$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft File: dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft (raw, json) Hash identifier: IenHWumlHc2jsVCTco3d8l4Ar6cCdGYloiD//wREYyY= Subject key identifier: 1C:F6:67:95:1C:7B:3B:34:5A:9B:6E:8C:85:A5:1D:60:A3:BF:D9:1A Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft Manifest number: 07C4 Signing time: Mon 30 Jun 2025 21:20:37 +0000 Manifest this update: Mon 30 Jun 2025 21:20:36 +0000 Manifest next update: Mon 07 Jul 2025 21:20:36 +0000 Files and hashes: 1: dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl (hash: JFPjiwQiyZo5899DvrNDrT6bRMcDHG1VkA7iWmPcInY=) 2: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (hash: 6YyrwyMT54ZUSKQODwlJAe9xJg6+Kacl1A+Uqo8vrKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Jun 30 21:20:36 2025 GMT Not After : Jul 7 21:20:36 2025 GMT Subject: CN=6862ffa4-527b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:51:10:e7:94:76:8b:53:3a:a5:68:bc:79: 07:f5:f9:7b:06:78:3f:85:c9:8a:d6:70:f7:d2:0e: 85:ae:16:8b:cd:ba:41:70:b4:11:b9:36:18:3b:4c: 24:3d:dd:07:18:88:66:21:a6:7e:c3:d2:30:6d:c5: 45:7e:8e:6d:18:c2:11:e7:07:bb:34:ad:6b:cf:fe: f3:1c:bc:b6:a2:17:02:3e:b4:09:5d:7b:71:fc:5c: ce:4b:c1:4c:6d:8d:56:e5:19:f2:ee:85:42:9a:92: d5:36:43:39:5d:3c:1f:5c:82:9c:a6:11:c6:de:ae: 2c:fa:cd:ce:b9:cb:df:bf:f8:d4:dd:d8:6b:ff:97: e4:23:a8:d9:07:cc:d8:22:f6:4d:e0:1b:5d:9e:33: ce:b4:67:8f:0d:d1:99:26:70:89:16:c3:94:62:2b: d0:0d:c2:a6:5f:16:dd:73:ec:26:f6:9d:cd:9b:81: dd:44:30:e9:0d:3c:2f:18:95:dc:73:4b:1e:70:0e: fb:56:e2:0f:fe:58:1c:55:99:ad:b6:fd:89:d3:94: 00:f5:6f:fe:8f:0b:95:47:65:dd:d7:d8:7e:a8:e5: b9:a9:c6:ac:eb:15:c7:3a:65:e2:90:b0:76:d1:6a: e9:f3:59:8a:d0:9c:7f:54:8c:45:38:88:11:42:a3: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:67:95:1C:7B:3B:34:5A:9B:6E:8C:85:A5:1D:60:A3:BF:D9:1A X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:bf:b3:0c:23:ec:63:fe:f0:16:a3:aa:36:da:3d:14:42: 77:38:1c:cc:5b:a4:ce:ff:22:35:73:e0:59:d2:ba:0c:0a:43: 95:b0:78:44:c9:d6:44:4e:2a:b2:08:fa:aa:fd:05:1f:2f:06: d4:35:8e:c7:1a:8c:59:04:b0:80:03:b4:45:f2:43:22:e8:de: fc:58:fe:eb:e8:91:67:3b:df:8f:61:e3:cc:24:d9:8b:21:44: 56:88:ae:ef:65:5f:4e:85:ea:73:79:54:63:22:e6:4f:ad:80: b9:74:bb:0c:1e:d3:dc:c2:00:b2:ce:da:a6:d2:b8:e4:e7:69: 12:c0:a8:2f:c0:1f:02:9a:9a:f9:cf:a8:cc:62:e3:8b:35:bd: b7:ef:32:74:d5:64:94:65:a8:46:68:c7:23:b8:98:17:f7:fe: fc:aa:a2:d8:44:73:50:04:c9:0d:37:e2:a9:7c:b6:ad:a4:fe: 55:8d:45:b5:d8:8f:a7:a7:1c:06:e9:bc:e9:1e:a9:40:e8:f5: 1c:24:43:80:a2:7d:00:de:7b:51:f3:fe:fa:f8:bb:12:f2:d2: 3c:ab:20:49:20:3d:4c:8b:a8:e8:0a:d7:1e:67:7a:2a:15:43: f7:8e:e2:8b:61:81:db:57:74:bd:50:7c:6a:59:53:29:d3:c1: c8:8a:d9:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUwNjMwMjEyMDM2WhcNMjUwNzA3MjEyMDM2WjAYMRYwFAYD VQQDEw02ODYyZmZhNC01MjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjpREOeUdotTOqVovHkH9fl7Bng/hcmK1nD30g6FrhaLzbpBcLQRuTYYO0wk Pd0HGIhmIaZ+w9IwbcVFfo5tGMIR5we7NK1rz/7zHLy2ohcCPrQJXXtx/FzOS8FM bY1W5Rny7oVCmpLVNkM5XTwfXIKcphHG3q4s+s3Oucvfv/jU3dhr/5fkI6jZB8zY IvZN4BtdnjPOtGePDdGZJnCJFsOUYivQDcKmXxbdc+wm9p3Nm4HdRDDpDTwvGJXc c0secA77VuIP/lgcVZmttv2J05QA9W/+jwuVR2Xd19h+qOW5qcas6xXHOmXikLB2 0Wrp81mK0Jx/VIxFOIgRQqOBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz2Z5Uc ezs0WptujIWlHWCjv9kaMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzEwQS85OTE2OTg0QUZEQUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFV bU1ucVo0aF8zQkJVRjIyZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ob+zDCPsY/7wFqOqNto9FEJ3OBzMW6TO/yI1c+BZ0roMCkOVsHhE ydZETiqyCPqq/QUfLwbUNY7HGoxZBLCAA7RF8kMi6N78WP7r6JFnO9+PYePMJNmL IURWiK7vZV9OhepzeVRjIuZPrYC5dLsMHtPcwgCyztqm0rjk52kSwKgvwB8Cmpr5 z6jMYuOLNb237zJ01WSUZahGaMcjuJgX9/78qqLYRHNQBMkNN+KpfLatpP5VjUW1 2I+npxwG6bzpHqlA6PUcJEOAon0A3ntR8/76+LsS8tI8qyBJID1Mi6joCtceZ3oq FUP3juKLYYHbV3S9UHxqWVMp08HIitlJ -----END CERTIFICATE-----Generated at Tue Jul 1 19:30:03 2025 by rpki-client