$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: kKA5hal9DEzxsZsrIeXCDC3jevmZhCPY9sGfcTqypek= Subject key identifier: 78:B7:AA:06:7B:79:2F:A3:BE:75:B6:F2:E4:7D:C7:01:12:D7:B3:72 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B30 Signing time: Sat 14 Jun 2025 19:03:24 +0000 Manifest this update: Sat 14 Jun 2025 19:03:23 +0000 Manifest next update: Sat 21 Jun 2025 19:03:23 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: UCzxByRvQ8hk/5AgIQGWVOHFI/sSHEOPvRLcEtGx73U=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Jun 14 19:03:23 2025 GMT Not After : Jun 21 19:03:23 2025 GMT Subject: CN=684dc77b-2788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6a:df:ee:b9:d4:e2:61:5c:56:55:4d:90:5a: d2:ac:69:2d:4a:26:20:11:61:d7:05:b3:05:15:74: 80:52:bb:fa:6f:9f:e3:a5:13:69:db:c5:70:88:1c: a8:cb:f0:d7:24:81:42:b7:12:af:b2:32:3a:09:55: 8e:a3:88:8f:1e:53:0d:85:1c:a8:36:92:33:79:d2: f6:8c:d1:d7:68:a3:a0:6a:1b:a1:61:15:40:6b:ec: e6:90:a4:44:93:bd:23:c2:0d:ae:a0:7a:c5:4e:b3: 42:98:44:a9:91:ab:4a:08:a0:1a:e4:35:d4:6e:2c: e5:03:68:5e:69:2d:fd:eb:4c:18:ae:f2:dc:ce:ab: ea:af:08:53:08:12:67:df:a3:1a:18:de:09:ed:33: 08:bc:22:69:41:e5:62:b3:a2:32:ad:cf:7f:c3:6c: 9b:93:6f:ae:22:dd:bf:50:ba:80:50:be:49:e8:c8: 80:e6:27:90:54:38:b9:a4:90:df:33:78:12:3f:85: c9:ef:68:57:34:a7:bc:a5:9d:a6:68:fc:cc:20:e3: 50:4a:ee:8e:45:20:ab:15:95:78:37:f9:b1:dc:d8: b8:e5:36:48:5f:be:6c:87:a5:ce:8b:15:54:03:79: c0:f5:a6:d9:b5:ff:3c:25:57:78:fc:f5:08:91:97: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B7:AA:06:7B:79:2F:A3:BE:75:B6:F2:E4:7D:C7:01:12:D7:B3:72 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:51:b2:b7:c3:d4:f9:ca:b2:8f:e4:2c:43:8d:6f:2f:cf:21: e0:16:fa:ee:6f:cf:fa:05:27:53:1f:76:03:4a:66:c9:33:f5: 84:86:7a:71:e3:26:27:e2:27:09:d2:05:20:b2:b4:5d:48:00: d6:05:52:3c:0c:d1:04:69:50:89:f8:af:d7:40:b3:c7:81:d7: 84:3a:a4:d8:81:be:76:6c:03:e3:07:fe:33:7f:ba:c4:6b:18: 2b:68:8d:ca:ef:1c:bb:9c:bb:49:eb:17:54:a9:ab:fc:c4:30: 44:5a:d5:3b:b3:76:7d:b9:59:81:3c:2b:a9:c2:d6:f1:b0:12: 04:77:48:82:52:bd:77:cf:33:48:f5:6a:93:ef:a0:aa:85:05: 93:e3:64:75:4e:5b:5f:1b:4a:46:4a:fc:0f:f0:cc:5a:87:e1: d2:0d:66:b5:07:b3:d3:a9:c1:e0:a6:81:c9:0c:a2:d5:8c:45: 47:2b:eb:5e:08:36:fa:41:53:08:16:41:a0:81:0e:6a:64:23: c2:9b:7c:42:50:a6:24:c0:9b:35:ca:4e:8e:d2:50:6d:20:cf: 14:55:a0:bf:2b:b8:df:ae:6d:4a:7b:25:49:8e:6c:1f:30:17: fc:af:3e:3e:9a:19:31:79:30:20:eb:e2:49:e5:cf:b2:5a:27: 95:85:ac:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwNjE0MTkwMzIzWhcNMjUwNjIxMTkwMzIzWjAYMRYwFAYD VQQDEw02ODRkYzc3Yi0yNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWrf7rnU4mFcVlVNkFrSrGktSiYgEWHXBbMFFXSAUrv6b5/jpRNp28VwiByo y/DXJIFCtxKvsjI6CVWOo4iPHlMNhRyoNpIzedL2jNHXaKOgahuhYRVAa+zmkKRE k70jwg2uoHrFTrNCmESpkatKCKAa5DXUbizlA2heaS3960wYrvLczqvqrwhTCBJn 36MaGN4J7TMIvCJpQeVis6Iyrc9/w2ybk2+uIt2/ULqAUL5J6MiA5ieQVDi5pJDf M3gSP4XJ72hXNKe8pZ2maPzMIONQSu6ORSCrFZV4N/mx3Ni45TZIX75sh6XOixVU A3nA9abZtf88JVd4/PUIkZdbbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi3qgZ7 eS+jvnW28uR9xwES17NyMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFUbK3w9T5yrKP5CxDjW8vzyHgFvrub8/6BSdTH3YDSmbJM/WEhnpx 4yYn4icJ0gUgsrRdSADWBVI8DNEEaVCJ+K/XQLPHgdeEOqTYgb52bAPjB/4zf7rE axgraI3K7xy7nLtJ6xdUqav8xDBEWtU7s3Z9uVmBPCupwtbxsBIEd0iCUr13zzNI 9WqT76CqhQWT42R1TltfG0pGSvwP8Mxah+HSDWa1B7PTqcHgpoHJDKLVjEVHK+te CDb6QVMIFkGggQ5qZCPCm3xCUKYkwJs1yk6O0lBtIM8UVaC/K7jfrm1KeyVJjmwf MBf8rz4+mhkxeTAg6+JJ5c+yWieVhay9 -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:42 2025 by rpki-client