$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: x5sTXfL4ARzkez/+/GbjLRk5mpwQ9Wx1FCh+OjmTV4I= Subject key identifier: 61:D5:35:0D:2D:C9:AC:85:D2:DB:8C:91:84:5F:02:AD:8A:80:83:C3 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: F0 Signing time: Sat 19 Jul 2025 05:33:15 +0000 Manifest this update: Sat 19 Jul 2025 05:33:15 +0000 Manifest next update: Sat 26 Jul 2025 05:33:15 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: 4cu8JqlsY1eyBrF4GpT+WpekdlGbmFFlJZomp6hzSqs=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Jul 19 05:33:15 2025 GMT Not After : Jul 26 05:33:15 2025 GMT Subject: CN=687b2e1b-751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:99:ee:7c:b1:9d:80:49:6d:a2:db:93:84: 43:b7:12:74:ec:95:e1:30:c4:12:6c:34:e3:ec:1d: d2:26:e5:e1:d5:56:12:43:fc:09:41:e0:27:6f:8b: 21:ae:8d:3f:d2:53:8d:1e:7a:bc:76:7c:6c:c9:30: bc:4a:78:59:df:eb:48:9f:59:f7:2b:d0:f1:07:0d: 38:9a:4a:8d:fd:84:de:ba:37:03:f2:e6:3b:c2:1d: cf:51:4a:30:93:b7:26:ca:b0:54:fd:fc:1d:a2:3b: 54:36:28:5d:7c:59:5e:b3:e5:dd:f3:c4:58:88:0b: 96:9b:0b:bf:8f:67:37:06:cb:c8:a2:db:48:99:b8: b6:94:44:1c:9d:65:66:ca:8d:a2:c5:29:a6:fd:92: 2b:9a:4e:bc:a0:c2:d4:02:25:68:47:55:a9:60:5b: a4:1b:7d:20:f9:55:50:f5:89:86:7e:ad:d1:15:90: 45:a7:ef:8f:83:0c:d2:54:3a:bc:6d:2d:42:65:83: 0a:bb:28:f9:4f:2b:f9:fc:31:f4:16:92:75:67:0f: d4:11:05:a8:86:24:17:b9:e4:8b:3f:d5:a1:2a:af: 9b:d3:7e:4f:e5:b4:06:72:c6:57:89:d9:11:82:62: b7:51:7d:52:3d:7f:87:da:46:1a:6f:16:05:d2:a4: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D5:35:0D:2D:C9:AC:85:D2:DB:8C:91:84:5F:02:AD:8A:80:83:C3 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f1:5e:c5:05:d5:c6:d7:e6:62:44:1d:0b:8a:d5:b1:de:b3: 55:c2:91:e4:5c:30:10:fe:76:a0:c9:0b:a4:c6:7e:0b:fb:e2: cf:b4:52:54:51:70:3e:50:3b:dd:6e:6c:32:75:d7:fd:2f:18: d4:35:98:ec:23:f4:e6:2f:72:e9:b3:e1:61:40:17:4a:e0:f2: bd:57:4f:7a:4e:c2:7b:54:53:df:86:69:2f:fa:f2:de:af:5c: f5:34:98:46:b7:51:83:21:e3:60:70:e1:04:75:6d:a4:23:f0: 8a:38:e0:b6:21:b6:f9:46:1c:7d:32:3a:74:60:30:56:54:96: e0:49:09:84:89:72:77:89:50:df:a7:a3:19:e6:c7:ef:40:03: a2:14:f5:36:02:fc:c6:3a:9b:c3:64:a0:38:ea:4d:7e:ad:27: ca:90:98:d8:83:5e:91:b3:69:b3:2c:00:6b:1a:c9:5b:f3:54: f4:a6:fa:ba:81:8f:9c:35:de:65:ce:48:17:5e:eb:d6:9f:66: fb:57:59:ce:2d:1a:fe:cd:a3:52:a2:64:9b:32:04:7d:d7:97: ca:14:59:cd:7e:96:0e:84:b8:57:e7:1a:d7:22:37:21:79:ed: a8:be:71:87:5c:51:ed:48:d6:7f:9e:f5:e5:49:3a:4d:96:11: e5:e7:ff:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwNzE5MDUzMzE1WhcNMjUwNzI2MDUzMzE1WjAYMRYwFAYD VQQDEw02ODdiMmUxYi03NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dOZ7nyxnYBJbaLbk4RDtxJ07JXhMMQSbDTj7B3SJuXh1VYSQ/wJQeAnb4sh ro0/0lONHnq8dnxsyTC8SnhZ3+tIn1n3K9DxBw04mkqN/YTeujcD8uY7wh3PUUow k7cmyrBU/fwdojtUNihdfFles+Xd88RYiAuWmwu/j2c3BsvIottImbi2lEQcnWVm yo2ixSmm/ZIrmk68oMLUAiVoR1WpYFukG30g+VVQ9YmGfq3RFZBFp++PgwzSVDq8 bS1CZYMKuyj5Tyv5/DH0FpJ1Zw/UEQWohiQXueSLP9WhKq+b035P5bQGcsZXidkR gmK3UX1SPX+H2kYabxYF0qRV9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHVNQ0t yayF0tuMkYRfAq2KgIPDMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC28V7FBdXG1+ZiRB0LitWx3rNVwpHkXDAQ/nagyQukxn4L++LPtFJU UXA+UDvdbmwyddf9LxjUNZjsI/TmL3Lps+FhQBdK4PK9V096TsJ7VFPfhmkv+vLe r1z1NJhGt1GDIeNgcOEEdW2kI/CKOOC2Ibb5Rhx9Mjp0YDBWVJbgSQmEiXJ3iVDf p6MZ5sfvQAOiFPU2AvzGOpvDZKA46k1+rSfKkJjYg16Rs2mzLABrGslb81T0pvq6 gY+cNd5lzkgXXuvWn2b7V1nOLRr+zaNSomSbMgR915fKFFnNfpYOhLhX5xrXIjch ee2ovnGHXFHtSNZ/nvXlSTpNlhHl5/+U -----END CERTIFICATE-----Generated at Sun Jul 20 22:33:45 2025 by rpki-client