$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft File: J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json) Hash identifier: SFCPf1DkDOsIyr4KEZtn3fsHmaDaU5RqEF+l9vDA85o= Subject key identifier: 77:BF:7F:36:94:6A:B5:69:92:90:61:05:55:5A:AC:D3:C3:1F:F7:99 Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 Certificate issuer: /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Certificate serial: 0525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft Manifest number: 0520 Signing time: Sun 20 Jul 2025 23:46:52 +0000 Manifest this update: Sun 20 Jul 2025 23:46:52 +0000 Manifest next update: Sun 27 Jul 2025 23:46:52 +0000 Files and hashes: 1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: 1fEIFwzCR8nkdIALo+7FYBTiWlck0za+QGSld5/UFiI=) 2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1317 (0x525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873 Validity Not Before: Jul 20 23:46:52 2025 GMT Not After : Jul 27 23:46:52 2025 GMT Subject: CN=687d7fec-c353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:51:cd:84:ed:0e:a5:12:07:27:c7:58:3b: ca:f0:12:63:d3:2e:2d:85:86:1c:a1:2d:4f:5d:64: e5:77:e9:a6:86:46:c1:42:95:a2:72:55:bf:67:61: f6:1e:37:86:d1:0b:db:41:41:39:10:ad:3f:fe:0c: d8:52:a7:08:9c:92:a7:bb:05:f8:e2:39:18:fe:50: ef:77:85:73:6e:e1:84:00:24:55:3c:fc:9f:33:1a: 97:97:0b:85:b7:4a:11:80:0c:8a:28:64:fe:b5:ea: 9f:cf:6b:c4:e7:99:dd:6d:1e:1b:68:99:5f:44:c1: ce:e2:0f:4b:de:8f:24:d3:72:5f:cd:db:db:e2:6f: 21:de:22:d1:a4:52:0a:a0:5f:e3:79:a4:2a:ae:fc: 3f:28:b8:0e:b4:e4:b4:b3:86:0b:71:33:3f:78:52: 3e:cd:33:62:1d:51:f3:b8:64:84:24:89:69:a0:03: f6:94:eb:63:29:3f:ee:d8:f0:52:67:dd:d5:7b:54: b7:6c:05:38:ca:39:2a:56:ac:a9:dc:8f:48:67:37: 53:04:1b:5d:4c:c1:16:6e:da:7d:de:84:46:f8:35: 00:5a:ff:1d:74:52:df:61:9b:c5:34:e0:ab:e1:39: 47:34:23:bb:b3:d8:0d:41:22:e6:6e:10:d6:7a:1e: 21:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BF:7F:36:94:6A:B5:69:92:90:61:05:55:5A:AC:D3:C3:1F:F7:99 X509v3 Authority Key Identifier: keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:8d:70:55:f1:9d:c8:50:aa:f8:6a:60:56:f5:f6:ce:bc:2f: 6b:51:a8:cf:da:d6:c4:01:9b:f4:fa:d7:dc:5f:3d:3d:ee:f2: c7:81:ee:c4:99:77:7d:f2:23:c9:1e:08:0f:1d:42:22:f7:6a: bd:55:de:32:af:a1:8e:77:b1:4c:90:9c:8f:ef:ae:a2:6e:f5: 2a:f9:60:c9:31:fd:34:1a:61:c6:93:1f:a4:c7:dc:ee:c8:ca: b5:23:a7:a9:20:e9:b1:35:91:2a:38:14:6d:d6:dd:4f:7c:b0: ec:ea:4f:3d:dd:ca:04:f5:47:51:02:5e:ee:2f:22:c7:20:6e: ef:62:3c:75:9c:71:b8:60:b8:b0:05:e3:e1:7c:64:f8:98:e8: 26:97:90:56:d9:24:d7:91:7d:05:ea:e2:f2:1f:82:f5:bf:18: 2c:6b:1c:35:13:a3:88:5d:b5:b3:d3:21:17:4e:3a:b1:68:92: 11:d4:c3:20:bd:90:06:25:08:18:84:05:13:23:93:f8:42:bb: 26:51:99:b4:b4:7e:86:71:e2:55:3f:12:48:f4:5a:41:9d:d9: fd:93:be:91:5c:96:9a:5b:2a:09:b7:7a:ec:bc:8b:60:ab:4e: 1c:e6:01:38:94:62:17:77:92:8c:ab:78:1e:a6:5d:5d:68:2c: d0:09:18:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG RjM1Mzc4NzMwHhcNMjUwNzIwMjM0NjUyWhcNMjUwNzI3MjM0NjUyWjAYMRYwFAYD VQQDEw02ODdkN2ZlYy1jMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMBRzYTtDqUSByfHWDvK8BJj0y4thYYcoS1PXWTld+mmhkbBQpWiclW/Z2H2 HjeG0QvbQUE5EK0//gzYUqcInJKnuwX44jkY/lDvd4VzbuGEACRVPPyfMxqXlwuF t0oRgAyKKGT+teqfz2vE55ndbR4baJlfRMHO4g9L3o8k03Jfzdvb4m8h3iLRpFIK oF/jeaQqrvw/KLgOtOS0s4YLcTM/eFI+zTNiHVHzuGSEJIlpoAP2lOtjKT/u2PBS Z93Ve1S3bAU4yjkqVqyp3I9IZzdTBBtdTMEWbtp93oRG+DUAWv8ddFLfYZvFNOCr 4TlHNCO7s9gNQSLmbhDWeh4hxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe/fzaU arVpkpBhBVVarNPDH/eZMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRjXBV8Z3IUKr4amBW9fbOvC9rUajP2tbEAZv0+tfcXz097vLHge7E mXd98iPJHggPHUIi92q9Vd4yr6GOd7FMkJyP766ibvUq+WDJMf00GmHGkx+kx9zu yMq1I6epIOmxNZEqOBRt1t1PfLDs6k893coE9UdRAl7uLyLHIG7vYjx1nHG4YLiw BePhfGT4mOgml5BW2STXkX0F6uLyH4L1vxgsaxw1E6OIXbWz0yEXTjqxaJIR1MMg vZAGJQgYhAUTI5P4QrsmUZm0tH6GceJVPxJI9FpBndn9k76RXJaaWyoJt3rsvItg q04c5gE4lGIXd5KMq3gepl1daCzQCRjX -----END CERTIFICATE-----Generated at Mon Jul 21 08:05:02 2025 by rpki-client