$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: 1CJf/03hD8KuqW4y0hNDrwXK963koJBKZugINc8Fmtc= Subject key identifier: 4D:49:02:E6:9F:FF:6E:CD:DE:C4:F3:15:62:D9:A5:02:7A:D5:03:19 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 07D1 Signing time: Fri 18 Jul 2025 21:20:53 +0000 Manifest this update: Fri 18 Jul 2025 21:20:53 +0000 Manifest next update: Fri 25 Jul 2025 21:20:53 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: pl7f6shalNBQ4nUiooyqT4eWh43/X4/1PKxP5UkYmtk=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Jul 18 21:20:53 2025 GMT Not After : Jul 25 21:20:53 2025 GMT Subject: CN=687abab5-2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:d1:90:8f:52:1c:28:e6:26:69:5e:7e:1a: c4:6d:d1:da:d2:27:51:88:f6:17:78:45:ce:44:51: ed:8a:69:0c:46:a9:c3:a3:56:26:81:7e:e6:36:b2: 91:df:1d:8f:1a:b8:be:45:4a:fb:aa:ac:c6:26:57: 74:b3:a0:ae:55:cd:32:82:ba:18:0c:da:16:f4:c3: 5c:b5:e8:e0:6d:b9:00:2e:55:bd:db:eb:f9:24:b8: 71:a1:3d:1a:cc:a8:b9:2a:63:39:ce:38:83:4c:0d: 6d:58:6b:30:f2:15:c7:13:27:2c:d8:2f:03:cf:b2: 94:f2:83:e1:01:f5:d6:3a:86:6b:89:ee:b1:a7:28: 0f:b6:92:96:72:98:dc:22:8e:0e:35:a4:ed:85:f9: ec:2d:09:29:2f:ee:1c:55:b4:d0:24:ef:c8:7a:51: 4d:86:d1:85:0a:d0:0f:b2:6c:8b:15:5b:97:f1:ae: 96:3f:09:2d:68:1e:19:fc:3c:65:2f:4d:6f:5d:48: 92:63:37:9e:0a:42:8b:34:37:04:7c:94:e1:a5:d0: b1:19:63:6e:7a:a8:0b:de:df:c0:53:96:b5:bf:fe: ce:01:97:23:3f:15:95:35:15:8e:fb:e5:f2:9f:df: 4a:01:bb:05:a8:f9:f1:d8:a0:0c:25:17:96:70:cf: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:49:02:E6:9F:FF:6E:CD:DE:C4:F3:15:62:D9:A5:02:7A:D5:03:19 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1e:de:5d:a9:71:56:44:d3:6e:e5:94:fb:bb:e7:d6:3d:c9: 49:91:13:f7:fa:77:76:02:25:e0:fa:de:3a:0b:4e:91:58:f3: 1f:14:1a:38:0e:6b:8a:09:09:e6:f2:72:df:2b:a6:fc:81:9a: eb:e2:43:25:51:69:91:13:ea:99:7a:1c:c7:5c:ad:17:59:51: 7f:c7:10:24:65:a8:18:78:fd:f3:2d:72:bf:77:6d:4a:0e:17: 60:36:fa:a5:9d:2a:89:70:8c:c7:df:49:dd:63:d8:f6:50:04: a0:30:d0:92:73:9a:3d:a4:f1:04:f5:29:10:4e:38:dd:30:22: fa:03:13:12:b8:9c:dd:ea:58:05:05:1c:19:83:b9:ff:70:db: 72:09:e7:c6:af:4c:40:df:ce:46:95:52:98:09:78:a7:4e:ad: 80:4d:9b:e2:f0:fb:0a:59:8d:cc:c5:5c:19:f8:7d:b3:8b:04: e5:88:68:ec:5a:1d:ed:ee:12:41:ff:ef:e3:2a:ea:27:06:90: d8:50:2f:b3:23:14:3c:b1:7c:c1:96:d7:84:82:d5:40:c2:5a: 7b:26:9b:f9:97:e4:e3:b4:52:62:4e:dd:3c:c8:86:81:4f:94: 72:40:0b:20:52:bb:93:bb:9d:29:6d:47:9f:d1:50:b1:45:ad: b9:14:9a:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjUwNzE4MjEyMDUzWhcNMjUwNzI1MjEyMDUzWjAYMRYwFAYD VQQDEw02ODdhYmFiNS0yZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRjRkI9SHCjmJmlefhrEbdHa0idRiPYXeEXORFHtimkMRqnDo1YmgX7mNrKR 3x2PGri+RUr7qqzGJld0s6CuVc0ygroYDNoW9MNctejgbbkALlW92+v5JLhxoT0a zKi5KmM5zjiDTA1tWGsw8hXHEycs2C8Dz7KU8oPhAfXWOoZrie6xpygPtpKWcpjc Io4ONaTthfnsLQkpL+4cVbTQJO/IelFNhtGFCtAPsmyLFVuX8a6WPwktaB4Z/Dxl L01vXUiSYzeeCkKLNDcEfJThpdCxGWNueqgL3t/AU5a1v/7OAZcjPxWVNRWO++Xy n99KAbsFqPnx2KAMJReWcM8VdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1JAuaf /27N3sTzFWLZpQJ61QMZMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Ht5dqXFWRNNu5ZT7u+fWPclJkRP3+nd2AiXg+t46C06RWPMfFBo4 DmuKCQnm8nLfK6b8gZrr4kMlUWmRE+qZehzHXK0XWVF/xxAkZagYeP3zLXK/d21K DhdgNvqlnSqJcIzH30ndY9j2UASgMNCSc5o9pPEE9SkQTjjdMCL6AxMSuJzd6lgF BRwZg7n/cNtyCefGr0xA385GlVKYCXinTq2ATZvi8PsKWY3MxVwZ+H2ziwTliGjs Wh3t7hJB/+/jKuonBpDYUC+zIxQ8sXzBlteEgtVAwlp7Jpv5l+TjtFJiTt08yIaB T5RyQAsgUruTu50pbUef0VCxRa25FJrH -----END CERTIFICATE-----Generated at Sun Jul 20 06:40:42 2025 by rpki-client