$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: Cz2P/bHKiYxGudxfeidABvqCZNKAhVE6qSSx2kuv/n4= Subject key identifier: A7:F3:F2:BD:4E:29:65:9C:6F:AD:C9:44:86:5D:77:5C:4F:09:34:D5 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 038E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 037D Signing time: Mon 21 Jul 2025 01:11:48 +0000 Manifest this update: Mon 21 Jul 2025 01:11:48 +0000 Manifest next update: Mon 28 Jul 2025 01:11:48 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: 8jLaOfYD6e8iQffcj3EbXeB0ZASjF2Trdoh2jnQvjek=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 910 (0x38e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Jul 21 01:11:48 2025 GMT Not After : Jul 28 01:11:48 2025 GMT Subject: CN=687d93d4-4e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:af:b9:37:27:c8:79:39:c3:98:19:d4:5f: 3d:de:25:e5:9f:86:ec:0c:44:15:1a:7c:b4:61:12: 9e:b0:d8:8c:2b:ff:69:fc:0e:b7:c7:76:f3:5e:56: b3:e8:87:5f:c1:3a:ee:96:2d:e2:ae:08:ad:fc:e8: 10:6e:7d:57:57:1b:6e:55:6e:14:11:bc:cb:fd:6d: a8:6d:88:82:f9:3b:f9:0e:5b:55:2d:7c:eb:45:b9: 2a:71:a5:1a:e7:90:8d:1e:91:d4:1d:29:91:5e:ca: 7a:fe:06:1f:e5:da:c0:11:48:0a:d6:27:ae:de:04: 44:b3:e1:78:f3:00:2c:a1:10:76:2d:5d:d0:8e:ab: 05:25:9b:26:ae:99:01:01:f5:7c:17:92:40:df:e8: 34:df:66:97:31:70:ff:13:2e:b4:12:1e:c8:0a:93: 0b:f4:b2:cc:18:eb:2f:07:2a:8e:f8:2f:08:5f:fd: 35:be:5d:af:f8:19:53:ae:9b:e3:de:58:9d:80:a4: f4:18:f7:07:88:00:72:28:17:8a:bc:31:71:2b:6f: 72:4f:e1:06:ec:03:d2:36:b3:f0:51:fb:a8:5d:74: cb:7a:7e:5e:ba:45:e5:e0:47:1c:6b:77:aa:97:b6: cf:dc:16:ca:6f:6c:51:ea:66:2c:78:09:59:93:2e: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F3:F2:BD:4E:29:65:9C:6F:AD:C9:44:86:5D:77:5C:4F:09:34:D5 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f3:b8:37:06:df:9a:af:8a:c1:60:83:a5:83:64:8a:50:bb: de:51:57:d0:1e:9c:ac:e5:c4:6f:6f:1c:ce:08:e8:23:ea:6d: 23:4e:ed:10:8a:d0:68:7e:d3:b7:d1:01:1d:de:3c:4a:fb:f0: 6d:c1:8e:78:24:1e:33:ea:cd:a7:4f:89:f2:d3:8a:35:2c:8f: a3:8b:6f:a0:ad:3e:79:c7:11:11:0f:00:fd:b8:ce:32:27:f6: c9:6f:6e:c8:ec:ed:53:57:6b:12:6b:fa:f9:f3:cf:d0:dc:6a: 20:c3:c3:80:2e:f3:6f:e5:b0:06:80:d0:00:81:de:ef:21:f0: 69:80:31:98:47:fa:20:bb:0e:f6:42:a5:82:d3:df:08:4e:07: a7:b4:21:fc:79:67:7c:35:9e:c6:66:da:13:0a:b8:d8:68:06: e7:fb:db:c0:9c:44:ab:7e:3d:11:55:36:7c:2c:bb:58:78:8c: 02:88:dd:b2:b2:d9:36:c3:86:2d:cf:20:81:44:89:9f:22:dd: b2:18:76:04:e9:d8:6f:d5:c1:6e:16:68:ca:1e:c1:32:af:1a: d2:75:e5:66:01:35:d7:88:af:79:b7:7b:db:6d:e6:df:14:66: 01:8a:fe:ed:65:fd:db:ed:fc:41:2f:74:42:5b:11:2a:39:00: 2b:84:20:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwNzIxMDExMTQ4WhcNMjUwNzI4MDExMTQ4WjAYMRYwFAYD VQQDEw02ODdkOTNkNC00ZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5yvuTcnyHk5w5gZ1F893iXln4bsDEQVGny0YRKesNiMK/9p/A63x3bzXlaz 6IdfwTruli3irgit/OgQbn1XVxtuVW4UEbzL/W2obYiC+Tv5DltVLXzrRbkqcaUa 55CNHpHUHSmRXsp6/gYf5drAEUgK1ieu3gREs+F48wAsoRB2LV3QjqsFJZsmrpkB AfV8F5JA3+g032aXMXD/Ey60Eh7ICpML9LLMGOsvByqO+C8IX/01vl2v+BlTrpvj 3lidgKT0GPcHiAByKBeKvDFxK29yT+EG7APSNrPwUfuoXXTLen5eukXl4Ecca3eq l7bP3BbKb2xR6mYseAlZky5kTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfz8r1O KWWcb63JRIZdd1xPCTTVMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi87g3Bt+ar4rBYIOlg2SKULveUVfQHpys5cRvbxzOCOgj6m0jTu0Q itBoftO30QEd3jxK+/BtwY54JB4z6s2nT4ny04o1LI+ji2+grT55xxERDwD9uM4y J/bJb27I7O1TV2sSa/r588/Q3Gogw8OALvNv5bAGgNAAgd7vIfBpgDGYR/oguw72 QqWC098ITgentCH8eWd8NZ7GZtoTCrjYaAbn+9vAnESrfj0RVTZ8LLtYeIwCiN2y stk2w4YtzyCBRImfIt2yGHYE6dhv1cFuFmjKHsEyrxrSdeVmATXXiK95t3vbbebf FGYBiv7tZf3b7fxBL3RCWxEqOQArhCAc -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:07 2025 by rpki-client