$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: Z1AZEGWyPIHA7YOPGmJeT2SDZGHXtCVLNqxjMV+HcE0= Subject key identifier: 5D:54:E5:A9:5B:1E:B4:51:02:F3:D6:39:04:40:DD:92:F8:3F:47:EB Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CC4 Signing time: Fri 18 Jul 2025 18:20:25 +0000 Manifest this update: Fri 18 Jul 2025 18:20:24 +0000 Manifest next update: Fri 25 Jul 2025 18:20:24 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: M0IkOKG0pDArOhLuIgWyejI4HimW1BuWeOtxrqnVBWI=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Jul 18 18:20:24 2025 GMT Not After : Jul 25 18:20:24 2025 GMT Subject: CN=687a9069-d5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:1c:25:ab:b4:2d:c4:bb:84:8e:f0:5e:56: 23:ab:e3:e9:40:72:a0:44:ae:e4:60:c9:59:a3:19: 01:7e:24:6d:14:c0:3b:ab:14:ac:3c:b3:d7:dd:c8: 5b:10:e2:bf:53:38:d0:7c:f2:f4:ec:6b:4a:6f:28: 2b:1a:ab:b6:8a:bd:f9:03:aa:b4:c4:a6:1b:6f:8a: b5:53:e8:e3:9e:82:94:a1:fd:cf:2b:34:f7:da:23: af:27:18:a7:09:9f:a7:54:06:71:1d:d6:c6:23:f5: 11:e5:c9:06:24:ec:90:75:76:87:9d:ab:ca:e2:73: 0f:39:6b:ca:b8:74:f9:89:be:c0:6c:c9:1b:d8:3a: 98:76:e0:4a:23:a1:25:cc:0f:3d:30:80:8c:22:de: 9c:47:b5:b2:33:54:d5:0c:d5:fc:f5:f7:e3:02:04: 66:02:df:35:94:bb:b0:89:d8:f2:b2:6a:d5:7d:fc: b9:55:9b:62:d9:38:d7:fc:33:97:5f:15:d8:65:94: 94:57:94:e1:da:cc:29:db:6b:cf:1a:7c:94:5e:52: 23:a1:a1:e0:94:fb:b1:30:67:f3:c6:0c:7d:0b:43: f9:3c:ee:b8:2c:98:d7:3f:ff:12:29:ec:c7:08:3f: 12:1b:dd:cc:d4:9b:d1:31:4c:37:73:8c:d9:fd:a8: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:E5:A9:5B:1E:B4:51:02:F3:D6:39:04:40:DD:92:F8:3F:47:EB X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:65:fe:e0:fd:cb:95:99:8c:64:a3:b8:12:62:6a:0b:18:58: 26:eb:bb:51:3c:71:b6:56:98:4c:06:9a:ae:33:b1:11:ec:28: 01:5e:a4:75:a2:fb:d9:a8:a9:79:00:f3:8a:55:5c:b0:b4:99: 65:04:16:48:27:b0:d4:0e:cd:7b:30:af:9a:db:96:13:8d:48: 9f:48:db:7d:10:4a:c4:ce:2c:02:40:00:20:f2:0d:dc:e8:fb: d8:ee:65:eb:26:93:d1:eb:3a:ee:8e:37:c9:7a:d9:25:a6:52: f2:33:4c:7d:1e:3d:b8:7d:9f:7e:01:29:cb:be:2e:e9:a1:50: 44:84:72:cc:1b:19:cd:28:3a:e8:3b:22:5b:b1:7d:cf:c1:e7: 4c:44:85:10:d5:cc:ba:db:7c:11:ae:aa:2e:04:2e:b9:2a:cc: 5c:af:15:30:53:5a:36:d6:8f:cb:74:82:0e:53:1f:29:a4:59: 64:be:4b:f0:8c:cb:d4:9e:7c:a4:e8:0a:1b:50:b3:f9:f5:d7: 19:33:e8:f2:0a:4d:63:dc:96:81:03:d9:a4:e7:bc:56:f0:a2: 88:5f:73:77:09:d6:c7:f6:35:6b:55:97:a6:bc:0c:52:00:42: 14:aa:64:b6:d7:ae:dd:13:75:b9:48:98:84:4a:c4:a4:bb:7a: 9b:53:29:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwNzE4MTgyMDI0WhcNMjUwNzI1MTgyMDI0WjAYMRYwFAYD VQQDEw02ODdhOTA2OS1kNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SccJau0LcS7hI7wXlYjq+PpQHKgRK7kYMlZoxkBfiRtFMA7qxSsPLPX3chb EOK/UzjQfPL07GtKbygrGqu2ir35A6q0xKYbb4q1U+jjnoKUof3PKzT32iOvJxin CZ+nVAZxHdbGI/UR5ckGJOyQdXaHnavK4nMPOWvKuHT5ib7AbMkb2DqYduBKI6El zA89MICMIt6cR7WyM1TVDNX89ffjAgRmAt81lLuwidjysmrVffy5VZti2TjX/DOX XxXYZZSUV5Th2swp22vPGnyUXlIjoaHglPuxMGfzxgx9C0P5PO64LJjXP/8SKezH CD8SG93M1JvRMUw3c4zZ/agHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1U5alb HrRRAvPWOQRA3ZL4P0frMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATZf7g/cuVmYxko7gSYmoLGFgm67tRPHG2VphMBpquM7ER7CgBXqR1 ovvZqKl5APOKVVywtJllBBZIJ7DUDs17MK+a25YTjUifSNt9EErEziwCQAAg8g3c 6PvY7mXrJpPR6zrujjfJetklplLyM0x9Hj24fZ9+ASnLvi7poVBEhHLMGxnNKDro OyJbsX3PwedMRIUQ1cy623wRrqouBC65KsxcrxUwU1o21o/LdIIOUx8ppFlkvkvw jMvUnnyk6AobULP59dcZM+jyCk1j3JaBA9mk57xW8KKIX3N3CdbH9jVrVZemvAxS AEIUqmS2167dE3W5SJiESsSku3qbUyk/ -----END CERTIFICATE-----Generated at Sun Jul 20 14:21:53 2025 by rpki-client