$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: NsBNZlrQQuQAMwxCjtUZftvjYoS0dJJqRDoaNkl9kcQ= Subject key identifier: 88:D6:95:1E:FF:33:27:E3:BB:6E:17:27:E1:0B:38:B2:5F:57:B1:F7 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 0136 Signing time: Sat 19 Jul 2025 04:42:54 +0000 Manifest this update: Sat 19 Jul 2025 04:42:53 +0000 Manifest next update: Sat 26 Jul 2025 04:42:53 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: tsPIHo1JUaKOoAOUoya3PzM8LsMQ5+aT6JG9iF6bqRI=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Jul 19 04:42:53 2025 GMT Not After : Jul 26 04:42:53 2025 GMT Subject: CN=687b224d-a94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:a2:71:bf:b2:59:4a:73:43:b2:51:f5:27: fb:7e:ba:26:cd:3f:2b:13:a9:81:ce:76:1d:36:88: 31:bc:a0:c8:83:73:62:98:76:2f:0b:b8:f7:37:3f: 06:a5:6b:a1:3f:dd:38:b2:16:a9:6a:14:d6:2b:54: bc:cc:95:d5:64:10:b6:97:30:42:ff:e2:92:6d:10: b0:dc:43:85:fb:4d:aa:2a:14:59:cf:d3:a1:d4:9e: ef:49:5e:73:78:57:50:bc:a1:37:6a:4d:f5:9f:3b: d4:64:be:7f:be:7b:90:13:f9:c9:a0:77:08:74:26: e2:fa:c3:b9:c7:24:72:b2:a0:f1:87:4c:11:6c:1f: 93:0d:7d:82:20:9e:9e:79:ad:ce:33:6d:c6:e3:d0: f2:1f:de:e1:d7:5e:f9:79:86:c9:24:ed:cf:17:23: c1:e6:b6:5a:80:9f:79:a1:9f:35:26:8f:f4:85:90: 28:39:2d:97:29:63:77:b9:80:ba:e9:19:17:65:bb: ef:f3:cd:24:97:ec:8b:6f:f8:c6:4f:5f:af:66:0b: 45:05:1d:ac:5c:f6:d9:0b:ae:f1:fe:79:22:e0:a1: a9:ab:28:c8:0c:ad:4e:5c:e7:73:ae:30:2f:ba:9e: 1e:53:7d:64:29:13:0a:04:1f:cc:00:12:ea:fa:b8: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:95:1E:FF:33:27:E3:BB:6E:17:27:E1:0B:38:B2:5F:57:B1:F7 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:42:57:6f:c9:c9:e1:bf:2b:18:bc:2d:c0:a8:f8:4f:b7:79: 97:43:05:28:f3:f7:5e:e5:2b:6f:9e:1d:db:bd:57:c9:f1:56: 62:0c:a1:6f:f0:fb:5e:77:3e:19:f8:13:99:ad:1d:74:06:21: 99:34:39:6e:19:4d:5e:52:ca:6a:b5:51:5f:46:e6:5e:c9:f0: bd:c3:df:9a:29:3c:75:f6:03:61:21:b2:35:dc:75:10:6b:fb: de:d1:36:f6:f6:ee:75:51:80:31:9b:ca:88:b0:82:27:94:74: 79:ac:f1:22:6f:72:43:73:2b:a1:3c:83:8b:af:13:9f:2b:44: 11:02:d5:fe:aa:ae:7d:30:21:c6:72:92:94:b1:38:90:56:d6: 1f:2d:0f:43:d1:a7:1b:b1:08:db:f1:c6:07:aa:56:69:ed:55: 42:77:db:ba:39:67:2d:f0:77:3f:f2:8b:02:b9:6d:4c:05:ea: 9e:6c:ca:57:d8:78:64:0e:1f:25:e8:40:4e:f4:7c:17:ac:f1: 88:e2:0b:5f:5f:05:08:ff:00:6a:80:79:7c:9c:86:e8:fb:eb: cd:31:a8:fb:72:ec:b5:5a:a5:50:1a:df:ca:fd:61:3f:72:2d: db:ef:7a:fd:b9:6c:5d:fb:d1:08:3e:03:2b:50:c4:34:f4:6e: a0:90:c4:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwNzE5MDQ0MjUzWhcNMjUwNzI2MDQ0MjUzWjAYMRYwFAYD VQQDEw02ODdiMjI0ZC1hOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyCicb+yWUpzQ7JR9Sf7fromzT8rE6mBznYdNogxvKDIg3NimHYvC7j3Nz8G pWuhP904shapahTWK1S8zJXVZBC2lzBC/+KSbRCw3EOF+02qKhRZz9Oh1J7vSV5z eFdQvKE3ak31nzvUZL5/vnuQE/nJoHcIdCbi+sO5xyRysqDxh0wRbB+TDX2CIJ6e ea3OM23G49DyH97h1175eYbJJO3PFyPB5rZagJ95oZ81Jo/0hZAoOS2XKWN3uYC6 6RkXZbvv880kl+yLb/jGT1+vZgtFBR2sXPbZC67x/nki4KGpqyjIDK1OXOdzrjAv up4eU31kKRMKBB/MABLq+ri4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjWlR7/ Myfju24XJ+ELOLJfV7H3MB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+QldvycnhvysYvC3AqPhPt3mXQwUo8/de5Stvnh3bvVfJ8VZiDKFv 8Ptedz4Z+BOZrR10BiGZNDluGU1eUspqtVFfRuZeyfC9w9+aKTx19gNhIbI13HUQ a/ve0Tb29u51UYAxm8qIsIInlHR5rPEib3JDcyuhPIOLrxOfK0QRAtX+qq59MCHG cpKUsTiQVtYfLQ9D0acbsQjb8cYHqlZp7VVCd9u6OWct8Hc/8osCuW1MBeqebMpX 2HhkDh8l6EBO9HwXrPGI4gtfXwUI/wBqgHl8nIbo++vNMaj7cuy1WqVQGt/K/WE/ ci3b73r9uWxd+9EIPgMrUMQ09G6gkMTr -----END CERTIFICATE-----Generated at Sun Jul 20 03:31:03 2025 by rpki-client