$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: e2ma4dsEsTGkoj/90Dc4BZNSvgqMYRApKzEwzWDBXbQ= Subject key identifier: 19:A8:FE:F9:8E:7D:B6:B0:A9:BB:8E:9F:4B:CC:97:1D:D8:EF:AC:17 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0DDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0DD4 Signing time: Sat 14 Jun 2025 17:47:57 +0000 Manifest this update: Sat 14 Jun 2025 17:47:57 +0000 Manifest next update: Sat 21 Jun 2025 17:47:57 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: uLLiUnIw16gMKsoRJXA7r3Stw+z+8nt/qV1/Xpn0k04=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3549 (0xddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: Jun 14 17:47:57 2025 GMT Not After : Jun 21 17:47:57 2025 GMT Subject: CN=684db5cd-a2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:02:43:08:77:0f:a0:e2:aa:12:94:f9:d2: d0:35:91:6b:30:49:a8:f3:77:94:2a:8c:0b:5b:70: 90:58:8b:bd:5f:f5:bf:e7:0e:4d:f0:aa:76:28:0f: d6:b3:53:52:6c:b8:65:e0:5e:af:74:cb:4c:a5:30: 5c:54:7b:8d:58:d8:ec:86:b3:46:84:0c:63:34:07: 6e:e4:51:52:6d:7e:c5:97:e8:70:03:28:94:48:06: 93:33:1d:67:d9:02:dd:a5:86:ed:fc:bd:63:9e:44: 1c:2a:f5:09:8b:94:21:c7:db:32:fd:b5:41:70:74: 17:86:e3:18:e4:0f:12:c0:e8:ad:50:fa:61:cf:b9: 24:a1:03:3a:8a:29:23:e8:4f:6d:c8:57:cb:a2:ed: 81:a0:13:c0:39:11:44:81:78:02:ef:44:7d:fd:4f: c4:90:08:01:9f:ae:ba:36:d9:17:85:60:ef:6d:4c: cc:03:6b:92:65:a0:33:71:4d:84:43:17:f4:9c:9c: 3d:a8:ff:1f:5b:54:a1:b2:24:d2:b3:4b:a9:1f:3f: 93:3e:34:ae:af:54:f2:82:da:a0:22:40:91:63:90: 74:dc:cb:bf:06:6c:1e:32:2c:b1:8c:9f:cd:ac:45: ef:b7:fb:35:cf:8d:9b:8b:d3:12:0b:de:0c:3e:28: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:FE:F9:8E:7D:B6:B0:A9:BB:8E:9F:4B:CC:97:1D:D8:EF:AC:17 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:75:c1:0c:60:32:9a:1c:c2:be:c8:5a:79:ed:d7:25:8e: 4a:ee:25:d8:e0:64:e6:d2:bd:85:05:66:a9:57:4d:a5:37:80: b7:c3:6f:c6:bc:a6:3e:83:1f:ea:81:2d:28:65:b7:d9:07:c4: cc:52:ab:f7:2e:8a:e6:ad:ef:46:40:77:38:43:7d:20:51:e2: 84:d3:99:54:49:cb:27:95:75:54:4d:cb:c5:4b:87:af:eb:60: 94:c0:bc:3e:8e:61:8f:48:68:4b:8a:24:f3:8e:82:ca:0e:a8: 58:30:46:66:91:49:76:66:de:20:1d:9b:f6:44:67:82:54:0b: fd:75:a3:2d:46:dc:e3:23:0e:70:05:32:83:ad:e5:cc:1d:ba: e4:27:32:b3:f8:2f:86:36:9d:b0:99:71:22:3d:8a:13:7b:73: 21:03:bd:26:15:e2:80:d8:ae:d7:de:20:21:cf:fb:64:1a:7a: 5d:20:4d:52:03:b6:f2:1c:c9:ae:83:d4:d7:18:dc:e7:85:f1: 10:1a:71:32:45:50:bf:5f:98:92:00:a5:20:a9:3f:2d:77:f0: 7e:c8:42:8b:ee:8c:15:8a:54:b2:92:d4:5e:3c:1c:cf:b7:a1: 8a:32:db:4c:d4:66:34:b0:99:90:0e:63:09:34:d4:fe:ef:fe: e8:44:1e:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUwNjE0MTc0NzU3WhcNMjUwNjIxMTc0NzU3WjAYMRYwFAYD VQQDEw02ODRkYjVjZC1hMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AsCQwh3D6DiqhKU+dLQNZFrMEmo83eUKowLW3CQWIu9X/W/5w5N8Kp2KA/W s1NSbLhl4F6vdMtMpTBcVHuNWNjshrNGhAxjNAdu5FFSbX7Fl+hwAyiUSAaTMx1n 2QLdpYbt/L1jnkQcKvUJi5Qhx9sy/bVBcHQXhuMY5A8SwOitUPphz7kkoQM6iikj 6E9tyFfLou2BoBPAORFEgXgC70R9/U/EkAgBn666NtkXhWDvbUzMA2uSZaAzcU2E Qxf0nJw9qP8fW1ShsiTSs0upHz+TPjSur1TygtqgIkCRY5B03Mu/BmweMiyxjJ/N rEXvt/s1z42bi9MSC94MPihD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmo/vmO fbawqbuOn0vMlx3Y76wXMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPh3XBDGAymhzCvshaee3XJY5K7iXY4GTm0r2FBWapV02lN4C3w2/G vKY+gx/qgS0oZbfZB8TMUqv3Lormre9GQHc4Q30gUeKE05lUScsnlXVUTcvFS4ev 62CUwLw+jmGPSGhLiiTzjoLKDqhYMEZmkUl2Zt4gHZv2RGeCVAv9daMtRtzjIw5w BTKDreXMHbrkJzKz+C+GNp2wmXEiPYoTe3MhA70mFeKA2K7X3iAhz/tkGnpdIE1S A7byHMmug9TXGNznhfEQGnEyRVC/X5iSAKUgqT8td/B+yEKL7owVilSyktRePBzP t6GKMttM1GY0sJmQDmMJNNT+7/7oRB6f -----END CERTIFICATE-----Generated at Sun Jun 15 09:43:02 2025 by rpki-client