$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: kqAfivX2dBETm7uVUPpEbvknZMGbVGWGJBlkuLbUpRE= Subject key identifier: 23:A2:E6:90:10:3A:F9:62:0F:33:3C:43:D6:2D:7D:83:33:C6:69:56 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: AD Signing time: Sat 19 Jul 2025 06:18:26 +0000 Manifest this update: Sat 19 Jul 2025 06:18:25 +0000 Manifest next update: Sat 26 Jul 2025 06:18:25 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: ozphqs9SSceuPeBs8YL4joHwnJD7JHswjV3VQoGG/D8=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Jul 19 06:18:25 2025 GMT Not After : Jul 26 06:18:25 2025 GMT Subject: CN=687b38b2-1d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:9a:e9:1d:1a:46:c9:f2:b9:c5:a1:2c:e1: 84:58:94:c7:e1:98:7a:e6:1a:09:1c:fc:6c:04:53: 4e:1c:3a:69:6d:26:2e:b3:54:55:f6:d4:30:04:2f: e1:a5:b2:90:a4:0f:ed:9f:d4:1a:64:83:eb:25:5c: 9a:7b:f9:99:87:01:19:fe:c0:9b:cb:de:78:57:c3: 4f:32:a7:72:aa:71:75:f7:44:fc:41:a6:27:7b:37: 55:21:85:be:57:a2:bb:69:30:a0:f4:54:4e:de:6e: 75:33:84:e0:79:94:cd:0a:1f:f9:72:c4:b7:50:ab: 2b:69:02:57:3c:74:96:93:70:02:60:c8:ca:66:a8: 26:9c:ec:ac:44:a4:18:5c:0a:e3:7a:38:17:19:94: 65:ba:b5:f7:92:99:bc:33:11:b3:3a:9c:3d:27:59: 54:60:d8:a2:25:9c:d1:74:94:70:7a:43:fc:ed:8c: 0d:d1:ea:d3:f1:99:3d:16:dc:25:9c:69:a9:7e:bc: de:c3:97:d1:56:40:e7:f9:41:f3:6b:64:7e:1f:3b: 45:92:28:9f:bf:73:6d:c4:cb:e5:3d:96:33:c1:4b: 84:3e:9f:34:29:fb:d9:5c:9f:91:6c:36:ba:d7:4a: d2:e3:1f:08:75:21:e4:15:cc:7e:27:a6:f3:b7:df: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A2:E6:90:10:3A:F9:62:0F:33:3C:43:D6:2D:7D:83:33:C6:69:56 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ec:09:5d:aa:ac:f5:00:a8:d2:a1:0a:bd:c7:9c:6b:30:fc: 13:bd:23:f5:c3:36:96:96:4a:e6:5a:ba:6e:2f:76:16:bb:e1: ae:5e:3c:de:12:3e:55:0f:5b:c2:99:44:b8:0a:26:d2:e9:3a: 36:e3:08:c4:c6:ed:af:17:df:5d:0f:95:11:ed:a7:57:dc:8a: 8b:ce:a1:f7:ca:1c:d4:cc:bc:b8:3c:87:49:99:41:3b:6c:48: ab:45:b1:05:5f:46:a8:63:46:15:d0:f6:51:86:20:3b:3a:5d: 13:5f:a2:2c:b8:0e:21:5f:dd:29:b0:ec:b1:dd:f7:17:63:90: 71:f8:d7:48:61:16:39:d2:bb:48:8c:bc:0d:55:ce:ee:6d:f3: 23:b9:75:27:e0:d0:32:92:25:de:b2:e7:a3:e5:0c:9d:ba:49: c3:aa:b2:d8:e4:35:d4:2c:89:a7:66:3a:50:67:3f:e0:0f:85: 2a:6f:b9:c3:52:de:38:79:51:16:61:06:e7:eb:e4:ea:b4:13: 9d:43:16:1f:f0:43:55:70:24:73:78:1a:9c:20:00:03:bb:52: 59:e0:70:27:f9:99:33:40:6d:2f:29:84:08:09:39:e2:bf:24: 84:4e:59:e3:00:6b:10:bf:8d:29:03:e5:49:a4:b6:28:3c:94: 7a:d6:fa:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwNzE5MDYxODI1WhcNMjUwNzI2MDYxODI1WjAYMRYwFAYD VQQDEw02ODdiMzhiMi0xZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgea6R0aRsnyucWhLOGEWJTH4Zh65hoJHPxsBFNOHDppbSYus1RV9tQwBC/h pbKQpA/tn9QaZIPrJVyae/mZhwEZ/sCby954V8NPMqdyqnF190T8QaYnezdVIYW+ V6K7aTCg9FRO3m51M4TgeZTNCh/5csS3UKsraQJXPHSWk3ACYMjKZqgmnOysRKQY XArjejgXGZRlurX3kpm8MxGzOpw9J1lUYNiiJZzRdJRwekP87YwN0erT8Zk9Ftwl nGmpfrzew5fRVkDn+UHza2R+HztFkiifv3NtxMvlPZYzwUuEPp80KfvZXJ+RbDa6 10rS4x8IdSHkFcx+J6bzt99bOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOi5pAQ OvliDzM8Q9YtfYMzxmlWMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs7Aldqqz1AKjSoQq9x5xrMPwTvSP1wzaWlkrmWrpuL3YWu+GuXjze Ej5VD1vCmUS4CibS6To24wjExu2vF99dD5UR7adX3IqLzqH3yhzUzLy4PIdJmUE7 bEirRbEFX0aoY0YV0PZRhiA7Ol0TX6IsuA4hX90psOyx3fcXY5Bx+NdIYRY50rtI jLwNVc7ubfMjuXUn4NAykiXesuej5QyduknDqrLY5DXULImnZjpQZz/gD4Uqb7nD Ut44eVEWYQbn6+TqtBOdQxYf8ENVcCRzeBqcIAADu1JZ4HAn+ZkzQG0vKYQICTni vySETlnjAGsQv40pA+VJpLYoPJR61vpN -----END CERTIFICATE-----Generated at Sun Jul 20 15:22:46 2025 by rpki-client