$ rpki-client -vvf rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft File: dS97SFPDqcnwf9naxduWq37y398.mft (raw, json) Hash identifier: alsndZnVODMM7kMpvxnMhc/qlZVZj+u+4mYBDlaX8oU= Subject key identifier: AF:B7:C5:38:64:8B:56:42:18:36:58:09:A7:02:98:B5:5F:FA:D5:48 Authority key identifier: 75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF Certificate issuer: /CN=A913979C/serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF Certificate serial: 03AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft Manifest number: 03AA Signing time: Sat 19 Jul 2025 01:10:21 +0000 Manifest this update: Sat 19 Jul 2025 01:10:20 +0000 Manifest next update: Sat 26 Jul 2025 01:10:20 +0000 Files and hashes: 1: dS97SFPDqcnwf9naxduWq37y398.crl (hash: /oeQglnPgRpcwJBF9EIY5T/YcQmExF/WN1vYvjKJ0yw=) 2: 6A4842A69F8611ECBE806D30C4F9AE02.roa (hash: PnZSd5l+/+pyz3RF/E5oGXl/J+6fJIlT1AXrdodZWuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 943 (0x3af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913979C, serialNumber=752F7B4853C3A9C9F07FD9DAC5DB96AB7EF2DFDF Validity Not Before: Jul 19 01:10:20 2025 GMT Not After : Jul 26 01:10:20 2025 GMT Subject: CN=687af07c-1d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:a1:7d:66:07:93:c3:5c:eb:7f:c1:3a:06: 1e:55:02:f2:51:05:5a:86:a3:32:4c:f9:2f:b8:d1: 2f:18:59:8b:58:1f:3c:17:23:b7:3f:e0:d6:bd:34: f4:e8:0a:d1:23:f1:34:31:9d:db:e6:7e:5f:b5:7e: 7e:cf:f3:3b:46:5c:56:a8:4d:01:26:36:99:ac:7d: 87:5c:51:72:87:56:52:d3:d7:04:e2:67:a0:99:47: c3:8e:dc:8e:85:50:03:f2:e0:84:7e:c4:39:d2:2f: 66:a2:3d:0c:fe:47:00:32:ca:9b:dd:d3:a4:06:c2: 46:9e:ae:f3:34:cd:44:4f:81:94:96:9b:2c:f5:a3: 8a:46:30:6a:5a:fd:0f:10:54:e3:e6:ac:b7:e0:f3: c0:58:5c:87:8a:b0:4f:d5:b2:f7:a6:0f:9a:7a:80: 92:3b:48:15:cf:d9:c5:46:09:4b:2c:4e:c0:78:bc: c8:8c:3d:29:0a:c7:90:ea:67:55:7f:68:0a:d6:dc: c1:93:f7:20:b1:a8:b6:b0:98:45:ce:ac:9b:4a:cc: 03:2d:26:11:26:8a:b6:6a:53:f8:fd:7e:2f:11:66: 60:30:00:3f:41:2b:c0:20:40:f2:b2:98:85:84:08: 38:89:9b:99:4e:82:28:c6:89:a4:ab:52:10:a7:ea: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:C5:38:64:8B:56:42:18:36:58:09:A7:02:98:B5:5F:FA:D5:48 X509v3 Authority Key Identifier: keyid:75:2F:7B:48:53:C3:A9:C9:F0:7F:D9:DA:C5:DB:96:AB:7E:F2:DF:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dS97SFPDqcnwf9naxduWq37y398.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913979C/B9C958B89F8311EC83F76229C4F9AE02/dS97SFPDqcnwf9naxduWq37y398.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7b:ac:a0:84:b3:64:6a:bc:ae:e0:8c:f1:9d:42:f0:e7:48: c8:03:a2:b0:94:88:17:6a:fa:04:fd:2d:08:76:c3:9a:d9:c5: 7c:b3:5f:12:77:dc:93:f9:20:1c:a7:ab:61:3c:c1:7b:2f:78: 89:c0:74:5c:8a:8d:d6:ba:c1:f5:b7:e4:5b:2d:1e:20:be:4d: 18:49:a9:80:9b:63:3f:2b:2c:dd:80:32:78:65:e3:2d:bd:a7: c2:c2:8b:c3:2f:97:56:11:85:7c:76:0b:88:dc:13:7f:af:92: 3d:97:be:eb:28:20:f3:2e:d6:04:9f:bc:3a:a1:c0:51:70:2d: b8:61:c5:73:4b:9a:b6:97:5d:c2:e2:2f:6a:9b:ae:52:1b:d8: f2:1c:3a:f6:48:dd:25:12:95:9c:35:22:62:13:64:bd:7f:85: 50:d0:b6:bd:7a:74:59:f6:32:04:4f:aa:20:bc:4f:1e:17:b0: 26:20:a5:73:8f:60:08:17:c4:2a:5c:29:52:ee:0d:5c:ee:bc: 5a:b8:33:15:ad:01:8c:29:34:79:83:ee:34:c9:e2:d4:c5:db: a0:9a:65:f7:f5:59:18:75:8c:20:76:8a:87:5f:09:7e:51:09: 19:f2:3c:49:1e:5e:ae:43:d7:6c:1b:fe:e6:47:7b:42:33:6f: a5:16:0c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3OUMxMTAvBgNVBAUTKDc1MkY3QjQ4NTNDM0E5QzlGMDdGRDlEQUM1REI5NkFC N0VGMkRGREYwHhcNMjUwNzE5MDExMDIwWhcNMjUwNzI2MDExMDIwWjAYMRYwFAYD VQQDEw02ODdhZjA3Yy0xZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaChfWYHk8Nc63/BOgYeVQLyUQVahqMyTPkvuNEvGFmLWB88FyO3P+DWvTT0 6ArRI/E0MZ3b5n5ftX5+z/M7RlxWqE0BJjaZrH2HXFFyh1ZS09cE4megmUfDjtyO hVAD8uCEfsQ50i9moj0M/kcAMsqb3dOkBsJGnq7zNM1ET4GUlpss9aOKRjBqWv0P EFTj5qy34PPAWFyHirBP1bL3pg+aeoCSO0gVz9nFRglLLE7AeLzIjD0pCseQ6mdV f2gK1tzBk/cgsai2sJhFzqybSswDLSYRJoq2alP4/X4vEWZgMAA/QSvAIEDyspiF hAg4iZuZToIoxomkq1IQp+r+3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+3xThk i1ZCGDZYCacCmLVf+tVIMB8GA1UdIwQYMBaAFHUve0hTw6nJ8H/Z2sXblqt+8t/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTc5Qy9COUM5NThCODlG ODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFjbndmOW5heGR1V3EzN3kz OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTOTdTRlBEcWNud2Y5bmF4ZHVXcTM3eTM5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTc5Qy9COUM5NThCODlGODMxMUVDODNGNzYyMjlDNEY5QUUwMi9kUzk3U0ZQRHFj bndmOW5heGR1V3EzN3kzOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUe6yghLNkaryu4IzxnULw50jIA6KwlIgXavoE/S0IdsOa2cV8s18S d9yT+SAcp6thPMF7L3iJwHRcio3WusH1t+RbLR4gvk0YSamAm2M/KyzdgDJ4ZeMt vafCwovDL5dWEYV8dguI3BN/r5I9l77rKCDzLtYEn7w6ocBRcC24YcVzS5q2l13C 4i9qm65SG9jyHDr2SN0lEpWcNSJiE2S9f4VQ0La9enRZ9jIET6ogvE8eF7AmIKVz j2AIF8QqXClS7g1c7rxauDMVrQGMKTR5g+40yeLUxdugmmX39VkYdYwgdoqHXwl+ UQkZ8jxJHl6uQ9dsG/7mR3tCM2+lFgz6 -----END CERTIFICATE-----Generated at Sun Jul 20 06:21:59 2025 by rpki-client