$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: pfZJZHk4CMmiVdVyngEQ05OQzk7so4AAa1ecQkKG7uU= Subject key identifier: 18:E2:67:67:BE:BC:7F:FF:4A:09:C9:B7:5B:E5:8E:AD:76:E9:EB:59 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 044F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 044B Signing time: Sat 19 Jul 2025 00:39:44 +0000 Manifest this update: Sat 19 Jul 2025 00:39:43 +0000 Manifest next update: Sat 26 Jul 2025 00:39:43 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: XeOeQolMRiLkKcuPnXzV/yPFIyMcoyfdG4Ro0vFwzKU=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Jul 19 00:39:43 2025 GMT Not After : Jul 26 00:39:43 2025 GMT Subject: CN=687ae950-26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:03:91:cd:58:b6:d7:d1:39:b5:4c:11:16: 1c:fe:40:0f:2c:81:e8:74:fb:24:35:6f:ed:4d:b3: 90:73:3e:33:17:6b:d1:1f:a4:89:b5:2e:ed:20:2b: 48:26:7c:ac:ab:30:bb:0d:cf:1b:ae:c1:e7:25:10: 67:05:ef:09:80:19:dc:64:ef:33:52:b3:80:2d:69: 9c:fd:4a:f2:c1:0c:d4:80:3a:c2:4b:fd:7e:39:8f: a0:c1:14:c2:f7:7c:1f:4a:84:11:b4:e9:3a:c2:1f: af:73:fe:fd:bf:f4:08:13:38:d0:d9:7d:c5:25:23: ab:55:9c:95:e4:c8:fb:e6:0d:60:18:fb:15:b8:1c: 9e:87:9e:20:72:2d:41:d4:54:2b:56:20:55:30:18: 88:ea:28:7a:77:d7:6a:7c:15:fe:45:99:1e:91:e4: 82:e6:f8:19:d9:54:5f:52:ed:0f:ac:a8:be:42:37: b7:01:6a:b4:da:30:5e:2f:87:1c:e6:3c:62:85:dc: 0c:4c:d5:a6:1b:d0:d4:7f:b2:d1:26:51:18:1f:83: 46:4c:47:da:76:28:bf:f9:f1:86:a3:1b:fa:9f:75: 0c:16:cc:c0:4f:47:80:03:1a:43:a0:57:59:b0:0e: bc:86:5d:65:6a:1a:c2:74:61:cc:1f:66:29:02:f7: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E2:67:67:BE:BC:7F:FF:4A:09:C9:B7:5B:E5:8E:AD:76:E9:EB:59 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:21:0c:81:01:20:d7:fa:de:b8:f4:9b:fe:52:77:e8:02:dd: 7a:86:2c:fa:4a:eb:2c:c6:f6:21:b5:e0:69:3b:b7:38:d0:d8: 24:4e:a3:c1:0d:35:df:97:17:3e:70:ea:8c:95:eb:52:ef:7f: 42:a5:44:34:7d:cd:06:8e:a2:be:6f:a5:97:cb:d0:d4:bd:72: 60:32:48:b7:8a:55:ec:4e:37:b7:b6:13:6c:7a:92:10:0a:59: 91:e4:cc:25:45:8c:5e:79:df:37:79:86:35:d4:ff:6c:d7:9e: df:5b:c8:f9:a4:e7:74:2d:be:fe:b8:7e:fc:c8:33:a9:45:aa: 9e:b8:ce:f3:6f:e8:15:f1:ac:88:81:81:a5:4c:b4:1e:07:31: 3a:7a:ea:8c:8c:a8:6a:59:54:69:eb:a2:5b:c3:4d:81:aa:bc: 44:8f:01:26:95:1b:b1:13:8e:16:be:d8:5e:20:3b:5b:00:9d: cd:17:41:eb:2e:96:c2:94:fd:6f:a9:4c:d9:d2:85:02:43:bc: b2:1b:c9:22:f6:a4:56:3e:90:47:aa:d3:49:97:11:20:b8:b5: 58:7c:35:57:2f:55:aa:59:44:87:9a:0f:f1:4c:88:91:5c:ab: 5e:78:64:a7:48:56:24:75:0d:45:c8:4c:08:4c:48:bb:61:66: 1c:61:d2:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUwNzE5MDAzOTQzWhcNMjUwNzI2MDAzOTQzWjAYMRYwFAYD VQQDEw02ODdhZTk1MC0yNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OcDkc1YttfRObVMERYc/kAPLIHodPskNW/tTbOQcz4zF2vRH6SJtS7tICtI JnysqzC7Dc8brsHnJRBnBe8JgBncZO8zUrOALWmc/UrywQzUgDrCS/1+OY+gwRTC 93wfSoQRtOk6wh+vc/79v/QIEzjQ2X3FJSOrVZyV5Mj75g1gGPsVuByeh54gci1B 1FQrViBVMBiI6ih6d9dqfBX+RZkekeSC5vgZ2VRfUu0PrKi+Qje3AWq02jBeL4cc 5jxihdwMTNWmG9DUf7LRJlEYH4NGTEfadii/+fGGoxv6n3UMFszAT0eAAxpDoFdZ sA68hl1lahrCdGHMH2YpAvfX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjiZ2e+ vH//SgnJt1vljq126etZMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJIQyBASDX+t649Jv+UnfoAt16hiz6SussxvYhteBpO7c40NgkTqPB DTXflxc+cOqMletS739CpUQ0fc0GjqK+b6WXy9DUvXJgMki3ilXsTje3thNsepIQ ClmR5MwlRYxeed83eYY11P9s157fW8j5pOd0Lb7+uH78yDOpRaqeuM7zb+gV8ayI gYGlTLQeBzE6euqMjKhqWVRp66Jbw02BqrxEjwEmlRuxE44WvtheIDtbAJ3NF0Hr LpbClP1vqUzZ0oUCQ7yyG8ki9qRWPpBHqtNJlxEguLVYfDVXL1WqWUSHmg/xTIiR XKteeGSnSFYkdQ1FyEwITEi7YWYcYdJ0 -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:11 2025 by rpki-client