$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft File: ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json) Hash identifier: riXNteQBKStBraCAFuBnczjkC9daAQF4CL0YeQqU8Qs= Subject key identifier: 65:96:60:1D:72:EE:EA:37:C9:72:17:90:18:48:DF:32:84:5E:FD:0D Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C Certificate issuer: /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft Manifest number: 063D Signing time: Fri 18 Jul 2025 23:00:51 +0000 Manifest this update: Fri 18 Jul 2025 23:00:51 +0000 Manifest next update: Fri 25 Jul 2025 23:00:51 +0000 Files and hashes: 1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: bqTe5jH+aSUmCOdcscnZOVI6BDZS0zCMMYtVpLEp7VY=) 2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: vieZUpQmzzJOorTO/HBg3bT9si532rk94383Z2tZWNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C437, serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C Validity Not Before: Jul 18 23:00:51 2025 GMT Not After : Jul 25 23:00:51 2025 GMT Subject: CN=687ad223-9c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:3e:de:9a:78:d6:9c:76:57:3d:a0:b3:cb: 0d:e1:64:79:11:eb:ec:de:b5:04:73:56:0f:7d:96: 98:74:86:8d:70:df:5f:d6:9d:db:48:c7:a5:fb:01: aa:d5:c0:fe:b3:e5:09:a9:b5:ec:60:d1:6f:b6:81: a0:4d:f1:2b:30:f7:10:d4:f1:99:3a:bd:82:78:d0: 60:54:1f:62:31:b3:92:30:0f:a1:57:7a:fd:f8:1f: 37:24:8b:3e:54:85:1c:ce:f0:d0:2d:f3:aa:d3:65: c6:06:7c:fc:19:d6:8b:03:90:5b:78:e1:8c:d1:d9: 4a:a4:1e:a0:61:d5:57:4b:db:ea:ca:cb:4f:49:0c: b8:5c:63:b9:ab:3a:05:8a:5d:6b:93:41:4c:ae:9e: 0b:c0:81:5e:a1:a6:ae:52:8a:69:86:55:73:25:f2: 6f:3a:0b:5f:f2:75:b8:b6:eb:55:87:77:8b:f1:45: 67:64:82:9f:50:8b:85:36:f4:e1:a0:84:c5:8a:f8: 4d:1f:48:ac:ac:8e:ea:1f:4e:5e:ca:93:33:0c:11: ad:c8:bc:ae:32:fe:14:3e:14:3e:77:c4:5c:50:3c: 04:94:6c:b7:68:f1:68:e0:76:8d:7b:14:53:58:1e: 94:60:bb:80:91:29:ab:0c:d7:41:54:7b:c7:91:1a: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:60:1D:72:EE:EA:37:C9:72:17:90:18:48:DF:32:84:5E:FD:0D X509v3 Authority Key Identifier: keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:56:fb:eb:5f:26:df:9d:b0:a0:99:1f:70:38:7d:d5:8c:45: 07:3f:da:25:6b:85:63:a3:7b:d4:76:0c:a6:38:cf:0d:fc:76: 2b:f2:56:07:26:fa:3e:4d:ac:08:21:0b:da:7f:4c:68:7b:db: 3c:ed:f6:3e:9a:34:ce:1c:af:0f:a2:53:c0:40:cd:d5:25:0b: 90:75:b9:cc:df:0f:cf:4c:ed:ad:bc:60:f3:02:5f:a8:eb:6e: b7:2b:8b:a0:b0:4a:10:24:e5:42:13:de:55:ac:62:cc:71:be: be:ad:a4:68:75:3e:69:3a:8e:4e:fb:73:0c:24:da:7c:f9:ef: 0d:5c:e8:18:a9:62:14:35:21:26:b0:15:f5:58:de:9f:2d:ca: 39:cd:e2:ba:4a:42:e9:c8:28:89:99:81:79:a7:4f:5d:36:3b: 64:65:7a:30:06:72:e0:a6:69:ad:53:ac:d0:d7:73:05:43:0c: bd:a6:dc:ca:e1:86:a2:02:c5:09:e7:8a:6c:f3:50:56:e2:11: 95:b7:f8:8a:6e:81:b5:01:ea:33:f6:bb:6d:96:57:9f:aa:1a: 13:20:d3:69:90:af:8f:8c:89:b3:2c:34:58:92:6a:e1:e3:e5: bf:63:48:2a:b4:bd:64:5d:ba:f3:1e:21:b6:92:0e:06:26:94: 3d:81:3a:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzcxMTAvBgNVBAUTKDc5REYxMDI1MzUzNUYwRDY3RkExMURCNjhBNEM3NjM0 QUE2QTQ0N0MwHhcNMjUwNzE4MjMwMDUxWhcNMjUwNzI1MjMwMDUxWjAYMRYwFAYD VQQDEw02ODdhZDIyMy05YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTs+3pp41px2Vz2gs8sN4WR5Eevs3rUEc1YPfZaYdIaNcN9f1p3bSMel+wGq 1cD+s+UJqbXsYNFvtoGgTfErMPcQ1PGZOr2CeNBgVB9iMbOSMA+hV3r9+B83JIs+ VIUczvDQLfOq02XGBnz8GdaLA5BbeOGM0dlKpB6gYdVXS9vqystPSQy4XGO5qzoF il1rk0FMrp4LwIFeoaauUopphlVzJfJvOgtf8nW4tutVh3eL8UVnZIKfUIuFNvTh oITFivhNH0isrI7qH05eypMzDBGtyLyuMv4UPhQ+d8RcUDwElGy3aPFo4HaNexRT WB6UYLuAkSmrDNdBVHvHkRrAMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWWYB1y 7uo3yXIXkBhI3zKEXv0NMB8GA1UdIwQYMBaAFHnfECU1NfDWf6EdtopMdjSqakR8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzNy82NjNEMTgzRTlD RDExMUVCQThEMEJCNTdDNEY5QUUwMi9lZDhRSlRVMThOWl9vUjIyaWt4Mk5LcHFS SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkOFFKVFUxOE5aX29SMjJpa3gyTktwcVJIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzNy82NjNEMTgzRTlDRDExMUVCQThEMEJCNTdDNEY5QUUwMi9lZDhRSlRVMThO Wl9vUjIyaWt4Mk5LcHFSSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkVvvrXybfnbCgmR9wOH3VjEUHP9ola4Vjo3vUdgymOM8N/HYr8lYH Jvo+TawIIQvaf0xoe9s87fY+mjTOHK8PolPAQM3VJQuQdbnM3w/PTO2tvGDzAl+o 6263K4ugsEoQJOVCE95VrGLMcb6+raRodT5pOo5O+3MMJNp8+e8NXOgYqWIUNSEm sBX1WN6fLco5zeK6SkLpyCiJmYF5p09dNjtkZXowBnLgpmmtU6zQ13MFQwy9ptzK 4YaiAsUJ54ps81BW4hGVt/iKboG1Aeoz9rttllefqhoTINNpkK+PjImzLDRYkmrh 4+W/Y0gqtL1kXbrzHiG2kg4GJpQ9gTr4 -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:40 2025 by rpki-client