$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: 4jKcv26QtfrUWOuSfst5y6TCXg61FGDDSo0E24v/CbY= Subject key identifier: 10:F0:8A:A2:2B:BE:3E:98:0C:72:1D:35:29:9D:79:A8:66:21:C4:62 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2271 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 221F Signing time: Sun 20 Jul 2025 15:54:13 +0000 Manifest this update: Sun 20 Jul 2025 15:54:12 +0000 Manifest next update: Sun 27 Jul 2025 15:54:12 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: 3GV2H3wc22r6tRcSGBFxqjymk4xVEmnwQOcvf+0j44U=) 2: 848CD92660A611F0806EB31DC4F9AE02.roa (hash: E2krETd7neWC8d4xIatDnIbAfqIHXkBF6iProCmPjFo=) 3: B770D0C64F3611F0BB61297BC4F9AE02.roa (hash: Q2vWAp5rNQfVlxNPgNCkSM+CSqEg1XjqZ2D0lXJ11KM=) 4: D358B3804F3611F0BF36F00EC4F9AE02.roa (hash: 5ulq+1QknQJTgHvfsWDJiaY0hEFpf2cI+46jrEBDVEY=) 5: 722285E02F6111F08D90CD1BC4F9AE02.roa (hash: Mlvm4A3sHMT8TjKLsESvcI+NpOJCscRsP28t9MfdGE4=) 6: FD2941A0BBC311EEBE58430EC4F9AE02.roa (hash: y9g4n21UCTqNjGbPSMXx3pzlzLx/iVjZI0pRarDixiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8817 (0x2271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Jul 20 15:54:12 2025 GMT Not After : Jul 27 15:54:12 2025 GMT Subject: CN=687d1125-4207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:1c:f9:f9:2f:75:f2:0c:32:b9:d6:d8:e3: 38:7c:b9:ad:1c:0c:c4:73:6a:5c:40:de:0c:05:51: 43:60:37:be:99:20:fa:10:df:c9:3d:c3:8d:31:66: 13:b5:19:e9:35:ab:a4:39:8b:7a:26:ba:89:13:0e: f2:53:d6:92:b0:54:05:a4:88:b2:2e:f2:00:b0:0f: 14:1e:81:7a:fc:a8:9e:ed:de:8b:e5:a4:1e:93:92: 89:df:a8:aa:53:a4:38:09:46:9f:0d:e1:8e:65:97: d1:50:a6:1b:74:1a:34:4e:16:4c:44:68:a2:24:a8: 15:68:30:f2:02:d9:39:08:09:d2:35:e2:3a:bd:62: 47:e8:40:da:ac:f8:b2:76:bf:a6:f2:5e:21:8b:94: 8a:50:89:a0:d5:3f:23:c0:08:0d:2a:2b:aa:b4:2f: 8e:45:52:1f:66:33:06:8f:be:f4:71:97:60:6d:7d: 2c:ce:b9:df:c1:dc:30:40:88:88:4b:5a:7f:3b:1f: c1:25:b6:bc:a8:a4:00:a1:26:42:dc:f7:25:13:6d: 42:0b:d9:06:f3:cd:10:df:cc:88:36:4f:3b:f8:4d: 27:27:c1:9d:3b:6b:f9:74:d7:69:c6:86:ba:e5:be: 31:da:c1:53:e4:23:a8:ca:33:18:68:2b:2a:3b:b0: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F0:8A:A2:2B:BE:3E:98:0C:72:1D:35:29:9D:79:A8:66:21:C4:62 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b1:ad:1d:38:32:0e:fa:a2:55:32:cf:fc:7f:1b:b5:23:76: 7f:8e:51:4d:0a:40:19:0b:e1:39:13:80:ee:86:7c:dc:c8:7c: d0:c4:7c:13:7c:52:9d:b5:72:2f:f7:16:c2:7e:3f:d0:5e:e4: 5d:34:c0:29:7e:34:b7:b7:6e:f2:3f:b7:84:b4:0a:85:61:9e: 17:b9:51:9e:89:b3:74:4c:a6:1b:68:24:c2:b9:20:a7:3a:ed: 70:db:c6:ec:ce:cb:24:af:cd:67:23:c8:d0:80:4b:69:e9:b0: 43:23:6f:9b:15:c9:57:8a:62:7b:b4:bd:29:68:b8:56:da:4e: eb:78:50:8e:b9:b1:8c:66:39:cd:58:ac:e0:3d:77:34:db:05: 97:ed:8e:81:39:b3:1e:8d:30:cf:07:bd:cd:3c:6c:59:94:6a: c8:77:4f:36:57:23:91:42:58:cd:8b:ef:4a:b1:75:ae:dd:0f: 43:bd:90:84:f9:55:0a:3a:5d:db:7e:36:bd:39:a0:a0:50:0a: 89:ae:9e:d7:a9:0c:37:00:a3:4b:dc:97:00:11:f6:a1:4b:c9: 96:51:22:cd:7e:fc:cf:b6:8e:38:39:1c:53:78:db:cf:7a:bc: 19:11:cc:a2:45:3a:b9:2f:96:98:f4:d1:75:0a:94:1c:d8:ee: b7:63:1c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICInEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwNzIwMTU1NDEyWhcNMjUwNzI3MTU1NDEyWjAYMRYwFAYD VQQDEw02ODdkMTEyNS00MjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lAc+fkvdfIMMrnW2OM4fLmtHAzEc2pcQN4MBVFDYDe+mSD6EN/JPcONMWYT tRnpNaukOYt6JrqJEw7yU9aSsFQFpIiyLvIAsA8UHoF6/Kie7d6L5aQek5KJ36iq U6Q4CUafDeGOZZfRUKYbdBo0ThZMRGiiJKgVaDDyAtk5CAnSNeI6vWJH6EDarPiy dr+m8l4hi5SKUImg1T8jwAgNKiuqtC+ORVIfZjMGj770cZdgbX0szrnfwdwwQIiI S1p/Ox/BJba8qKQAoSZC3PclE21CC9kG880Q38yINk87+E0nJ8GdO2v5dNdpxoa6 5b4x2sFT5COoyjMYaCsqO7DnMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDwiqIr vj6YDHIdNSmdeahmIcRiMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAksa0dODIO+qJVMs/8fxu1I3Z/jlFNCkAZC+E5E4DuhnzcyHzQxHwT fFKdtXIv9xbCfj/QXuRdNMApfjS3t27yP7eEtAqFYZ4XuVGeibN0TKYbaCTCuSCn Ou1w28bszsskr81nI8jQgEtp6bBDI2+bFclXimJ7tL0paLhW2k7reFCOubGMZjnN WKzgPXc02wWX7Y6BObMejTDPB73NPGxZlGrId082VyORQljNi+9KsXWu3Q9DvZCE +VUKOl3bfja9OaCgUAqJrp7XqQw3AKNL3JcAEfahS8mWUSLNfvzPto44ORxTeNvP erwZEcyiRTq5L5aY9NF1CpQc2O63Yxyz -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:54 2025 by rpki-client