$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: z1/V15uTTqtcJEeJWZuENrlt9qYvPgVC56E+wZ3uDA0= Subject key identifier: 47:A9:71:86:15:32:17:11:EF:DD:5C:7C:DC:1D:52:DD:6F:5D:DD:85 Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 01DC Signing time: Sat 19 Jul 2025 02:54:56 +0000 Manifest this update: Sat 19 Jul 2025 02:54:55 +0000 Manifest next update: Sat 26 Jul 2025 02:54:55 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: cfjP4Jv0d4ly4DR/gT4XPJLsSSjedBPkdyg2aqMFcBo=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: Jul 19 02:54:55 2025 GMT Not After : Jul 26 02:54:55 2025 GMT Subject: CN=687b08ff-a9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:f6:8b:9c:6d:66:27:d7:4f:49:c3:ca:a6: c9:f9:dd:06:ec:1f:62:9f:a9:b9:2b:f8:6b:39:a4: 72:07:d1:1c:2e:e7:fd:69:f9:87:f5:89:11:5e:89: b0:b4:e5:b5:40:8f:8b:cb:df:ee:b2:44:47:95:f5: 4f:1c:b7:97:7b:81:34:e3:50:1f:12:9f:5e:88:34: 31:0c:7b:0e:3b:c6:2b:49:2e:b1:ca:61:7f:ea:74: 8b:65:79:34:ac:07:e1:96:3d:e6:f1:46:0c:87:f2: ef:a8:03:e1:dc:2d:7b:90:f8:69:4c:d8:99:c4:21: ad:e0:80:b2:03:67:00:fc:ad:2f:3a:6f:ef:0c:6e: 06:54:9d:18:b0:a0:32:d6:10:49:1b:3d:70:2b:1f: 82:04:53:76:10:cf:7d:b1:7b:71:49:18:e5:94:42: 2e:b1:99:24:2b:11:0f:db:62:59:97:16:e0:91:f3: 90:3d:c0:ad:e7:a6:96:5f:da:e2:ac:4f:cc:37:11: 94:47:71:f0:7f:9e:31:f3:9f:28:5b:25:57:3b:f2: 30:57:70:c1:9c:9f:bd:ec:b6:ef:8a:01:61:fd:e7: ba:00:f9:ea:e0:7a:24:b8:ac:a7:01:76:8d:2a:0f: 25:1f:03:7d:dd:e4:59:ea:15:58:b2:e5:fd:ea:d5: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:71:86:15:32:17:11:EF:DD:5C:7C:DC:1D:52:DD:6F:5D:DD:85 X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8a:65:0c:39:fc:04:e1:91:a0:65:c7:11:87:eb:60:fc:39: ea:8a:fa:09:6b:63:f6:f7:cc:8b:4c:16:4b:3e:c0:a4:a0:50: c7:02:70:a0:fa:83:6a:43:aa:51:ec:56:f9:76:5c:6d:37:57: ca:5a:95:a6:b5:52:05:28:3b:a4:a4:0f:e2:4d:0f:98:8a:10: 94:9b:95:06:d7:5e:b1:59:38:39:05:bc:a5:9f:63:e7:ed:4b: a2:4c:06:ac:bc:a4:dc:8f:b5:7d:fe:f8:24:d3:2c:98:44:a3: fb:f0:5c:7d:eb:63:12:27:39:fd:31:d3:c1:be:b4:1c:ab:94: 09:bb:01:c5:1e:5b:47:75:df:0a:aa:46:97:8e:07:e8:5f:4a: 95:40:1d:14:15:04:93:e1:5d:86:72:6a:52:a4:1f:fe:ef:a5: 43:3e:11:a0:21:20:92:cc:36:c9:38:2b:a5:a5:f8:5e:fe:43: 30:45:af:95:9f:c0:e3:02:45:f0:b8:0b:3b:88:76:79:4b:44: 76:8f:af:6f:99:e0:29:fb:10:79:4c:fa:8b:81:d0:4e:1a:a8: ea:5c:be:a9:12:2f:69:b3:11:b2:1f:77:0d:3a:2a:9d:51:c5: 61:5d:1d:5f:b0:b5:99:e4:af:a4:c3:b9:14:fc:86:e3:e0:1e: c5:5b:08:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjUwNzE5MDI1NDU1WhcNMjUwNzI2MDI1NDU1WjAYMRYwFAYD VQQDEw02ODdiMDhmZi1hOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybH2i5xtZifXT0nDyqbJ+d0G7B9in6m5K/hrOaRyB9EcLuf9afmH9YkRXomw tOW1QI+Ly9/uskRHlfVPHLeXe4E041AfEp9eiDQxDHsOO8YrSS6xymF/6nSLZXk0 rAfhlj3m8UYMh/LvqAPh3C17kPhpTNiZxCGt4ICyA2cA/K0vOm/vDG4GVJ0YsKAy 1hBJGz1wKx+CBFN2EM99sXtxSRjllEIusZkkKxEP22JZlxbgkfOQPcCt56aWX9ri rE/MNxGUR3Hwf54x858oWyVXO/IwV3DBnJ+97LbvigFh/ee6APnq4HokuKynAXaN Kg8lHwN93eRZ6hVYsuX96tWdoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEepcYYV MhcR791cfNwdUt1vXd2FMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAximUMOfwE4ZGgZccRh+tg/DnqivoJa2P298yLTBZLPsCkoFDHAnCg +oNqQ6pR7Fb5dlxtN1fKWpWmtVIFKDukpA/iTQ+YihCUm5UG116xWTg5Bbyln2Pn 7UuiTAasvKTcj7V9/vgk0yyYRKP78Fx962MSJzn9MdPBvrQcq5QJuwHFHltHdd8K qkaXjgfoX0qVQB0UFQST4V2GcmpSpB/+76VDPhGgISCSzDbJOCulpfhe/kMwRa+V n8DjAkXwuAs7iHZ5S0R2j69vmeAp+xB5TPqLgdBOGqjqXL6pEi9psxGyH3cNOiqd UcVhXR1fsLWZ5K+kw7kU/Ibj4B7FWwjY -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:38 2025 by rpki-client