$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: pgPdkGYwIWc4UNbL8VMTUrypVEVw/x3JEZhhv9kOgAs= Subject key identifier: 28:1E:34:EF:00:B5:23:5F:84:96:C0:D9:E6:D2:DF:32:55:5A:E7:E4 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 054E Signing time: Fri 18 Jul 2025 23:50:46 +0000 Manifest this update: Fri 18 Jul 2025 23:50:45 +0000 Manifest next update: Fri 25 Jul 2025 23:50:45 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: gZs94IceVPp+kHMV3kg719aSIwZWBE8d9y1Ci30NXQs=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: MPM/fDIm7iSq8h5ZOB3ujJWuioyZyPhojtnDvre1LOg=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Jul 18 23:50:45 2025 GMT Not After : Jul 25 23:50:45 2025 GMT Subject: CN=687addd5-a047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:ff:6d:03:6e:85:74:0a:3d:bd:bf:e4:5a: fe:10:fb:16:47:6d:66:8d:0a:e5:35:ec:ef:59:a9: f8:14:f5:c9:10:a6:5d:82:ee:38:61:f4:d7:b2:15: 39:15:ab:62:f6:3a:e2:13:44:c4:97:2c:d8:6c:f5: 95:28:a9:ee:44:44:18:9e:30:41:16:4c:a1:c8:b5: 18:1a:27:92:23:f8:f4:3f:fd:9d:ab:8d:6f:8a:a2: bd:26:c2:f8:0f:3f:18:ae:3c:f4:b8:d1:b9:e6:a6: 81:df:d4:f4:b9:f8:b8:7b:73:af:86:44:89:3b:ce: f6:64:bd:15:94:9a:15:db:02:60:fc:e1:7b:b2:48: 59:66:76:97:da:d4:52:64:ae:cf:8e:9b:66:c6:b5: 5c:9d:6d:fe:58:63:ba:4d:aa:e3:42:cf:55:67:d8: 8a:79:d9:a8:e8:8d:f4:ae:7e:44:ca:fc:41:52:07: 89:79:3d:c3:53:88:0b:27:c6:73:67:bf:3a:ee:6f: c2:a0:3b:6c:08:eb:10:68:9d:39:13:b3:fd:fe:e5: de:13:32:ef:cd:c6:cc:6c:ce:8b:01:32:62:28:2f: 1b:f6:e2:31:ad:7e:25:6c:44:ba:52:40:08:3b:aa: 1c:7b:6c:75:cb:fb:89:21:45:23:5d:93:2b:e3:ab: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1E:34:EF:00:B5:23:5F:84:96:C0:D9:E6:D2:DF:32:55:5A:E7:E4 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:79:c4:39:a9:53:ae:be:28:3d:8d:7c:d5:d0:b3:1e:0d:a2: a4:0c:06:83:0d:c5:7e:ec:54:c5:a3:c4:bc:70:1b:f2:6d:20: 59:05:55:bb:57:e3:ad:93:82:73:0a:c4:5a:7c:bd:e9:59:37: 0c:07:36:84:6d:d1:91:95:fb:28:dd:c9:37:a3:06:f4:0a:80: d5:7a:00:54:0d:fa:03:46:f2:7a:4f:45:e3:db:e7:c7:9c:b6: 62:4d:57:78:5a:1e:23:74:e0:31:59:5e:c1:fc:07:24:33:ff: e6:34:12:cf:1c:77:53:df:54:53:71:df:3c:25:4c:b7:71:ba: ad:41:15:a3:fd:5a:e1:54:29:5b:3c:93:6f:6d:89:fc:4a:8f: af:4e:58:f4:e9:cf:cf:0a:b0:aa:85:49:d4:c2:99:5e:f1:df: df:49:79:cc:71:ff:0a:67:74:4e:fd:bd:4a:f9:e4:ff:a4:d2: 21:22:e7:ec:81:cf:da:c5:63:26:1e:dd:f7:de:10:e3:a6:a6: 39:f9:15:22:c2:c0:05:25:1d:e7:ae:50:0f:32:7c:9b:cc:83: a9:10:c0:9b:f0:a6:46:15:1d:a9:85:08:af:5a:7d:c7:31:99: db:d6:f1:dc:ce:4a:9e:80:7a:61:d7:74:eb:c4:48:86:07:0e: 33:d0:37:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwNzE4MjM1MDQ1WhcNMjUwNzI1MjM1MDQ1WjAYMRYwFAYD VQQDEw02ODdhZGRkNS1hMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArev/bQNuhXQKPb2/5Fr+EPsWR21mjQrlNezvWan4FPXJEKZdgu44YfTXshU5 Fati9jriE0TElyzYbPWVKKnuREQYnjBBFkyhyLUYGieSI/j0P/2dq41viqK9JsL4 Dz8Yrjz0uNG55qaB39T0ufi4e3OvhkSJO872ZL0VlJoV2wJg/OF7skhZZnaX2tRS ZK7PjptmxrVcnW3+WGO6TarjQs9VZ9iKedmo6I30rn5EyvxBUgeJeT3DU4gLJ8Zz Z7867m/CoDtsCOsQaJ05E7P9/uXeEzLvzcbMbM6LATJiKC8b9uIxrX4lbES6UkAI O6oce2x1y/uJIUUjXZMr46uazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgeNO8A tSNfhJbA2ebS3zJVWufkMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ecQ5qVOuvig9jXzV0LMeDaKkDAaDDcV+7FTFo8S8cBvybSBZBVW7 V+Otk4JzCsRafL3pWTcMBzaEbdGRlfso3ck3owb0CoDVegBUDfoDRvJ6T0Xj2+fH nLZiTVd4Wh4jdOAxWV7B/AckM//mNBLPHHdT31RTcd88JUy3cbqtQRWj/VrhVClb PJNvbYn8So+vTlj06c/PCrCqhUnUwple8d/fSXnMcf8KZ3RO/b1K+eT/pNIhIufs gc/axWMmHt333hDjpqY5+RUiwsAFJR3nrlAPMnybzIOpEMCb8KZGFR2phQivWn3H MZnb1vHczkqegHph13TrxEiGBw4z0DdR -----END CERTIFICATE-----Generated at Sun Jul 20 10:00:20 2025 by rpki-client