$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft File: rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json) Hash identifier: O8UJUsiE0HdvKcOT+2CNrN3Zkw0GOmhHk2isUrnbT9c= Subject key identifier: 00:4F:8A:DB:57:96:92:32:84:C4:01:F7:91:A5:24:6B:C8:C5:0E:24 Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33 Certificate issuer: /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433 Certificate serial: 0F08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft Manifest number: 0EFF Signing time: Tue 22 Jul 2025 17:47:24 +0000 Manifest this update: Tue 22 Jul 2025 17:47:24 +0000 Manifest next update: Tue 29 Jul 2025 17:47:24 +0000 Files and hashes: 1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: P6QspARcLISNZ9GK10tJ4B3XfB0QSAUKib3Hl5B34OM=) 2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3848 (0xf08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433 Validity Not Before: Jul 22 17:47:24 2025 GMT Not After : Jul 29 17:47:24 2025 GMT Subject: CN=687fceac-a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:44:8d:89:6f:a9:c0:0e:87:dc:2f:3a:58: a8:1b:fe:39:84:12:a2:7f:2f:e3:a9:61:10:f7:f7: 0a:0c:82:0e:5c:49:bf:5c:e6:39:d8:4f:31:0e:04: 49:6d:f4:71:ab:93:6e:f7:7c:62:84:7d:93:38:89: 7c:67:1d:d9:d1:06:22:7c:4b:ea:c9:ea:90:45:ea: 1c:02:98:07:b0:6c:df:c1:7b:74:ea:77:36:67:99: 38:78:a2:bf:f2:4e:bc:04:a3:70:eb:3b:3b:b0:22: c8:cc:ab:29:39:f0:95:bd:d0:11:73:29:ff:a2:35: 14:45:fe:69:a5:5a:cb:95:e7:36:ea:7a:ce:4a:17: 3d:c0:b2:a8:92:13:c8:7f:05:54:80:dd:60:fa:17: 42:f4:38:00:10:83:66:c0:5f:15:9e:ab:b2:a8:fd: 7e:f6:39:dd:fb:97:46:95:cd:d2:9f:f9:43:de:46: a6:51:ca:57:bb:7d:77:55:fd:9b:f0:f9:0e:3c:73: ae:44:7a:eb:c1:98:e1:12:e7:c9:ab:54:6c:4f:f9: 0c:78:7d:42:50:14:aa:e0:37:d5:91:d8:88:4a:9f: eb:98:7f:e9:52:9e:96:1a:e7:75:0f:9f:a9:c3:d3: 6e:25:e4:0d:95:7a:86:b5:e7:f7:0b:84:3b:66:6d: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4F:8A:DB:57:96:92:32:84:C4:01:F7:91:A5:24:6B:C8:C5:0E:24 X509v3 Authority Key Identifier: keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:95:51:1c:db:9e:74:f6:c8:ca:e4:c0:9d:47:bf:86:99:6b: 6b:af:8c:49:4a:0a:b0:b9:c7:a2:48:ca:f6:2f:bc:9c:37:66: 99:10:eb:6b:db:b9:06:35:1d:80:57:9f:ed:76:10:77:6e:0e: 1d:c6:0c:a3:cd:c0:eb:1f:b3:04:7e:60:8d:3d:d6:53:1b:a6: c7:20:ca:af:3f:e9:38:cd:d6:65:43:d1:03:86:9a:c8:2b:42: e0:c4:b0:b3:ea:43:6e:13:cf:4f:ac:36:2e:31:38:7e:e4:3d: d1:52:5c:b8:eb:9b:70:9f:2a:40:d1:27:d2:fa:d1:80:8f:c7: 90:af:89:19:20:2a:d8:9b:f0:c7:29:a9:b3:62:34:f4:44:25: f3:fd:d1:a0:ea:b5:f2:27:7d:fc:3e:e8:69:21:3b:c7:5e:07: fb:37:82:5a:29:a3:ce:d1:13:49:52:d5:35:eb:25:56:0e:e4: de:70:c7:43:09:88:f8:f4:45:ad:8c:24:66:eb:eb:1c:18:f1: b6:5a:2b:3e:cc:2e:d6:b2:cc:f9:a7:e8:3b:6e:0f:fc:e5:7a: 3e:f1:05:65:81:bd:84:12:59:4c:09:cd:0b:62:6b:c3:19:95: 42:b3:2c:a8:38:35:30:2f:02:23:d3:c1:ad:dd:6e:1e:bf:1b: 0f:a9:bf:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5 NDY5NTU0MzMwHhcNMjUwNzIyMTc0NzI0WhcNMjUwNzI5MTc0NzI0WjAYMRYwFAYD VQQDEw02ODdmY2VhYy1hMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMxEjYlvqcAOh9wvOlioG/45hBKify/jqWEQ9/cKDIIOXEm/XOY52E8xDgRJ bfRxq5Nu93xihH2TOIl8Zx3Z0QYifEvqyeqQReocApgHsGzfwXt06nc2Z5k4eKK/ 8k68BKNw6zs7sCLIzKspOfCVvdARcyn/ojUURf5ppVrLlec26nrOShc9wLKokhPI fwVUgN1g+hdC9DgAEINmwF8VnquyqP1+9jnd+5dGlc3Sn/lD3kamUcpXu313Vf2b 8PkOPHOuRHrrwZjhEufJq1RsT/kMeH1CUBSq4DfVkdiISp/rmH/pUp6WGud1D5+p w9NuJeQNlXqGtef3C4Q7Zm396wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABPittX lpIyhMQB95GlJGvIxQ4kMB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKlVEc25509sjK5MCdR7+GmWtrr4xJSgqwuceiSMr2L7ycN2aZEOtr 27kGNR2AV5/tdhB3bg4dxgyjzcDrH7MEfmCNPdZTG6bHIMqvP+k4zdZlQ9EDhprI K0LgxLCz6kNuE89PrDYuMTh+5D3RUly465twnypA0SfS+tGAj8eQr4kZICrYm/DH KamzYjT0RCXz/dGg6rXyJ338PuhpITvHXgf7N4JaKaPO0RNJUtU16yVWDuTecMdD CYj49EWtjCRm6+scGPG2Wis+zC7Wssz5p+g7bg/85Xo+8QVlgb2EEllMCc0LYmvD GZVCsyyoODUwLwIj08Gt3W4evxsPqb+h -----END CERTIFICATE-----Generated at Thu Jul 24 12:15:53 2025 by rpki-client