$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: hCd6EZKZDP1wATHk1ZGsFGkaHJwGjKHxOlzPoSLiTck= Subject key identifier: 4A:A5:8B:EE:25:87:C0:88:66:EC:3F:94:12:82:81:EA:81:8E:EE:80 Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 0315 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 0311 Signing time: Sat 19 Jul 2025 01:17:08 +0000 Manifest this update: Sat 19 Jul 2025 01:17:07 +0000 Manifest next update: Sat 26 Jul 2025 01:17:07 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: dSYBC65eEzFfg7wqvv2R7C7oM5no6U4a3HGn2/M6ZwA=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Jul 19 01:17:07 2025 GMT Not After : Jul 26 01:17:07 2025 GMT Subject: CN=687af213-7b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:21:93:b1:69:b4:c6:c6:ab:d1:92:29:75: e5:4e:4a:7a:38:9c:cc:1f:43:0a:2a:c5:74:8f:2a: 99:b9:f6:ab:8e:f3:06:47:aa:d2:37:8d:5f:e2:7d: 11:a4:16:5e:f3:c0:a8:62:66:bd:19:eb:91:8d:07: 4c:32:5e:1f:1d:c7:67:69:ec:02:03:f0:36:31:6e: c3:30:cd:7e:3e:4a:80:ec:77:b6:0d:0c:af:88:f9: f4:1d:09:bd:40:d0:ad:71:b2:74:09:11:ca:6b:ad: 28:77:6c:b2:ad:0a:c6:b0:fd:6e:91:ec:2e:36:4a: e1:0b:dc:1e:45:86:f1:02:9a:88:dd:cb:bc:3f:41: d1:7a:9f:30:ce:e0:f4:3f:07:19:82:19:3d:c7:93: cf:13:c1:74:26:df:31:d4:8e:c1:3f:fd:51:c0:5e: 57:0f:b9:88:86:39:72:21:f2:ed:05:7a:c3:3c:85: 28:0c:64:26:e2:05:80:66:21:3e:ee:f9:33:bd:37: 58:f4:d8:37:ec:48:f5:ce:3d:ed:b5:97:00:dd:70: 08:e9:ca:aa:f0:7b:90:97:a8:34:11:34:14:85:c5: 3b:60:ec:6d:42:55:cd:10:9b:3e:9e:bf:d6:7f:76: f9:9e:ab:04:a7:b6:60:c5:1f:d8:2a:82:e1:ce:95: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A5:8B:EE:25:87:C0:88:66:EC:3F:94:12:82:81:EA:81:8E:EE:80 X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ba:7a:88:b2:a2:0d:18:35:5d:c3:27:ee:ab:46:ce:3c:6f: f0:15:03:19:fa:ba:97:28:eb:47:3d:55:f8:79:d5:a8:d1:73: cb:95:df:e6:7e:4b:22:20:57:83:d8:3c:19:a0:56:28:aa:86: 0a:52:e0:75:9f:d8:99:3b:86:3b:9a:8c:d2:db:53:7d:df:17: b4:80:82:97:09:10:67:53:f1:68:82:7d:68:fe:8e:b7:b2:0c: 26:48:b5:33:20:2c:f5:54:2f:f8:2e:85:79:5e:30:52:b7:e3: 2f:69:3a:0b:c7:bf:e7:cc:41:85:fe:39:0e:a4:37:48:fa:9b: 97:3e:a5:65:2a:2e:51:c3:1c:98:ff:3a:1c:58:05:b7:ad:53: 3c:1a:76:54:d0:0c:64:d8:23:7e:c2:e1:cd:74:87:12:1f:f6: 87:e0:a4:71:7e:f9:85:54:e5:1b:00:23:41:f6:61:b1:ee:6a: 0e:b6:27:2f:2b:15:5b:c5:53:c8:5a:7b:d9:7d:b6:6a:e3:a7: fd:a1:db:e4:ac:9f:8a:34:db:d7:5d:bd:dd:55:49:65:13:53: b1:14:fc:6e:ae:db:a4:e1:1f:08:51:a8:49:5e:3b:da:19:2e: bc:bd:c7:bd:d7:73:74:b7:47:f2:f6:6e:f4:ac:90:48:9f:21: 31:51:4d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjUwNzE5MDExNzA3WhcNMjUwNzI2MDExNzA3WjAYMRYwFAYD VQQDEw02ODdhZjIxMy03YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9Mhk7FptMbGq9GSKXXlTkp6OJzMH0MKKsV0jyqZufarjvMGR6rSN41f4n0R pBZe88CoYma9GeuRjQdMMl4fHcdnaewCA/A2MW7DMM1+PkqA7He2DQyviPn0HQm9 QNCtcbJ0CRHKa60od2yyrQrGsP1ukewuNkrhC9weRYbxApqI3cu8P0HRep8wzuD0 PwcZghk9x5PPE8F0Jt8x1I7BP/1RwF5XD7mIhjlyIfLtBXrDPIUoDGQm4gWAZiE+ 7vkzvTdY9Ng37Ej1zj3ttZcA3XAI6cqq8HuQl6g0ETQUhcU7YOxtQlXNEJs+nr/W f3b5nqsEp7ZgxR/YKoLhzpXJrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqli+4l h8CIZuw/lBKCgeqBju6AMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZunqIsqINGDVdwyfuq0bOPG/wFQMZ+rqXKOtHPVX4edWo0XPLld/m fksiIFeD2DwZoFYoqoYKUuB1n9iZO4Y7mozS21N93xe0gIKXCRBnU/Fogn1o/o63 sgwmSLUzICz1VC/4LoV5XjBSt+MvaToLx7/nzEGF/jkOpDdI+puXPqVlKi5RwxyY /zocWAW3rVM8GnZU0Axk2CN+wuHNdIcSH/aH4KRxfvmFVOUbACNB9mGx7moOticv KxVbxVPIWnvZfbZq46f9odvkrJ+KNNvXXb3dVUllE1OxFPxurtuk4R8IUahJXjva GS68vce913N0t0fy9m70rJBInyExUU1t -----END CERTIFICATE-----Generated at Sun Jul 20 07:49:34 2025 by rpki-client