$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft File: mAInpdd1oDTad40z-IxcwCDRw5w.mft (raw, json) Hash identifier: MutRNgFgzRMio1x/9pHxVkGtluovhb3m2JooPXCnBBs= Subject key identifier: A2:BD:C0:69:BB:AD:3C:72:AA:BF:46:67:58:0A:0E:FA:FC:4D:9A:6B Authority key identifier: 98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C Certificate issuer: /CN=A9148E7B/serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft Manifest number: 01DE Signing time: Thu 19 Jun 2025 02:11:00 +0000 Manifest this update: Thu 19 Jun 2025 02:11:00 +0000 Manifest next update: Thu 26 Jun 2025 02:11:00 +0000 Files and hashes: 1: mAInpdd1oDTad40z-IxcwCDRw5w.crl (hash: t2t8vn2rUtKwu/H0Vk4Sj/tVBrPMTl/lSjwlhV0K2os=) 2: 8CFF3572708F11ED88DF8322C4F9AE02.roa (hash: lONZjm0NjFEm7xQkBCGWnrkGFmjAfW8U6anBdYjJWgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E7B, serialNumber=980227A5D775A034DA778D33F88C5CC020D1C39C Validity Not Before: Jun 19 02:11:00 2025 GMT Not After : Jun 26 02:11:00 2025 GMT Subject: CN=685371b4-af4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:96:5b:21:7c:47:5d:36:14:96:b5:3c:ce: cb:06:cf:80:26:a8:2f:13:4b:a3:3e:69:9d:ac:af: e4:b5:44:95:61:50:5f:b4:9f:44:aa:bc:84:1c:1f: 68:ec:06:af:48:13:44:da:92:e4:b1:4a:94:78:99: 9c:1e:08:40:8b:47:78:42:f4:2e:c6:75:72:cb:7f: 28:90:65:2e:d6:7f:52:3e:3d:82:da:f3:6e:c1:30: 79:b0:f6:0c:2c:c5:6f:09:38:7b:a4:5d:c6:a1:44: e9:72:ab:03:05:02:04:b8:69:f7:83:b7:bd:56:f4: 70:f2:a6:53:8e:85:cf:a8:70:e8:96:67:7c:94:de: 55:93:48:12:0d:72:db:91:10:1f:57:7e:ac:64:0f: 62:15:5f:38:a1:79:a0:f8:11:6e:9c:c2:be:f9:b2: 46:f5:2a:8e:d5:7e:d0:aa:7e:5b:6e:a3:62:28:28: df:db:29:3c:00:df:5e:ae:0b:9d:25:e5:e5:2c:6a: c3:1c:2a:22:8b:1c:a0:7f:24:52:19:36:ef:ad:97: 4b:96:6f:a5:60:3c:a2:b1:7f:ca:eb:ff:5c:ff:d8: 24:55:fa:5f:27:32:cf:0c:cf:b7:9d:eb:89:e6:da: 62:7e:4c:20:37:a0:33:c5:e1:87:cb:f0:96:98:df: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:C0:69:BB:AD:3C:72:AA:BF:46:67:58:0A:0E:FA:FC:4D:9A:6B X509v3 Authority Key Identifier: keyid:98:02:27:A5:D7:75:A0:34:DA:77:8D:33:F8:8C:5C:C0:20:D1:C3:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mAInpdd1oDTad40z-IxcwCDRw5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E7B/478FA6D6708D11ED94E32D22C4F9AE02/mAInpdd1oDTad40z-IxcwCDRw5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:00:d2:02:79:e7:be:6c:88:6c:66:7f:2f:da:f2:dc:da: 56:67:a6:cf:06:b8:e2:97:6d:84:0c:7c:fb:80:6a:68:66:f3: 35:5b:84:3b:d0:e8:76:6e:90:08:2d:19:16:f4:02:01:07:71: ee:bc:05:2f:65:25:d0:59:c7:36:b1:5f:59:ae:9f:44:e6:07: 2b:94:0c:33:d1:77:cf:57:73:5f:d2:14:dc:71:df:42:bc:bc: 30:99:b8:9e:fe:a5:6b:7b:20:d1:00:1a:51:4e:b7:0a:0d:2b: c7:4d:9f:1a:c9:10:48:5a:79:55:6c:36:6e:3f:cd:e5:e6:4b: 9c:44:68:2b:00:1a:12:d9:8b:4d:79:66:d7:e5:7f:85:aa:ff: ad:a7:13:3f:c2:7d:c5:64:ab:db:f5:48:94:6b:11:6a:88:6a: ce:d6:31:9e:7d:06:06:27:35:5f:49:80:3e:63:24:50:7a:af: 7f:43:2c:10:f9:50:d4:94:4f:4f:a4:25:9e:c2:69:58:b7:aa: 4b:1b:6f:32:84:4b:6e:04:92:8c:9f:93:b7:6a:61:7a:f1:11: b7:1a:e4:d0:78:9f:c4:50:08:0c:71:de:bf:6e:d6:74:4e:e7: c7:1c:41:21:30:29:f9:e5:2a:d6:40:93:45:9f:ca:50:e0:e1: b5:99:5d:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFN0IxMTAvBgNVBAUTKDk4MDIyN0E1RDc3NUEwMzREQTc3OEQzM0Y4OEM1Q0Mw MjBEMUMzOUMwHhcNMjUwNjE5MDIxMTAwWhcNMjUwNjI2MDIxMTAwWjAYMRYwFAYD VQQDEw02ODUzNzFiNC1hZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7z2WWyF8R102FJa1PM7LBs+AJqgvE0ujPmmdrK/ktUSVYVBftJ9EqryEHB9o 7AavSBNE2pLksUqUeJmcHghAi0d4QvQuxnVyy38okGUu1n9SPj2C2vNuwTB5sPYM LMVvCTh7pF3GoUTpcqsDBQIEuGn3g7e9VvRw8qZTjoXPqHDolmd8lN5Vk0gSDXLb kRAfV36sZA9iFV84oXmg+BFunMK++bJG9SqO1X7Qqn5bbqNiKCjf2yk8AN9ergud JeXlLGrDHCoiixygfyRSGTbvrZdLlm+lYDyisX/K6/9c/9gkVfpfJzLPDM+3neuJ 5tpifkwgN6AzxeGHy/CWmN+4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK9wGm7 rTxyqr9GZ1gKDvr8TZprMB8GA1UdIwQYMBaAFJgCJ6XXdaA02neNM/iMXMAg0cOc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU3Qi80NzhGQTZENjcw OEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9EVGFkNDB6LUl4Y3dDRFJ3 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21BSW5wZGQxb0RUYWQ0MHotSXhjd0NEUnc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU3Qi80NzhGQTZENjcwOEQxMUVEOTRFMzJEMjJDNEY5QUUwMi9tQUlucGRkMW9E VGFkNDB6LUl4Y3dDRFJ3NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl7gDSAnnnvmyIbGZ/L9ry3NpWZ6bPBrjil22EDHz7gGpoZvM1W4Q7 0Oh2bpAILRkW9AIBB3HuvAUvZSXQWcc2sV9Zrp9E5gcrlAwz0XfPV3Nf0hTccd9C vLwwmbie/qVreyDRABpRTrcKDSvHTZ8ayRBIWnlVbDZuP83l5kucRGgrABoS2YtN eWbX5X+Fqv+tpxM/wn3FZKvb9UiUaxFqiGrO1jGefQYGJzVfSYA+YyRQeq9/QywQ +VDUlE9PpCWewmlYt6pLG28yhEtuBJKMn5O3amF68RG3GuTQeJ/EUAgMcd6/btZ0 TufHHEEhMCn55SrWQJNFn8pQ4OG1mV2s -----END CERTIFICATE-----Generated at Fri Jun 20 09:07:11 2025 by rpki-client