$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: seuUbWup+saW/T2U0GwJOClgejp+fqBjtvMankGKD54= Subject key identifier: 3C:41:4C:92:AC:70:EC:F0:AE:3F:82:B5:2A:BD:8F:24:E9:9F:EB:39 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 95 Signing time: Mon 21 Jul 2025 06:36:39 +0000 Manifest this update: Mon 21 Jul 2025 06:36:39 +0000 Manifest next update: Mon 28 Jul 2025 06:36:39 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: d7Zg3WDMQtUdGjW0jj3dJYLYLQAJvNKJzjF3M5WpvxM=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Jul 21 06:36:39 2025 GMT Not After : Jul 28 06:36:39 2025 GMT Subject: CN=687ddff7-917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:74:be:dd:30:af:c3:0b:9b:16:a0:c3:69: 10:ac:2b:12:b8:e4:6b:d3:62:16:f8:1c:85:f7:8f: 77:8a:16:85:0e:32:19:1b:7d:ed:a6:f9:13:b8:b0: 01:41:b1:2a:69:21:e5:c8:c9:bc:34:c9:56:88:9e: 82:21:79:a5:b5:dc:b0:a4:e3:07:e1:49:dc:c7:47: 8c:f0:ac:94:b5:17:c1:64:a6:35:ad:49:a8:08:ad: a1:6c:ea:2c:e1:ad:8f:af:17:c6:87:7c:31:bb:db: ee:cb:77:f2:9d:ad:b0:15:35:7b:34:b2:d9:c6:f6: c5:33:83:63:24:27:13:93:ee:64:54:b5:99:7d:5c: ac:ad:94:09:f6:53:75:28:8b:45:cc:70:76:2d:3d: fe:84:92:8a:2a:9d:f8:6b:6f:3e:4b:39:d9:e2:56: 4a:7c:0e:ec:e0:bc:f8:89:1c:fb:63:91:16:21:97: a3:37:28:9f:6d:1b:e7:45:d6:32:6d:bc:11:d0:0b: 1f:a7:61:e4:87:61:31:e8:85:66:21:e2:81:cb:37: bd:60:42:c7:70:28:ad:ec:b9:c5:ff:0a:09:26:3e: 67:98:f2:e6:9c:a8:3f:39:7f:4a:bb:32:73:0b:0b: c8:45:e3:8a:c3:ad:a0:ea:e4:59:de:f9:38:7e:5b: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:41:4C:92:AC:70:EC:F0:AE:3F:82:B5:2A:BD:8F:24:E9:9F:EB:39 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:59:e6:ea:94:c3:66:57:8a:18:1c:c7:32:6a:e1:ac:40:73: d2:e6:08:6f:ba:c8:1d:e1:25:69:09:6b:98:21:b1:25:eb:19: 30:4c:da:c5:fe:1d:4f:94:a8:52:5d:b5:c2:fe:46:31:41:0f: 1b:38:74:0b:56:44:e8:d5:a4:54:3e:dc:a1:e5:67:ed:cd:ea: ec:4f:89:b9:37:b0:78:47:1a:3b:c3:1e:d4:64:04:61:5a:99: 4c:55:a7:2a:ee:cc:33:d4:52:86:16:59:ac:06:77:36:4b:c9: 37:1e:47:1f:75:fa:08:74:94:87:93:21:d1:f5:d4:44:69:14: 21:90:89:f6:ad:29:fe:02:79:f0:9b:b7:7c:7b:6f:bb:ee:09: ec:90:18:4d:68:1a:8d:34:1e:04:c9:f2:05:53:66:3e:56:8e: f0:cd:b9:aa:6b:d1:cf:c8:26:60:cb:e1:5b:25:bb:4a:03:1f: 6e:a3:80:51:26:26:98:aa:23:1c:4c:e0:74:55:99:ea:37:da: e5:3f:32:c4:89:1f:74:02:48:ff:f2:e6:e1:47:ca:73:ba:74: b4:5f:c2:8b:9a:2e:3d:45:67:12:84:b2:3e:05:29:b2:ac:2d: 67:33:e1:0d:f3:34:f8:8b:1f:59:b4:c6:55:86:18:3e:71:66: 4f:1c:10:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUwNzIxMDYzNjM5WhcNMjUwNzI4MDYzNjM5WjAYMRYwFAYD VQQDEw02ODdkZGZmNy05MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkd0vt0wr8MLmxagw2kQrCsSuORr02IW+ByF9493ihaFDjIZG33tpvkTuLAB QbEqaSHlyMm8NMlWiJ6CIXmltdywpOMH4Uncx0eM8KyUtRfBZKY1rUmoCK2hbOos 4a2PrxfGh3wxu9vuy3fyna2wFTV7NLLZxvbFM4NjJCcTk+5kVLWZfVysrZQJ9lN1 KItFzHB2LT3+hJKKKp34a28+SznZ4lZKfA7s4Lz4iRz7Y5EWIZejNyifbRvnRdYy bbwR0Asfp2Hkh2Ex6IVmIeKByze9YELHcCit7LnF/woJJj5nmPLmnKg/OX9KuzJz CwvIReOKw62g6uRZ3vk4flv9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxBTJKs cOzwrj+CtSq9jyTpn+s5MB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2WebqlMNmV4oYHMcyauGsQHPS5ghvusgd4SVpCWuYIbEl6xkwTNrF /h1PlKhSXbXC/kYxQQ8bOHQLVkTo1aRUPtyh5WftzersT4m5N7B4Rxo7wx7UZARh WplMVacq7swz1FKGFlmsBnc2S8k3HkcfdfoIdJSHkyHR9dREaRQhkIn2rSn+Annw m7d8e2+77gnskBhNaBqNNB4EyfIFU2Y+Vo7wzbmqa9HPyCZgy+FbJbtKAx9uo4BR JiaYqiMcTOB0VZnqN9rlPzLEiR90Akj/8ubhR8pzunS0X8KLmi49RWcShLI+BSmy rC1nM+EN8zT4ix9ZtMZVhhg+cWZPHBB1 -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:13 2025 by rpki-client