$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json) Hash identifier: H3d46vQw2bOLF8Dx5jll/E8nmNBj3mV1VvN59H59dzs= Subject key identifier: 0E:36:55:5C:4D:F9:57:D5:A8:58:30:24:06:6B:BC:7C:E9:B1:66:4F Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft Manifest number: 079E Signing time: Tue 22 Jul 2025 21:43:35 +0000 Manifest this update: Tue 22 Jul 2025 21:43:35 +0000 Manifest next update: Tue 29 Jul 2025 21:43:35 +0000 Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: tI+oaJKPY0V9WqKWTAzf1fAzLYuNCnzYcJFMhuwEtIw=) 2: 99551366132E11F0B588DB49C4F9AE02.roa (hash: C/qz1ChdaO2nCWQ6vWErfavJlbarpNHZxeEMEmeDtWI=) 3: 98657342132E11F0B588DB49C4F9AE02.roa (hash: u++8Du0OcgpVvi9qZC9/QhCSfa3UqwhLillltKBdVHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Jul 22 21:43:35 2025 GMT Not After : Jul 29 21:43:35 2025 GMT Subject: CN=68800607-115c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:67:f9:7d:c7:55:36:1c:4c:a5:9c:5f:a6: d5:76:cf:4a:f3:84:82:fe:92:54:e1:15:7d:b1:56: d8:fb:de:14:ad:90:9c:ec:43:71:ee:a5:8a:a4:5c: a0:5c:7f:a3:e9:20:8f:7e:88:4f:cb:6d:7c:9f:f7: 42:60:16:e9:d4:ca:84:e4:1f:5f:aa:1e:cc:2c:cc: ea:12:54:9a:68:98:60:03:2b:bd:95:d7:20:f7:a9: f7:29:c4:d7:14:61:b6:7d:c1:50:a7:ba:d6:89:15: b9:df:38:f8:c6:fe:96:d4:74:f0:52:e3:aa:1b:e8: b2:60:83:24:82:75:4e:32:a1:95:11:e0:f1:88:40: 88:09:ef:de:a8:6c:9a:34:24:d1:f6:5a:0a:a3:d3: 68:ba:b6:1f:29:1f:0f:a1:04:7e:4a:5a:9f:b4:25: 95:93:c8:af:66:02:a8:b1:1e:4c:35:f0:82:11:1e: c2:6d:03:0f:98:3e:73:a1:c6:f3:a0:86:df:1b:94: ec:b9:aa:d2:f8:ca:d1:2f:ba:6b:7d:0c:93:1d:c7: 2b:a9:95:b8:84:f5:3f:24:0b:5e:0f:1c:14:dd:c1: 9b:68:aa:70:6a:39:4b:a6:90:b2:b8:b5:ec:5f:4f: 87:de:94:a0:f0:92:11:02:0b:21:f8:93:58:01:7e: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:36:55:5C:4D:F9:57:D5:A8:58:30:24:06:6B:BC:7C:E9:B1:66:4F X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:fd:ef:da:9a:c9:52:d2:a2:38:80:c2:14:18:99:31:71:6a: 85:9d:f8:a3:ac:81:df:5d:33:91:ad:83:59:4e:43:8f:15:fa: 52:f7:37:b5:21:48:bb:9d:10:7f:46:58:74:4f:14:4d:39:8a: 45:d5:fd:de:d6:13:87:07:85:38:dc:d4:6c:9f:3f:42:c9:e7: e6:2c:a7:79:dd:07:5f:68:6f:16:99:33:7d:a3:ae:58:4d:9e: fc:ee:42:e9:0c:2b:64:47:05:aa:74:e3:70:89:33:6a:f7:d7: 49:93:20:8b:7a:aa:a1:37:c0:a7:a2:f5:7b:8c:55:3f:f3:7b: 15:38:6a:a2:f9:29:c1:61:90:eb:ca:84:76:59:96:fa:92:2e: 5a:ad:8d:95:c1:32:34:44:0c:3a:eb:b5:ab:00:fe:63:7c:b9: 2e:19:c7:9c:5c:03:e9:82:3d:ef:f5:84:58:83:92:ed:b3:e8: a2:69:c4:82:50:91:d0:b7:8a:8b:26:77:38:ad:a7:cb:73:1c: ed:a1:74:b7:42:22:70:9d:6a:18:f5:41:87:94:01:d5:7a:20: df:8b:93:8d:de:2b:d1:f7:bb:74:db:10:e1:3d:61:94:8c:d7: cd:7b:56:af:8d:48:52:cc:60:48:0f:de:3e:4d:a7:a7:3e:04: 63:51:09:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjUwNzIyMjE0MzM1WhcNMjUwNzI5MjE0MzM1WjAYMRYwFAYD VQQDEw02ODgwMDYwNy0xMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMxn+X3HVTYcTKWcX6bVds9K84SC/pJU4RV9sVbY+94UrZCc7ENx7qWKpFyg XH+j6SCPfohPy218n/dCYBbp1MqE5B9fqh7MLMzqElSaaJhgAyu9ldcg96n3KcTX FGG2fcFQp7rWiRW53zj4xv6W1HTwUuOqG+iyYIMkgnVOMqGVEeDxiECICe/eqGya NCTR9loKo9NourYfKR8PoQR+SlqftCWVk8ivZgKosR5MNfCCER7CbQMPmD5zocbz oIbfG5TsuarS+MrRL7prfQyTHccrqZW4hPU/JAteDxwU3cGbaKpwajlLppCyuLXs X0+H3pSg8JIRAgsh+JNYAX5SvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA42VVxN +VfVqFgwJAZrvHzpsWZPMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI RWpZMUJhQ21UZE8zTlhib28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/e/amslS0qI4gMIUGJkxcWqFnfijrIHfXTORrYNZTkOPFfpS9ze1 IUi7nRB/Rlh0TxRNOYpF1f3e1hOHB4U43NRsnz9CyefmLKd53QdfaG8WmTN9o65Y TZ787kLpDCtkRwWqdONwiTNq99dJkyCLeqqhN8CnovV7jFU/83sVOGqi+SnBYZDr yoR2WZb6ki5arY2VwTI0RAw667WrAP5jfLkuGcecXAPpgj3v9YRYg5Lts+iiacSC UJHQt4qLJnc4rafLcxztoXS3QiJwnWoY9UGHlAHVeiDfi5ON3ivR97t02xDhPWGU jNfNe1avjUhSzGBID94+TaenPgRjUQmc -----END CERTIFICATE-----Generated at Thu Jul 24 12:08:47 2025 by rpki-client