$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: dKrycpMSVTWJ/+G6cz4qaaSCN0F8fmlfaCA5fji3RG8= Subject key identifier: 08:5F:11:76:CE:C8:1A:CD:D5:71:40:2C:A1:00:45:B3:89:42:25:C5 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0526 Signing time: Sat 14 Jun 2025 23:20:57 +0000 Manifest this update: Sat 14 Jun 2025 23:20:56 +0000 Manifest next update: Sat 21 Jun 2025 23:20:56 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: KzRhO40jLXE3gnQuGAvSqVzkN5btYA2jH5U2N/QhqQw=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Jun 14 23:20:56 2025 GMT Not After : Jun 21 23:20:56 2025 GMT Subject: CN=684e03d8-90ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:2b:69:92:7d:4c:e5:1a:57:c1:1b:87:81: a9:5c:c5:4e:14:f6:12:69:54:92:8d:ff:f5:f0:8c: d7:24:1b:97:fa:53:ef:76:8e:e5:42:32:18:8b:65: 13:c2:1f:12:86:50:e2:9e:de:a8:35:ea:24:c8:d7: 79:c9:18:f8:80:11:ec:cb:90:0a:be:dc:1c:be:c9: 12:1f:70:a4:37:72:df:b5:e1:9e:88:9a:9e:2f:cc: 99:ac:56:07:20:8c:36:ca:72:4b:33:d3:c5:eb:2d: 16:d7:c1:11:c0:3c:a5:7f:81:c5:d5:b8:26:b9:e1: eb:37:6c:0c:00:cc:1c:45:82:41:21:bf:f7:4f:29: b5:e7:06:3b:7b:ca:83:9c:a2:fd:07:e6:a4:f7:87: 0a:67:90:d5:99:65:dc:fb:95:6c:60:18:88:73:e3: b4:e9:c7:36:04:9d:d4:ea:03:4b:44:13:fb:fc:f0: 10:6e:02:68:6e:95:ad:57:3b:c6:bc:50:a5:18:ae: df:51:93:9a:2d:e9:07:78:2a:aa:71:15:76:6e:97: ca:19:89:8b:a2:35:e1:14:12:54:3e:a7:0f:58:27: 97:33:17:8b:85:14:60:c5:27:e2:01:dc:4c:ca:6b: 6d:c5:55:bc:6e:87:a3:01:f5:32:a6:e5:e5:d9:5a: bc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:11:76:CE:C8:1A:CD:D5:71:40:2C:A1:00:45:B3:89:42:25:C5 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:0f:5c:34:b7:fa:e1:9e:8b:68:7e:77:52:70:71:40:c7: 80:6f:78:97:dd:05:94:0f:ca:e2:d7:c6:24:0b:d6:f0:33:e8: 96:17:e4:d4:46:82:e3:20:c7:b8:e4:3b:b2:2b:81:a7:9d:6a: ac:d8:2d:5e:38:66:f8:61:a6:a0:5c:86:19:95:17:4f:67:0c: 44:d3:18:d0:bb:97:b6:8f:9f:30:3e:ef:65:22:5b:80:44:d3: 75:2f:b4:f6:95:04:83:10:70:ed:97:7d:38:b5:06:08:66:20: 63:67:80:f2:55:68:78:1f:34:ff:2e:1b:62:03:48:ac:81:00: 9f:90:75:8d:f5:9e:c1:c1:ec:c5:28:e6:8c:7b:45:61:8a:a6: 73:ce:06:20:b6:35:65:9b:36:14:3c:70:e5:4d:bd:07:09:82: de:6f:73:26:91:86:03:a8:2c:3a:47:a9:f6:bf:4d:44:e3:f8: 68:b1:73:17:c1:d4:33:4f:55:4e:4d:95:57:66:f7:48:67:6f: 58:27:7b:aa:d5:80:43:34:3c:eb:ae:eb:c4:9d:85:93:d9:f4: 70:0b:dc:ef:26:34:61:81:7a:44:9e:3d:d1:60:a4:35:01:88: ed:e5:33:61:b3:f7:f8:c1:63:f3:ad:7c:2a:0b:f0:a2:08:d3: ca:79:be:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUwNjE0MjMyMDU2WhcNMjUwNjIxMjMyMDU2WjAYMRYwFAYD VQQDEw02ODRlMDNkOC05MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NwraZJ9TOUaV8Ebh4GpXMVOFPYSaVSSjf/18IzXJBuX+lPvdo7lQjIYi2UT wh8ShlDint6oNeokyNd5yRj4gBHsy5AKvtwcvskSH3CkN3LfteGeiJqeL8yZrFYH IIw2ynJLM9PF6y0W18ERwDylf4HF1bgmueHrN2wMAMwcRYJBIb/3Tym15wY7e8qD nKL9B+ak94cKZ5DVmWXc+5VsYBiIc+O06cc2BJ3U6gNLRBP7/PAQbgJobpWtVzvG vFClGK7fUZOaLekHeCqqcRV2bpfKGYmLojXhFBJUPqcPWCeXMxeLhRRgxSfiAdxM ymttxVW8boejAfUypuXl2Vq8lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhfEXbO yBrN1XFALKEARbOJQiXFMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU7w9cNLf64Z6LaH53UnBxQMeAb3iX3QWUD8ri18YkC9bwM+iWF+TU RoLjIMe45DuyK4GnnWqs2C1eOGb4YaagXIYZlRdPZwxE0xjQu5e2j58wPu9lIluA RNN1L7T2lQSDEHDtl304tQYIZiBjZ4DyVWh4HzT/LhtiA0isgQCfkHWN9Z7BwezF KOaMe0VhiqZzzgYgtjVlmzYUPHDlTb0HCYLeb3MmkYYDqCw6R6n2v01E4/hosXMX wdQzT1VOTZVXZvdIZ29YJ3uq1YBDNDzrruvEnYWT2fRwC9zvJjRhgXpEnj3RYKQ1 AYjt5TNhs/f4wWPzrXwqC/CiCNPKeb59 -----END CERTIFICATE-----Generated at Sun Jun 15 04:58:58 2025 by rpki-client