$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft File: xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json) Hash identifier: 7Fl5MtTOn0xgqvbPcvQgEmt5iN2aeVkrQBaqyVy0u0k= Subject key identifier: F7:2D:F4:9A:4D:24:7E:C6:23:F5:97:97:90:56:FC:B1:FA:29:69:D2 Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft Manifest number: 01BB Signing time: Sat 19 Jul 2025 03:21:22 +0000 Manifest this update: Sat 19 Jul 2025 03:21:22 +0000 Manifest next update: Sat 26 Jul 2025 03:21:22 +0000 Files and hashes: 1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: QzW2I8+sZlVNuV6uuSpm/H3W7XCVSZ1M506ySBRlPd8=) 2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 8oKi9g3FW28uCT296akypss1lnTC3S8VPwt27zeBIKU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4 Validity Not Before: Jul 19 03:21:22 2025 GMT Not After : Jul 26 03:21:22 2025 GMT Subject: CN=687b0f32-10c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:c5:e4:68:fe:b9:b5:f5:d4:07:67:03:67: 92:d8:38:f9:ed:50:bf:1b:9c:e1:ea:88:54:f7:a8: 35:52:48:05:8a:27:b4:02:bf:34:d9:6e:a6:93:75: 61:1e:b7:a0:2a:b9:2b:55:f0:94:fb:0c:e6:55:34: 8a:8c:e2:13:8f:d5:b8:27:67:18:5e:cc:9d:26:04: 01:b2:35:d5:59:b1:83:ff:5b:4f:1d:c0:42:4c:22: ea:5a:0b:32:82:21:7d:72:a3:50:d6:a6:eb:0c:82: 9f:18:ce:70:4c:66:30:67:ea:6b:b7:55:bc:45:84: 3a:9d:8b:00:4a:c4:bd:fd:28:b3:cb:c5:46:31:77: 2c:18:d2:31:78:ba:54:8d:91:c9:2f:6b:82:2f:5f: 8c:b6:3b:46:30:3b:de:ec:a7:b6:ee:50:d5:fb:90: 07:03:88:9d:81:d5:95:79:cb:87:26:6c:eb:35:e8: 09:ce:51:01:a2:72:d8:fa:5b:1d:76:60:06:af:18: 2e:b3:fd:cf:d0:3a:13:21:d9:a6:5a:59:29:75:bb: 98:73:9c:09:20:87:10:27:1c:fc:ce:28:60:e2:2b: 0c:b1:22:0c:49:68:fa:7a:a2:1e:97:d5:49:1b:3e: 7b:91:fe:0e:28:dd:61:65:24:60:d9:49:2d:3e:53: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:F4:9A:4D:24:7E:C6:23:F5:97:97:90:56:FC:B1:FA:29:69:D2 X509v3 Authority Key Identifier: keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:c4:07:6c:14:5f:80:39:a0:b6:95:cd:3e:13:c3:b1:16: 45:2f:11:72:10:d2:ca:93:eb:b6:62:4e:7a:85:e0:88:cb:97: cf:81:c4:82:0b:a1:d6:2f:bc:42:b0:f1:1b:e5:b2:79:ee:30: d9:72:98:71:07:7a:b1:31:15:fb:c8:c3:4b:54:f7:ba:c5:5b: 9d:b8:91:69:9f:15:d1:58:3a:00:fb:f3:0c:16:7b:84:1d:e1: 0e:00:29:c9:fc:13:e6:83:84:52:8f:14:ba:77:66:f3:cd:aa: 19:af:bb:c6:39:48:28:b6:ca:31:7b:80:d5:45:28:4f:cb:c4: 5b:96:7e:81:3e:27:1c:5e:dc:ac:44:50:9e:2a:1f:2c:50:ae: 42:9e:e8:3b:9d:c8:2c:d1:ef:19:be:f5:66:30:b0:36:61:14: 12:3d:36:09:97:9b:a8:5e:c3:89:bc:86:0f:75:47:80:32:5c: 92:f6:8f:89:cd:33:22:57:cb:89:a9:59:c5:24:c0:4a:48:16: f4:e5:83:5a:60:19:6a:ea:f5:c2:5c:50:b5:1a:7a:e9:31:92: 20:eb:55:35:1e:4d:1f:ab:af:49:9b:be:2b:d6:42:7f:9c:35: 4b:d3:94:b7:1d:ff:35:0a:50:8e:dc:98:2f:d9:b3:10:59:e6: e2:23:0d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQxRDUxMTAvBgNVBAUTKEM1NDUyNUU5NzA1QkQ2OUQ2MTQyNERCRUU3QjA0OTNG NUZENkYwQTQwHhcNMjUwNzE5MDMyMTIyWhcNMjUwNzI2MDMyMTIyWjAYMRYwFAYD VQQDEw02ODdiMGYzMi0xMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBbF5Gj+ubX11AdnA2eS2Dj57VC/G5zh6ohU96g1UkgFiie0Ar802W6mk3Vh HregKrkrVfCU+wzmVTSKjOITj9W4J2cYXsydJgQBsjXVWbGD/1tPHcBCTCLqWgsy giF9cqNQ1qbrDIKfGM5wTGYwZ+prt1W8RYQ6nYsASsS9/Sizy8VGMXcsGNIxeLpU jZHJL2uCL1+MtjtGMDve7Ke27lDV+5AHA4idgdWVecuHJmzrNegJzlEBonLY+lsd dmAGrxgus/3P0DoTIdmmWlkpdbuYc5wJIIcQJxz8zihg4isMsSIMSWj6eqIel9VJ Gz57kf4OKN1hZSRg2UktPlMvVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPct9JpN JH7GI/WXl5BW/LH6KWnSMB8GA1UdIwQYMBaAFMVFJelwW9adYUJNvuewST9f1vCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFENS8zNDMzNjFFRUND OEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFwMWhRazItNTdCSlAxX1c4 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVVWw2WEJiMXAxaFFrMi01N0JKUDFfVzhLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDFENS8zNDMzNjFFRUNDOEMxMUVEQTRDMUExNDNDNEY5QUUwMi94VVVsNlhCYjFw MWhRazItNTdCSlAxX1c4S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9UsQHbBRfgDmgtpXNPhPDsRZFLxFyENLKk+u2Yk56heCIy5fPgcSC C6HWL7xCsPEb5bJ57jDZcphxB3qxMRX7yMNLVPe6xVuduJFpnxXRWDoA+/MMFnuE HeEOACnJ/BPmg4RSjxS6d2bzzaoZr7vGOUgotsoxe4DVRShPy8Rbln6BPiccXtys RFCeKh8sUK5Cnug7ncgs0e8ZvvVmMLA2YRQSPTYJl5uoXsOJvIYPdUeAMlyS9o+J zTMiV8uJqVnFJMBKSBb05YNaYBlq6vXCXFC1GnrpMZIg61U1Hk0fq69Jm74r1kJ/ nDVL05S3Hf81ClCO3Jgv2bMQWebiIw0g -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:24 2025 by rpki-client