$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: /abfAJ9fBjPqQEqbhHKPgk8SRADGd/SEB47nzBybbFk= Subject key identifier: 50:DE:2B:0F:AD:1E:61:88:06:18:6A:E4:2A:6F:C5:5E:70:4E:7E:71 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 0648 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 0636 Signing time: Fri 18 Jul 2025 23:03:14 +0000 Manifest this update: Fri 18 Jul 2025 23:03:14 +0000 Manifest next update: Fri 25 Jul 2025 23:03:14 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: OgB8qumb4cqKN26I3yPE76FMN3o/SnT2ONpG3S6UhAU=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: u+IddtnEZ3PpaS5wkgvcnMQ5NxiRiCy+krC9UIm0AEs=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: GTvoFugBA+uCvfRWo4LUswGkHyD24NgsZWWXmqE2VNc=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: z3se8A09zx2Huzx3cHt2XniXO/IZyEE/vV6YRsvSpe0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: ItkS9hhBxUUr7QTrdN4qhsm8OMGF5bAvi1QRQ2K74xw=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: WKwWhbPawyOzgAjOsk/HfPjPqc+lQeKAyZrRcRmfwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1608 (0x648) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Jul 18 23:03:14 2025 GMT Not After : Jul 25 23:03:14 2025 GMT Subject: CN=687ad2b2-93b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:92:d3:c3:e0:22:28:fd:5c:7d:f7:2c:35: 92:7e:0e:11:80:b6:78:86:fb:50:2a:43:1c:fb:86: 43:5e:ab:74:ba:77:fe:9c:66:7b:51:ce:14:2f:fe: 7d:f7:8e:3b:cd:c4:55:0f:ae:f9:9e:fc:f3:3b:ef: c9:81:91:ea:d0:8b:8c:3d:62:ed:24:d3:f4:41:13: 6b:fe:26:46:1c:ef:8d:15:fb:aa:34:eb:31:5a:db: 5a:d9:16:06:c8:ef:76:1a:92:69:05:6b:73:87:d3: 75:88:07:90:6a:ee:82:05:68:ef:d9:55:67:ee:78: 20:9d:50:22:b9:57:a8:7f:ab:a1:0a:f2:34:09:dd: 70:2b:89:db:71:07:ad:b0:10:fb:b0:ec:78:86:5a: 01:a4:c1:5e:7f:ae:f1:e2:6d:9d:4d:5a:fb:ca:a0: 02:8a:16:92:cd:88:5c:e6:20:f4:e3:a7:e2:6b:79: 32:33:f6:72:47:ad:27:3c:a3:05:1f:80:7e:b5:70: dd:ba:01:d8:d3:51:f5:be:ea:08:7c:60:8d:f7:82: b3:99:90:72:e6:ce:ae:c9:6c:f7:b6:b6:61:80:99: 2e:78:d5:0b:d1:8e:0d:15:74:73:d3:55:52:6c:01: d6:a6:3a:38:41:95:fd:b5:26:3d:97:6c:43:e4:e7: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:2B:0F:AD:1E:61:88:06:18:6A:E4:2A:6F:C5:5E:70:4E:7E:71 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:20:f0:eb:8c:cd:5a:da:fc:24:c7:45:2b:ba:2f:e6:73:c2: 50:d2:de:c4:3d:29:eb:55:1a:b5:22:d1:cb:a0:81:09:b3:f0: 14:71:18:8e:a4:42:b6:f6:a3:44:8f:9d:8a:a8:37:1b:9a:3d: 25:f5:dc:b5:6c:8e:7e:10:c6:e9:ff:fa:1f:56:50:aa:ec:a5: 43:05:6e:0b:ee:42:58:8e:f8:4a:f4:81:6b:4a:d8:71:38:07: f2:b0:8f:75:1f:f0:74:83:87:62:ba:73:25:b6:37:48:2c:0e: a4:1c:22:8c:c1:a0:e9:1b:0f:a6:14:27:be:cd:d9:f2:7c:e8: 03:8a:2a:8a:44:6c:e7:4d:50:ff:c7:db:06:8a:7f:14:88:bf: 97:5b:37:04:c2:cf:63:31:3e:37:c0:65:2a:d9:ff:25:29:bc: 3e:b8:ad:45:c2:dd:ea:c3:f2:57:19:10:f5:8f:f7:f4:be:cb: 8b:b0:40:96:77:03:27:57:d1:74:32:10:97:6f:bb:27:fe:dc: 0c:79:79:75:7c:93:5f:0c:f2:3c:e9:a0:07:f7:ca:9c:d9:50: c8:85:5c:5d:a1:96:a9:ff:5c:16:b6:23:91:35:a6:90:8c:2a: ba:1e:b3:1b:31:6b:8a:7b:38:2d:89:23:59:28:bf:d9:b3:f7: 85:94:61:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjUwNzE4MjMwMzE0WhcNMjUwNzI1MjMwMzE0WjAYMRYwFAYD VQQDEw02ODdhZDJiMi05M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoqS08PgIij9XH33LDWSfg4RgLZ4hvtQKkMc+4ZDXqt0unf+nGZ7Uc4UL/59 9447zcRVD675nvzzO+/JgZHq0IuMPWLtJNP0QRNr/iZGHO+NFfuqNOsxWtta2RYG yO92GpJpBWtzh9N1iAeQau6CBWjv2VVn7nggnVAiuVeof6uhCvI0Cd1wK4nbcQet sBD7sOx4hloBpMFef67x4m2dTVr7yqACihaSzYhc5iD046fia3kyM/ZyR60nPKMF H4B+tXDdugHY01H1vuoIfGCN94KzmZBy5s6uyWz3trZhgJkueNUL0Y4NFXRz01VS bAHWpjo4QZX9tSY9l2xD5OfoBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDeKw+t HmGIBhhq5CpvxV5wTn5xMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATIPDrjM1a2vwkx0Urui/mc8JQ0t7EPSnrVRq1ItHLoIEJs/AUcRiO pEK29qNEj52KqDcbmj0l9dy1bI5+EMbp//ofVlCq7KVDBW4L7kJYjvhK9IFrSthx OAfysI91H/B0g4diunMltjdILA6kHCKMwaDpGw+mFCe+zdnyfOgDiiqKRGznTVD/ x9sGin8UiL+XWzcEws9jMT43wGUq2f8lKbw+uK1Fwt3qw/JXGRD1j/f0vsuLsECW dwMnV9F0MhCXb7sn/twMeXl1fJNfDPI86aAH98qc2VDIhVxdoZap/1wWtiORNaaQ jCq6HrMbMWuKezgtiSNZKL/Zs/eFlGFC -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:20 2025 by rpki-client