$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: HIHrvHoKXnZSs7dKgUL/uWZAiuIpiNQSRMab2U+MkT8= Subject key identifier: 84:14:9F:09:86:0B:68:BA:2C:3F:61:56:D6:20:6F:AE:F5:3A:F5:D8 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: D7 Signing time: Sat 31 May 2025 05:14:26 +0000 Manifest this update: Sat 31 May 2025 05:14:25 +0000 Manifest next update: Sat 07 Jun 2025 05:14:25 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: en1q3ig33cE6vno28pCVv2ewlaXI3GEd0gYpPm2NVf0=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: May 31 05:14:25 2025 GMT Not After : Jun 7 05:14:25 2025 GMT Subject: CN=683a9032-2d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:51:5b:dc:b7:c9:0b:b7:6f:e1:b1:81:bb: df:e6:42:b5:d7:60:eb:4c:84:70:c1:8b:95:c6:41: 61:e5:d1:d3:63:47:e6:11:01:b4:cb:de:d9:7f:24: 6c:12:a5:f0:c0:20:7d:5e:e5:87:6b:5b:d4:10:2a: b0:22:e7:75:33:0e:ac:1f:4d:25:d8:a8:f8:17:ff: ed:f6:91:8f:f8:8b:87:f0:32:16:89:df:5a:81:8f: 10:5d:f5:09:a1:39:4b:da:56:eb:f1:4d:7a:42:47: b9:8b:3e:bf:39:e2:87:6a:d8:cd:0b:5c:d4:c9:24: d7:0d:3f:ac:1e:be:93:38:91:14:66:3e:8d:6c:3b: 52:c4:04:0c:54:a4:88:f5:71:41:c6:22:d6:f5:80: 98:d8:cd:c7:61:3f:1e:d9:cf:28:79:ef:db:e8:fb: c5:23:81:4a:ca:68:2e:fb:97:0a:6c:4f:26:00:4d: f1:a7:c2:1a:16:4a:50:b2:1a:3b:34:16:69:1b:f9: 2b:5c:ef:c4:92:54:11:2e:3a:3a:f5:ce:1c:ed:ed: d6:e5:e4:64:15:c7:c8:d9:84:41:5f:21:9d:1c:5c: 39:c0:91:57:3d:d2:28:f8:95:e1:96:ff:cf:52:98: ec:bb:de:a1:2a:59:7c:d9:54:4c:78:07:ea:55:27: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:9F:09:86:0B:68:BA:2C:3F:61:56:D6:20:6F:AE:F5:3A:F5:D8 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:63:03:94:8d:3b:bb:d7:0f:fc:c5:44:f7:56:42:57:1b:2f: e9:57:ca:99:23:c7:71:43:e8:56:27:95:13:21:bc:af:03:df: 1a:4d:53:6d:4c:8a:16:9a:e3:a2:e2:f6:14:2d:e5:40:94:df: be:62:c2:1c:3e:ff:0f:a1:70:16:c4:af:cb:e0:54:39:ad:d2: 03:e5:72:62:c4:ab:f1:3b:22:72:50:f2:da:c3:db:23:8d:19: a5:9a:a4:a6:6a:46:8b:e0:a3:1c:8c:c1:9f:61:b1:46:b7:17: df:60:ce:36:ec:5b:e9:23:e7:2b:58:bd:8d:b7:ab:d2:fd:ef: 22:0f:0c:16:e7:9a:ce:5d:8e:e3:9f:3f:cd:bd:e7:1d:64:b3: 55:44:34:72:d3:f2:27:86:b8:69:2d:03:19:92:34:6a:07:80: 86:73:17:51:24:56:b7:cc:f3:dc:13:6c:8c:b7:ac:9f:59:24: 24:28:01:ea:2d:3a:14:cc:f7:1f:90:6a:f3:85:14:c1:65:47: 97:86:63:a8:9e:9e:89:a6:d9:0a:f4:e5:34:ee:6a:3f:81:60: d7:14:ae:66:38:6f:1f:92:81:c1:a0:d3:0c:81:38:c1:6e:74: e0:63:d2:ae:aa:c8:7d:e2:a8:c1:d1:8d:7d:b6:f5:41:a8:3c: 9d:70:55:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwNTMxMDUxNDI1WhcNMjUwNjA3MDUxNDI1WjAYMRYwFAYD VQQDEw02ODNhOTAzMi0yZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR9RW9y3yQu3b+Gxgbvf5kK112DrTIRwwYuVxkFh5dHTY0fmEQG0y97ZfyRs EqXwwCB9XuWHa1vUECqwIud1Mw6sH00l2Kj4F//t9pGP+IuH8DIWid9agY8QXfUJ oTlL2lbr8U16Qke5iz6/OeKHatjNC1zUySTXDT+sHr6TOJEUZj6NbDtSxAQMVKSI 9XFBxiLW9YCY2M3HYT8e2c8oee/b6PvFI4FKymgu+5cKbE8mAE3xp8IaFkpQsho7 NBZpG/krXO/EklQRLjo69c4c7e3W5eRkFcfI2YRBXyGdHFw5wJFXPdIo+JXhlv/P Upjsu96hKll82VRMeAfqVScDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQUnwmG C2i6LD9hVtYgb671OvXYMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4YwOUjTu71w/8xUT3VkJXGy/pV8qZI8dxQ+hWJ5UTIbyvA98aTVNt TIoWmuOi4vYULeVAlN++YsIcPv8PoXAWxK/L4FQ5rdID5XJixKvxOyJyUPLaw9sj jRmlmqSmakaL4KMcjMGfYbFGtxffYM427FvpI+crWL2Nt6vS/e8iDwwW55rOXY7j nz/NvecdZLNVRDRy0/InhrhpLQMZkjRqB4CGcxdRJFa3zPPcE2yMt6yfWSQkKAHq LToUzPcfkGrzhRTBZUeXhmOonp6JptkK9OU07mo/gWDXFK5mOG8fkoHBoNMMgTjB bnTgY9Kuqsh94qjB0Y19tvVBqDydcFUL -----END CERTIFICATE-----Generated at Sat May 31 16:39:55 2025 by rpki-client