$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: jfRHGYZ5pmRSehr5GNwVfkjTUpPxchVPeuUktXySofY= Subject key identifier: C1:60:14:49:CB:8E:40:7C:A1:B2:92:40:EE:D2:9A:95:B1:2C:D8:B4 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03D4 Signing time: Fri 13 Jun 2025 00:09:18 +0000 Manifest this update: Fri 13 Jun 2025 00:09:18 +0000 Manifest next update: Fri 20 Jun 2025 00:09:18 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: UtJ44qS+JrYRd/RlE69u9MlvXY4XECwAJOhp9L+uOZQ=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Jun 13 00:09:18 2025 GMT Not After : Jun 20 00:09:18 2025 GMT Subject: CN=684b6c2e-aed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:e4:19:93:af:3a:c6:64:f4:c0:a1:e1:3c: ba:9a:5e:e4:38:2f:34:5f:b5:c9:b6:04:b8:35:a8: d6:89:d7:ca:e6:04:95:ce:46:ae:48:32:6d:d5:59: ae:57:7f:55:e4:93:96:db:bf:b3:07:f7:ff:76:eb: b4:09:fe:85:a8:db:62:7b:d1:41:a4:34:b7:84:22: d0:8e:39:9a:11:66:d1:47:af:8a:b1:b5:9b:e6:25: 45:de:6d:e5:2f:94:ab:b0:75:ad:38:3a:d9:6b:1e: 98:88:9d:f9:52:18:11:76:b0:c8:0e:e8:24:97:91: 0c:b3:ef:55:e3:49:25:3f:26:76:c6:4a:98:16:ec: 3f:4f:72:54:35:79:6f:8c:bc:42:53:82:df:6d:1e: 3c:b1:1d:8d:83:f8:cf:31:72:6f:ce:c5:45:c1:f1: 85:4e:8e:86:95:58:e7:37:c3:d7:b6:3e:9c:08:9b: 29:5e:31:30:6a:7d:b9:cc:cf:d1:e1:8f:4d:0d:98: fc:6c:1c:23:a8:11:54:d7:9c:68:69:a2:51:19:3c: 15:f0:35:63:bc:f0:fa:90:ab:9f:3d:b1:50:bf:ff: ef:cb:c4:e2:a4:0b:60:d4:78:23:76:07:83:30:e6: cc:82:f9:31:3f:ea:51:23:d6:92:8f:e2:81:80:ed: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:60:14:49:CB:8E:40:7C:A1:B2:92:40:EE:D2:9A:95:B1:2C:D8:B4 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:02:13:b7:d4:a4:77:be:73:9e:a4:3e:3f:f0:ab:4e:c9: 60:de:40:04:46:a2:fe:46:e1:6e:86:0f:45:14:85:df:81:30: a1:00:45:c7:ac:82:8a:fa:ee:f4:73:4b:05:c2:f3:60:f3:b7: d5:a1:61:00:a6:06:75:25:2e:10:fa:cf:8e:ab:ac:c4:75:81: 01:dc:5b:e5:fd:e5:f3:41:ea:dc:b9:5c:a2:77:ab:ad:2b:ed: e6:c2:36:4e:a0:6b:1f:96:80:b9:a6:e8:ee:3c:b0:88:7e:26: 54:e0:db:77:16:0f:f1:74:ac:4b:68:f5:e5:ad:e6:0f:3f:4b: 43:6e:66:33:e7:29:5d:ca:d7:22:8c:e0:14:2f:ec:1d:20:b9: 85:62:7d:59:26:bb:36:27:45:76:59:9d:fb:22:d0:81:ea:ed: 75:14:76:ac:09:80:6f:9b:6e:b5:cb:db:bf:fa:2e:bd:ff:a8: c2:42:f8:c0:91:8a:a1:2e:b6:46:55:35:33:40:f9:b3:d0:bf: 02:06:db:60:4b:b1:ed:f1:fa:7e:a4:22:92:c8:55:e0:d3:ec: 8d:ab:01:cb:49:54:ff:05:5b:fd:99:18:ca:03:53:2d:b9:7f: 56:00:ce:36:41:76:bb:1d:25:b5:ed:e1:8d:b8:ed:6a:09:bb: ce:74:8c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNjEzMDAwOTE4WhcNMjUwNjIwMDAwOTE4WjAYMRYwFAYD VQQDEw02ODRiNmMyZS1hZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNrkGZOvOsZk9MCh4Ty6ml7kOC80X7XJtgS4NajWidfK5gSVzkauSDJt1Vmu V39V5JOW27+zB/f/duu0Cf6FqNtie9FBpDS3hCLQjjmaEWbRR6+KsbWb5iVF3m3l L5SrsHWtODrZax6YiJ35UhgRdrDIDugkl5EMs+9V40klPyZ2xkqYFuw/T3JUNXlv jLxCU4LfbR48sR2Ng/jPMXJvzsVFwfGFTo6GlVjnN8PXtj6cCJspXjEwan25zM/R 4Y9NDZj8bBwjqBFU15xoaaJRGTwV8DVjvPD6kKufPbFQv//vy8TipAtg1HgjdgeD MObMgvkxP+pRI9aSj+KBgO3aRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFgFEnL jkB8obKSQO7SmpWxLNi0MB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXkwITt9Skd75znqQ+P/CrTslg3kAERqL+RuFuhg9FFIXfgTChAEXH rIKK+u70c0sFwvNg87fVoWEApgZ1JS4Q+s+Oq6zEdYEB3Fvl/eXzQercuVyid6ut K+3mwjZOoGsfloC5pujuPLCIfiZU4Nt3Fg/xdKxLaPXlreYPP0tDbmYz5yldytci jOAUL+wdILmFYn1ZJrs2J0V2WZ37ItCB6u11FHasCYBvm261y9u/+i69/6jCQvjA kYqhLrZGVTUzQPmz0L8CBttgS7Ht8fp+pCKSyFXg0+yNqwHLSVT/BVv9mRjKA1Mt uX9WAM42QXa7HSW17eGNuO1qCbvOdIwM -----END CERTIFICATE-----Generated at Sat Jun 14 19:19:29 2025 by rpki-client