$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: QrWwLDiWE6bi1AaLI29ySd5RYWgbNZ1vSPRZ8bK6IdA= Subject key identifier: 4D:67:C6:55:E4:85:D3:6F:E3:B9:D8:69:56:AA:41:AA:02:4D:09:CE Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 027C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0279 Signing time: Sun 15 Jun 2025 01:23:28 +0000 Manifest this update: Sun 15 Jun 2025 01:23:28 +0000 Manifest next update: Sun 22 Jun 2025 01:23:28 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: GY79PnJ2d0kCMBBomQ/augKb0Mht/QkJQH8XSY1I0zw=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Jun 15 01:23:28 2025 GMT Not After : Jun 22 01:23:28 2025 GMT Subject: CN=684e2090-079c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:10:e0:ed:8f:00:7e:6c:12:45:e8:2e:05: 03:ba:39:da:3a:46:de:f5:fd:e5:85:ac:30:a7:7f: 4d:a9:43:f3:df:d3:81:94:ff:9a:00:3b:a7:67:11: 76:3b:c1:5d:fd:e6:18:41:20:52:3b:06:54:b6:1f: f4:24:eb:c3:72:e2:4f:54:f7:4d:db:3d:78:d8:d7: d5:c1:26:56:68:a1:72:f4:bb:fe:9e:96:71:9a:53: 97:ed:08:aa:8b:b7:0f:48:77:3a:dc:74:47:4f:27: d8:4a:d1:6a:72:7d:5b:18:22:a2:41:b4:ed:2c:6f: 8b:31:bb:63:03:cd:bb:d9:b2:1c:56:d6:c1:d4:0b: 05:77:12:ae:fd:0a:37:c1:86:e9:b6:d8:c8:ab:62: 5a:a4:5f:9a:e2:40:73:ab:40:7b:1b:52:d5:f8:60: 45:18:6f:0e:84:2d:f7:50:21:55:54:9c:17:4e:74: 01:47:2e:98:b5:3f:53:d1:bc:af:99:e3:3d:cf:f5: 6a:70:3c:54:68:54:2a:6d:80:76:51:58:5b:ea:41: ff:07:9c:f5:1f:aa:93:0c:8e:71:42:8a:83:63:ce: ed:13:43:a8:66:42:50:84:87:01:f9:cd:48:76:10: 85:3c:29:51:e3:36:fd:b3:11:14:50:d7:33:13:23: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:67:C6:55:E4:85:D3:6F:E3:B9:D8:69:56:AA:41:AA:02:4D:09:CE X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:81:cb:9a:f5:57:09:2e:5e:0e:ef:4f:30:25:20:e1:c1:57: 16:31:65:6d:ea:94:ee:d9:c5:e1:63:d3:98:46:06:c7:54:ca: 45:27:aa:80:f8:d8:6f:96:fb:8c:d7:6e:78:7e:ef:52:74:12: 39:ad:bd:49:0e:86:a2:97:78:c4:3b:31:a4:e7:3e:5f:1e:b0: d0:18:4d:1e:6f:f2:d2:12:ea:fd:4a:4e:68:db:1b:ab:17:21: 93:c8:2b:77:61:21:e2:43:8c:48:9a:a3:f8:7d:d3:55:7e:51: 38:51:15:79:5d:37:53:38:ab:53:c2:3a:2c:89:fe:33:03:3f: d9:02:66:da:bb:a5:bc:9f:73:08:1d:fe:a0:8b:d9:e5:21:a4: 4d:30:96:2e:9a:e1:9b:7f:db:a3:c8:fd:d1:63:18:bb:22:65: cf:96:e9:0c:b3:95:c0:8d:82:a9:1b:4b:e1:4c:3d:ed:c2:d6: 4f:cf:cb:73:60:6c:87:91:5f:7a:c0:bd:dd:65:b5:ab:bd:ff: 9b:9e:37:0d:18:54:48:2f:53:28:bd:7d:d9:65:33:30:71:99: a7:e9:9e:c0:d5:26:b8:5a:b1:1b:11:3f:ff:f2:6b:64:67:06: 94:d5:b9:12:63:6e:e2:d6:66:6c:6d:34:78:88:29:a4:47:91: ce:c4:ca:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNjE1MDEyMzI4WhcNMjUwNjIyMDEyMzI4WjAYMRYwFAYD VQQDEw02ODRlMjA5MC0wNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnkQ4O2PAH5sEkXoLgUDujnaOkbe9f3lhawwp39NqUPz39OBlP+aADunZxF2 O8Fd/eYYQSBSOwZUth/0JOvDcuJPVPdN2z142NfVwSZWaKFy9Lv+npZxmlOX7Qiq i7cPSHc63HRHTyfYStFqcn1bGCKiQbTtLG+LMbtjA8272bIcVtbB1AsFdxKu/Qo3 wYbpttjIq2JapF+a4kBzq0B7G1LV+GBFGG8OhC33UCFVVJwXTnQBRy6YtT9T0byv meM9z/VqcDxUaFQqbYB2UVhb6kH/B5z1H6qTDI5xQoqDY87tE0OoZkJQhIcB+c1I dhCFPClR4zb9sxEUUNczEyO1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1nxlXk hdNv47nYaVaqQaoCTQnOMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxgcua9VcJLl4O708wJSDhwVcWMWVt6pTu2cXhY9OYRgbHVMpFJ6qA +NhvlvuM1254fu9SdBI5rb1JDoail3jEOzGk5z5fHrDQGE0eb/LSEur9Sk5o2xur FyGTyCt3YSHiQ4xImqP4fdNVflE4URV5XTdTOKtTwjosif4zAz/ZAmbau6W8n3MI Hf6gi9nlIaRNMJYumuGbf9ujyP3RYxi7ImXPlukMs5XAjYKpG0vhTD3twtZPz8tz YGyHkV96wL3dZbWrvf+bnjcNGFRIL1MovX3ZZTMwcZmn6Z7A1Sa4WrEbET//8mtk ZwaU1bkSY27i1mZsbTR4iCmkR5HOxMrQ -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:19 2025 by rpki-client