$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft File: AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json) Hash identifier: ti6ysd6wTVDRB8Cr61/Jm39F1EHtmaCHfkhRS358tOo= Subject key identifier: B7:09:CA:29:24:2D:B6:4B:B7:97:16:D5:D1:AE:82:D2:5F:9A:8C:F9 Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D Certificate issuer: /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft Manifest number: EC Signing time: Sat 19 Jul 2025 05:32:53 +0000 Manifest this update: Sat 19 Jul 2025 05:32:52 +0000 Manifest next update: Sat 26 Jul 2025 05:32:52 +0000 Files and hashes: 1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: VGVZ9uMlWlrncSRKmzpeummRZgwwCG9Oxu13VDEHAvg=) 2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: 8wMwW5uNjWkG/EYhzvD28CGT7P5U8FJODoDJkkfTgvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Validity Not Before: Jul 19 05:32:52 2025 GMT Not After : Jul 26 05:32:52 2025 GMT Subject: CN=687b2e05-a9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:11:2a:5c:aa:6f:f7:ba:96:6f:47:b2:08: f6:f9:f2:e5:fc:19:ae:bc:00:f1:e5:5b:ee:cc:75: ac:5d:ea:ea:45:8e:8e:04:9a:1a:ba:b0:e3:c9:f6: 4f:5a:6d:a1:ff:47:a6:67:82:f9:9e:bc:f8:53:c6: 6b:4f:c7:1a:65:33:52:d4:c7:2c:0a:37:de:c1:3f: 69:30:41:43:60:1e:4a:ce:ad:57:f0:6f:b1:89:e1: e1:aa:03:8f:76:50:41:88:d8:9d:d4:b9:5d:c2:eb: ea:32:75:8d:d8:6e:cb:02:44:f0:ec:91:1e:3b:88: 62:a1:91:5e:4e:8d:4b:60:82:5b:b9:e6:18:d5:9d: c9:39:5e:d5:1d:bf:69:72:51:97:81:52:eb:3f:f2: eb:cc:0a:4b:d6:ff:c5:4a:ed:a5:2b:9f:cd:0f:62: d1:62:59:de:7f:a3:23:fc:6b:48:7b:cb:5f:f8:50: 35:7b:98:05:09:15:4c:45:27:16:09:7c:6f:81:43: 97:ec:99:49:df:2c:a0:bc:b0:bf:aa:b4:c7:ca:44: 17:93:e0:e9:5e:c1:35:cf:2f:33:88:ea:58:6d:84: 1d:b3:89:00:70:1e:2f:80:76:1d:f6:99:7d:ab:75: b2:85:e8:6e:b9:3c:7b:36:d6:e4:b3:c2:9a:9e:32: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:09:CA:29:24:2D:B6:4B:B7:97:16:D5:D1:AE:82:D2:5F:9A:8C:F9 X509v3 Authority Key Identifier: keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:bd:40:42:97:d3:6b:b5:6a:68:8b:29:40:bd:3b:35:9d: 0f:9b:ed:e3:8b:11:3d:ef:ce:99:3b:f1:c1:d2:c9:e9:95:f1: 56:10:90:ef:d5:79:92:81:1a:bc:79:b3:63:a0:b9:04:ae:e8: 28:d7:3e:39:81:6b:ad:c6:b3:bf:ec:2a:d2:8e:c1:dd:5a:52: ea:56:a9:bd:9f:42:87:91:9b:cd:34:79:e3:f7:53:ab:09:c8: f9:c4:b2:9b:4d:3f:29:e7:ac:74:b0:20:30:ce:57:2e:a6:fd: a3:8a:65:6d:11:16:e6:0f:b4:9f:9b:4c:77:58:6b:38:34:d9: a3:54:b5:8f:06:28:90:17:09:79:9e:cd:79:75:75:74:26:7a: ef:8f:7e:23:2d:ba:b4:3e:5b:e0:bd:40:60:d4:c2:c9:48:bc: 9d:83:49:e8:05:06:2e:59:28:35:b0:0d:34:49:60:d4:ec:07: 32:f4:aa:93:09:a5:46:b9:9e:00:05:98:3f:98:23:87:89:f4: ca:b3:24:e8:94:96:97:0b:4d:9c:ad:d0:32:ce:c0:90:8f:15: 4a:b3:53:3a:82:8b:57:7c:7f:ab:b5:45:15:b3:a7:83:dd:88: f6:01:63:b2:70:45:c0:99:a9:90:7c:68:eb:95:3b:7f:e7:ea: 40:a0:25:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwRDgxMTAvBgNVBAUTKDAwOEIyMzUxQkU5RkQ2NkQzOEIxMTA1MDY3OTczNEY0 NEZBNUQ5N0QwHhcNMjUwNzE5MDUzMjUyWhcNMjUwNzI2MDUzMjUyWjAYMRYwFAYD VQQDEw02ODdiMmUwNS1hOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70wRKlyqb/e6lm9Hsgj2+fLl/BmuvADx5VvuzHWsXerqRY6OBJoaurDjyfZP Wm2h/0emZ4L5nrz4U8ZrT8caZTNS1McsCjfewT9pMEFDYB5Kzq1X8G+xieHhqgOP dlBBiNid1LldwuvqMnWN2G7LAkTw7JEeO4hioZFeTo1LYIJbueYY1Z3JOV7VHb9p clGXgVLrP/LrzApL1v/FSu2lK5/ND2LRYlnef6Mj/GtIe8tf+FA1e5gFCRVMRScW CXxvgUOX7JlJ3yygvLC/qrTHykQXk+DpXsE1zy8ziOpYbYQds4kAcB4vgHYd9pl9 q3WyhehuuTx7Ntbks8KanjKheQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcJyikk LbZLt5cW1dGugtJfmoz5MB8GA1UdIwQYMBaAFACLI1G+n9ZtOLEQUGeXNPRPpdl9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBEOC8wN0FBQkNEQUZC MTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFtMDRzUkJRWjVjMDlFLWwy WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBEOC8wN0FBQkNEQUZCMTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFt MDRzUkJRWjVjMDlFLWwyWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxPL1AQpfTa7VqaIspQL07NZ0Pm+3jixE9786ZO/HB0snplfFWEJDv 1XmSgRq8ebNjoLkErugo1z45gWutxrO/7CrSjsHdWlLqVqm9n0KHkZvNNHnj91Or Ccj5xLKbTT8p56x0sCAwzlcupv2jimVtERbmD7Sfm0x3WGs4NNmjVLWPBiiQFwl5 ns15dXV0Jnrvj34jLbq0PlvgvUBg1MLJSLydg0noBQYuWSg1sA00SWDU7Acy9KqT CaVGuZ4ABZg/mCOHifTKsyTolJaXC02crdAyzsCQjxVKs1M6gotXfH+rtUUVs6eD 3Yj2AWOycEXAmamQfGjrlTt/5+pAoCUp -----END CERTIFICATE-----Generated at Sat Jul 19 18:26:35 2025 by rpki-client