$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: Usj8I3PelHXFr0YH3+kblwgzjUDKtROsPHWxGVM3XvI= Subject key identifier: 6C:B0:6F:36:93:0C:AC:F3:D7:11:78:B0:73:AA:71:5E:B3:25:52:41 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 064E Signing time: Fri 18 Jul 2025 22:55:16 +0000 Manifest this update: Fri 18 Jul 2025 22:55:15 +0000 Manifest next update: Fri 25 Jul 2025 22:55:15 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: OtH9KBtQjGTmZF5cwkR2vUqSQpH7vnaUssvlkqUCW/Y=) 2: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (hash: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: Jul 18 22:55:15 2025 GMT Not After : Jul 25 22:55:15 2025 GMT Subject: CN=687ad0d4-cb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:bb:9f:fe:2c:c1:0e:0f:29:4f:87:6a:27: 17:79:cb:1e:9a:28:d0:34:d9:01:bd:5d:2f:8e:53: 17:b2:16:71:7f:0b:ec:3e:7b:21:dc:8c:4f:64:38: d2:96:50:22:83:df:f7:b1:ab:7d:e1:a7:86:d6:b8: ab:7e:95:46:e6:39:ba:80:ba:5c:a2:26:e7:34:f0: f2:ec:bc:f6:74:0f:d4:2c:d1:ea:3d:b9:6d:6d:1e: b4:47:af:00:dd:5c:4e:a1:e8:73:fe:4c:78:b4:85: 5f:0d:9d:8e:b1:fd:b1:d1:cc:b3:54:e2:75:7f:e3: d6:b9:f6:e4:69:b8:8b:3c:f7:7f:06:d9:63:80:25: 39:f6:7d:7b:da:bc:b9:37:e4:e4:62:59:9b:35:b3: 41:33:ec:2e:30:e8:0a:21:29:57:41:2c:0e:a1:01: 98:66:a8:aa:b1:89:20:6a:67:96:5e:ef:c3:d7:78: 77:42:30:40:c6:2b:6c:fb:82:29:f4:2e:27:76:6a: fa:db:b4:1e:e7:1b:dd:bd:1c:37:89:63:3d:27:cd: f2:42:69:97:4f:8b:bf:0a:1b:d6:05:03:f6:fd:53: 13:b4:25:c8:f7:c0:f0:9c:cb:2a:e6:ca:c4:66:91: 4c:4e:77:60:d7:4f:d6:30:d9:9b:69:7c:e2:46:c9: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:6F:36:93:0C:AC:F3:D7:11:78:B0:73:AA:71:5E:B3:25:52:41 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:6d:45:d9:5c:1d:ae:10:19:38:e0:a8:d8:8f:74:af:ab:40: f6:f6:fd:4d:12:1f:bd:2b:a0:08:54:da:52:52:fc:11:06:a3: c4:ca:6c:a6:09:96:2d:4d:5e:b3:78:42:bf:0f:88:58:ee:0c: 8d:c6:f3:3a:87:5a:11:2b:47:11:09:aa:be:8f:af:40:a2:83: 27:1d:5e:d8:1b:c1:da:dc:56:b1:7c:ae:b5:8a:3e:95:bb:87: 2c:6b:1c:85:c2:e2:79:d3:70:96:bb:6e:26:1b:14:da:d1:a6: 21:3b:41:39:b1:d4:f6:82:65:e2:64:67:cd:93:f3:e2:17:93: 6d:d7:16:df:eb:89:a0:04:52:e1:92:de:5d:dd:16:3e:75:53: 9e:d9:63:df:73:50:51:87:b0:37:c0:65:86:d0:25:cf:0a:0f: eb:66:bc:a3:ab:88:65:fd:bf:db:7a:d2:20:1f:4a:d5:c4:cc: cf:62:d4:c5:b5:b1:31:8e:d0:11:91:ec:7c:ca:f1:3d:29:06: 1a:b5:4d:31:bb:52:cb:04:e3:4b:7c:21:68:4e:87:c3:b6:c4: 2b:3e:77:d0:1f:30:79:76:8f:9d:51:15:39:6f:77:49:78:ea: 2d:dc:89:8f:8d:ed:30:67:3c:db:e9:ae:64:2b:ad:f3:5b:59: 0d:fa:19:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjUwNzE4MjI1NTE1WhcNMjUwNzI1MjI1NTE1WjAYMRYwFAYD VQQDEw02ODdhZDBkNC1jYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxm7n/4swQ4PKU+HaicXecsemijQNNkBvV0vjlMXshZxfwvsPnsh3IxPZDjS llAig9/3sat94aeG1rirfpVG5jm6gLpcoibnNPDy7Lz2dA/ULNHqPbltbR60R68A 3VxOoehz/kx4tIVfDZ2Osf2x0cyzVOJ1f+PWufbkabiLPPd/BtljgCU59n172ry5 N+TkYlmbNbNBM+wuMOgKISlXQSwOoQGYZqiqsYkgameWXu/D13h3QjBAxits+4Ip 9C4ndmr627Qe5xvdvRw3iWM9J83yQmmXT4u/ChvWBQP2/VMTtCXI98DwnMsq5srE ZpFMTndg10/WMNmbaXziRskmPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGywbzaT DKzz1xF4sHOqcV6zJVJBMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFbUXZXB2uEBk44KjYj3Svq0D29v1NEh+9K6AIVNpSUvwRBqPEymym CZYtTV6zeEK/D4hY7gyNxvM6h1oRK0cRCaq+j69AooMnHV7YG8Ha3FaxfK61ij6V u4csaxyFwuJ503CWu24mGxTa0aYhO0E5sdT2gmXiZGfNk/PiF5Nt1xbf64mgBFLh kt5d3RY+dVOe2WPfc1BRh7A3wGWG0CXPCg/rZryjq4hl/b/betIgH0rVxMzPYtTF tbExjtARkex8yvE9KQYatU0xu1LLBONLfCFoTofDtsQrPnfQHzB5do+dURU5b3dJ eOot3ImPje0wZzzb6a5kK63zW1kN+hlC -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:42 2025 by rpki-client