$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: yBWt30/P/sX/mVUKEApstyyXpHNlYqowSXhX1K3wZYI= Subject key identifier: 6E:5F:E5:4E:60:B0:C5:8D:04:BD:F1:D0:FB:24:FF:A0:86:EB:A5:79 Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0A63 Signing time: Sun 20 Jul 2025 19:47:16 +0000 Manifest this update: Sun 20 Jul 2025 19:47:16 +0000 Manifest next update: Sun 27 Jul 2025 19:47:16 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: An5VuUetkf+3dGOleAqb6ytEnUlpbTjs874gWEaXOVw=) 2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=) 3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Validity Not Before: Jul 20 19:47:16 2025 GMT Not After : Jul 27 19:47:16 2025 GMT Subject: CN=687d47c4-5cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:4a:78:25:e2:fc:1a:2e:ef:42:2d:13:b4: f6:8d:b3:ce:e8:3d:96:1e:af:d2:4f:53:1e:17:81: 42:a6:17:e9:b1:96:e2:17:74:62:2c:ac:9d:75:62: 3c:4c:ba:f6:59:6b:15:c4:66:cf:9a:5e:61:ae:f2: 55:d6:c3:2a:60:57:9c:65:31:06:4a:23:c2:9e:c8: 7e:82:98:a3:5c:87:2e:c0:fe:13:cc:3f:a6:aa:86: b8:47:1b:50:17:f4:1d:9a:8f:a8:b1:52:6c:e9:3e: b2:32:a6:5e:c1:20:7a:50:9a:ab:4c:c6:35:91:85: 69:56:ef:71:d0:7a:5d:34:95:c7:0d:81:e6:e6:ec: 56:a8:ef:24:bc:e5:26:f0:bf:ca:ce:97:e8:2d:cc: a7:93:67:d5:4a:e6:e9:f3:38:a3:c3:2e:db:45:a4: da:a4:6a:4a:62:03:15:9e:a6:4a:47:39:73:5f:ab: d5:3c:78:ce:37:18:20:45:bf:02:58:aa:cb:59:4b: 4e:bd:7b:f6:7d:fa:d7:1d:20:c8:9a:a9:7b:2e:cb: 4c:0a:21:d8:e8:14:14:fa:11:92:1a:82:54:47:ec: 95:c6:23:c2:56:e8:29:14:f4:ef:76:a9:44:41:3d: 40:4c:79:c0:a4:c0:c6:b3:ef:61:cd:10:d6:2f:b0: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:E5:4E:60:B0:C5:8D:04:BD:F1:D0:FB:24:FF:A0:86:EB:A5:79 X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:df:07:7a:8b:36:1f:56:48:02:bf:01:b8:89:c9:57:d1: ba:fc:7f:c7:28:de:7c:8c:1c:b8:b5:d0:ec:58:a3:37:d9:6c: 56:64:a8:0b:0c:51:65:39:c2:1f:01:0b:ae:38:d6:7b:22:33: bc:d0:64:97:ea:ad:6b:98:0c:ac:d3:1a:e8:88:d3:55:3c:71: 0c:f1:21:df:a5:aa:a3:ee:2e:f8:47:f7:f1:30:4d:36:81:80: cb:f0:77:31:78:27:94:f7:3e:93:f9:a0:05:e7:91:c6:7e:12: b7:9a:32:1d:d7:23:f6:f7:e4:b9:ba:68:9b:29:5b:4d:3e:26: 71:e0:17:ae:77:4d:e8:00:0b:13:b7:06:f0:72:ec:f7:71:67: 4e:4a:bb:a2:ec:23:86:f6:db:79:be:59:76:8a:d4:c4:6a:ea: 8c:d1:3a:78:f2:97:84:6c:f4:41:a0:fd:e1:67:d8:ab:cb:40: b4:fc:e5:9c:99:a0:d4:f2:62:5e:f3:17:a5:82:e5:10:e4:d5: 10:81:95:b6:54:58:2c:a1:6f:93:ca:57:3d:c5:9f:5b:7e:8c: d8:4b:65:25:22:16:89:9e:23:81:85:26:8f:86:03:22:d7:8d: 3e:b1:57:bd:5d:c0:01:f8:75:80:e4:a3:66:48:cc:8b:89:90: fb:a6:17:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjUwNzIwMTk0NzE2WhcNMjUwNzI3MTk0NzE2WjAYMRYwFAYD VQQDEw02ODdkNDdjNC01Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYJKeCXi/Bou70ItE7T2jbPO6D2WHq/ST1MeF4FCphfpsZbiF3RiLKyddWI8 TLr2WWsVxGbPml5hrvJV1sMqYFecZTEGSiPCnsh+gpijXIcuwP4TzD+mqoa4RxtQ F/Qdmo+osVJs6T6yMqZewSB6UJqrTMY1kYVpVu9x0HpdNJXHDYHm5uxWqO8kvOUm 8L/KzpfoLcynk2fVSubp8zijwy7bRaTapGpKYgMVnqZKRzlzX6vVPHjONxggRb8C WKrLWUtOvXv2ffrXHSDImql7LstMCiHY6BQU+hGSGoJUR+yVxiPCVugpFPTvdqlE QT1ATHnApMDGs+9hzRDWL7DxYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5f5U5g sMWNBL3x0Psk/6CG66V5MB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOD98Heos2H1ZIAr8BuInJV9G6/H/HKN58jBy4tdDsWKM32WxWZKgL DFFlOcIfAQuuONZ7IjO80GSX6q1rmAys0xroiNNVPHEM8SHfpaqj7i74R/fxME02 gYDL8HcxeCeU9z6T+aAF55HGfhK3mjId1yP29+S5umibKVtNPiZx4Beud03oAAsT twbwcuz3cWdOSrui7COG9tt5vll2itTEauqM0Tp48peEbPRBoP3hZ9iry0C0/OWc maDU8mJe8xelguUQ5NUQgZW2VFgsoW+Tylc9xZ9bfozYS2UlIhaJniOBhSaPhgMi 140+sVe9XcAB+HWA5KNmSMyLiZD7phcc -----END CERTIFICATE-----Generated at Mon Jul 21 12:34:08 2025 by rpki-client