$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json) Hash identifier: +HFyzXKN+rIdNdpAmD28gjKFum15/uxBScmnoRNOpno= Subject key identifier: 87:A3:7F:5F:15:40:AB:AA:84:E4:E0:06:B4:1B:F1:AD:13:B3:93:5C Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft Manifest number: 34CF Signing time: Sun 20 Jul 2025 14:49:15 +0000 Manifest this update: Sun 20 Jul 2025 14:49:14 +0000 Manifest next update: Sun 27 Jul 2025 14:49:14 +0000 Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: 50s8dbvH/goxMB128IpfP9Ac1iAliOItLs44cbBARpU=) 2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: y1aP2xpWM5Z9p4X69/I0EqD92yLEHPJ0HdxDyd7A8wI=) 3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=) 4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=) 5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608 Validity Not Before: Jul 20 14:49:14 2025 GMT Not After : Jul 27 14:49:14 2025 GMT Subject: CN=687d01eb-5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:5c:f3:03:28:29:c9:38:64:0b:91:40:10: a3:8f:33:10:26:00:04:44:4a:f2:86:08:de:3b:ca: 85:42:01:dc:c5:29:5c:2f:98:14:84:eb:cd:d0:db: 13:e4:e6:00:80:aa:35:bc:d7:60:7f:b7:58:b0:1a: 20:4f:da:5d:5f:14:ef:41:37:a8:aa:fb:2d:00:d9: 02:86:ab:5c:c5:8f:78:24:3a:49:0b:85:0a:78:50: 19:81:e3:99:79:85:90:a6:5b:b6:89:f7:45:06:75: d0:13:3d:b8:8e:41:ea:a9:b8:46:64:1c:58:6b:91: c7:9e:77:72:24:59:48:16:e0:86:29:49:47:f5:62: 93:c3:99:55:80:e8:aa:9e:e3:fe:cb:e8:fb:63:7d: ee:6c:84:25:3e:32:91:9f:cf:e4:a6:ec:8f:76:a9: 59:69:6c:c1:7f:89:e6:be:a7:09:e9:c1:49:c5:15: 03:38:bb:4e:14:89:28:0f:8b:49:26:da:cc:a0:0c: 6d:13:a4:98:e0:44:18:eb:02:51:76:19:08:a0:e1: 33:da:5b:5f:52:cb:f6:2d:47:cf:c7:00:ba:76:2b: 79:6f:41:29:18:03:18:ea:eb:b3:4a:fe:db:21:89: e7:28:fe:41:fe:4d:27:1d:70:87:ef:64:bc:fd:03: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A3:7F:5F:15:40:AB:AA:84:E4:E0:06:B4:1B:F1:AD:13:B3:93:5C X509v3 Authority Key Identifier: keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:29:13:ef:7e:12:f2:67:e2:b3:a4:f1:6a:30:19:dd:b3:c6: 8e:0a:e2:a9:eb:a0:57:51:bb:39:ef:87:f6:0d:b3:a7:9b:db: 75:9f:de:78:fc:a2:49:ca:2f:3e:a6:f5:22:29:c8:dc:82:15: 3c:35:49:0a:61:c4:89:13:86:5f:37:7b:0c:ab:38:c1:b9:9e: e4:f8:7f:5d:c7:57:80:60:1e:af:70:8b:80:61:c2:85:b5:4b: 1b:e0:8c:c9:15:f6:c9:19:59:c1:f7:6d:f9:f4:e7:21:d3:af: 01:48:5a:3d:3a:e5:1f:b8:4a:83:51:f9:38:cb:d4:b5:88:6e: be:4e:61:82:1e:56:d3:8b:a4:ef:e2:89:71:34:0b:15:f0:a3: 82:a3:a1:b1:1a:49:c1:4e:78:f5:ff:4e:3e:df:40:86:80:1e: f0:a2:ed:5d:d8:16:05:54:b3:49:c9:46:10:9b:a0:87:5b:7b: b1:b1:9f:99:f7:09:79:a0:dc:b9:86:47:48:7e:fb:43:0e:47: 13:f0:ac:ca:39:f1:b5:2b:ff:9f:f1:ab:ca:cb:e7:f4:6f:f2: 9c:94:7f:46:84:67:85:23:a3:51:9d:c5:90:99:19:da:bf:40: 4c:24:44:00:da:7d:52:a5:61:a9:8b:eb:51:43:6d:6d:e3:67: e4:99:d0:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD OTU4NzY2MDgwHhcNMjUwNzIwMTQ0OTE0WhcNMjUwNzI3MTQ0OTE0WjAYMRYwFAYD VQQDEw02ODdkMDFlYi01ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjdc8wMoKck4ZAuRQBCjjzMQJgAEREryhgjeO8qFQgHcxSlcL5gUhOvN0NsT 5OYAgKo1vNdgf7dYsBogT9pdXxTvQTeoqvstANkChqtcxY94JDpJC4UKeFAZgeOZ eYWQplu2ifdFBnXQEz24jkHqqbhGZBxYa5HHnndyJFlIFuCGKUlH9WKTw5lVgOiq nuP+y+j7Y33ubIQlPjKRn8/kpuyPdqlZaWzBf4nmvqcJ6cFJxRUDOLtOFIkoD4tJ JtrMoAxtE6SY4EQY6wJRdhkIoOEz2ltfUsv2LUfPxwC6dit5b0EpGAMY6uuzSv7b IYnnKP5B/k0nHXCH72S8/QNpOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIejf18V QKuqhOTgBrQb8a0Ts5NcMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUQzNS9CNjNCQTdFRTFEOTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhF dEIyWnhETXBVdm5KV0haZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLKRPvfhLyZ+KzpPFqMBnds8aOCuKp66BXUbs574f2DbOnm9t1n954 /KJJyi8+pvUiKcjcghU8NUkKYcSJE4ZfN3sMqzjBuZ7k+H9dx1eAYB6vcIuAYcKF tUsb4IzJFfbJGVnB92359Och068BSFo9OuUfuEqDUfk4y9S1iG6+TmGCHlbTi6Tv 4olxNAsV8KOCo6GxGknBTnj1/04+30CGgB7wou1d2BYFVLNJyUYQm6CHW3uxsZ+Z 9wl5oNy5hkdIfvtDDkcT8KzKOfG1K/+f8avKy+f0b/KclH9GhGeFI6NRncWQmRna v0BMJEQA2n1SpWGpi+tRQ21t42fkmdAT -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:33 2025 by rpki-client