$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: bX3o/fuhjwfirHRSJTxWVrOK7/n+EoIo6VlWlypccNA= Subject key identifier: FE:7C:05:AE:72:FB:37:AB:6C:7D:A5:DB:AA:B6:CD:9D:43:81:C6:A1 Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: CF Signing time: Sat 19 Jul 2025 05:52:43 +0000 Manifest this update: Sat 19 Jul 2025 05:52:43 +0000 Manifest next update: Sat 26 Jul 2025 05:52:43 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: bQBPq1UV82YoiQwkGM+zyZSsPj6wYox1VwoLZt4kDSA=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Jul 19 05:52:43 2025 GMT Not After : Jul 26 05:52:43 2025 GMT Subject: CN=687b32ab-a6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:c3:63:f8:fe:6b:8d:4e:f6:c2:13:63:8d: d8:0a:80:33:7a:8b:34:07:05:22:35:9c:98:6d:04: cb:7c:00:a5:5c:b1:b2:77:e2:76:60:17:22:f9:34: 58:ed:80:08:22:85:67:72:82:54:2a:4b:e5:77:34: ea:87:5e:ce:21:dd:22:42:d2:c1:71:75:6d:cf:f4: 2c:db:b7:45:54:a4:4a:b0:0b:35:11:d1:d8:1e:bc: e4:66:6b:b5:db:16:74:2c:ab:12:8d:5f:64:31:38: f6:53:34:37:8f:c0:5d:51:c3:84:60:b1:85:76:99: f4:54:73:f1:1e:1e:83:e5:4c:eb:f3:40:fe:9f:2b: f3:8e:d1:8f:7d:98:dd:e4:d9:ce:7c:2c:65:0c:45: a0:35:3e:21:58:34:c8:4b:54:d4:2f:37:4a:06:c4: 3b:34:7b:6b:f3:f6:15:06:90:9d:71:a4:27:90:9f: 6e:ae:a5:6c:7f:a0:7d:6b:0d:9f:ef:e2:f2:17:bc: 64:19:71:1b:2c:6a:d3:e4:f4:2e:ed:79:cc:1e:34: 19:54:12:cb:3d:6f:db:77:3e:06:8a:34:f1:0c:f1: ae:59:b4:8a:6a:5f:94:05:01:31:9b:d4:c4:fa:38: 6f:5d:30:ec:f2:7d:a7:f1:e4:18:bc:c6:4e:43:ad: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:05:AE:72:FB:37:AB:6C:7D:A5:DB:AA:B6:CD:9D:43:81:C6:A1 X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:8f:5e:31:18:93:90:10:38:0a:fa:30:7f:14:b5:84:c5: 60:aa:e0:4e:7c:67:10:36:6e:2c:40:fc:2f:2a:97:0d:40:49: 27:14:08:db:bc:f5:7e:82:8a:9b:15:c9:04:cf:f1:73:39:6a: 12:2b:ad:b4:f4:1c:86:b5:94:e9:46:2a:b0:f6:1c:2f:81:91: bb:2b:f7:fa:e4:99:56:da:2f:cd:40:11:08:a8:c0:54:6d:83: 0f:c9:60:7c:b8:3f:3f:bc:b8:d0:2a:a5:48:54:db:dc:1e:5f: 08:26:06:be:4b:99:f4:58:ca:0d:8a:ab:55:01:89:95:b3:85: 7c:16:52:f4:a0:07:56:98:c8:46:99:66:34:18:40:5d:20:b3: 0c:d2:37:1d:26:da:7f:c7:16:cc:3e:eb:53:4a:b7:c8:15:bd: 12:89:84:97:2b:6f:4d:43:8f:ab:13:d3:b1:fe:2d:86:8d:29: b3:5f:09:91:3f:1a:d0:3c:4f:11:10:f9:a4:84:53:20:56:63: 76:ec:7c:86:14:db:eb:51:e4:ed:3c:71:71:9f:09:be:df:67: f5:82:0a:38:a9:86:dc:fb:65:eb:8d:e0:ff:62:b2:66:85:32: b2:f4:a0:18:2c:63:20:55:de:21:71:4b:60:d3:eb:86:a9:12: a9:60:40:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwNzE5MDU1MjQzWhcNMjUwNzI2MDU1MjQzWjAYMRYwFAYD VQQDEw02ODdiMzJhYi1hNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MTDY/j+a41O9sITY43YCoAzeos0BwUiNZyYbQTLfAClXLGyd+J2YBci+TRY 7YAIIoVncoJUKkvldzTqh17OId0iQtLBcXVtz/Qs27dFVKRKsAs1EdHYHrzkZmu1 2xZ0LKsSjV9kMTj2UzQ3j8BdUcOEYLGFdpn0VHPxHh6D5Uzr80D+nyvzjtGPfZjd 5NnOfCxlDEWgNT4hWDTIS1TULzdKBsQ7NHtr8/YVBpCdcaQnkJ9urqVsf6B9aw2f 7+LyF7xkGXEbLGrT5PQu7XnMHjQZVBLLPW/bdz4GijTxDPGuWbSKal+UBQExm9TE +jhvXTDs8n2n8eQYvMZOQ63DuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP58Ba5y +zerbH2l26q2zZ1DgcahMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9Lo9eMRiTkBA4CvowfxS1hMVgquBOfGcQNm4sQPwvKpcNQEknFAjb vPV+goqbFckEz/FzOWoSK6209ByGtZTpRiqw9hwvgZG7K/f65JlW2i/NQBEIqMBU bYMPyWB8uD8/vLjQKqVIVNvcHl8IJga+S5n0WMoNiqtVAYmVs4V8FlL0oAdWmMhG mWY0GEBdILMM0jcdJtp/xxbMPutTSrfIFb0SiYSXK29NQ4+rE9Ox/i2GjSmzXwmR PxrQPE8REPmkhFMgVmN27HyGFNvrUeTtPHFxnwm+32f1ggo4qYbc+2XrjeD/YrJm hTKy9KAYLGMgVd4hcUtg0+uGqRKpYEC9 -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:46 2025 by rpki-client