$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft File: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft (raw, json) Hash identifier: RYxh+Ibs9tAXuxNTvOQwPW8DVLvCjQLjnYOQ229EdkE= Subject key identifier: D6:F0:36:58:5D:DF:94:5E:D9:4F:FD:A3:71:2D:14:1F:97:C8:46:95 Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB Certificate issuer: /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft Manifest number: 0E1C Signing time: Fri 18 Jul 2025 19:02:23 +0000 Manifest this update: Fri 18 Jul 2025 19:02:23 +0000 Manifest next update: Fri 25 Jul 2025 19:02:23 +0000 Files and hashes: 1: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl (hash: fEM3iOoWK2L3jANyDkcaMz77pkQlUcJ4SZV91Sk3TAM=) 2: 16D76086A0A811EF88ED2026C4F9AE02.roa (hash: xXVPh1g488DDZ2eC7px+JMoDM3ZGXGyVRE09L+pr9Pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FA25, serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB Validity Not Before: Jul 18 19:02:23 2025 GMT Not After : Jul 25 19:02:23 2025 GMT Subject: CN=687a9a3f-db35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:22:d7:96:7a:7f:e5:34:74:c7:7b:e4:31: 26:4b:20:f3:9d:04:85:e8:d4:61:fe:ce:19:f3:c1: be:b1:d6:3a:1a:97:00:7f:45:44:25:3c:fc:9d:d6: ef:1a:37:c8:4c:6c:9c:07:3f:49:ce:b3:aa:4b:43: 21:33:e8:81:c9:f7:25:c8:51:14:0b:25:49:4b:22: ff:f9:65:77:27:7b:d1:ec:0a:04:54:8a:a7:b3:af: 74:26:aa:77:3a:53:48:1c:fd:65:f0:ae:21:60:5b: 86:6e:04:d0:22:85:c1:96:14:98:78:a9:86:32:b5: fd:35:f4:47:95:9f:5f:0b:aa:d3:98:e5:eb:e2:7f: 42:d4:7b:31:21:ba:1c:d2:07:99:87:6f:65:aa:ce: 73:1b:d2:d3:5c:17:e8:c8:51:49:3e:4e:1f:33:c6: 13:cb:a8:53:57:00:c1:9d:16:61:a7:f1:8d:0c:11: 4f:1e:0b:f3:66:a0:5d:bb:5e:34:51:bb:d4:f6:4a: 14:e7:0e:66:f3:2a:68:d5:e0:47:69:2f:c5:2a:8f: fa:1e:f0:d1:50:63:aa:8f:4b:ec:eb:45:e0:6d:f4: 6e:51:aa:89:aa:96:f0:46:ff:a3:34:93:30:df:ea: ff:3f:ec:6d:69:79:f6:22:c6:76:39:d0:20:11:74: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F0:36:58:5D:DF:94:5E:D9:4F:FD:A3:71:2D:14:1F:97:C8:46:95 X509v3 Authority Key Identifier: keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:2f:44:ae:38:32:29:ad:0e:d6:86:23:71:77:5b:c7:39:0e: 84:8f:5d:83:60:ac:2c:75:bf:51:92:25:fc:e4:22:25:99:7b: 4f:20:47:7e:8e:99:d7:5c:c6:54:d0:31:58:dd:40:92:58:b8: 18:8c:59:a3:ba:b6:48:3f:22:b8:c4:38:3e:90:16:aa:e2:27: 38:f1:bc:44:af:1e:62:1c:5e:da:21:e5:3a:78:1d:e3:8c:ad: 56:8a:16:6c:7e:3b:f5:71:c5:55:f5:7e:ad:e8:f8:2e:9b:19: 5a:a6:b0:dd:66:c1:9d:0b:c1:08:11:66:db:5b:91:bb:53:43: 4f:41:74:74:67:d4:ca:f4:0e:77:f7:7b:a8:ca:1a:6e:3f:b0: 5a:d4:32:40:cf:7f:b9:54:1a:b3:fb:d0:67:77:3e:4a:00:c8: b6:b3:32:76:ef:76:ea:46:26:1e:81:e9:de:27:d3:78:a6:73: fd:f2:b5:ee:94:c8:1b:df:01:bc:60:9c:9a:c1:72:e7:88:94: b8:2e:eb:63:cf:7d:ab:0f:99:23:0c:ab:d1:ca:83:0a:89:71: fd:6d:9b:1d:fa:c4:cc:1e:14:a0:07:3f:c3:70:27:65:32:64: af:bb:5f:67:bb:88:7c:14:5c:7a:cd:41:35:70:13:6f:d0:4b: 72:20:89:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZBMjUxMTAvBgNVBAUTKEIwMDE0QTgzMDZDNTJFNDA0RjY3Q0EyRjhFNTg2RjlC ODY4RThDQUIwHhcNMjUwNzE4MTkwMjIzWhcNMjUwNzI1MTkwMjIzWjAYMRYwFAYD VQQDEw02ODdhOWEzZi1kYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVYi15Z6f+U0dMd75DEmSyDznQSF6NRh/s4Z88G+sdY6GpcAf0VEJTz8ndbv GjfITGycBz9JzrOqS0MhM+iByfclyFEUCyVJSyL/+WV3J3vR7AoEVIqns690Jqp3 OlNIHP1l8K4hYFuGbgTQIoXBlhSYeKmGMrX9NfRHlZ9fC6rTmOXr4n9C1HsxIboc 0geZh29lqs5zG9LTXBfoyFFJPk4fM8YTy6hTVwDBnRZhp/GNDBFPHgvzZqBdu140 UbvU9koU5w5m8ypo1eBHaS/FKo/6HvDRUGOqj0vs60XgbfRuUaqJqpbwRv+jNJMw 3+r/P+xtaXn2IsZ2OdAgEXTvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbwNlhd 35Re2U/9o3EtFB+XyEaVMB8GA1UdIwQYMBaAFLABSoMGxS5AT2fKL45Yb5uGjoyr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkEyNS8yQkJDQkNBQTFE QUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxrQlBaOG92amxodm00YU9q S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NBRktnd2JGTGtCUFo4b3ZqbGh2bTRhT2pLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkEyNS8yQkJDQkNBQTFEQUMxMUVBQUY0QTM3NjNDNEY5QUUwMi9zQUZLZ3diRkxr QlBaOG92amxodm00YU9qS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJL0SuODIprQ7WhiNxd1vHOQ6Ej12DYKwsdb9RkiX85CIlmXtPIEd+ jpnXXMZU0DFY3UCSWLgYjFmjurZIPyK4xDg+kBaq4ic48bxErx5iHF7aIeU6eB3j jK1WihZsfjv1ccVV9X6t6PgumxlaprDdZsGdC8EIEWbbW5G7U0NPQXR0Z9TK9A53 93uoyhpuP7Ba1DJAz3+5VBqz+9Bndz5KAMi2szJ273bqRiYegeneJ9N4pnP98rXu lMgb3wG8YJyawXLniJS4Lutjz32rD5kjDKvRyoMKiXH9bZsd+sTMHhSgBz/DcCdl MmSvu19nu4h8FFx6zUE1cBNv0EtyIIli -----END CERTIFICATE-----Generated at Sun Jul 20 06:33:52 2025 by rpki-client