$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: T2XxIAnaoDDPzzLzWQb9wFbpAFNfWkq7Yr2alt1Mo8Y= Subject key identifier: C3:29:6D:A1:DA:10:D3:7D:3B:F1:3A:D9:5C:6C:6C:63:52:8D:D7:CD Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 015A Signing time: Sat 19 Jul 2025 04:17:49 +0000 Manifest this update: Sat 19 Jul 2025 04:17:49 +0000 Manifest next update: Sat 26 Jul 2025 04:17:49 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: jjscciFNnW8BstJ6jnmQk4KXtDETM0SGTKPFffp+wcM=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Jul 19 04:17:49 2025 GMT Not After : Jul 26 04:17:49 2025 GMT Subject: CN=687b1c6d-97c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bc:89:bb:8f:f0:fb:42:c0:e8:ba:76:7a:37: 01:36:2c:27:e8:7a:04:ed:bf:d5:da:d5:79:60:44: a1:92:cc:44:f6:8f:01:c4:84:a7:fc:41:f0:74:ce: 21:ac:36:28:eb:19:35:dd:5e:00:5f:b5:6c:6f:8d: 22:d2:6c:41:66:f8:10:cb:70:d0:ec:f3:06:22:5e: 41:a3:c0:bc:90:61:88:b0:c6:b8:7a:a6:42:4a:66: 05:d8:a0:f0:ba:aa:a5:62:2d:d5:69:67:40:e6:f2: 65:c0:f6:55:c2:5b:33:f0:f0:43:76:49:af:d7:d2: 89:11:80:32:2b:63:8e:30:81:3a:fa:e9:d4:4b:18: 94:9e:24:0e:15:6b:1a:d5:cc:18:a2:38:87:7e:28: 4c:e7:87:9d:db:e7:21:24:30:f1:71:fd:99:89:0d: 8f:7b:da:28:18:fd:66:43:10:e1:6a:a7:9f:49:40: 1d:0f:be:13:0b:88:8a:07:2b:a3:1d:57:82:16:ad: 24:bf:2b:cc:ab:59:77:5c:0b:a7:6b:81:3e:c6:3d: f3:28:92:90:f9:ac:9c:90:29:18:83:cd:08:6b:a7: 30:bb:86:b5:c3:af:04:52:92:b1:9e:08:3c:9e:ac: 63:82:58:65:5c:14:a8:13:d2:c4:43:b8:04:1e:94: 2c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:29:6D:A1:DA:10:D3:7D:3B:F1:3A:D9:5C:6C:6C:63:52:8D:D7:CD X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:eb:7c:86:39:6e:13:6b:f8:a5:03:6c:8a:83:c2:b3:97:54: 6e:21:d3:d7:a1:62:43:f3:af:58:40:1f:cc:11:6f:98:64:6a: 59:ce:df:46:19:be:d1:26:e2:af:60:43:25:78:eb:ba:0d:22: ba:d5:ea:e6:81:91:45:33:fc:e4:18:27:37:c4:e2:e6:f0:a8: 4b:3c:af:c8:60:6d:57:c1:ab:76:b8:03:46:38:60:c3:af:cd: 2c:08:25:64:a3:81:61:5a:d8:d9:bd:92:1f:dc:57:26:f6:e1: c7:d2:7d:18:6b:f5:86:4d:36:16:ce:1a:90:88:3d:40:e6:f9: c8:61:64:40:e2:d7:fb:70:1d:cf:a7:13:28:42:f2:16:b1:e1: cf:aa:46:07:c8:59:b6:a1:68:82:07:f6:94:d1:ee:6a:00:72: 75:47:2c:0d:32:28:de:a3:8f:ed:06:0c:7a:4b:7f:98:58:d1: 3f:dc:f7:3e:00:99:f7:9d:a2:b7:61:e4:df:2f:d4:8c:05:14: 2e:3e:95:1c:fd:3a:7b:80:57:b0:0f:06:48:d0:9e:cb:b0:66: ab:ab:fd:5e:c4:ec:e4:65:05:81:bb:a4:7d:9f:15:32:f2:6a: 68:0e:ed:bb:68:7d:b6:2c:eb:d9:75:bf:88:f5:81:57:d0:c3: e8:39:69:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwNzE5MDQxNzQ5WhcNMjUwNzI2MDQxNzQ5WjAYMRYwFAYD VQQDEw02ODdiMWM2ZC05N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ryJu4/w+0LA6Lp2ejcBNiwn6HoE7b/V2tV5YEShksxE9o8BxISn/EHwdM4h rDYo6xk13V4AX7Vsb40i0mxBZvgQy3DQ7PMGIl5Bo8C8kGGIsMa4eqZCSmYF2KDw uqqlYi3VaWdA5vJlwPZVwlsz8PBDdkmv19KJEYAyK2OOMIE6+unUSxiUniQOFWsa 1cwYojiHfihM54ed2+chJDDxcf2ZiQ2Pe9ooGP1mQxDhaqefSUAdD74TC4iKByuj HVeCFq0kvyvMq1l3XAuna4E+xj3zKJKQ+ayckCkYg80Ia6cwu4a1w68EUpKxngg8 nqxjglhlXBSoE9LEQ7gEHpQs6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMpbaHa ENN9O/E62VxsbGNSjdfNMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW63yGOW4Ta/ilA2yKg8Kzl1RuIdPXoWJD869YQB/MEW+YZGpZzt9G Gb7RJuKvYEMleOu6DSK61ermgZFFM/zkGCc3xOLm8KhLPK/IYG1Xwat2uANGOGDD r80sCCVko4FhWtjZvZIf3Fcm9uHH0n0Ya/WGTTYWzhqQiD1A5vnIYWRA4tf7cB3P pxMoQvIWseHPqkYHyFm2oWiCB/aU0e5qAHJ1RywNMijeo4/tBgx6S3+YWNE/3Pc+ AJn3naK3YeTfL9SMBRQuPpUc/Tp7gFewDwZI0J7LsGarq/1exOzkZQWBu6R9nxUy 8mpoDu27aH22LOvZdb+I9YFX0MPoOWkz -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:25 2025 by rpki-client