$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: X+QeaJATHz6BEqHoN69itDRNuAJ9loNI4F9N+0GxBFc= Subject key identifier: 5A:6A:88:0C:84:2A:79:4B:54:BC:02:47:90:D7:EB:2F:7C:1A:C5:F9 Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 4C Signing time: Sat 19 Jul 2025 07:34:23 +0000 Manifest this update: Sat 19 Jul 2025 07:34:22 +0000 Manifest next update: Sat 26 Jul 2025 07:34:22 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: NlIWxWTktd96c2wgJnGRGZunkWpv0sZpDn500gLO3Cs=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Jul 19 07:34:22 2025 GMT Not After : Jul 26 07:34:22 2025 GMT Subject: CN=687b4a7f-1abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:35:47:28:ad:35:f3:fd:89:bb:65:67:cf: e6:d9:f1:5a:90:92:17:a1:4a:df:aa:19:87:05:e1: 53:ff:40:28:bb:3d:a8:8d:0d:f4:ac:67:14:82:1a: 32:57:b9:3c:fd:9a:98:3f:ca:8e:0c:73:a6:99:80: 84:3d:0e:b5:31:14:f1:19:d2:15:f5:a0:f7:1c:0f: 36:25:9c:ff:14:db:9c:52:b0:f1:77:00:5f:ef:d9: da:ec:59:48:3d:3d:e5:f3:8d:42:f9:90:02:48:f3: 57:d5:e4:19:06:92:c1:95:96:5e:96:d8:d7:9a:c5: 83:13:e1:96:ad:c3:f2:08:0b:7c:32:bb:8b:3d:9a: cb:81:d1:a8:a3:10:e6:dc:03:23:4e:35:8f:56:1b: 4a:c1:49:45:43:f9:9c:68:c3:d3:8c:aa:20:5e:6c: 93:b2:f0:6c:ef:29:dd:ba:22:5f:b2:43:37:8e:92: 99:49:5e:4d:37:01:76:c5:46:63:a0:9c:7c:fd:ca: 47:2e:a9:15:74:ca:83:d0:f6:51:50:41:db:8f:d5: c0:80:1e:b4:b7:5b:be:01:28:0f:fc:a3:94:fc:51: 18:cd:5d:ea:72:74:9e:8f:09:de:be:7d:af:50:e7: fc:9a:14:eb:b0:d5:1b:15:b0:9c:b1:c3:6b:15:81: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:88:0C:84:2A:79:4B:54:BC:02:47:90:D7:EB:2F:7C:1A:C5:F9 X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b0:cb:69:13:c6:1d:9a:c3:b1:db:a2:a2:7d:96:44:34:5b: 67:ef:26:8a:3c:d0:f4:5b:72:52:45:6b:af:44:df:f1:a0:06: d9:e7:5c:8b:09:f5:5b:db:d6:fb:3d:55:ca:42:34:c0:e9:5f: ec:a8:e3:90:d7:14:b0:f7:b6:d4:cc:58:60:31:31:15:94:6d: cd:06:c1:d3:5f:ac:3c:bf:d1:5b:2b:03:45:be:41:9d:34:8e: d4:de:63:41:21:cf:c6:f1:4b:6f:ea:68:fb:44:3a:84:50:0d: 5f:b8:56:ad:83:3a:8f:70:63:ce:15:d4:6b:74:fd:1c:93:cc: 7e:80:e6:8d:1a:4f:ef:db:9c:fa:36:13:6c:9f:3a:1e:8d:85: 94:32:2c:b6:35:3f:23:f3:de:a5:01:39:d8:91:6b:35:ad:e1: fb:56:47:29:b7:71:d4:af:40:44:be:b6:5a:05:5d:44:ac:31: d5:63:f8:35:2a:51:6e:63:ce:93:bd:7e:80:ff:d4:33:3c:2f: 54:43:c0:9c:a7:52:81:99:d0:9b:6a:ed:61:73:ab:4d:25:dd: ae:e2:a8:a1:f8:b5:1c:83:47:5a:a4:7e:8c:64:71:13:28:a3: cb:93:72:a9:d6:2a:af:cf:4e:b6:22:0a:4e:7b:72:45:61:0a: 03:4a:15:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA3MTkwNzM0MjJaFw0yNTA3MjYwNzM0MjJaMBgxFjAUBgNV BAMTDTY4N2I0YTdmLTFhYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEQzVHKK018/2Ju2Vnz+bZ8VqQkhehSt+qGYcF4VP/QCi7PaiNDfSsZxSCGjJX uTz9mpg/yo4Mc6aZgIQ9DrUxFPEZ0hX1oPccDzYlnP8U25xSsPF3AF/v2drsWUg9 PeXzjUL5kAJI81fV5BkGksGVll6W2NeaxYMT4Zatw/IIC3wyu4s9msuB0aijEObc AyNONY9WG0rBSUVD+Zxow9OMqiBebJOy8GzvKd26Il+yQzeOkplJXk03AXbFRmOg nHz9ykcuqRV0yoPQ9lFQQduP1cCAHrS3W74BKA/8o5T8URjNXepydJ6PCd6+fa9Q 5/yaFOuw1RsVsJyxw2sVgbytAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmqIDIQq eUtUvAJHkNfrL3waxfkwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2wy2kTxh2aw7HboqJ9lkQ0W2fvJoo80PRbclJFa69E3/GgBtnnXIsJ 9Vvb1vs9VcpCNMDpX+yo45DXFLD3ttTMWGAxMRWUbc0GwdNfrDy/0VsrA0W+QZ00 jtTeY0Ehz8bxS2/qaPtEOoRQDV+4Vq2DOo9wY84V1Gt0/RyTzH6A5o0aT+/bnPo2 E2yfOh6NhZQyLLY1PyPz3qUBOdiRazWt4ftWRym3cdSvQES+tloFXUSsMdVj+DUq UW5jzpO9foD/1DM8L1RDwJynUoGZ0Jtq7WFzq00l3a7iqKH4tRyDR1qkfoxkcRMo o8uTcqnWKq/PTrYiCk57ckVhCgNKFSc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:06:10 2025 by rpki-client