$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: 1FQd0E7mSopHTr+FyQtH5ra6nwANQ84DEZuyatixOo4= Subject key identifier: AD:B6:BB:C1:24:25:19:22:6D:6C:BC:53:5F:81:A6:9C:BC:92:EE:29 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 041F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 040B Signing time: Sat 19 Jul 2025 00:49:08 +0000 Manifest this update: Sat 19 Jul 2025 00:49:07 +0000 Manifest next update: Sat 26 Jul 2025 00:49:07 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: QG87FyEbi8Cg8RifW1TrKVbrGuNWQUE5YfQ67NIGTa8=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1055 (0x41f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Jul 19 00:49:07 2025 GMT Not After : Jul 26 00:49:07 2025 GMT Subject: CN=687aeb84-42e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:b8:d0:52:24:e1:56:bc:d7:45:01:84:76: a6:12:13:22:c8:38:fa:f8:fe:92:3e:5d:22:2b:ae: 35:8a:bf:05:e6:bf:9b:0f:24:e9:36:51:99:7b:ae: 7c:ab:3f:89:47:de:dc:96:3c:08:ce:b5:cf:47:31: 71:ad:91:56:90:70:b2:e8:3a:d1:c4:da:78:56:ac: 94:3c:66:8e:7f:cb:4b:20:63:a6:a3:fb:2d:af:d8: 02:22:c6:36:14:2b:84:17:20:ab:eb:3f:6e:a9:c9: 89:26:1f:20:2b:11:4a:07:be:1c:f3:39:45:d8:2c: 1c:88:c0:95:5c:9a:70:09:85:24:6c:b5:57:6e:91: f9:d1:09:df:35:1c:29:55:92:9e:8d:05:93:b4:18: 9b:a7:f6:14:18:87:4b:87:13:bf:1a:0f:e7:fd:11: 60:c5:60:9c:12:a8:fc:7c:fd:cd:ff:5a:b6:22:76: 7a:0a:52:3b:75:19:12:6c:14:ca:f3:f8:12:6e:80: e0:78:ea:0a:e6:ac:51:a5:5d:80:dc:2f:a7:f1:98: db:81:b5:d0:db:a6:a3:d1:4c:0a:de:33:05:a4:66: 1f:96:27:5e:36:ed:ce:c7:f1:58:89:c3:0b:2d:4f: 31:3f:c0:9e:0c:82:92:83:45:6b:0c:0c:de:24:f4: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B6:BB:C1:24:25:19:22:6D:6C:BC:53:5F:81:A6:9C:BC:92:EE:29 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2e:59:a5:dc:c2:ec:9b:4a:91:e7:86:6b:cb:10:83:9f:9f: 3d:99:36:c8:56:e0:d2:68:8c:15:44:64:22:00:b6:a5:ce:3c: f7:32:10:43:22:e7:c4:cd:f9:9c:ff:80:23:97:de:39:47:46: 9f:3d:aa:82:74:43:6a:ba:5c:97:a7:8d:f4:b2:ad:a3:ef:5f: 05:21:0d:9b:62:6f:bb:01:45:02:fb:42:f6:92:52:64:ef:50: 22:90:ec:ad:97:c4:27:cb:d6:5f:78:1d:78:33:36:81:ed:20: c0:71:b3:bc:33:0c:4a:85:04:89:c7:5c:dd:ae:9b:ae:c5:7c: 61:b4:1e:d5:e7:5e:f8:02:40:a3:94:26:5e:89:a2:59:d1:49: 86:9e:27:e0:66:b5:f6:34:df:8f:14:95:7c:aa:87:e8:5c:26: 2f:97:a1:91:33:4e:13:2f:96:24:69:dd:7f:49:d8:3e:4b:df: 12:44:45:1d:b3:99:8f:10:40:60:b3:2d:9a:17:6c:58:36:da: 71:ba:31:e7:f7:32:33:d4:61:ff:d7:96:0e:07:29:86:ea:4b: 9e:6d:b8:87:3a:33:75:77:9c:da:4f:c2:81:42:66:25:ee:ed: 24:f1:51:51:69:10:9a:fd:00:0f:12:5e:dc:3c:17:3d:75:1d: 42:c6:42:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwNzE5MDA0OTA3WhcNMjUwNzI2MDA0OTA3WjAYMRYwFAYD VQQDEw02ODdhZWI4NC00MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXm40FIk4Va810UBhHamEhMiyDj6+P6SPl0iK641ir8F5r+bDyTpNlGZe658 qz+JR97cljwIzrXPRzFxrZFWkHCy6DrRxNp4VqyUPGaOf8tLIGOmo/str9gCIsY2 FCuEFyCr6z9uqcmJJh8gKxFKB74c8zlF2CwciMCVXJpwCYUkbLVXbpH50QnfNRwp VZKejQWTtBibp/YUGIdLhxO/Gg/n/RFgxWCcEqj8fP3N/1q2InZ6ClI7dRkSbBTK 8/gSboDgeOoK5qxRpV2A3C+n8ZjbgbXQ26aj0UwK3jMFpGYflideNu3Ox/FYicML LU8xP8CeDIKSg0VrDAzeJPQwvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK22u8Ek JRkibWy8U1+Bppy8ku4pMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcLlml3MLsm0qR54ZryxCDn589mTbIVuDSaIwVRGQiALalzjz3MhBD IufEzfmc/4Ajl945R0afPaqCdENqulyXp430sq2j718FIQ2bYm+7AUUC+0L2klJk 71AikOytl8Qny9ZfeB14MzaB7SDAcbO8MwxKhQSJx1zdrpuuxXxhtB7V5174AkCj lCZeiaJZ0UmGnifgZrX2NN+PFJV8qofoXCYvl6GRM04TL5Ykad1/Sdg+S98SREUd s5mPEEBgsy2aF2xYNtpxujHn9zIz1GH/15YOBymG6kuebbiHOjN1d5zaT8KBQmYl 7u0k8VFRaRCa/QAPEl7cPBc9dR1CxkJY -----END CERTIFICATE-----Generated at Sun Jul 20 18:46:21 2025 by rpki-client