$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: yyWT+AWfV1sDyqZFKnAlGrUGznthUIqBPsIlXvjuraQ= Subject key identifier: AF:1C:73:5E:22:70:30:2D:B0:50:2A:59:29:85:10:B9:94:1A:C1:E3 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 34B2 Signing time: Sun 20 Jul 2025 15:07:50 +0000 Manifest this update: Sun 20 Jul 2025 15:07:50 +0000 Manifest next update: Sun 27 Jul 2025 15:07:50 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: ErqMFR2ebGJHNQywuxjQaOD4HJ93S0+GdZY6YqKbG9E=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Jul 20 15:07:50 2025 GMT Not After : Jul 27 15:07:50 2025 GMT Subject: CN=687d0646-3017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:6b:b9:63:8b:44:4e:21:2c:71:1e:94:db: ca:a1:fd:20:6b:d5:74:a3:8d:13:a6:ec:99:d8:3d: 81:32:0c:21:f2:72:cf:2f:95:46:30:dc:6d:28:7c: 55:37:0d:fd:16:44:e3:c8:d9:47:22:da:fd:0a:c4: 0b:36:97:9d:0a:18:68:e8:c4:ad:b3:5c:16:a4:34: 7f:56:d1:17:da:ae:a2:c4:da:49:ed:d5:40:a9:57: e9:06:2b:38:ae:a9:c3:74:04:85:ad:8a:1c:41:e1: 95:5f:6e:fa:e0:4d:92:69:97:8a:96:a0:94:b3:36: 5f:f0:53:af:97:a4:2d:8d:56:7b:f0:87:bc:b8:88: 7d:3e:87:e4:f7:63:9e:cd:eb:44:3b:ae:24:34:7b: 88:59:66:83:c5:8b:23:57:cf:d0:35:75:29:c0:f1: 42:bd:be:d4:a8:45:2b:07:3d:d5:d1:12:0a:72:44: 15:b1:3c:45:d4:34:53:40:69:e5:cd:2b:08:6a:4c: 98:5a:28:d0:63:ce:9c:cd:49:6e:51:19:22:15:ee: 0d:96:17:a2:ff:21:aa:de:e6:e6:cb:e1:9f:33:58: 2c:44:83:37:3c:3a:38:5b:05:ff:18:d4:51:0f:75: fa:1d:01:b5:ee:c3:a4:2f:91:f9:87:0e:d3:d6:75: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1C:73:5E:22:70:30:2D:B0:50:2A:59:29:85:10:B9:94:1A:C1:E3 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:07:96:dc:b9:85:02:a0:1c:f0:16:00:33:a5:ad:e2:9d:b5: 48:28:0f:8d:b2:55:00:1e:a5:68:c6:8e:c9:b6:f1:65:0b:28: bb:79:cd:ab:dc:18:2d:bb:56:0a:64:90:ff:0e:8e:27:b2:dd: 06:95:d1:03:36:6d:1b:08:94:c2:a0:02:27:1d:76:80:bc:a6: 7e:3e:40:a3:58:77:49:75:a7:33:e7:01:1d:f1:61:a5:f3:24: de:72:8f:bb:10:00:68:8e:4c:a9:c0:32:53:8d:70:a1:11:89: d8:4b:d7:8a:2d:22:6b:e2:86:12:4e:ca:bc:b8:dc:83:fb:e5: 0a:86:fe:c6:57:32:34:1a:30:50:22:79:42:de:2b:c0:28:54: 69:ff:6c:92:ae:b0:e5:38:ab:b2:67:7d:93:68:d8:27:6f:b6: a3:6e:d9:19:6a:10:a7:cc:42:46:8a:c5:17:d5:b1:32:67:9f: b3:67:cc:92:09:d9:8d:63:b4:35:f7:c6:d3:ef:e8:7a:e7:23: 94:ec:55:42:45:af:14:b6:5a:23:6e:a9:36:53:e4:f8:31:ca: 52:34:c3:1c:f9:d0:54:f9:16:55:36:3b:8e:95:f7:e9:21:d4: a9:fb:af:7e:a4:cb:94:4e:59:12:36:30:df:75:7d:ed:26:de: 0e:9f:6a:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUwNzIwMTUwNzUwWhcNMjUwNzI3MTUwNzUwWjAYMRYwFAYD VQQDEw02ODdkMDY0Ni0zMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YpruWOLRE4hLHEelNvKof0ga9V0o40TpuyZ2D2BMgwh8nLPL5VGMNxtKHxV Nw39FkTjyNlHItr9CsQLNpedChho6MSts1wWpDR/VtEX2q6ixNpJ7dVAqVfpBis4 rqnDdASFrYocQeGVX2764E2SaZeKlqCUszZf8FOvl6QtjVZ78Ie8uIh9Pofk92Oe zetEO64kNHuIWWaDxYsjV8/QNXUpwPFCvb7UqEUrBz3V0RIKckQVsTxF1DRTQGnl zSsIakyYWijQY86czUluURkiFe4Nlhei/yGq3ubmy+GfM1gsRIM3PDo4WwX/GNRR D3X6HQG17sOkL5H5hw7T1nVHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8cc14i cDAtsFAqWSmFELmUGsHjMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPB5bcuYUCoBzwFgAzpa3inbVIKA+NslUAHqVoxo7JtvFlCyi7ec2r 3Bgtu1YKZJD/Do4nst0GldEDNm0bCJTCoAInHXaAvKZ+PkCjWHdJdacz5wEd8WGl 8yTeco+7EABojkypwDJTjXChEYnYS9eKLSJr4oYSTsq8uNyD++UKhv7GVzI0GjBQ InlC3ivAKFRp/2ySrrDlOKuyZ32TaNgnb7ajbtkZahCnzEJGisUX1bEyZ5+zZ8yS CdmNY7Q198bT7+h65yOU7FVCRa8Utlojbqk2U+T4McpSNMMc+dBU+RZVNjuOlffp IdSp+69+pMuUTlkSNjDfdX3tJt4On2o9 -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:00 2025 by rpki-client