59:e9: e3:f3:87:ac:a4:51:e6:b1:30:1e:02:44:e1:fa:6b:9d:23:bc: ba:56:5e:a1:43:67:c0:ba:c1:7f:c5:fc:df:c0:34:7a:88:c7: 01:57:20:e0:40:28:63:8d:1d:70:54:5c:5d:64:ed:87:73:b2: f6:a9:e3:7a:96:da:c5:98:1d:a3:fb:dc:fd:d7:ef:b5:06:f8: 8c:fe:cd:41:de:3b:2c:b3:56:5e:47:bf:77:ac:95:fc:1a:fb: 8f:6f:38:be:7d:e1:47:67:72:f0:eb:95:3c:7c:6c:a8:68:14: 74:fb:51:a8:a5:0b:7f:f0:43:7e:09:71:1b:3e:ac:a9:bb:0d: a7:54:ef:4b:25:4d:97:9c:36:f0:8c:88:d3:f2:5f:3c:73:39: 65:a1:7e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwNjE0MTU1MTM1WhcNMjUwNjIxMTU1MTM0WjAYMRYwFAYD VQQDEw02ODRkOWE4Ny01MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46nD2XHnr5K9WtycdWT8adG9L+jagEffHATHqrnZW4MZFtfPizkMquc5NxQg lQH9oOZ0glufAC4yapSwzkibXc9+jGtgM2dLx5aC7CRqI7Rl/ia5tttCBTGqNsZ6 +GsFyDVYFvaAZfAqmKKKLglGMjBTQBfysuF2PmCQHh/ilCHsp3C91wg5RBo06vMW l74GAkI4dqVi2iFaKNbpd/0KqfOkQ53vM4uGXMVUnOYp2uEzqNMsAMGy1EpQL0ry tw2yQ8b21lEAU5JlXK7+ExaPY3w1tacNYsKf1AcEOJ8i1xI/beYkzPod4SA1d5lX jvPVL6Oi/B+NtbL+/sJrBnJUswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2QqGAm LH36YacWFXN23m7eerFJMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCexroE5tIBTTn/4S0tGKL2CLKMFbBRzC+4R4gfv3usaUm9YFDbGxF 4L8mEUrXO5GSO1kvMWohIWeFGaTfwpu6qCNx9uAZMz8b/vXrXnf+wv6+pG5aG8t6 DT86bMvKQrkUrNtiWC/tim1lWenj84espFHmsTAeAkTh+mudI7y6Vl6hQ2fAusF/ xfzfwDR6iMcBVyDgQChjjR1wVFxdZO2Hc7L2qeN6ltrFmB2j+9z91++1BviM/s1B 3jsss1ZeR793rJX8GvuPbzi+feFHZ3Lw65U8fGyoaBR0+1GopQt/8EN+CXEbPqyp uw2nVO9LJU2XnDbwjIjT8l88czlloX6u -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:23 2025 by rpki-client