$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft File: 0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json) Hash identifier: dE11d/Y1rIwcuhjtbIemIe+tCm8dgRKksIQpSS04eeI= Subject key identifier: D6:40:A7:FD:EA:E7:86:77:47:DA:14:6C:0A:0A:65:18:0A:6A:7D:C7 Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 Certificate issuer: /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft Manifest number: 349D Signing time: Sun 20 Jul 2025 14:57:39 +0000 Manifest this update: Sun 20 Jul 2025 14:57:38 +0000 Manifest next update: Sun 27 Jul 2025 14:57:38 +0000 Files and hashes: 1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: 0hLtPThSxSCm2wRtT3BFzBVoC96ZwBUG6PdL8qausZM=) 2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: 0c5mooek/SI4tHJlanxjMJ+LPip9Hy2VF66plGlTaFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025 Validity Not Before: Jul 20 14:57:38 2025 GMT Not After : Jul 27 14:57:38 2025 GMT Subject: CN=687d03e2-dada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:39:14:c4:2d:24:c8:ba:c6:4a:3b:7d:52:3e: c2:3f:5c:4a:b0:da:6c:f7:42:26:6e:63:09:23:dc: 4f:2c:06:78:18:1c:d6:4a:d7:81:b8:8a:12:4e:81: bf:fa:b5:85:92:dc:31:a6:df:06:36:a4:ac:a7:37: 3f:6b:a6:f8:80:10:b8:09:8c:53:3b:90:9c:d1:84: b5:19:60:19:7c:eb:6f:13:41:d0:6c:c8:b0:0f:89: 5f:5e:d2:7a:d5:73:f7:f9:13:0b:01:80:ef:52:ce: 8a:ba:1a:b7:45:29:91:ba:48:00:0c:6d:23:90:bd: 2c:88:2e:31:8d:8f:c0:94:20:fa:fd:b1:95:de:ba: 25:12:de:2a:f8:15:90:e8:a9:05:10:aa:0c:4d:cb: 51:c5:02:59:b9:11:5d:e6:cd:f0:93:0d:73:b4:6c: 1c:3d:e3:d4:48:3c:55:41:e9:48:c9:39:6a:3e:ac: e3:aa:bb:0c:1d:5e:59:ac:08:27:69:6c:e5:dd:7d: bd:db:f3:2e:13:33:9d:a5:8f:dc:36:63:eb:ba:5e: 7a:30:0b:72:2f:34:f8:ed:25:30:5b:0d:b1:09:6f: 1c:fb:05:8e:05:31:9a:5e:a5:7f:4c:01:a0:38:2b: 8b:0c:5c:ea:23:1f:03:f5:95:ba:ee:52:69:63:c4: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:40:A7:FD:EA:E7:86:77:47:DA:14:6C:0A:0A:65:18:0A:6A:7D:C7 X509v3 Authority Key Identifier: keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:19:2b:d6:50:16:e6:74:bb:b5:48:c1:66:3d:42:d2:73:2f: fd:d2:10:d4:b1:cd:5e:60:de:c6:ee:0d:42:1b:0f:54:68:20: 97:98:56:99:fd:10:cd:42:b5:00:a3:38:a4:35:2d:4b:90:1e: 81:cd:cf:5c:45:95:1c:3a:3e:b4:ef:1f:ee:47:80:32:84:57: 30:ac:3e:9f:13:ff:ef:53:de:9a:46:3c:cd:a7:0f:8f:59:01: 69:fe:5c:e8:14:b5:9d:90:59:40:d7:d4:3c:05:9e:36:70:00: 82:bf:79:62:dd:92:63:80:04:c9:dd:e3:8a:43:e7:2e:df:92: 04:fd:6e:0d:73:59:b9:bc:b6:aa:7e:08:82:43:35:02:c5:2a: 86:1d:8b:35:3d:c6:8c:19:b7:f4:4c:92:91:ca:9d:ba:d4:3f: 92:ac:48:d9:56:dc:32:cc:23:82:8c:7f:05:15:4e:39:b3:c5: e3:53:7b:3d:71:f3:bc:34:5c:58:a4:90:6c:27:37:4f:62:c3: 0c:cf:f9:a6:8c:45:b7:3f:8d:2a:c0:47:c9:ad:28:39:02:05: fd:b2:48:3c:13:2e:73:c0:51:ec:90:17:7f:c2:ff:45:ff:b9: 11:36:ca:1c:0f:8e:ba:84:c8:ec:04:26:cf:c0:8f:ee:1c:bd: 51:16:bb:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwM0MxMTAvBgNVBAUTKEQwOEMzNkUyNkYyNEZCOUQ1MTRGM0I0MEE4RTM3QTlB MDRCNTgwMjUwHhcNMjUwNzIwMTQ1NzM4WhcNMjUwNzI3MTQ1NzM4WjAYMRYwFAYD VQQDEw02ODdkMDNlMi1kYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzkUxC0kyLrGSjt9Uj7CP1xKsNps90ImbmMJI9xPLAZ4GBzWSteBuIoSToG/ +rWFktwxpt8GNqSspzc/a6b4gBC4CYxTO5Cc0YS1GWAZfOtvE0HQbMiwD4lfXtJ6 1XP3+RMLAYDvUs6Kuhq3RSmRukgADG0jkL0siC4xjY/AlCD6/bGV3rolEt4q+BWQ 6KkFEKoMTctRxQJZuRFd5s3wkw1ztGwcPePUSDxVQelIyTlqPqzjqrsMHV5ZrAgn aWzl3X292/MuEzOdpY/cNmPrul56MAtyLzT47SUwWw2xCW8c+wWOBTGaXqV/TAGg OCuLDFzqIx8D9ZW67lJpY8Q5DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZAp/3q 54Z3R9oUbAoKZRgKan3HMB8GA1UdIwQYMBaAFNCMNuJvJPudUU87QKjjepoEtYAl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTAzQy9CNkUwRjRBQTFE OUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01MVJUenRBcU9ONm1nUzFn Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBJdzI0bThrLTUxUlR6dEFxT042bWdTMWdDVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTAzQy9CNkUwRjRBQTFEOUExMUUyODkyMTI5ODgwOEIwMkNEMi8wSXcyNG04ay01 MVJUenRBcU9ONm1nUzFnQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOGSvWUBbmdLu1SMFmPULScy/90hDUsc1eYN7G7g1CGw9UaCCXmFaZ /RDNQrUAozikNS1LkB6Bzc9cRZUcOj607x/uR4AyhFcwrD6fE//vU96aRjzNpw+P WQFp/lzoFLWdkFlA19Q8BZ42cACCv3li3ZJjgATJ3eOKQ+cu35IE/W4Nc1m5vLaq fgiCQzUCxSqGHYs1PcaMGbf0TJKRyp261D+SrEjZVtwyzCOCjH8FFU45s8XjU3s9 cfO8NFxYpJBsJzdPYsMMz/mmjEW3P40qwEfJrSg5AgX9skg8Ey5zwFHskBd/wv9F /7kRNsocD466hMjsBCbPwI/uHL1RFruF -----END CERTIFICATE-----Generated at Tue Jul 22 00:13:38 2025 by rpki-client