$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft File: rJEs76dYoRmcG-3gaxSp6jmJdfc.mft (raw, json) Hash identifier: JvoOWpztCOPZzo8GELXBd3ObolMgVDoXEGFPlgvK0f8= Subject key identifier: 3D:6F:AA:14:88:1C:EA:52:58:0E:2B:E2:16:A4:E6:4B:5E:5A:66:98 Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft Manifest number: 0207 Signing time: Fri 25 Jul 2025 02:33:55 +0000 Manifest this update: Fri 25 Jul 2025 02:33:55 +0000 Manifest next update: Fri 01 Aug 2025 02:33:55 +0000 Files and hashes: 1: rJEs76dYoRmcG-3gaxSp6jmJdfc.crl (hash: 5KiQUS8sy2PRbtI2W1b/a1tuNhf48hvyqhKqlwQV+pI=) 2: 38E02CDC04EE11EE89900876C4F9AE02.roa (hash: A+Aqziv+l/eva8pdjPnNDIFSBuh+7kSFLQzVhKrXMMo=) 3: EE0C206E96FF11ED87B56F84C4F9AE02.roa (hash: nWteaBso5vE4iYgh/So+lkoA6pmFNyiwA37OG5bT7wo=) 4: EF1E23F896FF11ED87B56F84C4F9AE02.roa (hash: I9Pcv4IIcwx4nw81OeoGh2DbUKg+x99yv1jaTnfKTew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7 Validity Not Before: Jul 25 02:33:55 2025 GMT Not After : Aug 1 02:33:55 2025 GMT Subject: CN=6882ed13-307a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d1:87:13:87:a8:8d:57:a4:92:16:1c:5b:d9: bb:d3:a3:23:04:7d:27:68:2c:45:70:3f:a0:fe:af: 68:38:c5:12:e6:4a:af:14:29:0d:b7:a5:27:d6:6a: f0:a9:f1:da:6d:31:84:a8:17:27:43:b5:e7:f4:e9: 71:1b:83:e3:3d:49:57:09:5d:96:2a:3b:04:e6:43: 1c:8f:9d:c4:59:3b:dc:70:e1:cf:2c:3d:ec:3f:b3: 0d:94:30:63:b0:d3:79:61:15:fb:2f:c9:18:4e:09: 4c:dc:f9:a8:34:08:de:d3:89:c7:03:a7:7d:ac:e9: c2:d1:a3:34:6e:12:29:7f:9a:05:8e:45:9b:84:fa: 2e:17:29:9c:95:bd:d3:ff:9e:cd:21:70:0a:11:6e: 42:44:08:ac:0e:65:30:22:f8:9e:8a:4f:76:bb:94: 2c:34:c4:68:14:5f:f5:76:a7:1e:d8:81:92:49:58: 56:cc:f9:f9:5e:f3:79:52:4f:18:df:7d:94:5a:cf: d3:39:ce:fc:b1:4a:80:5b:eb:dd:8d:d6:3f:75:b3: 29:02:e5:22:2e:46:b3:d0:8f:0e:39:a5:ad:42:9b: 9f:36:28:7b:d4:06:f6:96:d4:cd:6e:f3:14:70:c0: c1:7d:f4:83:37:f7:7f:30:b0:cd:e9:6b:94:c1:0d: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6F:AA:14:88:1C:EA:52:58:0E:2B:E2:16:A4:E6:4B:5E:5A:66:98 X509v3 Authority Key Identifier: keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:5c:89:6c:e8:15:16:91:f6:b5:5e:a1:a4:00:4f:b4:e0: 6d:8f:30:91:a9:22:cd:04:96:89:1f:6c:e9:fd:df:39:57:42: 68:b0:be:30:94:d3:63:ac:55:83:3e:cc:e7:ef:93:20:ae:de: a8:36:7c:4c:2c:2f:69:14:f6:11:29:3f:70:ec:a1:4d:fe:e3: 4b:93:d7:5c:22:93:1e:35:85:9f:ef:a5:00:f5:87:6c:c5:b8: 38:0b:a5:eb:5e:91:96:d4:f1:42:01:6c:54:cc:39:2a:fc:b0: 83:c1:8f:20:22:d2:65:2f:4e:4b:76:63:51:ce:65:e5:58:95: 96:84:2a:3a:3e:67:c4:6b:12:e0:63:02:7b:7b:58:be:7f:25: f1:70:12:a1:af:6b:e3:79:a2:0b:4e:0b:38:6d:04:48:5a:25: 18:54:a8:80:ec:b5:bd:43:b3:47:4c:a5:8c:d9:8b:1e:7d:20: 8d:b2:ef:0e:88:c6:bb:45:cf:cf:00:a4:9d:43:11:eb:0b:41: d5:2b:7d:15:e4:91:61:35:da:fc:cd:78:8e:ba:73:b4:79:e4: af:03:5e:61:63:c8:91:77:9e:24:77:5a:ad:3f:c9:4e:e4:36: 1e:58:e3:42:da:51:08:0f:22:9f:3a:0f:04:88:21:6d:e1:bd: ed:e2:0d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB Mzk4OTc1RjcwHhcNMjUwNzI1MDIzMzU1WhcNMjUwODAxMDIzMzU1WjAYMRYwFAYD VQQDEw02ODgyZWQxMy0zMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NGHE4eojVekkhYcW9m706MjBH0naCxFcD+g/q9oOMUS5kqvFCkNt6Un1mrw qfHabTGEqBcnQ7Xn9OlxG4PjPUlXCV2WKjsE5kMcj53EWTvccOHPLD3sP7MNlDBj sNN5YRX7L8kYTglM3PmoNAje04nHA6d9rOnC0aM0bhIpf5oFjkWbhPouFymclb3T /57NIXAKEW5CRAisDmUwIvieik92u5QsNMRoFF/1dqce2IGSSVhWzPn5XvN5Uk8Y 332UWs/TOc78sUqAW+vdjdY/dbMpAuUiLkaz0I8OOaWtQpufNih71Ab2ltTNbvMU cMDBffSDN/d/MLDN6WuUwQ14qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1vqhSI HOpSWA4r4hak5kteWmaYMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjg1Qy8wQTY4QjExODYwOEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9S bWNHLTNnYXhTcDZqbUpkZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBablyJbOgVFpH2tV6hpABPtOBtjzCRqSLNBJaJH2zp/d85V0JosL4w lNNjrFWDPszn75Mgrt6oNnxMLC9pFPYRKT9w7KFN/uNLk9dcIpMeNYWf76UA9Yds xbg4C6XrXpGW1PFCAWxUzDkq/LCDwY8gItJlL05LdmNRzmXlWJWWhCo6PmfEaxLg YwJ7e1i+fyXxcBKhr2vjeaILTgs4bQRIWiUYVKiA7LW9Q7NHTKWM2YsefSCNsu8O iMa7Rc/PAKSdQxHrC0HVK30V5JFhNdr8zXiOunO0eeSvA15hY8iRd54kd1qtP8lO 5DYeWONC2lEIDyKfOg8EiCFt4b3t4g1x -----END CERTIFICATE-----Generated at Fri Jul 25 13:12:22 2025 by rpki-client