$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: neUUEmpYLSf5tbyhRjsRw1YATnivoiQd16a/lp1u34s= Subject key identifier: 2A:1C:E1:F1:0D:6A:F1:C8:30:C4:AB:83:B6:FB:F0:49:70:D6:A2:43 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 11AF Signing time: Sun 20 Jul 2025 17:13:11 +0000 Manifest this update: Sun 20 Jul 2025 17:13:11 +0000 Manifest next update: Sun 27 Jul 2025 17:13:11 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: kb/rG7wS3ZYdZquNcSJ5P7VQGmGKmwWr3MaZFwlZFw4=) 2: 8152A64441CC11F0B9232057C4F9AE02.roa (hash: uYLFrXFeM2q4JrBsK51uNU2aBWkGjwj5M1ulBMDb/Ps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4533 (0x11b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Jul 20 17:13:11 2025 GMT Not After : Jul 27 17:13:11 2025 GMT Subject: CN=687d23a7-6a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:66:db:ae:02:0e:d5:5d:34:61:4f:d1:8b: 61:17:b7:0b:e7:ea:1e:9c:0a:e8:d3:1d:ab:9e:ad: 4c:cf:ae:20:74:ae:e5:5e:66:c2:3d:20:63:7f:4a: 57:7c:f4:c2:81:13:af:2c:a8:1b:2c:72:cf:bf:71: 9b:1c:5a:85:3b:58:c5:ad:e1:9f:b3:3b:e3:0e:58: 75:f4:0e:31:e2:06:c1:3c:77:dc:dc:f7:32:ae:22: 0a:13:b3:33:82:bf:d9:0a:e4:2a:a5:57:11:61:c8: 2e:69:9d:e3:fa:23:31:52:15:85:eb:d8:65:72:b9: 69:0b:a6:8a:de:87:a3:6a:1e:46:47:83:52:60:5a: 14:b3:21:19:14:df:37:6f:64:07:20:2c:03:48:14: 4e:0a:83:11:49:1c:e1:e6:31:f2:b1:a1:c9:0c:11: 3f:16:7d:9d:92:69:88:ec:79:61:2f:30:e0:81:df: 4a:99:e7:86:01:fa:4f:76:d0:3d:24:3f:c0:c3:6e: 8d:11:36:20:c8:b0:81:af:55:20:76:90:d6:8e:50: 57:ba:c0:15:d6:11:c3:47:8d:54:53:22:7c:33:22: ff:12:1b:53:17:39:10:0c:e5:01:5f:a5:d2:a4:63: 74:23:b2:dc:78:aa:99:66:d9:19:a9:20:81:3c:fb: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:E1:F1:0D:6A:F1:C8:30:C4:AB:83:B6:FB:F0:49:70:D6:A2:43 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:55:7e:99:38:66:f5:8c:dc:21:14:cc:1c:8c:67:c4:79:5a: 5b:c8:01:a4:0f:86:b6:16:04:52:75:a2:39:be:23:16:6f:fa: b8:df:28:02:9f:07:c7:e6:92:c8:97:ec:b7:1c:de:36:4b:43: 72:65:37:72:50:7a:41:a9:34:52:2d:6a:85:56:6e:c0:0a:bd: c2:e5:36:28:b2:ff:fd:c6:49:a1:8c:38:0a:49:28:53:3f:c0: 92:3e:0d:a5:16:c5:21:b5:7d:83:cd:e1:79:30:85:76:a0:e4: fc:05:6e:0c:3e:99:8b:67:7e:5f:2e:94:4f:1a:8a:77:20:e6: af:8e:b3:15:63:4f:6a:ca:11:35:3e:02:cf:94:6c:08:41:0d: 01:7f:8c:a7:07:fe:bf:e4:8f:5c:47:30:25:dd:59:51:78:8e: 62:f6:42:6f:e9:d9:9c:45:03:83:98:a3:d7:e4:13:7f:00:5b: a6:6e:0b:78:79:c2:95:f3:4e:20:56:c4:86:4b:cd:09:61:00: 4d:9b:7b:04:44:da:2b:07:be:bc:47:7c:37:7c:2e:c1:b3:73: 19:ff:a9:c5:50:8b:49:e8:6d:13:67:50:76:38:d6:2b:df:61: 9b:a8:5b:8b:cf:a3:0d:b3:08:62:72:fd:3e:48:be:d5:58:59: e6:13:79:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwNzIwMTcxMzExWhcNMjUwNzI3MTcxMzExWjAYMRYwFAYD VQQDEw02ODdkMjNhNy02YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArthm264CDtVdNGFP0YthF7cL5+oenAro0x2rnq1Mz64gdK7lXmbCPSBjf0pX fPTCgROvLKgbLHLPv3GbHFqFO1jFreGfszvjDlh19A4x4gbBPHfc3PcyriIKE7Mz gr/ZCuQqpVcRYcguaZ3j+iMxUhWF69hlcrlpC6aK3oejah5GR4NSYFoUsyEZFN83 b2QHICwDSBROCoMRSRzh5jHysaHJDBE/Fn2dkmmI7HlhLzDggd9KmeeGAfpPdtA9 JD/Aw26NETYgyLCBr1UgdpDWjlBXusAV1hHDR41UUyJ8MyL/EhtTFzkQDOUBX6XS pGN0I7LceKqZZtkZqSCBPPv5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoc4fEN avHIMMSrg7b78Elw1qJDMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTVX6ZOGb1jNwhFMwcjGfEeVpbyAGkD4a2FgRSdaI5viMWb/q43ygC nwfH5pLIl+y3HN42S0NyZTdyUHpBqTRSLWqFVm7ACr3C5TYosv/9xkmhjDgKSShT P8CSPg2lFsUhtX2DzeF5MIV2oOT8BW4MPpmLZ35fLpRPGop3IOavjrMVY09qyhE1 PgLPlGwIQQ0Bf4ynB/6/5I9cRzAl3VlReI5i9kJv6dmcRQODmKPX5BN/AFumbgt4 ecKV804gVsSGS80JYQBNm3sERNorB768R3w3fC7Bs3MZ/6nFUItJ6G0TZ1B2ONYr 32GbqFuLz6MNswhicv0+SL7VWFnmE3lj -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:27 2025 by rpki-client