$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft File: NEp3XiRcztCAx5UhWW4yyPBtiMg.mft (raw, json) Hash identifier: jfs9reZXMKET8tlOfbFZ31bbjIVCQufzHzKKH4Bcr8A= Subject key identifier: 25:53:F5:6C:77:33:39:6C:FC:84:40:A2:51:F7:1E:9B:D9:5A:92:CD Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft Manifest number: 17A7 Signing time: Fri 18 Jul 2025 16:42:15 +0000 Manifest this update: Fri 18 Jul 2025 16:42:14 +0000 Manifest next update: Fri 25 Jul 2025 16:42:14 +0000 Files and hashes: 1: NEp3XiRcztCAx5UhWW4yyPBtiMg.crl (hash: gpXkHINQmENNuRCUQtkpskzH4zCyEPhPkjL/0vadi7U=) 2: 2F840DD2740911EDA7146F2DC4F9AE02.roa (hash: PKyy2enQZwJAPAGB65CItDAb1Yve/y7L5I1YK7Ph1yU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6076 (0x17bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Jul 18 16:42:14 2025 GMT Not After : Jul 25 16:42:14 2025 GMT Subject: CN=687a7966-060b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:7e:0e:f7:ea:80:15:4f:c9:a8:9e:6b:5c: 23:5f:52:00:f9:db:73:4a:4e:3d:78:24:f0:a3:f8: 3b:65:d4:60:da:7e:21:9f:25:cf:f8:08:8c:85:d8: e5:7c:a4:5c:d2:99:bf:4e:c6:19:0d:fb:b7:d5:0f: f5:60:08:94:f9:93:d2:f9:63:97:7e:7b:62:7e:62: 4b:57:a1:6d:37:d5:85:9b:64:39:4e:30:5b:fd:d7: 08:d9:60:52:9b:48:cb:ce:bf:eb:8d:66:e8:33:64: 75:93:8c:b3:a2:aa:ce:62:86:16:d7:51:bc:c7:56: 01:af:dc:00:c8:1f:56:a1:b2:9e:dd:e6:3c:2d:41: 8d:71:a2:10:10:82:c3:b8:96:85:7e:43:06:20:b0: 65:e2:5a:e8:9b:43:b8:40:ea:7b:b5:77:7b:af:79: ad:b1:ff:18:0a:73:20:b9:98:3e:09:5d:0e:41:f2: da:aa:e2:e5:17:3b:45:c2:4d:d6:9e:ad:11:c0:87: 54:05:ce:42:26:da:4d:b6:f6:80:ab:8d:25:7c:2a: 2c:81:f2:86:bd:e2:c6:9b:0c:98:e5:6e:3a:f5:e3: 91:90:30:5e:1c:0d:d8:d8:b9:9e:53:0a:89:28:9a: 79:20:ec:9a:cc:1f:c1:c7:84:e0:08:79:cb:19:bf: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:F5:6C:77:33:39:6C:FC:84:40:A2:51:F7:1E:9B:D9:5A:92:CD X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2a:e7:ef:0b:bd:93:76:f9:8c:4d:86:7c:74:c3:4f:c1:8c: fe:61:ee:74:2a:d9:45:6b:02:f0:fa:40:0d:32:a6:99:ec:da: 5a:ad:62:44:2b:2f:56:7a:60:b0:7d:12:5e:27:50:3d:d8:3e: f2:26:b9:e0:7f:0d:c2:4d:5e:c0:c9:6a:23:5f:d5:8b:fc:a6: c9:90:9a:6b:28:31:6e:7d:18:cf:c0:7a:1e:ac:ff:49:92:2d: 5e:67:ef:c0:6b:8e:43:7c:3c:e4:a7:1a:24:ce:86:3f:87:c7: 1d:13:7c:9f:45:27:80:d3:9d:7b:cf:ce:aa:4f:d5:83:be:b9: ec:7d:e0:b2:f7:65:ed:90:ec:02:95:67:db:dc:a6:06:2d:90: 27:82:47:ca:07:49:cc:4f:34:f0:e6:51:81:68:b8:cf:92:16: 01:ce:9d:91:6d:5a:4e:ae:13:dc:7a:21:31:a0:e6:58:63:d8: 52:40:98:15:96:23:23:65:8f:20:ab:6d:f8:cb:04:a7:86:85: d7:d1:33:f5:c2:ac:82:7c:f4:37:c5:83:4e:90:d4:c5:07:e5: 00:e8:45:99:01:62:e9:2e:0e:cf:8c:a1:ce:ee:56:b5:37:cf: 36:d2:e5:29:8a:9b:a2:8b:62:d2:35:2f:37:6c:8b:d1:43:1b: f7:3e:90:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwNzE4MTY0MjE0WhcNMjUwNzI1MTY0MjE0WjAYMRYwFAYD VQQDEw02ODdhNzk2Ni0wNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4Z+DvfqgBVPyaiea1wjX1IA+dtzSk49eCTwo/g7ZdRg2n4hnyXP+AiMhdjl fKRc0pm/TsYZDfu31Q/1YAiU+ZPS+WOXfntifmJLV6FtN9WFm2Q5TjBb/dcI2WBS m0jLzr/rjWboM2R1k4yzoqrOYoYW11G8x1YBr9wAyB9WobKe3eY8LUGNcaIQEILD uJaFfkMGILBl4lrom0O4QOp7tXd7r3mtsf8YCnMguZg+CV0OQfLaquLlFztFwk3W nq0RwIdUBc5CJtpNtvaAq40lfCosgfKGveLGmwyY5W469eORkDBeHA3Y2LmeUwqJ KJp5IOyazB/Bx4TgCHnLGb+ElQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVT9Wx3 Mzls/IRAolH3HpvZWpLNMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTE3RC8zRDdBNjI4NkNGNTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0 Q0F4NVVoV1c0eXlQQnRpTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6KufvC72TdvmMTYZ8dMNPwYz+Ye50KtlFawLw+kANMqaZ7NparWJE Ky9WemCwfRJeJ1A92D7yJrngfw3CTV7AyWojX9WL/KbJkJprKDFufRjPwHoerP9J ki1eZ+/Aa45DfDzkpxokzoY/h8cdE3yfRSeA0517z86qT9WDvrnsfeCy92XtkOwC lWfb3KYGLZAngkfKB0nMTzTw5lGBaLjPkhYBzp2RbVpOrhPceiExoOZYY9hSQJgV liMjZY8gq234ywSnhoXX0TP1wqyCfPQ3xYNOkNTFB+UA6EWZAWLpLg7PjKHO7la1 N8820uUpipuii2LSNS83bIvRQxv3PpC2 -----END CERTIFICATE-----Generated at Sun Jul 20 07:44:01 2025 by rpki-client