$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: gH53LJVMbKHUo45gR+bei4IIHQZiWd1gDsHZZffGflk= Subject key identifier: 40:97:DA:E1:09:AF:14:53:1F:1A:38:C7:E3:9B:CC:1C:03:AD:17:53 Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 02B7 Signing time: Sat 19 Jul 2025 01:55:26 +0000 Manifest this update: Sat 19 Jul 2025 01:55:26 +0000 Manifest next update: Sat 26 Jul 2025 01:55:26 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: zNJckKEz1hI4G6HrD6vSVpeUC/Dd4DbdHDOuLGhkB0E=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 4: DC7E1FA0474711F0A918DB1FC4F9AE02.roa (hash: 4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Jul 19 01:55:26 2025 GMT Not After : Jul 26 01:55:26 2025 GMT Subject: CN=687afb0e-a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:7c:7b:18:8a:54:2c:72:6a:e4:1e:3e:2d: da:05:e4:84:db:7c:37:19:bd:55:30:f7:4a:b4:8b: f2:17:8f:16:bd:ec:17:93:f5:4e:ae:7a:6e:78:b0: ee:77:36:a7:57:5a:bf:4f:40:3e:b5:ab:92:e4:f1: 8e:7a:ab:68:35:07:bf:ad:2c:3d:b2:39:22:06:8d: ff:bd:fe:ff:ec:43:b4:33:cf:b2:88:93:8b:2b:c5: a7:ee:cc:ea:6e:ae:fc:f3:26:47:64:b0:7b:5a:21: 55:68:cd:7d:88:b6:f4:89:ee:5d:0a:be:2e:53:51: 15:8a:01:05:62:3d:75:99:6b:96:e0:b5:24:5d:ed: 29:6d:4a:26:99:ba:a5:d3:2f:34:94:df:09:aa:b4: 1c:5b:24:01:43:6a:8a:44:8e:a2:27:41:60:81:31: 81:92:cf:e3:88:53:ac:6a:a8:3b:36:89:78:94:db: 5e:af:ef:df:8a:85:2d:08:f4:49:0e:75:78:79:4c: 79:d9:7f:95:ef:4c:e2:ef:6b:e8:03:9f:53:3e:60: b6:f7:82:43:fc:78:e3:5b:54:68:17:f9:2f:3c:4c: 7b:24:4a:22:fa:81:be:e8:0d:2b:08:e7:40:aa:4b: fc:2a:85:f9:8d:27:9f:2f:70:92:e2:f0:4e:a4:5d: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:DA:E1:09:AF:14:53:1F:1A:38:C7:E3:9B:CC:1C:03:AD:17:53 X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ed:ac:09:2f:58:c1:ad:6b:c8:7f:41:31:44:79:b1:bf:92: b9:23:5f:6f:0b:cd:4d:07:8e:6f:13:2f:57:b0:9b:ef:0e:aa: d9:3b:69:71:07:a4:aa:7d:fb:a9:fa:87:3d:dc:f6:c1:d1:77: 27:ab:b4:80:8e:ad:e4:4e:d5:60:95:e7:c0:d5:2c:65:f1:77: 64:fc:53:2f:3c:73:5c:7f:73:f0:ce:05:55:b2:08:2f:d1:8e: 44:2d:17:57:b1:f2:50:75:4f:0c:23:22:28:da:b3:29:1b:1c: 06:92:1b:5e:97:88:0b:d8:29:6d:fc:0c:9a:9e:9d:c8:cc:24: 68:dc:22:34:af:13:c6:cb:b7:c8:03:08:7d:cc:cb:31:ec:b3: b1:47:4f:ab:62:20:d4:7a:a3:b7:fe:3a:7b:52:7f:bc:3c:e5: 26:e3:29:fa:2b:48:12:ed:30:36:5b:94:70:9b:d7:a4:32:e9: 2b:45:ce:b3:d1:9d:ba:81:1f:63:d5:4d:9a:e5:13:b6:b6:52: cd:fe:12:84:5a:1d:20:18:1f:25:4d:af:25:0f:92:67:1c:76: c7:62:d2:b1:1e:56:d4:33:b6:3a:8f:b1:95:83:de:6f:29:94: bc:2a:1d:09:1f:d6:ea:66:67:46:ea:d3:24:a5:c1:c7:b9:c3: 7f:b7:9f:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwNzE5MDE1NTI2WhcNMjUwNzI2MDE1NTI2WjAYMRYwFAYD VQQDEw02ODdhZmIwZS1hMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwR8exiKVCxyauQePi3aBeSE23w3Gb1VMPdKtIvyF48WvewXk/VOrnpueLDu dzanV1q/T0A+tauS5PGOeqtoNQe/rSw9sjkiBo3/vf7/7EO0M8+yiJOLK8Wn7szq bq788yZHZLB7WiFVaM19iLb0ie5dCr4uU1EVigEFYj11mWuW4LUkXe0pbUommbql 0y80lN8JqrQcWyQBQ2qKRI6iJ0FggTGBks/jiFOsaqg7Nol4lNter+/fioUtCPRJ DnV4eUx52X+V70zi72voA59TPmC294JD/HjjW1RoF/kvPEx7JEoi+oG+6A0rCOdA qkv8KoX5jSefL3CS4vBOpF2HnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECX2uEJ rxRTHxo4x+ObzBwDrRdTMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7awJL1jBrWvIf0ExRHmxv5K5I19vC81NB45vEy9XsJvvDqrZO2lx B6Sqffup+oc93PbB0Xcnq7SAjq3kTtVglefA1Sxl8Xdk/FMvPHNcf3PwzgVVsggv 0Y5ELRdXsfJQdU8MIyIo2rMpGxwGkhtel4gL2Clt/Ayanp3IzCRo3CI0rxPGy7fI Awh9zMsx7LOxR0+rYiDUeqO3/jp7Un+8POUm4yn6K0gS7TA2W5Rwm9ekMukrRc6z 0Z26gR9j1U2a5RO2tlLN/hKEWh0gGB8lTa8lD5JnHHbHYtKxHlbUM7Y6j7GVg95v KZS8Kh0JH9bqZmdG6tMkpcHHucN/t59K -----END CERTIFICATE-----Generated at Mon Jul 21 02:25:45 2025 by rpki-client