$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: ph3Wrjz3dDnPuY5AxVCyfaqDM7YicwgKaIoOWdX/L68= Subject key identifier: 7C:4A:11:E6:DA:C9:4A:44:BB:22:07:3A:99:21:D4:A2:17:D4:1E:3F Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07BC Signing time: Sat 14 Jun 2025 20:56:09 +0000 Manifest this update: Sat 14 Jun 2025 20:56:08 +0000 Manifest next update: Sat 21 Jun 2025 20:56:08 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: 81YPlG0bDzcG1RhKtXamlXsWI0bG1JMb0hWIuAgx9Y0=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Jun 14 20:56:08 2025 GMT Not After : Jun 21 20:56:08 2025 GMT Subject: CN=684de1e9-f237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6d:77:99:3c:e2:5f:82:ba:49:37:15:00:7e: b1:b7:68:06:84:16:95:ff:11:b7:4f:76:66:c9:70: c2:9b:3e:ec:d9:36:f1:55:61:96:d9:d6:95:58:bd: 03:05:0d:6b:ba:d5:58:6b:f6:28:32:67:58:8c:fb: bd:56:a2:7c:95:d1:6b:e5:8b:03:79:5a:d2:a0:ec: 95:35:a6:63:13:60:80:07:e8:6b:01:75:06:2d:5b: 67:ef:f3:1c:db:b8:0e:86:5f:85:99:28:d7:55:64: f2:c7:c1:d0:39:79:c2:6c:ef:bc:80:90:4b:3d:02: fa:54:10:de:03:9c:a7:c6:e0:9f:e6:d7:2a:5f:5e: 67:56:fc:89:0d:57:44:33:f2:3b:5e:63:63:e6:b9: 95:dc:44:13:7d:a6:46:51:97:01:24:d5:cb:55:ef: ab:9e:21:89:9c:81:42:1e:68:e2:38:df:49:d7:21: 69:24:ac:a4:44:8c:cd:af:9d:08:41:5f:d1:70:6a: d8:ee:d8:b5:4a:7d:57:64:52:a4:70:22:a5:0c:be: 7b:02:c8:8d:4b:57:1b:9c:d0:25:4c:b8:a5:a4:3e: 8a:27:c5:cc:33:81:a0:d8:6e:e2:5a:a3:d5:62:af: 7f:e3:61:ed:ae:01:b2:6e:2c:83:39:ab:4b:84:81: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:11:E6:DA:C9:4A:44:BB:22:07:3A:99:21:D4:A2:17:D4:1E:3F X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:6f:2f:70:b6:a2:bf:b5:64:ae:c0:4b:31:3a:12:e6:91:d8: 51:fe:86:34:f5:7a:c9:f1:08:cc:8a:ff:1c:4b:07:7b:15:98: e6:1c:70:b5:bc:bd:fa:5e:65:44:d3:a3:53:c2:7d:39:0c:21: 1f:91:cb:c3:20:b0:97:26:d9:70:fe:0f:10:c4:40:12:6f:db: ea:c6:72:f1:b4:42:e1:c9:d4:49:97:12:35:e8:45:17:2b:f7: dc:5e:e5:20:62:bf:80:78:f0:67:6c:07:e1:1a:67:3e:19:80: 06:c9:bf:43:09:cc:2c:01:4a:c1:63:e7:8c:31:f3:6d:75:12: af:c1:3e:5f:5d:c9:e2:48:a4:bd:39:05:e4:59:2b:c0:b9:46: 75:97:57:73:bb:84:a0:38:38:59:e5:67:3b:18:fe:2c:db:38: f7:28:9b:90:c2:75:c2:51:a4:50:4d:74:5c:6c:65:bb:ad:a0: 3d:be:89:ec:0a:0e:8b:d9:8d:7d:1b:2b:ba:18:e2:24:fb:ad: 41:41:09:d1:fc:94:86:42:fa:38:02:92:b0:8c:51:f1:7f:85: f1:c6:23:f1:e6:09:42:8f:f7:ef:74:6e:64:70:01:16:f8:b2: 0b:e1:ad:0f:0d:0f:bb:26:0e:31:c2:be:0d:22:b2:ba:38:2c: 3b:c0:21:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNjE0MjA1NjA4WhcNMjUwNjIxMjA1NjA4WjAYMRYwFAYD VQQDEw02ODRkZTFlOS1mMjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG13mTziX4K6STcVAH6xt2gGhBaV/xG3T3ZmyXDCmz7s2TbxVWGW2daVWL0D BQ1rutVYa/YoMmdYjPu9VqJ8ldFr5YsDeVrSoOyVNaZjE2CAB+hrAXUGLVtn7/Mc 27gOhl+FmSjXVWTyx8HQOXnCbO+8gJBLPQL6VBDeA5ynxuCf5tcqX15nVvyJDVdE M/I7XmNj5rmV3EQTfaZGUZcBJNXLVe+rniGJnIFCHmjiON9J1yFpJKykRIzNr50I QV/RcGrY7ti1Sn1XZFKkcCKlDL57AsiNS1cbnNAlTLilpD6KJ8XMM4Gg2G7iWqPV Yq9/42HtrgGybiyDOatLhIE/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxKEeba yUpEuyIHOpkh1KIX1B4/MB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQby9wtqK/tWSuwEsxOhLmkdhR/oY09XrJ8QjMiv8cSwd7FZjmHHC1 vL36XmVE06NTwn05DCEfkcvDILCXJtlw/g8QxEASb9vqxnLxtELhydRJlxI16EUX K/fcXuUgYr+AePBnbAfhGmc+GYAGyb9DCcwsAUrBY+eMMfNtdRKvwT5fXcniSKS9 OQXkWSvAuUZ1l1dzu4SgODhZ5Wc7GP4s2zj3KJuQwnXCUaRQTXRcbGW7raA9vons Cg6L2Y19Gyu6GOIk+61BQQnR/JSGQvo4ApKwjFHxf4XxxiPx5glCj/fvdG5kcAEW +LIL4a0PDQ+7Jg4xwr4NIrK6OCw7wCHL -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:23 2025 by rpki-client