$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft File: zT31OqDpo5hZXpVwFRVbzKxWjRU.mft (raw, json) Hash identifier: qbeWkhDwIKKr8+2kiO9NgI6jqXTWMSyvSPe8xQBhKMw= Subject key identifier: A4:FE:11:FE:30:4F:61:75:4A:2A:0F:1F:35:31:D7:80:16:36:E5:3F Authority key identifier: CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 Certificate issuer: /CN=A914EBB2/serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft Manifest number: E2 Signing time: Sat 19 Jul 2025 05:55:57 +0000 Manifest this update: Sat 19 Jul 2025 05:55:57 +0000 Manifest next update: Sat 26 Jul 2025 05:55:57 +0000 Files and hashes: 1: zT31OqDpo5hZXpVwFRVbzKxWjRU.crl (hash: UidzEmuRTCdmQI40Z4irOM7C3mu9QhidtivvC5zZmBM=) 2: BB8DC2EEDA3911EFB026B123C4F9AE02.roa (hash: ACt0GfmIsnWsiYO7nO4wwlOPBRzxk2m850xRSMz9+f0=) 3: 9292865625AA11F0A63D1D85C4F9AE02.roa (hash: 3k3KaN1j3W/678DW+zVJw9AP9zsgzVJ2wnOYz4kwK+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=CD3DF53AA0E9A398595E957015155BCCAC568D15 Validity Not Before: Jul 19 05:55:57 2025 GMT Not After : Jul 26 05:55:57 2025 GMT Subject: CN=687b336d-435d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:03:59:57:43:bc:a6:f5:17:7e:0c:38:af: f1:8a:50:8a:32:a4:17:18:bc:67:c3:20:4d:fc:01: 83:73:35:a3:19:0c:12:76:06:50:3c:ee:c6:3c:e3: 4f:a1:6a:a3:e2:7d:81:20:98:cd:f4:57:a5:f1:e2: 2a:ae:d3:b4:ed:3d:2e:de:88:72:46:73:ac:78:c3: 51:5e:59:55:53:16:0b:ac:f8:19:69:e2:7b:9d:4b: 71:95:75:59:dc:22:fc:ee:0d:11:78:d4:b5:4b:85: 4c:15:86:7c:a8:cc:55:2c:69:af:f0:05:ac:ad:ac: bd:c5:d7:85:4e:25:9f:cb:e7:0d:6e:e0:81:ff:f8: 87:e6:c5:a3:7e:a4:e5:88:5c:d6:65:f8:e4:9d:ec: aa:5e:1b:b9:70:a1:ca:37:e4:2b:6d:64:7a:55:92: 7e:46:57:69:67:11:f7:af:b9:52:32:a5:db:cc:ec: fb:04:a8:dc:69:1e:eb:ad:fc:db:47:f7:43:53:53: 24:ad:52:58:ff:5e:b3:75:36:f2:a0:ef:58:7d:38: fd:16:a0:1c:1e:88:74:3a:74:5d:b9:b7:e0:28:ce: 76:48:bd:2e:1f:16:70:47:75:d9:c3:fb:4d:9f:43: 60:9d:82:42:7e:08:db:9b:31:4d:a0:66:43:79:0c: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FE:11:FE:30:4F:61:75:4A:2A:0F:1F:35:31:D7:80:16:36:E5:3F X509v3 Authority Key Identifier: keyid:CD:3D:F5:3A:A0:E9:A3:98:59:5E:95:70:15:15:5B:CC:AC:56:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zT31OqDpo5hZXpVwFRVbzKxWjRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F37F246E329511EF9A482F55C4F9AE02/zT31OqDpo5hZXpVwFRVbzKxWjRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ca:3c:5f:cd:ef:07:58:db:d0:c4:97:75:6f:4b:55:e9:c4: 05:f6:2c:58:ea:c6:0c:da:bc:50:c2:9a:e8:3e:dd:84:7a:89: 31:bd:e6:5a:a9:95:de:23:6c:a9:34:f7:ea:82:a6:e7:a6:d0: 68:4b:e7:d7:2c:5c:48:48:c0:1c:ea:4d:b5:6f:d9:8f:7b:38: 16:7c:10:c2:a9:e4:97:e2:10:0d:c0:84:e9:bb:b4:47:b6:b8: ef:8c:51:d9:77:76:25:a7:4a:fc:dc:57:c2:91:eb:e2:c8:85: cb:82:b3:64:a1:d8:7f:6a:f9:82:b9:15:ea:d1:79:ed:00:6c: a6:87:65:11:25:1a:94:b6:0b:28:ff:36:15:e2:0d:88:0c:68: d5:78:74:74:56:a6:4e:c2:67:dd:87:a0:35:24:f4:0b:64:6a: 28:91:b1:2f:d4:ce:87:0b:a3:d4:27:03:19:1e:64:6f:4b:10: aa:09:8c:56:4e:1b:f5:40:68:6f:22:98:2d:94:37:79:d7:5d: 7d:d0:37:fc:55:e0:45:69:b1:39:f9:e2:f3:8b:ee:70:fd:fa: c4:8d:6d:8e:f8:fb:b9:61:42:8f:f5:c5:e5:df:60:ea:e1:23: bb:a1:52:0f:8b:0d:d6:46:21:f7:3d:08:41:c8:64:89:73:a0: 73:4b:95:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKENEM0RGNTNBQTBFOUEzOTg1OTVFOTU3MDE1MTU1QkND QUM1NjhEMTUwHhcNMjUwNzE5MDU1NTU3WhcNMjUwNzI2MDU1NTU3WjAYMRYwFAYD VQQDEw02ODdiMzM2ZC00MzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu4DWVdDvKb1F34MOK/xilCKMqQXGLxnwyBN/AGDczWjGQwSdgZQPO7GPONP oWqj4n2BIJjN9Fel8eIqrtO07T0u3ohyRnOseMNRXllVUxYLrPgZaeJ7nUtxlXVZ 3CL87g0ReNS1S4VMFYZ8qMxVLGmv8AWsray9xdeFTiWfy+cNbuCB//iH5sWjfqTl iFzWZfjkneyqXhu5cKHKN+QrbWR6VZJ+RldpZxH3r7lSMqXbzOz7BKjcaR7rrfzb R/dDU1MkrVJY/16zdTbyoO9YfTj9FqAcHoh0OnRdubfgKM52SL0uHxZwR3XZw/tN n0NgnYJCfgjbmzFNoGZDeQzodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKT+Ef4w T2F1SioPHzUx14AWNuU/MB8GA1UdIwQYMBaAFM099Tqg6aOYWV6VcBUVW8ysVo0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMzdGMjQ2RTMy OTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81aFpYcFZ3RlJWYnpLeFdq UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pUMzFPcURwbzVoWlhwVndGUlZiekt4V2pSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMzdGMjQ2RTMyOTUxMUVGOUE0ODJGNTVDNEY5QUUwMi96VDMxT3FEcG81 aFpYcFZ3RlJWYnpLeFdqUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9yjxfze8HWNvQxJd1b0tV6cQF9ixY6sYM2rxQwproPt2EeokxveZa qZXeI2ypNPfqgqbnptBoS+fXLFxISMAc6k21b9mPezgWfBDCqeSX4hANwITpu7RH trjvjFHZd3Ylp0r83FfCkeviyIXLgrNkodh/avmCuRXq0XntAGymh2URJRqUtgso /zYV4g2IDGjVeHR0VqZOwmfdh6A1JPQLZGookbEv1M6HC6PUJwMZHmRvSxCqCYxW Thv1QGhvIpgtlDd511190Df8VeBFabE5+eLzi+5w/frEjW2O+Pu5YUKP9cXl32Dq 4SO7oVIPiw3WRiH3PQhByGSJc6BzS5Wp -----END CERTIFICATE-----Generated at Sun Jul 20 19:10:33 2025 by rpki-client