$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: TARDM42r/AFaNCd07rMEwfEVvKnsBH5Ds56TSZ7zhNQ= Subject key identifier: E1:26:51:AC:BF:90:1E:C6:51:DF:09:C6:C6:3E:66:58:95:93:F6:D4 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 01F4 Signing time: Mon 21 Jul 2025 02:32:23 +0000 Manifest this update: Mon 21 Jul 2025 02:32:22 +0000 Manifest next update: Mon 28 Jul 2025 02:32:22 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: jDjcKlk5c29S7Uu1i77LKbEYrE1OieMJ0q2NpawTLTQ=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: Jul 21 02:32:22 2025 GMT Not After : Jul 28 02:32:22 2025 GMT Subject: CN=687da6b7-1470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:68:d3:9b:dc:c1:21:61:7c:89:04:45:68: 32:98:8d:2a:62:f2:b7:f7:71:5b:18:46:28:29:d9: f9:1d:82:e6:15:bf:de:6e:85:3a:b4:cf:0e:b9:47: 6e:97:d7:42:bc:82:24:df:64:79:e7:a5:8a:06:17: 35:07:81:b4:3a:f2:9b:f4:9a:b6:d7:10:14:7f:db: af:58:7b:f8:8f:ed:b7:84:5b:a5:6f:ee:2b:ef:45: 50:0d:81:2e:08:98:d5:6b:c5:2b:83:f0:0d:27:e0: 76:fe:aa:37:3a:87:34:17:97:d9:42:e8:9f:62:30: 1e:d9:ee:47:ae:b9:a4:12:cb:6b:29:4c:f1:b8:80: 44:66:40:15:10:69:b7:d1:d2:a1:5e:40:72:49:05: fb:e3:f9:f1:db:bd:08:e8:a0:53:f3:1e:be:17:88: b8:55:12:43:da:b3:7e:40:ea:04:ed:3f:94:98:9f: 40:48:cb:fe:3a:55:78:15:6c:9e:97:e8:a2:c4:98: 57:79:5a:0f:6f:99:cd:e3:e8:c6:24:61:61:62:88: 25:70:33:16:bc:f0:45:28:57:ad:d6:06:80:68:39: 44:8c:b2:a1:91:81:90:e6:34:e7:d0:67:dd:94:92: 0e:46:09:ab:33:d3:94:0f:ed:e0:2d:7c:0a:c6:d5: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:26:51:AC:BF:90:1E:C6:51:DF:09:C6:C6:3E:66:58:95:93:F6:D4 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:e0:e9:bf:24:d3:e9:f6:f1:7a:55:95:f6:52:c3:65:9d: 58:69:45:7e:ff:97:b9:fb:c8:02:34:b9:1e:a5:7a:44:90:9e: 49:30:e0:82:27:d3:9d:1b:5b:71:af:bc:cc:ce:d6:6b:05:a1: 24:1b:cf:84:38:8c:2b:71:af:e7:24:72:5c:1f:e7:2f:dc:51: a9:03:8a:b4:3d:c7:37:e1:08:14:a3:60:7b:e7:a5:60:c3:8e: b4:9b:6b:6a:dc:e4:2e:6b:dd:c9:e4:c2:3a:08:f9:b6:6e:7d: c0:95:4c:9f:91:1e:06:52:a1:f6:ce:05:ac:ea:ca:af:b2:fb: 7e:09:4f:49:36:39:6c:6d:ba:fe:ab:a3:36:f9:1c:28:57:4c: 46:cf:83:a0:5f:69:00:eb:a2:5c:b4:a5:91:ae:f6:9d:fc:d4: 49:6d:aa:02:5c:13:16:a6:76:4f:fd:80:b2:0f:c2:8b:4f:7e: 6d:04:d9:bc:ce:fc:4a:e2:c9:47:f3:e0:e9:c6:17:42:9b:ac: 66:ab:5f:71:73:48:64:d0:d6:38:b3:98:cb:a9:8d:d1:76:5e: 9b:2b:90:a8:df:85:8e:1d:2b:6c:50:63:5e:80:a0:88:be:c2: fa:6a:03:7c:e9:a4:07:7a:d3:56:8d:92:e2:47:37:d7:0d:36: e8:3a:79:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUwNzIxMDIzMjIyWhcNMjUwNzI4MDIzMjIyWjAYMRYwFAYD VQQDEw02ODdkYTZiNy0xNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzFo05vcwSFhfIkERWgymI0qYvK393FbGEYoKdn5HYLmFb/eboU6tM8OuUdu l9dCvIIk32R556WKBhc1B4G0OvKb9Jq21xAUf9uvWHv4j+23hFulb+4r70VQDYEu CJjVa8Urg/ANJ+B2/qo3Ooc0F5fZQuifYjAe2e5HrrmkEstrKUzxuIBEZkAVEGm3 0dKhXkBySQX74/nx270I6KBT8x6+F4i4VRJD2rN+QOoE7T+UmJ9ASMv+OlV4FWye l+iixJhXeVoPb5nN4+jGJGFhYoglcDMWvPBFKFet1gaAaDlEjLKhkYGQ5jTn0Gfd lJIORgmrM9OUD+3gLXwKxtVJkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEmUay/ kB7GUd8JxsY+ZliVk/bUMB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3eDpvyTT6fbxelWV9lLDZZ1YaUV+/5e5+8gCNLkepXpEkJ5JMOCC J9OdG1txr7zMztZrBaEkG8+EOIwrca/nJHJcH+cv3FGpA4q0Pcc34QgUo2B756Vg w460m2tq3OQua93J5MI6CPm2bn3AlUyfkR4GUqH2zgWs6sqvsvt+CU9JNjlsbbr+ q6M2+RwoV0xGz4OgX2kA66JctKWRrvad/NRJbaoCXBMWpnZP/YCyD8KLT35tBNm8 zvxK4slH8+DpxhdCm6xmq19xc0hk0NY4s5jLqY3Rdl6bK5Co34WOHStsUGNegKCI vsL6agN86aQHetNWjZLiRzfXDTboOnlI -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:41 2025 by rpki-client