$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: +TL9qy6uv9mmA9XWvgPKrjbcY80ZxIjF3w6mFNYgYa4= Subject key identifier: 9D:05:B9:AE:4F:A8:4D:49:29:2F:98:3D:2F:C7:AD:E1:A3:5B:18:3B Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 03C1 Signing time: Tue 17 Jun 2025 00:14:43 +0000 Manifest this update: Tue 17 Jun 2025 00:14:42 +0000 Manifest next update: Tue 24 Jun 2025 00:14:42 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: ZeSEjZEDjWsx7zKNowa1iEyQpUwINKZK0StZj5/xezQ=) 2: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: iSf3pkGC+96IY56uEQF7L3VqZS/vgXaJcABFmCHB8cc=) 3: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: 7R3hysbeSbUFb8HWymJrPzj8ZBNf1N511Ldy7MXSF9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Jun 17 00:14:42 2025 GMT Not After : Jun 24 00:14:42 2025 GMT Subject: CN=6850b373-40a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:41:a4:ba:f3:23:38:e8:5e:84:53:e5:78: 46:a5:5e:e6:ba:cf:4c:d9:1f:d9:ec:b1:fe:78:c5: 4a:5f:f5:ca:d4:11:1e:c7:22:a2:68:a4:e2:7a:33: d0:b3:bd:05:cd:c9:b6:ab:d5:4e:09:6d:e4:37:48: 21:48:fc:e7:d2:68:bd:2b:4e:92:be:ea:66:0e:ce: 66:ed:55:7b:fe:67:e6:21:98:e7:f7:b3:ac:fe:dc: 2c:6f:80:7d:e8:20:39:d2:e7:81:1d:6f:1a:8d:94: e2:bd:f5:af:86:ea:f3:ee:50:8a:7b:83:3f:62:41: a0:07:44:b6:a9:3d:ef:91:9f:df:ee:1b:71:5a:ce: 12:23:b9:55:cc:9b:1c:aa:ac:d3:0a:fc:d2:a7:20: 7a:53:b6:33:f3:ae:4f:03:66:24:88:a1:d9:55:98: 39:c6:3e:34:15:0f:4c:dd:67:be:77:42:b4:04:b2: 1f:ed:ec:cb:c7:66:d4:72:bb:03:0c:3b:ea:4d:3d: 62:35:90:27:80:1e:06:e0:74:dd:1c:a9:ed:e4:03: 39:a7:72:80:35:95:f6:c7:2d:52:bf:79:87:4e:3d: a9:9d:34:60:cf:85:cd:da:40:c5:83:5c:6e:b9:ff: d0:df:fb:eb:b8:81:6e:c2:bf:2e:14:b7:36:02:6e: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:B9:AE:4F:A8:4D:49:29:2F:98:3D:2F:C7:AD:E1:A3:5B:18:3B X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:73:8b:80:43:b9:76:d4:ab:c0:7b:4c:84:ab:1f:cf:06: c2:94:0d:f6:87:2d:ae:42:5e:49:d5:20:d2:1f:4b:09:09:ce: 13:ef:65:64:f6:d1:98:66:18:a3:ad:99:77:e9:a7:ca:36:7f: f0:9f:af:af:e3:90:f0:f2:8e:4e:17:10:d6:46:7b:0c:61:e9: 0c:ec:24:46:dc:3d:54:28:81:30:24:38:57:88:18:a4:62:db: 64:6a:0f:07:da:1e:e9:af:69:94:dd:db:e7:2c:9a:e6:18:02: 92:b9:9e:b7:93:14:0f:18:5f:0f:31:c7:43:71:51:83:74:bb: d2:bb:95:e9:39:9a:25:c4:93:90:dd:d2:3e:bb:cd:26:00:93: 5c:ef:ad:e6:6e:97:c8:bf:ff:6f:64:f2:8f:08:1b:29:a3:b2: 2f:55:87:a5:96:d7:96:34:6d:5b:c6:a9:0b:61:0d:53:00:a6: dd:9f:f2:e0:ab:47:d4:02:c2:b4:a2:7c:62:7c:a8:60:d8:a5: d4:12:e4:5e:a2:b2:62:19:19:18:4b:4e:8b:8a:a8:f1:e8:eb: 0d:84:1c:d4:2e:d1:32:d6:ac:f1:c3:f3:d4:b3:43:ee:41:04: 48:f2:5c:3a:35:92:e9:bb:e0:59:fe:4f:bd:00:00:99:64:b1: cb:3f:53:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjUwNjE3MDAxNDQyWhcNMjUwNjI0MDAxNDQyWjAYMRYwFAYD VQQDEw02ODUwYjM3My00MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvdBpLrzIzjoXoRT5XhGpV7mus9M2R/Z7LH+eMVKX/XK1BEexyKiaKTiejPQ s70Fzcm2q9VOCW3kN0ghSPzn0mi9K06SvupmDs5m7VV7/mfmIZjn97Os/twsb4B9 6CA50ueBHW8ajZTivfWvhurz7lCKe4M/YkGgB0S2qT3vkZ/f7htxWs4SI7lVzJsc qqzTCvzSpyB6U7Yz865PA2YkiKHZVZg5xj40FQ9M3We+d0K0BLIf7ezLx2bUcrsD DDvqTT1iNZAngB4G4HTdHKnt5AM5p3KANZX2xy1Sv3mHTj2pnTRgz4XN2kDFg1xu uf/Q3/vruIFuwr8uFLc2Am4A8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0Fua5P qE1JKS+YPS/HreGjWxg7MB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcB3OLgEO5dtSrwHtMhKsfzwbClA32hy2uQl5J1SDSH0sJCc4T72Vk 9tGYZhijrZl36afKNn/wn6+v45Dw8o5OFxDWRnsMYekM7CRG3D1UKIEwJDhXiBik Yttkag8H2h7pr2mU3dvnLJrmGAKSuZ63kxQPGF8PMcdDcVGDdLvSu5XpOZolxJOQ 3dI+u80mAJNc763mbpfIv/9vZPKPCBspo7IvVYellteWNG1bxqkLYQ1TAKbdn/Lg q0fUAsK0onxifKhg2KXUEuReorJiGRkYS06Liqjx6OsNhBzULtEy1qzxw/PUs0Pu QQRI8lw6NZLpu+BZ/k+9AACZZLHLP1Ms -----END CERTIFICATE-----Generated at Wed Jun 18 08:25:29 2025 by rpki-client