$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json) Hash identifier: LwZudOk4qDAe0OyNM9vxVWRZNnVh9ijbkne2AoXdYqQ= Subject key identifier: CF:9E:D1:E4:1E:7D:90:CA:A9:BF:28:2D:29:DF:27:0B:DC:25:97:9C Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft Manifest number: 1D16 Signing time: Sun 20 Jul 2025 16:11:12 +0000 Manifest this update: Sun 20 Jul 2025 16:11:11 +0000 Manifest next update: Sun 27 Jul 2025 16:11:11 +0000 Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: WFLob8bQWyTXI9BZl9PTAfhgUYcb2gDhcqWn5YkXQEw=) 2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=) 3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=) 4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7455 (0x1d1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: Jul 20 16:11:11 2025 GMT Not After : Jul 27 16:11:11 2025 GMT Subject: CN=687d1520-f11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:f6:98:a5:c8:f3:16:d7:50:86:a3:1f:06: fe:4f:85:22:a6:83:e7:18:c4:5b:f0:d6:ff:80:9e: f2:42:ad:90:07:fd:7d:aa:46:d6:12:ab:60:2a:31: ce:f6:a4:75:0b:61:d1:26:39:6c:b3:63:3f:18:14: 6f:e5:4b:1e:f6:86:21:d6:85:34:dd:45:7f:d5:3c: 15:3b:b2:31:44:2b:3e:2e:e3:06:33:05:36:cf:bd: af:24:56:01:c3:ac:1d:75:08:36:6b:18:1b:a6:c7: a4:9e:14:91:3f:a6:f3:70:69:47:5d:75:dd:5a:a6: a4:e8:59:eb:49:2e:89:8c:60:21:0b:62:0e:c6:77: 68:4c:2e:46:ee:af:b3:1b:84:31:f7:0c:48:23:76: 75:ca:48:86:c6:7e:80:8e:0e:22:8d:a4:7e:5c:b4: e4:d9:a9:7d:d9:35:da:a4:7f:38:f2:81:24:49:b2: ad:5c:8b:5d:98:45:68:c6:57:92:32:84:8c:56:a9: fd:6a:14:ee:03:42:31:0f:14:a5:da:80:06:8a:04: 46:39:76:07:32:77:72:9c:38:98:2c:45:1a:00:a5: af:73:e8:f5:54:bf:e4:ed:46:1b:b5:1d:ac:47:14: 55:09:13:29:bf:0e:bf:16:f1:11:f9:81:16:5f:57: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9E:D1:E4:1E:7D:90:CA:A9:BF:28:2D:29:DF:27:0B:DC:25:97:9C X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:94:76:d0:46:a9:14:22:87:35:42:e8:c7:62:f9:0b:c4:6a: ce:7f:24:3e:4e:58:5a:2d:bd:31:21:eb:31:e3:88:63:29:f5: bc:b0:63:df:cf:cf:58:9d:a5:9a:25:3a:5c:15:e9:6a:46:3e: 4c:72:6b:1c:be:a6:8e:df:1c:c4:66:5b:91:83:b3:8e:64:0a: bb:79:55:8f:f1:2d:1c:fd:20:06:05:c1:b7:3c:0c:27:69:e9: a5:e1:0d:ef:17:4a:cf:c2:0f:7c:1a:76:cd:26:38:cb:cd:b9: c9:19:5e:03:7c:13:d5:35:b3:04:df:73:0a:e5:82:1d:6f:4e: 64:9c:2b:81:a6:e4:94:d4:cb:27:aa:03:fa:79:2b:b9:a5:72: 90:d8:09:71:71:01:68:8d:34:57:36:49:12:c3:b9:93:3f:af: 7f:bf:aa:fa:a6:4e:4a:5f:35:2b:d5:7c:6b:f9:bd:d2:78:e2: db:a3:d5:be:42:03:3b:d3:c9:9e:60:70:04:3f:85:ba:0a:75: 2f:80:cf:11:42:a4:93:2a:24:0b:e3:95:ee:e8:43:45:8e:27: 36:66:f6:88:ed:ca:b8:81:49:74:12:30:0b:ec:be:1d:48:91: 0d:dd:47:88:b6:51:d4:da:5c:d7:73:1b:1f:98:c2:3d:d3:09: b0:6b:8e:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjUwNzIwMTYxMTExWhcNMjUwNzI3MTYxMTExWjAYMRYwFAYD VQQDEw02ODdkMTUyMC1mMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwj2mKXI8xbXUIajHwb+T4UipoPnGMRb8Nb/gJ7yQq2QB/19qkbWEqtgKjHO 9qR1C2HRJjlss2M/GBRv5Use9oYh1oU03UV/1TwVO7IxRCs+LuMGMwU2z72vJFYB w6wddQg2axgbpseknhSRP6bzcGlHXXXdWqak6FnrSS6JjGAhC2IOxndoTC5G7q+z G4Qx9wxII3Z1ykiGxn6Ajg4ijaR+XLTk2al92TXapH848oEkSbKtXItdmEVoxleS MoSMVqn9ahTuA0IxDxSl2oAGigRGOXYHMndynDiYLEUaAKWvc+j1VL/k7UYbtR2s RxRVCRMpvw6/FvER+YEWX1fp9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+e0eQe fZDKqb8oLSnfJwvcJZecMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqlHbQRqkUIoc1QujHYvkLxGrOfyQ+TlhaLb0xIesx44hjKfW8sGPf z89YnaWaJTpcFelqRj5McmscvqaO3xzEZluRg7OOZAq7eVWP8S0c/SAGBcG3PAwn aeml4Q3vF0rPwg98GnbNJjjLzbnJGV4DfBPVNbME33MK5YIdb05knCuBpuSU1Msn qgP6eSu5pXKQ2AlxcQFojTRXNkkSw7mTP69/v6r6pk5KXzUr1Xxr+b3SeOLbo9W+ QgM708meYHAEP4W6CnUvgM8RQqSTKiQL45Xu6ENFjic2ZvaI7cq4gUl0EjAL7L4d SJEN3UeItlHU2lzXcxsfmMI90wmwa47t -----END CERTIFICATE-----Generated at Mon Jul 21 06:58:46 2025 by rpki-client