$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json) Hash identifier: 8S/BohJEwPsVvEKYgCCovnQFEXPb/7JKF2hHzt7ZN7E= Subject key identifier: BE:69:95:42:44:A2:B8:F5:B1:54:AE:31:33:49:E7:3A:E1:6D:22:40 Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft Manifest number: 0700 Signing time: Fri 18 Jul 2025 22:18:55 +0000 Manifest this update: Fri 18 Jul 2025 22:18:54 +0000 Manifest next update: Fri 25 Jul 2025 22:18:54 +0000 Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: MVMHSAkahHK2ZgTRZ+PiVwm95ko0XAkKQm+ydlyie4c=) 2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: S6sSUQCmJtkaMtMbA1O0Mmg6DyeiEI+XUAJAroLQzw0=) 3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: 3GgLx+CbNEwoDetwa0xclFosAF0ThnHDNkGy9hkBwHY=) 4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: gFTQhXxxWg+vWFd9YUvmY8166bjE5yYi7F/AL03zQaU=) 5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: e4/df1ZKDr4aEamOFlzJbyomY0cdDHsDrVrwwMv17eI=) 6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: 4feN6gwvjlguQsUZ0+vuacffttVLy9DJIXoMNN8hWOI=) 7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: zplnnTYrDs6ATh1oYF/06orqoqHtQxFtplLwmc2mqPA=) 8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 53gHj/OrKFXtL8aMTpoTUjSuuGCGwdKOy6cQhgB55pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Jul 18 22:18:54 2025 GMT Not After : Jul 25 22:18:54 2025 GMT Subject: CN=687ac84e-da9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:81:28:4d:74:8d:6d:98:34:3d:15:88:d5:ec: ed:8c:7a:fb:ca:5e:a0:27:0a:a8:42:f2:5a:d6:6f: 5b:db:fd:7a:e2:47:cd:91:bf:8c:6d:10:97:c2:02: d6:4a:f8:4b:a6:92:db:00:b4:b4:cb:ec:ce:58:56: bf:1c:44:41:a0:fa:5c:64:c4:4f:62:16:b0:6b:f2: 5b:95:c0:93:81:9a:5b:eb:4f:92:46:b4:6f:73:74: 32:30:fe:f5:81:97:74:4b:20:cd:eb:cb:09:1e:ba: f4:ac:b7:a9:23:14:60:fd:e4:0e:39:96:02:56:07: 1e:cc:8e:75:04:fa:f0:15:69:60:f3:b7:ce:25:6e: e4:57:1f:14:5f:4b:f3:14:16:ec:63:d5:fd:35:7b: 3a:c6:3f:e1:26:01:26:f2:30:15:3c:c9:27:14:5b: 73:21:49:12:a9:f3:48:f2:95:14:c0:c4:5b:d7:54: 1f:fa:a7:3a:c0:46:7e:ea:d2:19:9e:99:19:59:b8: f0:d1:00:42:a4:c2:ef:61:e2:97:e5:34:d1:84:02: de:1a:d7:ff:4e:a5:08:12:a9:9a:62:b3:03:f3:c8: 9f:84:3d:9f:35:43:93:3c:ef:b1:26:b7:99:a6:fd: ae:d3:c0:bf:a7:34:2d:31:d7:16:91:67:02:87:fc: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:69:95:42:44:A2:B8:F5:B1:54:AE:31:33:49:E7:3A:E1:6D:22:40 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ba:63:35:86:a3:60:98:23:0f:4b:a9:fc:c2:d5:42:68:0e: a1:6d:8f:88:fb:8a:c9:4e:9f:0a:6c:9b:66:9a:c9:37:2e:b8: cb:6a:69:ed:c5:9d:95:79:08:f4:34:01:38:57:22:5a:ff:cb: 8f:9b:1f:6b:12:a6:9c:af:fd:45:9b:f9:49:53:bd:ee:28:1d: 4b:79:47:c4:88:22:8a:ad:83:92:75:0f:68:29:2d:75:86:8e: e7:bf:36:ba:5b:c4:2b:a2:01:4a:d9:3b:93:f4:34:2b:41:96: cf:56:7c:53:58:5f:a3:4c:b0:49:fc:cc:66:4c:08:72:2d:60: 69:59:85:d5:38:a8:bb:5f:87:63:ab:e3:3c:39:9b:48:fb:4c: 10:8f:19:f0:27:08:2e:4d:f6:aa:09:61:08:8f:43:f2:7c:ea: ba:8a:cd:4f:e9:db:66:12:26:fb:b9:92:c8:95:67:e6:71:79: 1f:c5:42:02:54:25:36:a4:4c:f3:b7:85:ee:8a:68:c3:d4:f5: fa:69:57:bb:8b:bf:9b:1d:24:6c:e9:9e:25:d6:46:96:fc:de: 14:3b:95:ef:e7:e8:3a:0c:6a:c5:52:d2:76:3a:df:2c:7b:66: 9d:53:a4:43:43:f8:e3:2e:93:d2:63:0a:4f:bb:60:01:ba:c5: 1d:48:af:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjUwNzE4MjIxODU0WhcNMjUwNzI1MjIxODU0WjAYMRYwFAYD VQQDEw02ODdhYzg0ZS1kYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoEoTXSNbZg0PRWI1eztjHr7yl6gJwqoQvJa1m9b2/164kfNkb+MbRCXwgLW SvhLppLbALS0y+zOWFa/HERBoPpcZMRPYhawa/JblcCTgZpb60+SRrRvc3QyMP71 gZd0SyDN68sJHrr0rLepIxRg/eQOOZYCVgcezI51BPrwFWlg87fOJW7kVx8UX0vz FBbsY9X9NXs6xj/hJgEm8jAVPMknFFtzIUkSqfNI8pUUwMRb11Qf+qc6wEZ+6tIZ npkZWbjw0QBCpMLvYeKX5TTRhALeGtf/TqUIEqmaYrMD88ifhD2fNUOTPO+xJreZ pv2u08C/pzQtMdcWkWcCh/xirQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5plUJE orj1sVSuMTNJ5zrhbSJAMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REYxRi9GNUNCNkU2QTVDNTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFB NXFnTndTN2tJdjZMYmpZX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVumM1hqNgmCMPS6n8wtVCaA6hbY+I+4rJTp8KbJtmmsk3LrjLamnt xZ2VeQj0NAE4VyJa/8uPmx9rEqacr/1Fm/lJU73uKB1LeUfEiCKKrYOSdQ9oKS11 ho7nvza6W8QrogFK2TuT9DQrQZbPVnxTWF+jTLBJ/MxmTAhyLWBpWYXVOKi7X4dj q+M8OZtI+0wQjxnwJwguTfaqCWEIj0PyfOq6is1P6dtmEib7uZLIlWfmcXkfxUIC VCU2pEzzt4XuimjD1PX6aVe7i7+bHSRs6Z4l1kaW/N4UO5Xv5+g6DGrFUtJ2Ot8s e2adU6RDQ/jjLpPSYwpPu2ABusUdSK9v -----END CERTIFICATE-----Generated at Sun Jul 20 19:05:50 2025 by rpki-client