$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft File: epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json) Hash identifier: tTc7LlubwRGlgZ37vTSUht/Iksa5bCgSPcMmCY5Ytas= Subject key identifier: 0C:84:76:88:DA:20:79:D9:B0:E0:68:1E:11:8F:D5:6B:D0:EB:C1:62 Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft Manifest number: 34D1 Signing time: Fri 18 Jul 2025 14:22:49 +0000 Manifest this update: Fri 18 Jul 2025 14:22:48 +0000 Manifest next update: Fri 25 Jul 2025 14:22:48 +0000 Files and hashes: 1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: KtLEoKXUbTNGEmNx9E3A95fFfI8vnlcXYo811GIXyX0=) 2: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: a++99V+BelZ0iNzzfjfyt9kuXC1AHrcrB38W/RxxJBg=) 3: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: jIXmhGTsHnOLM/8Oki3QEi8c2FlMLFZ5ltRb0SYd+ig=) 4: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: qt+b79qUZeUfV9aMLkK2Vf0knDB1FC/92rGPVNLCE5Y=) 5: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: MRIxoftDwmp6WRJIoO9F8Xfh6zfeqVoYT85Plhiizjg=) 6: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: lJX0Rj0D2pXCWqSqPGBLqRXobNJsOmj1xve2tbokkqo=) 7: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: ucV0kVixfHpuy12BVYVN62sGm8utgsjQ/0NVbfikRis=) 8: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: 1HeD3vEPTet+037gaAO1k2WACoSTrjT1BrLUthDQvck=) 9: 8C9959CE060A11F08CBBE511C4F9AE02.roa (hash: Y12eqR4kENble50Bxruc9jwO/MdOCmjFkivTDaJk12E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A Validity Not Before: Jul 18 14:22:48 2025 GMT Not After : Jul 25 14:22:48 2025 GMT Subject: CN=687a58b9-c0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:61:75:75:56:db:d9:9d:36:73:60:b4:25: ee:88:a8:0b:2b:b0:d7:8e:8a:ad:c9:20:bf:65:7c: c5:41:1d:fc:df:27:89:7e:7f:f9:e4:2d:44:c7:a0: 2e:61:5e:cb:91:22:2a:f0:f0:27:c2:8e:54:fa:b9: 7c:22:b1:74:b3:35:6b:4b:cb:96:7a:19:e4:07:b4: b4:75:15:eb:b9:dc:11:1e:64:79:2e:43:c7:6f:c8: 2a:fc:88:8f:f0:18:d6:bf:e3:24:38:57:df:b3:a6: 87:6f:20:64:05:a4:f8:b0:1e:42:37:e8:28:9e:d3: db:de:dc:49:0b:2a:10:2e:cb:1b:4e:fc:2a:7e:af: 42:89:99:f3:20:e8:99:a0:fc:34:37:03:31:12:91: 3d:4e:03:c0:21:18:33:62:99:60:da:8e:da:6f:1b: 8d:01:a1:14:40:10:eb:25:46:6c:44:a7:e6:f6:0f: 51:82:0f:d0:a2:a6:c1:d0:47:ac:28:e7:82:03:d3: f0:12:58:d0:16:78:a5:e3:25:ad:4a:ed:27:dc:4c: 8e:ae:bc:ee:d7:5c:25:4c:f4:9f:fc:81:8e:3d:f8: 8b:0b:73:83:70:77:3e:f9:f2:e2:71:48:8b:fc:12: a7:df:a2:cc:44:2e:19:1e:4f:fa:3a:24:c9:3c:26: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:76:88:DA:20:79:D9:B0:E0:68:1E:11:8F:D5:6B:D0:EB:C1:62 X509v3 Authority Key Identifier: keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:5e:00:c9:cf:53:05:64:3c:ae:2b:14:eb:83:ff:75:20:36: 8d:3b:89:e6:1a:cb:9a:f7:b9:24:0f:65:3f:46:53:77:e7:b4: 6b:20:01:19:24:e7:c0:07:ae:e9:da:26:98:a2:74:fa:67:b6: d0:7c:25:ee:c9:64:26:10:e4:c8:ab:73:f9:94:ad:17:57:2c: f2:fe:9e:63:fc:b9:1b:20:64:38:ef:a2:99:e5:89:58:06:8c: be:ae:17:93:e7:ff:11:14:83:b4:70:c3:a5:aa:b3:cb:a8:15: 98:47:25:7e:ad:1a:aa:3e:bc:34:ab:a1:14:5e:de:1b:5b:7c: f1:80:a8:79:04:d7:af:3c:68:13:c9:15:03:ed:09:bd:9b:49: 7c:fe:b6:06:52:29:a1:53:e0:fa:ce:b6:ef:c4:7a:6c:1b:75: a9:35:7b:d6:1a:ef:30:97:5d:92:9f:ce:9b:3c:2c:22:36:4f: 62:71:79:0d:39:48:43:8d:87:c1:bd:4d:88:77:3a:f5:d7:49: 6b:24:34:12:9a:3f:db:1a:b7:38:23:70:88:69:7d:6c:29:ec: 4c:44:96:3d:ae:d6:5b:7f:6b:a0:a5:cd:bc:70:27:72:9c:1c: 3c:9d:f9:21:41:71:f9:19:15:1d:f0:12:4e:02:b0:af:89:f0: 33:c4:66:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG NzMzQTJGMUEwHhcNMjUwNzE4MTQyMjQ4WhcNMjUwNzI1MTQyMjQ4WjAYMRYwFAYD VQQDEw02ODdhNThiOS1jMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+JhdXVW29mdNnNgtCXuiKgLK7DXjoqtySC/ZXzFQR383yeJfn/55C1Ex6Au YV7LkSIq8PAnwo5U+rl8IrF0szVrS8uWehnkB7S0dRXrudwRHmR5LkPHb8gq/IiP 8BjWv+MkOFffs6aHbyBkBaT4sB5CN+gontPb3txJCyoQLssbTvwqfq9CiZnzIOiZ oPw0NwMxEpE9TgPAIRgzYplg2o7abxuNAaEUQBDrJUZsRKfm9g9Rgg/QoqbB0Ees KOeCA9PwEljQFnil4yWtSu0n3EyOrrzu11wlTPSf/IGOPfiLC3ODcHc++fLicUiL /BKn36LMRC4ZHk/6OiTJPCa7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyEdoja IHnZsOBoHhGP1WvQ68FiMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx MEttX21TVm9PNjczTTZMeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiXgDJz1MFZDyuKxTrg/91IDaNO4nmGsua97kkD2U/RlN357RrIAEZ JOfAB67p2iaYonT6Z7bQfCXuyWQmEOTIq3P5lK0XVyzy/p5j/LkbIGQ476KZ5YlY Boy+rheT5/8RFIO0cMOlqrPLqBWYRyV+rRqqPrw0q6EUXt4bW3zxgKh5BNevPGgT yRUD7Qm9m0l8/rYGUimhU+D6zrbvxHpsG3WpNXvWGu8wl12Sn86bPCwiNk9icXkN OUhDjYfBvU2Idzr110lrJDQSmj/bGrc4I3CIaX1sKexMRJY9rtZbf2ugpc28cCdy nBw8nfkhQXH5GRUd8BJOArCvifAzxGbx -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:59 2025 by rpki-client