$ rpki-client -vvf rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft File: mmZSAdYWDzHXa50heh3_6tEsuoI.mft (raw, json) Hash identifier: uKz1h9NA/x4bs69p370ijLLl9XY9dqbvgGkBCRqGNoI= Subject key identifier: 40:72:53:C5:27:5F:98:8A:B8:AD:22:8A:E0:35:E4:EE:B8:7E:E5:5E Authority key identifier: 9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 Certificate issuer: /CN=A915180C/serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Certificate serial: 1DD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft Manifest number: 1DCB Signing time: Sat 14 Jun 2025 16:04:59 +0000 Manifest this update: Sat 14 Jun 2025 16:04:59 +0000 Manifest next update: Sat 21 Jun 2025 16:04:59 +0000 Files and hashes: 1: mmZSAdYWDzHXa50heh3_6tEsuoI.crl (hash: 6a8FV0q7ykK6WlzkicBjwrDbocL/3ax9lMdXz/sHxEk=) 2: 5F313E6A99D611E6BB89D557C4F9AE02.roa (hash: quQxqNwWkulIRmJT2I6ZYZNStKYWsMI4R3sbyT8S9tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7640 (0x1dd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915180C, serialNumber=9A665201D6160F31D76B9D217A1DFFEAD12CBA82 Validity Not Before: Jun 14 16:04:59 2025 GMT Not After : Jun 21 16:04:59 2025 GMT Subject: CN=684d9dab-039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:85:9d:80:bb:d8:4b:48:7e:27:e3:0a:f7: 6b:30:29:f2:43:8d:5d:a5:fc:5a:6c:8b:3a:eb:14: e0:89:6a:8f:0e:db:ef:43:92:b4:e9:dc:64:d2:eb: 3d:55:82:36:60:e6:c8:96:0e:fd:f0:52:1e:3b:16: 49:13:ab:d6:af:2e:ef:7c:99:fc:c1:50:a0:0b:77: 7a:3c:f0:75:1e:3d:bb:fa:dc:4e:07:7f:39:bf:a4: c0:41:46:29:21:af:34:ea:9f:31:da:98:4f:db:8f: 5c:f1:f9:f3:57:27:2b:8d:c6:e1:75:9d:5b:46:08: 2a:0d:8a:b6:71:85:f2:f5:21:5d:7a:56:b4:47:af: 96:91:b6:93:e9:6c:f8:f5:ae:b3:fc:16:84:ce:c4: b0:87:20:5c:f9:5e:34:93:50:76:29:d7:39:1a:05: 39:f7:45:de:f4:bb:ba:b7:be:77:d6:06:58:0e:c3: 18:6c:a8:b0:bb:85:2e:4f:89:df:7e:e0:57:cd:92: 26:31:89:09:51:56:b9:cb:29:2f:84:b0:28:12:8f: 8e:61:0b:f5:d3:15:61:cc:c6:a3:49:83:5f:a4:06: 89:85:4d:7e:8d:26:c0:b5:53:29:9a:42:68:3b:10: f4:fe:54:57:00:a8:51:67:79:66:4f:77:e1:1e:4b: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:72:53:C5:27:5F:98:8A:B8:AD:22:8A:E0:35:E4:EE:B8:7E:E5:5E X509v3 Authority Key Identifier: keyid:9A:66:52:01:D6:16:0F:31:D7:6B:9D:21:7A:1D:FF:EA:D1:2C:BA:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mmZSAdYWDzHXa50heh3_6tEsuoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915180C/9A7CD3EA96B511E684F73411C4F9AE02/mmZSAdYWDzHXa50heh3_6tEsuoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:8a:21:e3:20:05:0c:38:7e:43:9d:a8:d4:00:86:4a:63:b1: 45:7a:38:05:69:50:fa:61:55:01:5a:51:51:25:dc:81:c7:d3: c0:38:5c:94:3d:1e:52:db:da:42:04:6f:e8:25:14:41:20:2b: 69:c1:11:63:69:19:64:b2:32:c4:e9:45:c9:92:c6:dc:11:bb: ca:1e:c7:04:85:a5:f7:3a:e1:22:a3:51:fe:63:33:66:ec:65: ea:64:3d:b9:ac:30:9f:37:e6:c7:06:8b:e2:2d:ca:cd:1a:ca: 69:40:4d:1d:15:52:a6:a2:ed:ab:97:99:ab:10:5c:43:a1:f7: 81:60:f4:9b:07:03:a5:91:30:1c:ff:df:08:1f:cc:3a:98:73: e0:ea:8f:5f:a9:e4:5c:04:e3:0d:9e:96:a9:07:d7:ae:8a:dd: e5:d2:63:fb:7a:c1:a0:d7:d5:62:d9:29:96:ef:d2:c6:12:9a: 43:62:d9:33:9d:13:cc:e8:d2:4d:85:e6:eb:b5:71:5f:0d:5d: d5:50:4b:67:3c:d3:83:88:9c:0d:cb:ac:b8:c6:f4:85:bd:8c: 61:44:42:eb:30:2f:ac:f1:fa:7d:7e:0c:85:ac:4e:13:22:93: 3c:72:c8:5f:43:0b:e3:55:53:7c:12:5b:36:46:75:4f:f7:df: 6b:9b:8f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE4MEMxMTAvBgNVBAUTKDlBNjY1MjAxRDYxNjBGMzFENzZCOUQyMTdBMURGRkVB RDEyQ0JBODIwHhcNMjUwNjE0MTYwNDU5WhcNMjUwNjIxMTYwNDU5WjAYMRYwFAYD VQQDEw02ODRkOWRhYi0wMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK2FnYC72EtIfifjCvdrMCnyQ41dpfxabIs66xTgiWqPDtvvQ5K06dxk0us9 VYI2YObIlg798FIeOxZJE6vWry7vfJn8wVCgC3d6PPB1Hj27+txOB385v6TAQUYp Ia806p8x2phP249c8fnzVycrjcbhdZ1bRggqDYq2cYXy9SFdela0R6+WkbaT6Wz4 9a6z/BaEzsSwhyBc+V40k1B2Kdc5GgU590Xe9Lu6t7531gZYDsMYbKiwu4UuT4nf fuBXzZImMYkJUVa5yykvhLAoEo+OYQv10xVhzMajSYNfpAaJhU1+jSbAtVMpmkJo OxD0/lRXAKhRZ3lmT3fhHku+mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEByU8Un X5iKuK0iiuA15O64fuVeMB8GA1UdIwQYMBaAFJpmUgHWFg8x12udIXod/+rRLLqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTgwQy85QTdDRDNFQTk2 QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6SFhhNTBoZWgzXzZ0RXN1 b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tWlNBZFlXRHpIWGE1MGhlaDNfNnRFc3VvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTgwQy85QTdDRDNFQTk2QjUxMUU2ODRGNzM0MTFDNEY5QUUwMi9tbVpTQWRZV0R6 SFhhNTBoZWgzXzZ0RXN1b0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJiiHjIAUMOH5DnajUAIZKY7FFejgFaVD6YVUBWlFRJdyBx9PAOFyU PR5S29pCBG/oJRRBICtpwRFjaRlksjLE6UXJksbcEbvKHscEhaX3OuEio1H+YzNm 7GXqZD25rDCfN+bHBoviLcrNGsppQE0dFVKmou2rl5mrEFxDofeBYPSbBwOlkTAc /98IH8w6mHPg6o9fqeRcBOMNnpapB9euit3l0mP7esGg19Vi2SmW79LGEppDYtkz nRPM6NJNhebrtXFfDV3VUEtnPNODiJwNy6y4xvSFvYxhRELrMC+s8fp9fgyFrE4T IpM8cshfQwvjVVN8Els2RnVP999rm4+9 -----END CERTIFICATE-----Generated at Mon Jun 16 07:55:00 2025 by rpki-client