$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: rv7Gj/X250jXslkl6K0GvHlfvEaqqeUVXo8x5SbyMBo= Subject key identifier: 55:02:71:A1:29:B0:9E:9B:95:F3:21:FC:B6:4B:8C:C3:B4:7D:C9:A4 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 8C Signing time: Mon 21 Jul 2025 06:45:08 +0000 Manifest this update: Mon 21 Jul 2025 06:45:08 +0000 Manifest next update: Mon 28 Jul 2025 06:45:08 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: aOsEwl6KaNOpuG6Z9iSXrU2HO0NIQAXXus6i359giUo=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Jul 21 06:45:08 2025 GMT Not After : Jul 28 06:45:08 2025 GMT Subject: CN=687de1f4-3560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:f5:87:5c:fa:2d:36:68:64:04:c0:24:93: a4:9c:d7:92:8b:5b:bb:a3:6d:1e:bf:9e:bd:26:6d: 4c:77:9c:e8:92:f4:da:90:39:45:1a:15:76:fa:38: 1e:96:fc:e0:a6:e2:66:02:e8:9f:86:52:dc:1e:30: d9:fb:b1:bd:43:38:77:94:58:3f:72:28:48:19:05: 1a:2e:f4:c0:ba:6e:df:eb:5a:4d:db:f2:44:ff:a1: ca:46:fa:4b:64:c1:f6:c0:74:0d:85:71:e6:e1:0a: af:fe:cb:a9:cf:a9:a2:77:94:72:c1:ed:96:d4:e3: d6:24:23:ed:78:ce:68:60:7e:d8:7b:42:bf:1b:62: 6e:df:7f:23:51:59:d3:d4:db:35:d1:c4:80:8a:bb: 0b:56:80:3f:62:f9:0b:2e:61:7a:1f:36:4c:35:9e: 63:7e:84:b1:3f:43:0a:42:5f:4e:36:cf:8b:d9:f6: fc:ff:d1:fd:8f:0b:e2:1e:52:e5:5c:b2:4f:e9:d7: fb:21:9d:b2:40:1f:61:c0:5d:80:76:b3:75:42:cc: 7e:8f:31:c4:f5:cc:24:8c:d0:80:db:cb:6a:c8:14: 6c:7f:c1:b2:ac:82:5a:4d:5d:cb:3d:bc:c4:d9:56: 24:f8:a1:6b:9e:16:cb:9b:14:61:65:84:b9:e9:79: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:71:A1:29:B0:9E:9B:95:F3:21:FC:B6:4B:8C:C3:B4:7D:C9:A4 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:68:de:6d:cc:38:06:6f:3c:2f:67:ac:23:38:11:ea:83:11: 78:18:bb:36:8d:a3:fc:86:ce:48:3c:6f:c7:70:7c:4b:a3:67: 51:d2:82:71:08:3c:e0:d2:e3:5f:32:35:db:9a:88:8a:d5:f5: 48:5d:cd:02:40:2b:93:38:09:68:e4:9f:0c:cb:4d:21:f2:89: 08:71:55:fc:d9:bd:78:f6:da:52:fc:84:64:a7:f0:9d:71:19: 26:66:48:64:b4:6c:ca:f6:5d:68:a2:0a:54:c7:95:92:ed:d4: 22:bc:6f:9c:ea:67:93:82:c1:32:b4:cb:90:a5:4d:e6:24:e5: 37:20:1b:7d:30:4a:00:00:7b:13:65:bc:50:67:98:3d:4d:86: 8f:b6:8b:bf:74:9c:0f:a0:67:14:f2:1c:2e:68:89:67:f2:1a: c7:b1:66:59:41:ff:6b:3c:a6:8b:56:11:d7:8e:55:b8:52:f0: c9:85:1a:61:69:84:ec:45:d8:71:44:55:3a:3a:2a:19:e4:e1: 71:78:c3:b2:07:77:84:18:ca:70:51:24:86:61:2e:a2:64:e5: 96:2e:7a:b4:a0:d1:60:dc:78:27:68:e0:75:52:78:6f:f4:15: f0:2f:fd:4a:60:04:77:6d:81:87:5a:cd:0a:ec:d7:3f:35:42: e0:c6:a1:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUwNzIxMDY0NTA4WhcNMjUwNzI4MDY0NTA4WjAYMRYwFAYD VQQDEw02ODdkZTFmNC0zNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkj1h1z6LTZoZATAJJOknNeSi1u7o20ev569Jm1Md5zokvTakDlFGhV2+jge lvzgpuJmAuifhlLcHjDZ+7G9Qzh3lFg/cihIGQUaLvTAum7f61pN2/JE/6HKRvpL ZMH2wHQNhXHm4Qqv/supz6mid5Rywe2W1OPWJCPteM5oYH7Ye0K/G2Ju338jUVnT 1Ns10cSAirsLVoA/YvkLLmF6HzZMNZ5jfoSxP0MKQl9ONs+L2fb8/9H9jwviHlLl XLJP6df7IZ2yQB9hwF2AdrN1Qsx+jzHE9cwkjNCA28tqyBRsf8GyrIJaTV3LPbzE 2VYk+KFrnhbLmxRhZYS56Xk/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUCcaEp sJ6blfMh/LZLjMO0fcmkMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABaN5tzDgGbzwvZ6wjOBHqgxF4GLs2jaP8hs5IPG/HcHxLo2dR0oJx CDzg0uNfMjXbmoiK1fVIXc0CQCuTOAlo5J8My00h8okIcVX82b149tpS/IRkp/Cd cRkmZkhktGzK9l1oogpUx5WS7dQivG+c6meTgsEytMuQpU3mJOU3IBt9MEoAAHsT ZbxQZ5g9TYaPtou/dJwPoGcU8hwuaIln8hrHsWZZQf9rPKaLVhHXjlW4UvDJhRph aYTsRdhxRFU6OioZ5OFxeMOyB3eEGMpwUSSGYS6iZOWWLnq0oNFg3HgnaOB1Unhv 9BXwL/1KYAR3bYGHWs0K7Nc/NULgxqHD -----END CERTIFICATE-----Generated at Mon Jul 21 13:42:25 2025 by rpki-client