$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: YzSUUfHWUfJdeGrSnaMiwR0ESCRHiH6DxKYUUwR2mCY= Subject key identifier: A7:55:A3:18:05:83:06:20:98:CB:43:78:93:A5:AB:AE:95:E8:DB:D9 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 28FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 2827 Signing time: Fri 18 Jul 2025 15:45:11 +0000 Manifest this update: Fri 18 Jul 2025 15:45:10 +0000 Manifest next update: Fri 25 Jul 2025 15:45:10 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: RMs8neSL3K0yW15THy8YQ/ZJ407guTwjPVLLVETAQWA=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: oWJMpDIMTFAfw38plnHhHvz3GPHifE5GFKfNlopflac=) 3: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: utw8lW/Z+SnfTxVVA9IYgEwTljgENFT7GWBY9r4W5yI=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: b2Yq5jV0ZpUmJZqaRWPtD89nJkoGKuS1X5rO9Hm2iOA=) 5: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: 3rfvelTpkGIVSx6swNlRbMEKIqAJwLp3a6nGC9gVNp0=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: BxB9DUmPJnzDFpi/4J+iB6ICWPe219HPrNGcg9itF+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10490 (0x28fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Jul 18 15:45:10 2025 GMT Not After : Jul 25 15:45:10 2025 GMT Subject: CN=687a6c07-83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:da:8a:b3:b7:79:ad:cd:cd:41:5a:7e:e0: 0d:d6:db:37:19:b7:be:ff:46:20:69:da:e8:9a:71: 22:81:92:d7:fa:a9:18:97:9c:69:06:3c:6c:e1:fe: 93:b0:cf:e8:e7:78:49:f7:f9:69:f3:98:2c:80:e8: a4:c1:4b:8b:e0:92:d7:06:f3:c5:79:5b:a5:6f:6c: 30:7a:27:91:17:99:07:62:c1:31:47:7d:c6:18:fa: 66:8b:70:d9:36:2a:a8:5a:0e:9e:07:96:ef:93:a1: 4c:0f:1f:58:8c:2b:5b:0a:d0:aa:06:73:1a:22:f3: 07:12:30:f1:4e:51:f5:02:18:ef:d7:05:0d:2a:41: 2b:37:06:38:8d:f6:79:3d:dc:89:b4:59:d9:42:f4: 3f:12:21:15:d3:c8:5b:fa:85:c9:6d:4b:e9:fb:09: 01:8f:fd:9c:57:ee:7c:84:81:37:58:f2:d9:f8:88: fd:8b:22:6f:37:76:37:78:f7:b0:16:2d:1d:83:0b: 5f:da:7a:4e:b6:34:63:e6:ec:ba:50:95:88:ff:12: 91:46:e8:c3:fe:5b:ba:8a:b4:dd:5a:b3:c5:8d:5b: 29:c4:13:14:b9:ba:0f:b8:90:ea:14:06:e9:f5:59: 89:54:17:2f:3d:b5:19:2c:76:74:c9:f4:28:bb:8a: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:A3:18:05:83:06:20:98:CB:43:78:93:A5:AB:AE:95:E8:DB:D9 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:a7:26:8d:73:d4:45:cd:47:e2:77:a5:f1:7b:43:dc:1e:23: bd:3f:11:4c:14:7f:80:db:9e:f0:31:c5:f8:55:75:38:f8:71: 71:c9:07:07:f2:1d:5c:8a:35:a1:b1:1c:92:fc:70:31:b2:f4: ac:70:3e:82:c0:f4:1a:1e:f6:ba:bb:83:07:3d:7d:38:c8:40: 1d:c5:7a:47:7b:d9:7f:f2:6b:3d:18:13:8e:6b:24:e8:f0:42: ab:f1:18:03:68:62:ab:4d:cb:e6:55:04:f1:69:35:8f:7e:5b: a4:f4:36:94:51:83:4e:42:e4:a1:ad:c4:97:08:57:19:eb:cc: b6:ae:d3:5f:85:e2:d8:fb:7a:79:57:dc:0a:a2:b5:1c:66:8b: 5c:72:62:57:52:12:25:34:4c:24:03:ee:b1:3c:ba:07:03:3a: 7a:25:ab:1f:7b:af:bd:64:a2:d1:07:0e:14:97:82:13:07:34: 21:40:8a:8b:cb:7f:dc:e4:5f:06:a6:d0:24:98:2f:f4:b4:08: 65:62:a4:58:a5:31:4c:45:ad:46:f2:f0:2b:ed:fb:1a:8f:48: 41:e7:c4:cc:b8:54:3d:7d:3b:3e:08:13:a0:15:56:d5:1e:e4: 79:df:a4:fd:f8:6a:44:10:93:be:a1:4b:18:74:d4:69:62:21: e9:b9:9b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjUwNzE4MTU0NTEwWhcNMjUwNzI1MTU0NTEwWjAYMRYwFAYD VQQDEw02ODdhNmMwNy04M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJbairO3ea3NzUFafuAN1ts3Gbe+/0YgadromnEigZLX+qkYl5xpBjxs4f6T sM/o53hJ9/lp85gsgOikwUuL4JLXBvPFeVulb2wweieRF5kHYsExR33GGPpmi3DZ NiqoWg6eB5bvk6FMDx9YjCtbCtCqBnMaIvMHEjDxTlH1Ahjv1wUNKkErNwY4jfZ5 PdyJtFnZQvQ/EiEV08hb+oXJbUvp+wkBj/2cV+58hIE3WPLZ+Ij9iyJvN3Y3ePew Fi0dgwtf2npOtjRj5uy6UJWI/xKRRujD/lu6irTdWrPFjVspxBMUuboPuJDqFAbp 9VmJVBcvPbUZLHZ0yfQou4qHgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdVoxgF gwYgmMtDeJOlq66V6NvZMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZpyaNc9RFzUfid6Xxe0PcHiO9PxFMFH+A257wMcX4VXU4+HFxyQcH 8h1cijWhsRyS/HAxsvSscD6CwPQaHva6u4MHPX04yEAdxXpHe9l/8ms9GBOOayTo 8EKr8RgDaGKrTcvmVQTxaTWPfluk9DaUUYNOQuShrcSXCFcZ68y2rtNfheLY+3p5 V9wKorUcZotccmJXUhIlNEwkA+6xPLoHAzp6Jasfe6+9ZKLRBw4Ul4ITBzQhQIqL y3/c5F8GptAkmC/0tAhlYqRYpTFMRa1G8vAr7fsaj0hB58TMuFQ9fTs+CBOgFVbV HuR536T9+GpEEJO+oUsYdNRpYiHpuZud -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:23 2025 by rpki-client