$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: UL2HpKSlvTFV02XPF2Vifx4/a1j9KheoqYvhSwxIuPY= Subject key identifier: 94:F7:09:17:C6:DD:06:07:4B:67:96:70:53:4C:47:62:1D:2A:59:28 Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 01A4 Signing time: Sat 19 Jul 2025 03:47:12 +0000 Manifest this update: Sat 19 Jul 2025 03:47:11 +0000 Manifest next update: Sat 26 Jul 2025 03:47:11 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: NzFxwzUTvkNRN5pjE8f7x3p9178Ou4bs1yuMkchaCb8=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: MfWpaMS6rRmOY6M0y/tJr6fftibzcsGmZcNhFWcJvTU=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: NNWnPeY+H+OxjWlVfrs0w5U8TUAoL0DUbiwdZQKCLSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Jul 19 03:47:11 2025 GMT Not After : Jul 26 03:47:11 2025 GMT Subject: CN=687b153f-f975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:d9:a3:6d:1b:cd:91:3e:70:91:b1:e0:f2: f5:4f:b2:5c:99:51:39:29:81:82:b1:b5:ba:90:1a: bc:18:6f:a6:ef:6a:59:9d:be:30:17:56:88:6b:89: 0d:ae:b0:b2:50:8d:ec:41:d6:70:16:f2:b4:59:eb: 01:b5:70:8c:52:93:41:9f:1d:40:4b:7b:3e:cb:7a: a7:d4:0e:51:38:f7:a9:c1:44:02:5d:b1:47:51:59: cd:9b:11:ca:15:bc:16:31:e3:85:15:92:31:3a:ba: 37:16:c5:44:6a:b7:2e:83:88:cb:3d:1d:c0:2c:f5: 8e:d8:d6:b9:ad:d1:86:92:7e:86:a6:8b:00:88:f9: 61:97:25:7f:60:01:5f:f7:73:84:5f:5d:c7:5b:3f: e7:cb:71:91:2f:2d:3d:bf:cb:cc:ee:5e:ca:8c:fa: fd:e3:46:e6:9f:dd:8b:4e:97:0b:b9:fe:ff:75:77: e6:c3:a1:61:92:b1:f5:7c:e2:3d:74:e9:a6:5a:0b: f6:a0:ed:2d:7b:81:38:13:34:81:4e:aa:56:ec:7c: 09:11:da:a5:89:11:7f:2e:b3:42:7e:1b:ce:95:eb: 1f:67:48:29:85:61:78:63:77:92:dc:56:87:93:7d: 71:a1:5e:b5:84:53:0c:15:a1:03:02:27:35:9a:ae: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F7:09:17:C6:DD:06:07:4B:67:96:70:53:4C:47:62:1D:2A:59:28 X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a7:4e:56:1c:c5:dd:52:1d:6f:4b:0b:4d:af:2d:3e:d5:dc: 19:15:3d:66:5e:54:3a:6f:87:12:da:ce:9e:0a:04:73:a2:bc: 7a:03:87:1b:14:bf:c6:bf:1b:36:1b:45:ee:8e:7b:99:4a:58: 91:ca:1c:aa:df:b0:48:d4:6b:63:53:a6:58:33:f7:54:ce:f7: 6f:38:36:4c:e4:67:05:8f:11:10:f6:08:fb:7a:d5:1f:70:3e: 2e:80:90:65:97:13:d7:1e:a4:14:a8:1d:74:8b:9a:5d:d5:80: 52:8a:5a:2e:9a:49:56:b1:f6:e3:70:62:cb:8b:10:52:fc:66: 8a:5b:75:fb:08:e5:04:34:87:75:bb:88:c7:5d:80:e4:21:24: 0c:83:9a:d7:c6:a1:74:30:a1:69:d3:13:f3:16:79:4b:a6:a9: f1:47:fb:f3:5b:d5:57:a2:98:ca:ad:d1:2b:7a:21:d5:62:84: 5c:4e:07:75:be:65:73:4f:8b:9b:48:8e:5d:eb:ba:81:dc:23: 4b:c5:50:fc:19:65:a3:71:10:8a:7e:a7:a2:1e:2c:66:9b:c2: c3:46:a0:f3:25:82:7e:2d:4a:c5:2f:52:e3:ce:9c:33:3b:80: a4:c3:15:04:7f:f4:61:a3:0d:51:6b:47:31:5e:9e:c6:96:ac: dc:1e:60:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwNzE5MDM0NzExWhcNMjUwNzI2MDM0NzExWjAYMRYwFAYD VQQDEw02ODdiMTUzZi1mOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNXZo20bzZE+cJGx4PL1T7JcmVE5KYGCsbW6kBq8GG+m72pZnb4wF1aIa4kN rrCyUI3sQdZwFvK0WesBtXCMUpNBnx1AS3s+y3qn1A5ROPepwUQCXbFHUVnNmxHK FbwWMeOFFZIxOro3FsVEarcug4jLPR3ALPWO2Na5rdGGkn6GposAiPlhlyV/YAFf 93OEX13HWz/ny3GRLy09v8vM7l7KjPr940bmn92LTpcLuf7/dXfmw6FhkrH1fOI9 dOmmWgv2oO0te4E4EzSBTqpW7HwJEdqliRF/LrNCfhvOlesfZ0gphWF4Y3eS3FaH k31xoV61hFMMFaEDAic1mq4ZvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT3CRfG 3QYHS2eWcFNMR2IdKlkoMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfp05WHMXdUh1vSwtNry0+1dwZFT1mXlQ6b4cS2s6eCgRzorx6A4cb FL/Gvxs2G0XujnuZSliRyhyq37BI1GtjU6ZYM/dUzvdvODZM5GcFjxEQ9gj7etUf cD4ugJBllxPXHqQUqB10i5pd1YBSiloumklWsfbjcGLLixBS/GaKW3X7COUENId1 u4jHXYDkISQMg5rXxqF0MKFp0xPzFnlLpqnxR/vzW9VXopjKrdEreiHVYoRcTgd1 vmVzT4ubSI5d67qB3CNLxVD8GWWjcRCKfqeiHixmm8LDRqDzJYJ+LUrFL1Ljzpwz O4CkwxUEf/Rhow1Ra0cxXp7GlqzcHmCL -----END CERTIFICATE-----Generated at Mon Jul 21 02:14:58 2025 by rpki-client