$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft File: aIdCVFR7NLOvid21tI0CAj9Xrhc.mft (raw, json) Hash identifier: 4RWBhXK+ObzHT0YXmwQyvar9Rhd8UYIobPpqtR+YKzQ= Subject key identifier: 93:16:D1:00:8A:85:6C:3E:8F:C9:C9:AB:3A:7B:46:F4:83:E8:45:8F Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft Manifest number: 0D34 Signing time: Fri 18 Jul 2025 18:11:09 +0000 Manifest this update: Fri 18 Jul 2025 18:11:08 +0000 Manifest next update: Fri 25 Jul 2025 18:11:08 +0000 Files and hashes: 1: aIdCVFR7NLOvid21tI0CAj9Xrhc.crl (hash: aTQVEXrTjwURRi9gVTwf/ItdzBZP5/2oX9sTb75Peyo=) 2: 0198539E94F311EA9429BF86C4F9AE02.roa (hash: 5GX92aioe88puPmyzGflssCck3bnuW06XT8lCNmGXB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17 Validity Not Before: Jul 18 18:11:08 2025 GMT Not After : Jul 25 18:11:08 2025 GMT Subject: CN=687a8e3c-1efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:b7:f1:05:cf:7a:f6:c3:68:7c:c8:5c:98: 28:1a:b0:06:fa:0e:28:f5:ed:e4:98:6f:f3:dc:65: 30:26:b3:e8:b9:44:52:4f:f4:28:b9:26:e2:f3:5e: c3:86:26:71:2d:96:db:fe:03:ae:42:52:0f:66:16: 5e:b9:46:da:dd:d6:ed:da:f3:03:d1:f0:de:90:fb: 72:25:7d:71:68:c8:1f:58:1e:26:c9:11:4f:9a:7c: 3b:26:03:10:f9:a1:5b:a6:fc:e1:92:4a:2c:6f:ec: 3d:0d:20:06:44:72:a3:c7:be:77:6e:81:eb:15:d8: 0f:24:43:a7:93:ce:2e:71:00:44:82:31:7f:9b:91: 18:b2:09:b4:f1:af:42:6c:75:3b:af:9c:f9:7b:9c: 93:b7:86:f7:1c:f7:8f:bd:09:81:9d:da:22:cb:4b: b7:01:99:1d:2a:11:96:10:26:fd:8d:54:6f:2d:fb: d0:a2:c7:43:5c:37:95:d8:e2:ac:f6:7f:72:97:89: 22:d5:ca:ad:4d:48:d7:57:f9:4a:73:32:41:82:a5: 25:2e:6c:b6:1b:84:30:e6:ab:48:66:d7:33:46:fc: 9c:86:2b:80:69:6b:0f:ab:3a:44:8d:e5:22:03:98: aa:a2:6b:e7:aa:9d:0b:5e:83:ed:d5:32:2f:9e:bf: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:16:D1:00:8A:85:6C:3E:8F:C9:C9:AB:3A:7B:46:F4:83:E8:45:8F X509v3 Authority Key Identifier: keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:15:74:ce:56:f1:c4:56:02:de:7d:16:39:cb:9f:54:47:cf: 96:04:55:fc:ae:8c:01:1b:85:78:9b:1a:05:8a:f9:c3:46:39: be:b4:98:ed:90:40:c8:2b:24:d3:97:4a:c6:0f:9f:59:fb:f2: d6:f6:17:9a:e2:7c:8a:95:88:8c:1c:d7:5b:1c:e7:7d:0b:a3: 08:38:c6:8d:dd:87:44:ee:e1:40:99:de:5c:6f:37:cc:de:6f: 86:28:60:2b:80:5c:df:17:bc:2a:3c:27:d2:81:65:e9:9f:f1: 33:3f:9c:32:c0:ee:bc:cd:f0:62:91:52:db:b9:41:3b:3d:d3: 57:c2:64:5e:20:c8:b9:5d:be:f6:5c:d7:0f:05:a4:4a:8f:65: 45:16:e3:bd:a2:9f:61:2e:28:ef:2e:41:70:00:a1:ff:ec:62: 20:dc:d1:68:74:4c:85:a3:5d:ae:0f:e6:00:15:37:90:e6:f1: 0e:a8:e7:57:ec:13:5f:ea:5f:bf:89:18:6f:38:47:1e:0d:92: ad:7b:59:0a:84:d6:c2:07:01:84:ed:d0:fa:e8:da:82:32:9b: df:a5:05:d9:19:70:ab:31:a0:ee:1f:89:8e:3c:58:7e:ee:22: 2a:69:8f:a7:6e:40:65:2d:b5:93:c0:a2:cb:2e:46:e8:23:17: 68:c4:1c:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy M0Y1N0FFMTcwHhcNMjUwNzE4MTgxMTA4WhcNMjUwNzI1MTgxMTA4WjAYMRYwFAYD VQQDEw02ODdhOGUzYy0xZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufO38QXPevbDaHzIXJgoGrAG+g4o9e3kmG/z3GUwJrPouURST/QouSbi817D hiZxLZbb/gOuQlIPZhZeuUba3dbt2vMD0fDekPtyJX1xaMgfWB4myRFPmnw7JgMQ +aFbpvzhkkosb+w9DSAGRHKjx753boHrFdgPJEOnk84ucQBEgjF/m5EYsgm08a9C bHU7r5z5e5yTt4b3HPePvQmBndoiy0u3AZkdKhGWECb9jVRvLfvQosdDXDeV2OKs 9n9yl4ki1cqtTUjXV/lKczJBgqUlLmy2G4Qw5qtIZtczRvychiuAaWsPqzpEjeUi A5iqomvnqp0LXoPt1TIvnr/bXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMW0QCK hWw+j8nJqzp7RvSD6EWPMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ1Mi8xRDRCNDRFRURCNkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05M T3ZpZDIxdEkwQ0FqOVhyaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKFXTOVvHEVgLefRY5y59UR8+WBFX8rowBG4V4mxoFivnDRjm+tJjt kEDIKyTTl0rGD59Z+/LW9hea4nyKlYiMHNdbHOd9C6MIOMaN3YdE7uFAmd5cbzfM 3m+GKGArgFzfF7wqPCfSgWXpn/EzP5wywO68zfBikVLbuUE7PdNXwmReIMi5Xb72 XNcPBaRKj2VFFuO9op9hLijvLkFwAKH/7GIg3NFodEyFo12uD+YAFTeQ5vEOqOdX 7BNf6l+/iRhvOEceDZKte1kKhNbCBwGE7dD66NqCMpvfpQXZGXCrMaDuH4mOPFh+ 7iIqaY+nbkBlLbWTwKLLLkboIxdoxByR -----END CERTIFICATE-----Generated at Sun Jul 20 11:34:15 2025 by rpki-client