$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: JF9eMTmcs+nUP7+TcmPQu076d8hVI+m+mOhJ6eRJ3AI= Subject key identifier: A1:07:EE:FF:C3:4D:66:3D:55:1E:F6:78:62:19:A9:CD:2F:67:E0:76 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: AF Signing time: Sat 19 Jul 2025 06:13:53 +0000 Manifest this update: Sat 19 Jul 2025 06:13:53 +0000 Manifest next update: Sat 26 Jul 2025 06:13:53 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: PiJ0FSUZxxXH76KvYMv4PSPoB4/H6gSH90NJVdKxfhA=) 2: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: FQoFMhaO39gGEcc2pn8CyPB8yz5sPKJ5LS8scOVr+nU=) 3: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: UGCPOMHQWDHdKMVZEIClF1yCBQsAp0GOZkBRwsHoCKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Jul 19 06:13:53 2025 GMT Not After : Jul 26 06:13:53 2025 GMT Subject: CN=687b37a1-2552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:49:26:ed:e5:25:52:b4:4c:0d:1d:4e:5a: 18:f2:25:08:e0:ef:90:c5:c7:9d:97:07:80:d7:4d: fa:63:ca:23:2c:ce:b5:54:a9:59:75:2b:76:5e:a1: d0:5d:9e:bc:c5:51:4e:51:df:9a:72:85:00:b4:ba: f0:1c:d7:3f:ab:7f:d7:a9:af:fc:62:47:2c:b2:fe: 63:73:76:6f:8f:9a:da:57:d8:92:6b:d5:ab:41:4e: a8:0d:45:22:25:54:56:d5:82:29:0b:e0:c5:c6:0d: b4:02:fb:d9:9a:15:b4:a3:c0:96:40:cd:a8:f4:e7: 88:59:ea:67:f8:cc:a2:4e:16:6b:8d:78:50:cf:c6: dd:16:1f:51:89:c6:0f:b5:5e:de:67:2c:eb:56:bc: ab:5f:e6:f8:0f:ee:cf:44:86:83:c7:cd:8d:5e:07: a5:cb:2d:f0:d1:fc:4c:05:ee:a1:ba:87:a3:77:65: ec:f9:84:36:e5:ca:d1:07:52:6f:7c:bc:fc:b6:44: 51:5e:e2:db:9a:48:c5:39:02:3c:08:c1:90:35:b2: de:46:c9:a4:54:6d:b5:cd:d5:3f:da:36:9e:90:f6: 6a:77:12:a5:27:51:42:12:e7:24:39:7e:3f:3f:18: 79:34:f6:d9:13:6f:29:6d:83:81:31:9b:1f:14:05: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:EE:FF:C3:4D:66:3D:55:1E:F6:78:62:19:A9:CD:2F:67:E0:76 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:21:3f:be:bc:cf:f6:cc:16:c0:e9:77:02:bb:32:46:3b:73: 7d:d2:9b:03:23:4a:89:cb:d5:0d:ea:e7:58:4d:98:cf:2c:91: 95:c1:f9:15:e1:5a:d6:1c:ee:4e:70:c6:c6:83:11:c3:82:a4: a2:86:34:0c:b7:32:1c:16:81:81:66:45:2c:85:6a:86:49:c4: 68:47:ff:b0:cd:40:d4:06:d4:9f:34:b8:3a:f8:4a:9b:fc:14: 28:a7:fd:06:cf:1c:45:9e:42:3f:b2:22:18:51:8d:72:08:3b: 63:d0:94:3a:02:74:64:7c:d4:64:e4:4b:af:4f:0d:05:a5:02: d6:07:ca:3f:5d:75:bd:53:31:dc:19:7d:06:c3:ee:47:b4:ae: 69:07:1b:e8:6e:80:a5:3c:33:f3:1b:71:70:0f:fc:45:d7:3a: 2e:22:cf:62:31:0d:a0:25:88:5b:4e:fd:c5:53:95:91:ca:66: c6:a5:83:71:ff:44:eb:fe:4b:34:f3:92:59:cb:1c:9c:4a:2c: 70:8b:cb:c1:09:96:9f:90:86:89:9a:52:1b:1c:1a:c6:31:ed: d2:d4:68:c3:04:65:7e:0a:3b:09:15:70:bc:32:5e:8b:e2:d2: 6e:41:30:65:f6:87:4f:b8:1a:89:e7:b8:75:73:d1:d1:c8:db: 04:90:c3:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjUwNzE5MDYxMzUzWhcNMjUwNzI2MDYxMzUzWjAYMRYwFAYD VQQDEw02ODdiMzdhMS0yNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKtJJu3lJVK0TA0dTloY8iUI4O+QxcedlweA1036Y8ojLM61VKlZdSt2XqHQ XZ68xVFOUd+acoUAtLrwHNc/q3/Xqa/8Ykcssv5jc3Zvj5raV9iSa9WrQU6oDUUi JVRW1YIpC+DFxg20AvvZmhW0o8CWQM2o9OeIWepn+MyiThZrjXhQz8bdFh9RicYP tV7eZyzrVryrX+b4D+7PRIaDx82NXgelyy3w0fxMBe6huoejd2Xs+YQ25crRB1Jv fLz8tkRRXuLbmkjFOQI8CMGQNbLeRsmkVG21zdU/2jaekPZqdxKlJ1FCEuckOX4/ Pxh5NPbZE28pbYOBMZsfFAUm+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEH7v/D TWY9VR72eGIZqc0vZ+B2MB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdIT++vM/2zBbA6XcCuzJGO3N90psDI0qJy9UN6udYTZjPLJGVwfkV 4VrWHO5OcMbGgxHDgqSihjQMtzIcFoGBZkUshWqGScRoR/+wzUDUBtSfNLg6+Eqb /BQop/0GzxxFnkI/siIYUY1yCDtj0JQ6AnRkfNRk5EuvTw0FpQLWB8o/XXW9UzHc GX0Gw+5HtK5pBxvoboClPDPzG3FwD/xF1zouIs9iMQ2gJYhbTv3FU5WRymbGpYNx /0Tr/ks085JZyxycSixwi8vBCZafkIaJmlIbHBrGMe3S1GjDBGV+CjsJFXC8Ml6L 4tJuQTBl9odPuBqJ57h1c9HRyNsEkMNk -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:20 2025 by rpki-client