$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: /Y/U1goI4dOqMFz0JH2Kv4ktQvEufpU0+f2eswsYaRI= Subject key identifier: 2C:DA:61:74:3F:1F:26:F7:A3:56:1A:65:03:75:E3:BB:75:0B:39:43 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 03A1 Signing time: Mon 21 Jul 2025 01:02:58 +0000 Manifest this update: Mon 21 Jul 2025 01:02:57 +0000 Manifest next update: Mon 28 Jul 2025 01:02:57 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: g2HUDpvf/d1aJlKDleuz9UDlZP2OPWKV6vbREyKHESg=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Jul 21 01:02:57 2025 GMT Not After : Jul 28 01:02:57 2025 GMT Subject: CN=687d91c2-89e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:50:5c:be:da:14:6d:21:95:35:b7:73:58:18: 01:85:26:ba:e0:f7:b3:41:8c:d6:84:28:cc:26:3e: 21:76:c7:3f:ab:5b:29:1b:dc:90:30:eb:a7:e5:50: 41:e2:91:79:8f:15:1a:0e:36:de:2f:06:a6:94:fb: 3c:ca:0a:99:e7:80:10:e3:e0:81:1f:74:d1:08:93: f6:31:b0:fb:b8:fb:97:d1:d6:c8:f0:12:47:f9:89: 7e:f7:c3:11:67:cf:4a:0d:75:6f:75:f2:7b:25:b3: 82:6c:66:29:de:76:2d:c5:6e:72:88:89:9c:86:dd: c9:94:80:04:c9:02:2f:cf:a4:da:22:df:c6:2b:58: 3f:81:87:85:6a:74:c8:6d:c1:16:be:f3:e4:03:18: 25:94:95:84:d0:fe:f6:74:ed:d9:c6:17:c4:06:d1: 6c:cd:45:c0:81:a5:7b:c8:4e:a8:8e:83:05:27:a3: 5f:1a:5e:ac:a6:d6:7b:8f:55:6f:d3:0b:99:fa:dd: b1:87:e5:e7:72:a6:97:58:9a:6d:ca:34:9c:29:d0: 7a:a9:5b:2d:11:f4:bf:1a:a4:7e:6d:b1:d9:08:8b: 58:b0:77:a2:b1:4b:ea:4b:23:13:f9:a6:3d:a0:98: 67:ef:63:c4:75:ff:39:da:09:cd:4d:bf:9d:6a:48: d4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DA:61:74:3F:1F:26:F7:A3:56:1A:65:03:75:E3:BB:75:0B:39:43 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cf:08:28:16:68:b5:20:6c:41:a0:58:a6:bd:d6:29:a6:eb: 98:e8:59:ea:e3:41:79:24:fa:3b:14:1d:ec:d1:72:bb:eb:0c: 4a:67:98:17:0e:0e:34:52:81:0c:4a:c6:19:87:fb:d1:bb:7e: ae:fe:38:6f:5b:43:75:09:d7:e3:ea:43:22:22:a6:2b:fb:66: 4c:f2:5d:93:17:82:43:52:07:9b:4d:23:af:80:e6:b8:c6:5e: 7e:d3:27:ab:50:dd:4e:52:70:ba:d9:86:1a:38:9b:4a:bd:b8: a7:ca:44:54:53:b4:cf:8b:2f:7d:d1:5d:d7:ef:fe:26:d4:19: 7b:7d:21:3b:f8:7a:cb:72:08:99:51:2a:bc:24:8f:3c:db:e3: 4a:19:22:6f:d0:44:78:5f:34:b4:67:10:d1:d9:d6:f5:1e:db: bf:8e:16:34:26:70:e1:7b:c4:4a:d9:52:a5:df:78:ae:ab:b5: e5:e6:20:58:24:09:32:8b:00:cd:c5:6e:a1:3d:a4:ee:3a:49: d3:76:21:48:2a:05:45:7b:cf:dc:e9:ae:01:e3:ad:d6:4e:c7: c1:d8:06:67:e6:76:75:39:c9:b6:0d:a4:d7:c9:15:fd:a4:e4: da:d6:6b:e0:02:a2:57:f8:96:b5:92:f2:cb:bd:fc:75:b8:5f: 08:25:f7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUwNzIxMDEwMjU3WhcNMjUwNzI4MDEwMjU3WjAYMRYwFAYD VQQDEw02ODdkOTFjMi04OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lBcvtoUbSGVNbdzWBgBhSa64PezQYzWhCjMJj4hdsc/q1spG9yQMOun5VBB 4pF5jxUaDjbeLwamlPs8ygqZ54AQ4+CBH3TRCJP2MbD7uPuX0dbI8BJH+Yl+98MR Z89KDXVvdfJ7JbOCbGYp3nYtxW5yiImcht3JlIAEyQIvz6TaIt/GK1g/gYeFanTI bcEWvvPkAxgllJWE0P72dO3ZxhfEBtFszUXAgaV7yE6ojoMFJ6NfGl6sptZ7j1Vv 0wuZ+t2xh+XncqaXWJptyjScKdB6qVstEfS/GqR+bbHZCItYsHeisUvqSyMT+aY9 oJhn72PEdf852gnNTb+dakjUGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzaYXQ/ Hyb3o1YaZQN147t1CzlDMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARzwgoFmi1IGxBoFimvdYppuuY6Fnq40F5JPo7FB3s0XK76wxKZ5gX Dg40UoEMSsYZh/vRu36u/jhvW0N1Cdfj6kMiIqYr+2ZM8l2TF4JDUgebTSOvgOa4 xl5+0yerUN1OUnC62YYaOJtKvbinykRUU7TPiy990V3X7/4m1Bl7fSE7+HrLcgiZ USq8JI882+NKGSJv0ER4XzS0ZxDR2db1Htu/jhY0JnDhe8RK2VKl33iuq7Xl5iBY JAkyiwDNxW6hPaTuOknTdiFIKgVFe8/c6a4B463WTsfB2AZn5nZ1Ocm2DaTXyRX9 pOTa1mvgAqJX+Ja1kvLLvfx1uF8IJfey -----END CERTIFICATE-----Generated at Mon Jul 21 12:26:21 2025 by rpki-client