$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json) Hash identifier: F58z27wEzsgvhyIPYrOdJMZNijJYntxN9i9gwnnZdpM= Subject key identifier: C0:63:7E:86:D9:C5:D9:C4:64:06:4F:8F:94:01:3E:DC:44:42:7C:F2 Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft Manifest number: 0162 Signing time: Mon 21 Jul 2025 04:01:49 +0000 Manifest this update: Mon 21 Jul 2025 04:01:49 +0000 Manifest next update: Mon 28 Jul 2025 04:01:49 +0000 Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: BQoAy30KxNonlwhiuRkxsPdEfTvdU5+QTklVRxUGAkU=) 2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A Validity Not Before: Jul 21 04:01:49 2025 GMT Not After : Jul 28 04:01:49 2025 GMT Subject: CN=687dbbad-0498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:d1:d5:3d:72:c6:13:20:15:4d:43:76:81: d3:ef:74:ce:b8:5c:c7:c3:5e:34:85:86:e7:43:32: 87:f4:8a:d2:96:a2:f6:45:c8:fb:b7:80:4d:1b:03: 0b:a4:c0:d0:1b:94:0e:54:cb:11:a4:0e:0c:d6:13: 63:c6:ca:e9:a8:7c:3a:4d:e1:59:bc:da:64:75:1f: 6e:8c:e1:6e:e5:31:66:fb:3f:9c:cb:81:2e:4e:9c: 61:0b:fc:e3:be:9b:6b:2c:4d:e1:88:06:01:8a:15: df:c9:c0:32:09:1b:da:cf:fb:bb:51:76:d1:ed:ee: 42:24:f1:7d:b8:38:32:38:5e:75:c1:40:be:d6:9e: 6e:14:dd:04:33:fc:dc:d4:24:7c:d3:8a:54:40:90: 5e:38:a3:20:ca:d4:e0:6a:f9:bd:1a:61:07:c0:b1: 66:05:5a:33:65:c1:7d:ce:86:fa:64:67:39:81:2c: 26:1b:bc:cf:45:c1:aa:67:c1:23:72:6f:d6:a9:de: 1c:54:26:f3:cb:51:a4:d6:b8:a8:42:fc:8a:9c:f6: c1:12:38:b4:97:c7:d5:18:35:ab:63:36:b8:a6:4f: 0d:6d:41:9e:7b:71:3f:80:b3:f3:95:a2:3c:a1:fe: 60:ce:2d:ae:42:a3:88:0c:fe:b0:1d:63:dc:92:93: 5b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:7E:86:D9:C5:D9:C4:64:06:4F:8F:94:01:3E:DC:44:42:7C:F2 X509v3 Authority Key Identifier: keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:08:64:53:6f:be:e3:e5:67:e7:56:ea:34:21:f9:a2:c2:ff: 22:d3:10:4e:a0:97:15:dc:fd:41:63:22:1b:da:1a:85:a6:71: af:5e:98:b0:01:a3:06:18:c9:b1:bf:66:86:95:5a:0a:07:7b: cc:4f:eb:d2:9e:a8:4a:e0:a9:e4:a4:86:e2:23:2e:2e:2a:f2: 69:03:29:b6:e9:91:a7:71:49:a5:21:5f:a3:b5:e4:02:eb:0f: a8:9f:e3:8b:4f:e8:60:9c:7b:5d:48:f6:ee:4c:7d:e7:62:24: 3e:3d:2e:7b:ac:eb:46:d5:33:c3:da:e3:1a:25:3f:ea:ae:cb: 34:91:51:13:7e:31:67:1a:ed:e1:05:de:c8:92:95:3e:58:b1: a3:e7:7a:4d:bb:7a:93:e4:6c:84:8f:81:07:8b:7d:09:86:98: 69:43:c3:c6:9a:a2:0b:0f:30:66:7e:42:34:d4:d7:29:8b:c1: 5f:8b:03:cf:96:e8:0f:b4:e5:a2:2a:77:1c:0d:f4:2a:36:ec: e8:bb:32:e1:47:7a:4f:37:e2:01:db:25:75:e4:41:1b:f3:40: 67:7c:94:75:1b:f9:18:43:27:3c:1b:e8:2b:b1:ba:68:7b:ad: 0d:27:9b:2e:72:73:15:b0:2f:3e:87:88:33:c5:76:42:cb:bb: ea:6b:74:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG NTAwNTFFOUEwHhcNMjUwNzIxMDQwMTQ5WhcNMjUwNzI4MDQwMTQ5WjAYMRYwFAYD VQQDEw02ODdkYmJhZC0wNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuzR1T1yxhMgFU1DdoHT73TOuFzHw140hYbnQzKH9IrSlqL2Rcj7t4BNGwML pMDQG5QOVMsRpA4M1hNjxsrpqHw6TeFZvNpkdR9ujOFu5TFm+z+cy4EuTpxhC/zj vptrLE3hiAYBihXfycAyCRvaz/u7UXbR7e5CJPF9uDgyOF51wUC+1p5uFN0EM/zc 1CR804pUQJBeOKMgytTgavm9GmEHwLFmBVozZcF9zob6ZGc5gSwmG7zPRcGqZ8Ej cm/Wqd4cVCbzy1Gk1rioQvyKnPbBEji0l8fVGDWrYza4pk8NbUGee3E/gLPzlaI8 of5gzi2uQqOIDP6wHWPckpNbqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBjfobZ xdnEZAZPj5QBPtxEQnzyMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3 M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNCGRTb77j5WfnVuo0Ifmiwv8i0xBOoJcV3P1BYyIb2hqFpnGvXpiw AaMGGMmxv2aGlVoKB3vMT+vSnqhK4KnkpIbiIy4uKvJpAym26ZGncUmlIV+jteQC 6w+on+OLT+hgnHtdSPbuTH3nYiQ+PS57rOtG1TPD2uMaJT/qrss0kVETfjFnGu3h Bd7IkpU+WLGj53pNu3qT5GyEj4EHi30JhphpQ8PGmqILDzBmfkI01Ncpi8FfiwPP lugPtOWiKnccDfQqNuzouzLhR3pPN+IB2yV15EEb80BnfJR1G/kYQyc8G+grsbpo e60NJ5sucnMVsC8+h4gzxXZCy7vqa3TY -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:26 2025 by rpki-client