$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: RmXrakC9tRASewF3GITtitWGKFfpt5e5524KVPzNCe4= Subject key identifier: 5A:EF:0B:8F:71:8C:CC:5F:78:10:DC:89:E2:46:61:F6:C5:64:8B:26 Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03AC Signing time: Sat 19 Jul 2025 01:09:08 +0000 Manifest this update: Sat 19 Jul 2025 01:09:07 +0000 Manifest next update: Sat 26 Jul 2025 01:09:07 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: gbkGLG8N2U9iu4LUkoMXmwESaDs27jXSOzFywvfahtk=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Jul 19 01:09:07 2025 GMT Not After : Jul 26 01:09:07 2025 GMT Subject: CN=687af033-fae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:a0:1b:55:68:5e:8d:65:e1:ac:22:93:6e: 2c:a3:83:c7:47:cd:cd:07:ae:54:e1:43:8d:57:e1: 4f:a5:49:42:c7:f1:82:5a:a3:3b:a3:e7:ca:57:fb: de:00:8c:a2:1c:54:33:53:f2:1f:83:4f:57:4b:72: a8:69:18:89:f5:ff:30:e4:06:7e:fb:d3:a6:31:42: 11:2a:95:fc:0b:f6:09:ec:a7:e1:33:0f:95:61:60: 9d:9a:0f:52:4c:33:61:b7:b2:34:5d:53:6b:5d:3f: 5b:48:a0:55:06:f8:1f:a6:90:d4:0f:c1:88:44:9d: 5d:c7:72:e0:8b:b8:b4:ce:02:ef:63:b6:80:f9:cf: f2:50:25:bc:e3:38:a6:16:ee:d7:f5:a4:a8:d5:4f: b8:f7:df:81:9a:69:e5:46:14:42:28:18:a2:e7:ae: 6e:2b:8e:7f:30:e7:67:78:ef:fa:67:bf:bd:14:f8: 31:e8:d5:ae:31:50:6f:9f:7e:1b:be:25:ce:09:f9: 0d:ef:6d:84:e4:11:07:c6:22:78:ad:8f:ce:35:41: 3e:21:f2:be:db:57:b2:e6:c1:09:3a:fa:38:0f:7a: e3:f7:bb:1c:19:f0:f8:79:1c:7f:0a:ab:e8:89:88: 7f:3a:23:c1:18:8f:dd:de:b5:07:69:63:27:77:8d: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:0B:8F:71:8C:CC:5F:78:10:DC:89:E2:46:61:F6:C5:64:8B:26 X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:a2:2a:b1:91:31:5d:7f:55:28:6e:c8:bd:f9:96:7a:56:52: 1e:79:c1:f9:8e:13:33:29:36:fd:3c:5a:d7:8e:e4:3e:5a:ab: c5:f2:c7:38:10:a3:ce:66:7e:dd:bf:2c:ac:53:56:3d:c7:5d: 08:40:8b:00:c0:51:a4:da:9b:0f:81:86:e8:78:b7:c3:02:fb: df:f8:43:96:9b:03:ce:3e:49:9c:ad:78:82:33:ab:30:40:e1: a2:5c:3f:a0:2a:20:41:cf:b0:35:31:a3:39:41:f5:7d:b0:1f: 52:01:dc:39:53:63:3b:fe:df:98:0b:15:87:8c:7a:30:25:15: b4:a9:32:90:f7:30:f0:4c:6c:de:47:42:ab:05:ce:e9:67:8f: 5f:71:d6:4a:8f:b3:be:c9:f0:33:36:13:c1:ca:50:d6:44:3b: cc:4f:0c:e1:4b:bc:f0:9c:89:8e:c0:00:f9:35:23:82:c8:9c: d2:57:ec:60:ea:9a:12:e9:6c:37:df:b3:13:28:56:19:b4:5c: 5a:17:1d:94:7e:76:53:9b:ee:2a:51:c8:78:6e:9a:59:fb:fb: c5:4d:9e:cc:9b:8a:42:58:ce:d5:18:71:6e:44:e2:87:4c:7c: 67:43:fe:50:e2:8e:44:7a:b3:79:a2:d5:ff:0f:03:8e:95:3d: 19:22:74:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwNzE5MDEwOTA3WhcNMjUwNzI2MDEwOTA3WjAYMRYwFAYD VQQDEw02ODdhZjAzMy1mYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnregG1VoXo1l4awik24so4PHR83NB65U4UONV+FPpUlCx/GCWqM7o+fKV/ve AIyiHFQzU/Ifg09XS3KoaRiJ9f8w5AZ++9OmMUIRKpX8C/YJ7KfhMw+VYWCdmg9S TDNht7I0XVNrXT9bSKBVBvgfppDUD8GIRJ1dx3Lgi7i0zgLvY7aA+c/yUCW84zim Fu7X9aSo1U+499+BmmnlRhRCKBii565uK45/MOdneO/6Z7+9FPgx6NWuMVBvn34b viXOCfkN722E5BEHxiJ4rY/ONUE+IfK+21ey5sEJOvo4D3rj97scGfD4eRx/Cqvo iYh/OiPBGI/d3rUHaWMnd42FEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrvC49x jMxfeBDcieJGYfbFZIsmMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkoiqxkTFdf1Uobsi9+ZZ6VlIeecH5jhMzKTb9PFrXjuQ+WqvF8sc4 EKPOZn7dvyysU1Y9x10IQIsAwFGk2psPgYboeLfDAvvf+EOWmwPOPkmcrXiCM6sw QOGiXD+gKiBBz7A1MaM5QfV9sB9SAdw5U2M7/t+YCxWHjHowJRW0qTKQ9zDwTGze R0KrBc7pZ49fcdZKj7O+yfAzNhPBylDWRDvMTwzhS7zwnImOwAD5NSOCyJzSV+xg 6poS6Ww337MTKFYZtFxaFx2UfnZTm+4qUch4bppZ+/vFTZ7Mm4pCWM7VGHFuROKH THxnQ/5Q4o5EerN5otX/DwOOlT0ZInS6 -----END CERTIFICATE-----Generated at Sun Jul 20 18:52:26 2025 by rpki-client