$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: H9YKgNnqLKG3Xpg6Eg6Mglr89kimCZigRsGNn3gtbXA= Subject key identifier: FA:82:E8:08:23:ED:AF:90:E5:30:79:AF:58:45:7E:5A:24:A6:E4:64 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 046D Signing time: Sat 19 Jul 2025 00:30:24 +0000 Manifest this update: Sat 19 Jul 2025 00:30:24 +0000 Manifest next update: Sat 26 Jul 2025 00:30:24 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: ItcUpAEzb1RIfjo2+FC4hENs/V3Brus741wzqJQ1l9M=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Jul 19 00:30:24 2025 GMT Not After : Jul 26 00:30:24 2025 GMT Subject: CN=687ae720-40f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:c7:2a:76:f0:c0:f5:91:23:da:ec:e8:3e: e4:63:1d:6d:1f:bd:8c:bf:44:95:0a:c6:71:e4:54: 69:9e:69:c3:2b:4f:53:7e:55:7f:f1:74:21:2f:20: 0d:f1:55:f8:94:df:49:99:90:33:d6:ce:0c:fc:38: 53:e1:d9:a6:ed:51:7a:64:61:8d:8a:ef:75:4b:54: a0:11:5c:96:46:6f:3e:82:1a:cd:c5:6d:92:60:fa: 32:57:28:2d:c0:74:4f:28:2d:ec:8a:46:4f:89:2c: 40:6d:28:d6:20:5d:27:e5:bf:f9:a0:f0:5d:00:3e: 5b:72:f6:9c:48:c7:b2:89:3b:6f:b1:6a:9f:ae:2b: 4e:aa:22:a8:b1:84:2a:d6:2b:c0:f6:fe:e0:06:46: 48:a9:92:42:e1:9e:53:cd:b4:c1:ec:09:ac:9b:95: 13:fe:ae:a1:eb:04:3a:84:71:a7:1e:95:79:9c:e9: b6:46:c0:90:e1:d1:d3:8a:64:7d:83:69:34:79:a2: a2:6e:b8:b0:30:34:fc:a0:fa:e1:f2:2d:94:c7:ad: 39:11:60:dd:7e:b2:9a:7f:d6:ca:c9:9d:51:ef:03: d5:b8:72:49:c3:39:12:df:cb:36:0d:df:80:55:d4: 2d:ea:9a:d0:9b:48:00:6f:e2:af:13:c4:82:00:84: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:82:E8:08:23:ED:AF:90:E5:30:79:AF:58:45:7E:5A:24:A6:E4:64 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:ff:67:1e:2e:4f:ad:0a:0a:90:f3:b0:9c:2c:9f:00:d0: 61:0b:c4:bc:4d:1d:ec:f5:d3:b8:86:b0:11:e6:96:7c:38:d9: 11:de:a8:b1:a5:d6:b8:6b:6a:e1:d2:ac:4b:ea:09:05:b8:4a: 5c:b2:b0:82:a0:7a:49:9d:47:91:de:72:ea:0c:e5:95:20:a6: 45:60:58:10:f0:e3:a0:0d:3b:23:84:a4:4c:e1:18:04:df:1c: 91:98:07:70:86:03:f5:4c:34:3a:0f:ba:68:51:e8:2f:54:bf: 72:fa:53:96:3e:32:d6:d6:40:85:cb:49:14:14:a6:1b:62:06: 8f:fc:b5:b0:8c:a5:22:e1:fa:e1:24:2f:fe:99:7b:ec:38:6a: a4:a8:75:b6:9a:e9:73:b9:e9:7c:48:e1:b5:df:01:98:d7:e5: a1:a8:f4:bf:ac:7e:2b:20:2e:d4:26:d7:88:a8:e2:fd:e0:66: 1c:0e:02:77:56:f0:f6:b0:bd:9a:6f:9d:e5:7c:af:68:a2:cc: 09:49:9a:db:f4:2d:b0:9b:9e:a5:cc:61:6d:3e:0c:bc:15:ab: 88:37:8d:ed:de:fc:94:be:f2:77:e7:b4:b3:a8:f7:09:3a:dc: 55:b5:68:79:2f:c6:07:dd:79:dd:38:5f:dc:bd:22:cc:be:b5: 56:14:87:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwNzE5MDAzMDI0WhcNMjUwNzI2MDAzMDI0WjAYMRYwFAYD VQQDEw02ODdhZTcyMC00MGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JTHKnbwwPWRI9rs6D7kYx1tH72Mv0SVCsZx5FRpnmnDK09TflV/8XQhLyAN 8VX4lN9JmZAz1s4M/DhT4dmm7VF6ZGGNiu91S1SgEVyWRm8+ghrNxW2SYPoyVygt wHRPKC3sikZPiSxAbSjWIF0n5b/5oPBdAD5bcvacSMeyiTtvsWqfritOqiKosYQq 1ivA9v7gBkZIqZJC4Z5TzbTB7Amsm5UT/q6h6wQ6hHGnHpV5nOm2RsCQ4dHTimR9 g2k0eaKibriwMDT8oPrh8i2Ux605EWDdfrKaf9bKyZ1R7wPVuHJJwzkS38s2Dd+A VdQt6prQm0gAb+KvE8SCAIRjPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqC6Agj 7a+Q5TB5r1hFflokpuRkMB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbdf9nHi5PrQoKkPOwnCyfANBhC8S8TR3s9dO4hrAR5pZ8ONkR3qix pda4a2rh0qxL6gkFuEpcsrCCoHpJnUeR3nLqDOWVIKZFYFgQ8OOgDTsjhKRM4RgE 3xyRmAdwhgP1TDQ6D7poUegvVL9y+lOWPjLW1kCFy0kUFKYbYgaP/LWwjKUi4frh JC/+mXvsOGqkqHW2mulzuel8SOG13wGY1+WhqPS/rH4rIC7UJteIqOL94GYcDgJ3 VvD2sL2ab53lfK9ooswJSZrb9C2wm56lzGFtPgy8FauIN43t3vyUvvJ357SzqPcJ OtxVtWh5L8YH3XndOF/cvSLMvrVWFIcQ -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:08 2025 by rpki-client