$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: SJt8IQUf953utG2OK33jNkwdNlxm/R9m0+dckhDdCGM= Subject key identifier: FA:A9:43:CE:1C:A0:86:79:20:F8:E3:0F:A0:00:FB:FD:6A:E6:89:48 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D3C Signing time: Fri 18 Jul 2025 18:14:57 +0000 Manifest this update: Fri 18 Jul 2025 18:14:56 +0000 Manifest next update: Fri 25 Jul 2025 18:14:56 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: 7z23/UeGNnuHymhP6vXJWpQ9SE6ok8g/IdKeJelS9/4=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3448 (0xd78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jul 18 18:14:56 2025 GMT Not After : Jul 25 18:14:56 2025 GMT Subject: CN=687a8f21-c16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ef:93:d6:af:88:63:e2:49:18:5b:43:7e:2c: 99:6e:81:67:fd:23:d8:f1:11:68:26:df:51:21:fb: a2:9b:33:c1:75:e9:f4:65:60:b7:2c:8f:30:d8:98: b6:c1:0a:6a:4a:60:b0:97:7e:e2:aa:c4:e1:b9:92: 87:50:8d:26:cf:b5:7e:0f:10:30:a3:e4:e3:e6:c8: fa:0f:e3:43:ff:26:fb:32:0c:68:44:a6:cb:c5:27: 74:96:75:cd:30:af:ef:d6:51:1b:f9:de:49:0b:0a: b2:1d:aa:dc:08:f4:bc:62:c8:d1:76:27:4a:16:d7: 18:60:c5:3c:65:bf:ae:c7:9d:a9:29:84:aa:f7:6e: 96:ab:cc:f9:7e:bf:0b:68:ac:b9:66:f5:60:91:05: a4:c8:59:8d:d3:00:7e:d8:0e:4d:aa:7f:4f:a4:1c: 12:ea:8e:21:28:87:92:b5:52:84:ef:d3:c7:41:90: 2c:c5:21:8c:2a:79:ea:65:e1:5b:38:1f:be:4e:59: 12:db:b0:bd:8f:d9:32:32:e8:53:da:c9:62:46:bc: 8e:34:15:d5:a6:69:bb:c7:eb:ba:c2:c6:0e:f1:c7: 58:19:e1:6f:19:d0:dd:21:48:2e:3b:58:4c:87:bd: 61:81:e5:77:aa:28:a8:68:0b:f4:17:87:36:51:ea: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:43:CE:1C:A0:86:79:20:F8:E3:0F:A0:00:FB:FD:6A:E6:89:48 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:44:2a:1e:5d:f3:61:ed:dc:cc:56:b3:77:96:52:a3:67:87: 33:38:f4:1b:c2:75:ef:3e:bd:5a:ab:0f:ed:15:fb:1a:70:33: f3:74:37:93:56:46:8e:a1:af:57:3e:40:f4:98:8e:84:b1:d7: ec:ba:28:53:55:9a:63:c3:58:97:b0:a5:83:1b:88:d5:4d:9e: 2c:e4:87:a0:9e:90:71:34:d8:1c:cb:b9:ea:50:9d:2d:9d:d4: 63:a1:81:3f:c6:2a:74:00:0b:79:85:0c:43:c5:55:73:ad:1e: 90:83:86:e8:82:56:54:55:47:50:07:66:6a:8f:65:85:ac:55: 1e:a0:a1:0a:0b:31:9d:97:93:eb:5f:f9:14:1a:d5:03:de:e2: 45:e1:b5:e3:04:f6:21:b0:9b:df:61:42:07:ee:cd:cf:eb:8f: a2:27:a2:a3:a0:44:43:ed:87:85:fe:57:94:25:5d:33:22:4f: c0:39:f8:0f:bf:58:77:7f:e7:d5:d8:a9:b5:99:aa:86:f8:86: 60:75:64:8d:4d:36:ef:3d:7a:a5:17:3a:3c:c9:e9:fc:7d:1d: 4a:d7:e0:99:5f:68:e3:a5:dd:16:50:e0:9b:68:d2:6d:a1:53: 16:13:9b:25:c7:6e:63:4d:ca:21:01:cc:be:45:83:de:b1:68: 1d:94:82:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwNzE4MTgxNDU2WhcNMjUwNzI1MTgxNDU2WjAYMRYwFAYD VQQDEw02ODdhOGYyMS1jMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e+T1q+IY+JJGFtDfiyZboFn/SPY8RFoJt9RIfuimzPBden0ZWC3LI8w2Ji2 wQpqSmCwl37iqsThuZKHUI0mz7V+DxAwo+Tj5sj6D+ND/yb7MgxoRKbLxSd0lnXN MK/v1lEb+d5JCwqyHarcCPS8YsjRdidKFtcYYMU8Zb+ux52pKYSq926Wq8z5fr8L aKy5ZvVgkQWkyFmN0wB+2A5Nqn9PpBwS6o4hKIeStVKE79PHQZAsxSGMKnnqZeFb OB++TlkS27C9j9kyMuhT2sliRryONBXVpmm7x+u6wsYO8cdYGeFvGdDdIUguO1hM h71hgeV3qiioaAv0F4c2UeoNCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqpQ84c oIZ5IPjjD6AA+/1q5olIMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMRCoeXfNh7dzMVrN3llKjZ4czOPQbwnXvPr1aqw/tFfsacDPzdDeT VkaOoa9XPkD0mI6EsdfsuihTVZpjw1iXsKWDG4jVTZ4s5IegnpBxNNgcy7nqUJ0t ndRjoYE/xip0AAt5hQxDxVVzrR6Qg4boglZUVUdQB2Zqj2WFrFUeoKEKCzGdl5Pr X/kUGtUD3uJF4bXjBPYhsJvfYUIH7s3P64+iJ6KjoERD7YeF/leUJV0zIk/AOfgP v1h3f+fV2Km1maqG+IZgdWSNTTbvPXqlFzo8yen8fR1K1+CZX2jjpd0WUOCbaNJt oVMWE5slx25jTcohAcy+RYPesWgdlIIV -----END CERTIFICATE-----Generated at Sun Jul 20 14:33:42 2025 by rpki-client