$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: Bgv6svJJiZEs+8iGEnFxpmLB/VQ2VDJfopJ3CB+z3iw= Subject key identifier: E2:4D:32:A3:36:DB:03:5A:B2:40:15:AE:DC:19:ED:97:AE:AA:E9:DE Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01B4 Signing time: Sat 19 Jul 2025 03:21:58 +0000 Manifest this update: Sat 19 Jul 2025 03:21:58 +0000 Manifest next update: Sat 26 Jul 2025 03:21:58 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: e4ocifr/kGK9b4i89ykoVTx2g0KCNUEUP1yjCd0BbZM=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Jul 19 03:21:58 2025 GMT Not After : Jul 26 03:21:58 2025 GMT Subject: CN=687b0f56-8f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:ba:1f:8b:3e:4e:91:9e:97:be:a8:36:b4: 8e:62:b4:8a:19:8d:69:3b:9d:60:0d:79:ae:d1:70: 34:a2:a5:66:5a:a3:3f:a3:f2:9f:25:6c:ee:a2:62: a1:28:fb:79:03:46:80:d7:5d:53:fc:d5:3c:d9:c8: 73:3c:fa:91:52:1e:c1:04:af:b1:fd:ee:27:84:1f: 02:4b:60:38:5c:01:01:de:b6:2f:63:ba:e5:0d:de: d8:a6:c8:3c:93:02:f5:9e:b5:02:5b:b1:b4:61:03: 72:c8:99:3f:0a:3a:59:2d:65:d5:ae:0c:19:46:a2: 26:e2:b3:88:33:7e:11:8e:1c:19:40:1d:f5:de:89: 54:dd:62:bd:55:eb:79:2a:a9:1b:d7:a5:20:85:93: 80:21:4b:39:1b:ea:4e:0c:26:85:d4:24:2c:b5:27: a4:eb:fc:21:70:36:d2:ae:4b:18:91:93:3a:7d:50: 3c:0f:b6:b1:21:64:ac:76:85:73:08:44:56:63:12: e9:7b:1f:77:31:0a:c4:4e:fd:d2:0b:2b:4a:3b:6b: 4a:3f:88:95:a9:e2:2d:43:33:f7:f7:79:a8:78:0b: cc:fb:b2:e4:dd:93:45:5f:35:93:73:65:b4:ef:cb: 3c:17:49:df:e9:a4:fc:1b:10:d8:06:3f:d8:8a:08: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4D:32:A3:36:DB:03:5A:B2:40:15:AE:DC:19:ED:97:AE:AA:E9:DE X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:00:60:ff:d4:ce:70:5e:05:6f:b8:28:43:e3:7f:13:44:b0: a1:10:9e:18:09:a3:09:58:59:0d:13:aa:e1:ed:be:d7:60:a5: 0d:ab:fe:20:59:3c:e2:12:e0:64:92:45:47:a3:d6:6b:6e:3e: f9:d4:09:72:c5:07:b5:1f:14:9d:7e:76:59:97:a7:16:13:b6: 5f:e5:cc:4d:68:3e:02:d8:e0:5d:f7:90:66:1b:8c:ac:3a:c1: 38:a1:b3:57:3c:ee:f0:2a:ef:21:3b:55:2e:c0:f2:bd:d9:4e: ff:77:01:89:3b:94:c9:de:7b:39:f4:3f:44:01:ae:da:1c:6c: f1:67:70:24:17:91:18:36:7e:b9:60:35:58:24:71:93:a5:e4: 35:30:d3:3e:c0:e6:e6:54:c4:92:36:d6:15:74:27:57:20:a1: a2:c7:a2:e3:ec:61:9c:14:b7:e2:42:9c:04:f6:89:6c:dd:6d: f4:ab:2a:b0:20:06:65:be:d1:3b:16:62:4b:be:7c:4e:16:ff: 9e:85:2e:8a:be:b2:e8:cb:80:c8:e9:9d:e5:2c:bf:0f:75:c8: cc:73:73:28:77:35:16:14:0a:fc:51:0e:5f:07:54:37:93:61: 50:c2:d6:ed:b8:11:0d:f3:23:74:37:d8:ce:83:7c:4c:b0:36: 64:ec:39:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwNzE5MDMyMTU4WhcNMjUwNzI2MDMyMTU4WjAYMRYwFAYD VQQDEw02ODdiMGY1Ni04ZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPu6H4s+TpGel76oNrSOYrSKGY1pO51gDXmu0XA0oqVmWqM/o/KfJWzuomKh KPt5A0aA111T/NU82chzPPqRUh7BBK+x/e4nhB8CS2A4XAEB3rYvY7rlDd7Ypsg8 kwL1nrUCW7G0YQNyyJk/CjpZLWXVrgwZRqIm4rOIM34RjhwZQB313olU3WK9Vet5 Kqkb16UghZOAIUs5G+pODCaF1CQstSek6/whcDbSrksYkZM6fVA8D7axIWSsdoVz CERWYxLpex93MQrETv3SCytKO2tKP4iVqeItQzP393moeAvM+7Lk3ZNFXzWTc2W0 78s8F0nf6aT8GxDYBj/Yigi8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJNMqM2 2wNaskAVrtwZ7ZeuquneMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqAGD/1M5wXgVvuChD438TRLChEJ4YCaMJWFkNE6rh7b7XYKUNq/4g WTziEuBkkkVHo9Zrbj751AlyxQe1HxSdfnZZl6cWE7Zf5cxNaD4C2OBd95BmG4ys OsE4obNXPO7wKu8hO1UuwPK92U7/dwGJO5TJ3ns59D9EAa7aHGzxZ3AkF5EYNn65 YDVYJHGTpeQ1MNM+wObmVMSSNtYVdCdXIKGix6Lj7GGcFLfiQpwE9ols3W30qyqw IAZlvtE7FmJLvnxOFv+ehS6KvrLoy4DI6Z3lLL8PdcjMc3ModzUWFAr8UQ5fB1Q3 k2FQwtbtuBEN8yN0N9jOg3xMsDZk7DmW -----END CERTIFICATE-----Generated at Sun Jul 20 07:07:34 2025 by rpki-client