$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: WTxOW1o/LeWaGOzFhEp95hT5O6ehhyy7dh6x+A1kZFo= Subject key identifier: 84:31:3A:4A:D0:4F:35:6A:E3:1B:5D:BA:91:56:67:98:A9:08:88:1D Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 045C Signing time: Sat 19 Jul 2025 00:34:56 +0000 Manifest this update: Sat 19 Jul 2025 00:34:55 +0000 Manifest next update: Sat 26 Jul 2025 00:34:55 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: S43tux6Q8ZzmQDeo/C8M5oDOroLEhHol8HNhKf56+Kk=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Jul 19 00:34:55 2025 GMT Not After : Jul 26 00:34:55 2025 GMT Subject: CN=687ae82f-192f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:1c:32:9d:1e:cc:23:de:5e:11:08:b9:ab: d1:b2:fa:33:71:cb:d2:be:0a:7a:1e:39:54:a0:9a: 37:77:7a:9f:b7:4f:a0:61:93:7e:c0:53:96:ca:9e: fe:e8:24:03:be:4d:cb:6c:6f:3e:e5:1d:d7:86:8c: 0b:9e:68:d5:1e:b5:a4:dc:c5:e6:ff:81:dd:6f:6c: ca:70:f3:5b:a7:85:95:5e:84:97:df:c4:21:88:b5: 35:fc:06:ea:13:8d:67:02:84:89:05:13:40:27:1e: 51:2c:3b:c6:ff:99:9a:b9:57:78:6d:69:fe:e9:a7: b8:f9:b8:47:2c:a3:de:72:29:a7:a0:70:af:49:2e: aa:29:98:f4:23:81:92:f1:64:46:a3:8a:5f:1b:16: b5:7e:b4:da:c8:62:e5:b0:9b:80:dd:b1:c3:43:3e: 2e:be:ac:9f:95:7f:57:64:b7:1e:58:b5:89:80:40: e4:08:83:8b:74:75:f5:15:15:ab:92:14:67:51:85: 71:bd:88:3d:af:e7:b8:a9:af:e0:c1:3f:1e:bb:df: 54:ef:02:5d:92:9b:c0:9a:3a:5e:63:96:1e:66:43: a1:a0:77:18:d8:d5:62:92:6d:9d:6e:66:96:26:14: 42:9e:17:40:11:b1:66:5c:6f:c2:3c:58:6a:2b:ab: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:31:3A:4A:D0:4F:35:6A:E3:1B:5D:BA:91:56:67:98:A9:08:88:1D X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:28:e6:ef:31:0f:25:7e:d0:6e:50:ce:55:08:90:14:a6:c1: 5e:cd:d8:f3:b5:e9:37:29:96:df:53:ee:61:dc:36:65:4e:bb: ff:63:7b:64:43:63:35:38:6e:c3:ba:e3:66:2a:2f:ba:52:18: 5d:37:98:af:2a:64:66:37:52:8a:de:b7:2b:a8:75:ff:c9:98: c3:8b:d2:c7:fe:7c:a9:96:42:ae:fb:3d:a0:31:8f:37:d7:80: a5:27:6e:ad:fd:ab:5c:0f:54:95:ba:5a:3a:9d:2f:6f:88:b5: 72:83:f4:51:4b:ed:0a:49:f3:b5:e6:85:b0:4d:e4:e1:59:ae: 0f:30:96:78:b9:b1:70:15:a8:d0:f5:02:bb:2b:88:98:b3:78: ee:3f:ee:12:d6:3f:8f:a6:48:1b:0c:67:4a:71:71:37:19:3a: f0:97:c0:f5:da:24:2a:4a:70:e9:4f:6d:79:76:a3:89:ef:e4: f8:47:4d:e7:d4:5f:01:7c:bb:fb:03:3d:02:63:92:c3:e5:ee: 6c:27:38:ee:c5:07:26:48:2b:f3:a5:d7:1f:b8:a4:2d:db:7f: a4:a3:6e:c5:1b:08:f1:93:9a:d4:43:1f:9c:7f:ef:7c:7c:09: 42:b8:df:26:79:81:8b:a2:f7:60:43:99:8d:77:9b:c3:80:7f: 13:08:f3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUwNzE5MDAzNDU1WhcNMjUwNzI2MDAzNDU1WjAYMRYwFAYD VQQDEw02ODdhZTgyZi0xOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUEcMp0ezCPeXhEIuavRsvozccvSvgp6HjlUoJo3d3qft0+gYZN+wFOWyp7+ 6CQDvk3LbG8+5R3XhowLnmjVHrWk3MXm/4Hdb2zKcPNbp4WVXoSX38QhiLU1/Abq E41nAoSJBRNAJx5RLDvG/5mauVd4bWn+6ae4+bhHLKPecimnoHCvSS6qKZj0I4GS 8WRGo4pfGxa1frTayGLlsJuA3bHDQz4uvqyflX9XZLceWLWJgEDkCIOLdHX1FRWr khRnUYVxvYg9r+e4qa/gwT8eu99U7wJdkpvAmjpeY5YeZkOhoHcY2NVikm2dbmaW JhRCnhdAEbFmXG/CPFhqK6tF0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQxOkrQ TzVq4xtdupFWZ5ipCIgdMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3KObvMQ8lftBuUM5VCJAUpsFezdjztek3KZbfU+5h3DZlTrv/Y3tk Q2M1OG7DuuNmKi+6UhhdN5ivKmRmN1KK3rcrqHX/yZjDi9LH/nyplkKu+z2gMY83 14ClJ26t/atcD1SVulo6nS9viLVyg/RRS+0KSfO15oWwTeThWa4PMJZ4ubFwFajQ 9QK7K4iYs3juP+4S1j+PpkgbDGdKcXE3GTrwl8D12iQqSnDpT215dqOJ7+T4R03n 1F8BfLv7Az0CY5LD5e5sJzjuxQcmSCvzpdcfuKQt23+ko27FGwjxk5rUQx+cf+98 fAlCuN8meYGLovdgQ5mNd5vDgH8TCPNK -----END CERTIFICATE-----Generated at Sun Jul 20 10:23:39 2025 by rpki-client