$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: gL+m+NFV2ZQoybGfkLzQwfpLgzJ8TixFEhT8N0Gu3II= Subject key identifier: E1:DE:82:5C:6A:E9:25:3F:37:66:6D:A6:55:58:13:75:37:55:BE:0A Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 028C Signing time: Sat 19 Jul 2025 02:04:21 +0000 Manifest this update: Sat 19 Jul 2025 02:04:20 +0000 Manifest next update: Sat 26 Jul 2025 02:04:20 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: Bf1CEscUxu+MGymNXbYNFng8mbRtz2YGH3dn1hp28Sc=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Jul 19 02:04:20 2025 GMT Not After : Jul 26 02:04:20 2025 GMT Subject: CN=687afd25-9ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:55:f8:35:c4:27:a0:a0:e5:00:29:b7:79: 79:af:b2:69:a5:3c:35:6f:6d:ba:dd:6d:15:b3:9f: 30:c9:43:73:e9:09:d6:df:1c:7f:52:3d:f9:60:1e: 37:4d:9e:54:ef:be:b6:a5:9f:5e:1e:90:cf:ba:bf: 49:c4:19:29:97:e2:97:32:30:a8:96:e3:6c:84:44: a1:c0:78:60:82:42:2c:3f:45:8e:b4:5e:b1:6f:cd: 0a:35:f5:3e:a3:25:eb:88:5e:12:a8:c6:49:eb:ed: c7:b7:a9:75:d4:4f:6f:7f:21:f1:cd:72:10:69:e4: b7:36:e6:1a:58:9d:18:66:12:58:02:ef:bb:1b:34: 55:bf:46:8c:b5:c6:b0:d0:9d:cc:21:35:e5:6d:3f: d7:98:ac:2a:8c:20:27:64:11:1f:d6:5b:db:9c:41: e8:a8:55:eb:6a:b0:56:aa:b0:b6:b2:e6:c3:6f:7d: 90:6f:2a:ce:77:65:28:48:92:89:ea:b6:87:17:37: 4d:cf:7b:e6:bb:50:9e:e9:a1:82:da:a4:f6:91:92: 81:84:55:4f:a8:47:1f:fe:51:a1:4d:b1:c5:a4:03: 31:38:64:0e:e2:25:b9:72:17:ad:8e:b3:e5:31:82: b5:ff:6d:f7:51:d4:80:bc:98:ef:dd:a5:b0:7e:75: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:82:5C:6A:E9:25:3F:37:66:6D:A6:55:58:13:75:37:55:BE:0A X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c8:25:a7:87:9f:01:3a:1b:34:6d:83:2b:9b:e1:ee:7b:d5: 67:a2:11:97:bc:18:a2:2f:48:40:b4:1b:48:1b:ca:3e:d6:d6: 9c:22:45:60:d0:7f:a4:e2:25:b9:67:6e:8d:e3:68:c7:40:9f: 25:c2:e3:c5:9e:cb:d7:65:9f:52:c6:cc:82:76:76:c2:af:d4: 7c:a4:66:71:a6:d9:56:6e:5f:53:85:e0:a6:ac:d4:1a:a3:7c: 7b:01:26:0d:94:a8:7c:e2:3f:a4:de:42:1f:23:df:29:9e:fd: bd:7e:00:c9:23:16:0d:27:89:bd:8d:be:d1:05:46:a6:0a:4e: f3:52:93:41:cf:05:a6:b0:c6:58:fe:1b:9b:28:cf:af:15:1f: 6c:2c:ea:37:3a:d1:64:8d:88:32:d2:8e:13:67:35:3b:0c:0f: 4f:a0:ab:62:a3:d0:39:13:07:66:f5:0b:f1:98:9a:65:c6:f8: 01:24:53:c5:46:72:00:43:8d:dc:f9:fe:90:e6:f6:97:a7:74: ca:b9:b4:5a:78:56:e8:91:70:60:7b:e6:b6:64:c3:18:f3:0c: 40:5a:9a:34:c9:16:02:f1:e9:3a:64:3e:bc:44:75:56:89:4b: 65:48:6c:34:38:68:82:25:19:a5:c2:1a:c5:aa:6c:f0:44:ee: 27:98:ff:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwNzE5MDIwNDIwWhcNMjUwNzI2MDIwNDIwWjAYMRYwFAYD VQQDEw02ODdhZmQyNS05ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTRV+DXEJ6Cg5QApt3l5r7JppTw1b2263W0Vs58wyUNz6QnW3xx/Uj35YB43 TZ5U7762pZ9eHpDPur9JxBkpl+KXMjColuNshEShwHhggkIsP0WOtF6xb80KNfU+ oyXriF4SqMZJ6+3Ht6l11E9vfyHxzXIQaeS3NuYaWJ0YZhJYAu+7GzRVv0aMtcaw 0J3MITXlbT/XmKwqjCAnZBEf1lvbnEHoqFXrarBWqrC2subDb32QbyrOd2UoSJKJ 6raHFzdNz3vmu1Ce6aGC2qT2kZKBhFVPqEcf/lGhTbHFpAMxOGQO4iW5chetjrPl MYK1/233UdSAvJjv3aWwfnUE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHeglxq 6SU/N2ZtplVYE3U3Vb4KMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCayCWnh58BOhs0bYMrm+Hue9VnohGXvBiiL0hAtBtIG8o+1tacIkVg 0H+k4iW5Z26N42jHQJ8lwuPFnsvXZZ9SxsyCdnbCr9R8pGZxptlWbl9TheCmrNQa o3x7ASYNlKh84j+k3kIfI98pnv29fgDJIxYNJ4m9jb7RBUamCk7zUpNBzwWmsMZY /hubKM+vFR9sLOo3OtFkjYgy0o4TZzU7DA9PoKtio9A5Ewdm9QvxmJplxvgBJFPF RnIAQ43c+f6Q5vaXp3TKubRaeFbokXBge+a2ZMMY8wxAWpo0yRYC8ek6ZD68RHVW iUtlSGw0OGiCJRmlwhrFqmzwRO4nmP+l -----END CERTIFICATE-----Generated at Sun Jul 20 10:46:51 2025 by rpki-client