$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: AwzD1qsR4is4B+rdta7oXN+N0katPibulVi93n42UrI= Subject key identifier: 59:A7:42:65:D8:A4:6A:33:92:D3:10:49:92:7A:20:74:37:53:14:24 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1EC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E61 Signing time: Sun 20 Jul 2025 16:06:19 +0000 Manifest this update: Sun 20 Jul 2025 16:06:19 +0000 Manifest next update: Sun 27 Jul 2025 16:06:19 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: RZ22ggefJEABt8rXHDzz2DgStR8y6Bc4uCKnVxqqmwE=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7874 (0x1ec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Jul 20 16:06:19 2025 GMT Not After : Jul 27 16:06:19 2025 GMT Subject: CN=687d13fb-7ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:6b:21:77:29:03:ac:89:d5:7e:76:f2:c7: 9d:b0:aa:cb:a9:94:33:2a:c1:7b:69:03:c6:ff:ae: 49:70:fd:88:8e:79:a2:d2:7d:7b:7d:38:f7:fb:d4: 69:7e:ea:73:61:a4:ce:c7:32:1c:73:c8:c8:f7:0e: 05:fc:a4:16:a0:69:5a:7b:04:93:45:41:01:20:aa: 50:a5:4b:c6:42:4a:9d:00:cb:62:39:72:a6:44:3f: 1f:21:c0:a0:c8:f9:74:09:31:14:a0:82:0f:6c:90: 6c:e1:01:b2:a3:21:df:65:75:39:3f:0e:7a:1f:b2: 34:d2:70:f5:f1:cc:95:64:55:5c:a9:26:04:0b:b3: e5:dc:ff:b0:22:28:7a:57:29:b4:2e:55:ae:b2:f1: 13:a0:70:d9:0a:4c:2a:0f:41:61:e6:bc:2c:d3:07: a2:8c:08:9f:29:83:78:a0:d9:0e:af:a7:08:be:a6: 81:fe:0e:e3:14:92:84:51:6e:b4:95:ec:6f:ec:bb: cb:5a:0a:67:50:3c:39:10:56:98:b7:fe:05:ae:6e: ee:78:e0:db:7c:44:b8:0f:5d:63:82:3c:29:92:9b: 78:60:45:f5:64:91:e9:43:70:2b:1f:9b:20:fc:83: ac:0a:28:b2:ac:7d:a6:4f:a8:1b:52:80:1d:fd:28: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A7:42:65:D8:A4:6A:33:92:D3:10:49:92:7A:20:74:37:53:14:24 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:3a:a1:e5:08:6b:85:82:8e:5d:5c:f8:2f:29:37:c3:d8:1c: b3:98:ab:86:f5:cc:3c:4e:90:b8:1c:c8:37:1f:6e:ab:93:48: d9:a4:b5:7a:ba:85:c4:b2:c6:82:f6:e8:41:e3:98:62:ca:63: 1c:e3:34:75:d2:6f:ea:3b:13:46:13:bd:43:e3:f0:3d:ff:f7: dc:50:4e:de:24:17:48:3a:27:7e:7e:1c:ff:81:fd:22:10:6f: 6f:9e:46:17:2a:c0:80:d4:b6:09:5e:73:0e:89:a0:01:cf:73: ee:bc:eb:b5:07:7c:93:52:68:fc:66:5b:ec:97:11:f2:08:0c: d1:d7:2f:fa:25:15:a5:e2:21:75:f9:2e:aa:ca:60:c9:20:68: 6f:dd:4a:a8:27:93:d4:47:22:ca:48:80:08:2f:bf:ff:9f:e1: cb:f7:d9:da:8c:3c:87:a7:fa:b6:b5:50:b8:95:00:ef:74:b2: 93:f2:b7:ea:03:be:58:7d:49:52:2c:68:3f:cd:f8:62:2e:3c: 8e:18:9d:2f:4b:d3:f2:02:6d:72:f9:16:28:f8:04:b2:d6:8a: bf:8c:ca:70:52:06:a7:fb:73:ab:14:a5:e8:6b:9c:13:99:2b: fa:10:65:e1:76:b5:f1:12:40:fd:77:50:cb:a7:d1:5e:84:1a: 95:d1:eb:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNzIwMTYwNjE5WhcNMjUwNzI3MTYwNjE5WjAYMRYwFAYD VQQDEw02ODdkMTNmYi03ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01prIXcpA6yJ1X528sedsKrLqZQzKsF7aQPG/65JcP2Ijnmi0n17fTj3+9Rp fupzYaTOxzIcc8jI9w4F/KQWoGlaewSTRUEBIKpQpUvGQkqdAMtiOXKmRD8fIcCg yPl0CTEUoIIPbJBs4QGyoyHfZXU5Pw56H7I00nD18cyVZFVcqSYEC7Pl3P+wIih6 Vym0LlWusvEToHDZCkwqD0Fh5rws0weijAifKYN4oNkOr6cIvqaB/g7jFJKEUW60 lexv7LvLWgpnUDw5EFaYt/4Frm7ueODbfES4D11jgjwpkpt4YEX1ZJHpQ3ArH5sg /IOsCiiyrH2mT6gbUoAd/SicDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmnQmXY pGozktMQSZJ6IHQ3UxQkMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASOqHlCGuFgo5dXPgvKTfD2ByzmKuG9cw8TpC4HMg3H26rk0jZpLV6 uoXEssaC9uhB45hiymMc4zR10m/qOxNGE71D4/A9//fcUE7eJBdIOid+fhz/gf0i EG9vnkYXKsCA1LYJXnMOiaABz3PuvOu1B3yTUmj8ZlvslxHyCAzR1y/6JRWl4iF1 +S6qymDJIGhv3UqoJ5PURyLKSIAIL7//n+HL99najDyHp/q2tVC4lQDvdLKT8rfq A75YfUlSLGg/zfhiLjyOGJ0vS9PyAm1y+RYo+ASy1oq/jMpwUgan+3OrFKXoa5wT mSv6EGXhdrXxEkD9d1DLp9FehBqV0esM -----END CERTIFICATE-----Generated at Mon Jul 21 18:44:38 2025 by rpki-client