$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft File: ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft (raw, json) Hash identifier: a6ColsPLZ5r7jAomfZmP+L/fn1whlKVIZYXgmT3FJdQ= Subject key identifier: D4:B8:35:A6:93:38:5D:F1:B9:A0:7A:59:73:61:CC:27:27:A4:2B:02 Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft Manifest number: 01C8 Signing time: Mon 21 Jul 2025 02:57:23 +0000 Manifest this update: Mon 21 Jul 2025 02:57:23 +0000 Manifest next update: Mon 28 Jul 2025 02:57:23 +0000 Files and hashes: 1: ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl (hash: tokzIfox1Vw+o2buqxG6wv41F1u2aVYUkla9AvA+n6Y=) 2: E816DFFAA90111ED867DA161C4F9AE02.roa (hash: J+hbcg1f000uZywitLiVEmVwojqXye5u/Ee0tXQliec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: Jul 21 02:57:23 2025 GMT Not After : Jul 28 02:57:23 2025 GMT Subject: CN=687dac93-a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:d9:4f:f5:0c:86:12:c5:e6:26:5f:ad:5d: 8d:99:23:a4:0f:33:df:36:97:d3:c9:a2:1f:af:ec: d6:20:b7:c2:90:b7:dc:e6:78:76:dd:6f:01:b4:f5: 39:4a:18:0f:dc:75:3e:ec:63:33:f5:e4:ca:a6:28: fb:19:6f:01:35:e9:f0:92:6c:7b:fb:d4:23:af:ea: da:de:f5:7d:95:51:b2:9e:44:40:bb:c7:66:9e:80: b8:5a:a9:4c:61:b9:02:72:2c:eb:49:a1:fb:05:ff: 6e:35:19:96:04:a1:f3:95:c8:81:00:26:ad:72:36: f8:20:c0:aa:32:30:7d:a3:d9:3b:6c:f6:de:38:d0: 68:dc:07:ca:0e:13:bc:39:39:02:a6:c8:27:53:62: 8d:35:23:e1:3b:68:ce:52:38:da:dd:5b:55:11:e2: 05:27:26:4d:9e:03:37:9a:80:8d:a3:19:bf:72:00: ef:66:17:22:17:17:ac:63:5f:fd:a9:b2:2c:65:b2: da:2d:c8:18:ed:20:0f:e9:55:f2:4a:9b:e1:4f:9d: dc:3f:d5:6e:ae:bc:f0:f7:87:71:0e:31:c3:3e:62: 46:54:71:ca:97:d1:d4:ec:f7:56:2b:27:4b:ab:12: 5a:2e:ba:55:24:53:bd:71:d4:87:73:41:b2:a6:68: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B8:35:A6:93:38:5D:F1:B9:A0:7A:59:73:61:CC:27:27:A4:2B:02 X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:12:d7:3b:c0:b0:ba:71:14:79:4a:76:bb:6f:7a:ce:e4:ce: b0:83:a2:30:33:b0:f8:80:26:85:21:7a:88:f9:a1:9d:ac:f8: ca:bd:e9:3b:79:95:23:64:5f:5a:86:46:da:9c:0c:97:35:5d: 16:b0:0d:96:bd:c3:8c:50:9e:37:64:80:98:4b:d5:57:87:da: 15:b3:4f:ee:9e:10:29:1a:22:1c:87:30:e3:0b:13:ed:76:ee: ed:57:f7:c8:f8:2a:38:93:91:a8:ba:83:ae:f8:de:06:9f:ab: 87:4b:42:fa:9f:7f:c5:ee:cb:b3:0f:cc:4e:14:f7:fd:6d:90: d0:d8:9c:ca:fc:ef:42:a6:0f:2a:9e:71:8b:27:80:78:5f:c2: 6f:41:bd:bb:74:d1:75:87:12:c9:d3:72:5b:a9:9d:6e:53:7b: d4:21:e5:e4:be:ae:c5:65:61:62:83:24:54:88:cb:95:4a:64: 15:03:40:87:98:0a:77:d9:13:2b:5f:92:21:9f:80:a1:29:2d: be:a3:00:eb:44:18:c2:24:0f:eb:27:35:bf:61:b5:83:08:cc: e2:19:9b:2c:77:df:1b:a0:84:81:99:40:0c:eb:0a:8a:88:40: e9:b9:ad:f0:df:0b:c9:5c:ef:ae:f2:df:7a:c5:b5:66:77:a6: dd:df:5f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjUwNzIxMDI1NzIzWhcNMjUwNzI4MDI1NzIzWjAYMRYwFAYD VQQDEw02ODdkYWM5My1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp73ZT/UMhhLF5iZfrV2NmSOkDzPfNpfTyaIfr+zWILfCkLfc5nh23W8BtPU5 ShgP3HU+7GMz9eTKpij7GW8BNenwkmx7+9Qjr+ra3vV9lVGynkRAu8dmnoC4WqlM YbkCcizrSaH7Bf9uNRmWBKHzlciBACatcjb4IMCqMjB9o9k7bPbeONBo3AfKDhO8 OTkCpsgnU2KNNSPhO2jOUjja3VtVEeIFJyZNngM3moCNoxm/cgDvZhciFxesY1/9 qbIsZbLaLcgY7SAP6VXySpvhT53cP9Vurrzw94dxDjHDPmJGVHHKl9HU7PdWKydL qxJaLrpVJFO9cdSHc0Gypmjr8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS4NaaT OF3xuaB6WXNhzCcnpCsCMB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTgyOC9EREY5MDA1QUE4RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2Jn cWRFUHV4N1o0ZE4wa2tjQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATEtc7wLC6cRR5Sna7b3rO5M6wg6IwM7D4gCaFIXqI+aGdrPjKvek7 eZUjZF9ahkbanAyXNV0WsA2WvcOMUJ43ZICYS9VXh9oVs0/unhApGiIchzDjCxPt du7tV/fI+Co4k5GouoOu+N4Gn6uHS0L6n3/F7suzD8xOFPf9bZDQ2JzK/O9Cpg8q nnGLJ4B4X8JvQb27dNF1hxLJ03JbqZ1uU3vUIeXkvq7FZWFigyRUiMuVSmQVA0CH mAp32RMrX5Ihn4ChKS2+owDrRBjCJA/rJzW/YbWDCMziGZssd98boISBmUAM6wqK iEDpua3w3wvJXO+u8t96xbVmd6bd31/Z -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:21 2025 by rpki-client