$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft File: 0aHv0iQTWusJg56ovbjNxZnOZX8.mft (raw, json) Hash identifier: WisdQ115BazopHKVqY7PMNyCt55VITa+9ETID4BWqYo= Subject key identifier: 42:30:E3:B9:48:7E:1B:B8:38:65:10:6A:49:A8:0D:3E:4B:9E:B1:A5 Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft Manifest number: 04A2 Signing time: Fri 18 Jul 2025 16:39:23 +0000 Manifest this update: Fri 18 Jul 2025 16:39:22 +0000 Manifest next update: Fri 25 Jul 2025 16:39:22 +0000 Files and hashes: 1: 0aHv0iQTWusJg56ovbjNxZnOZX8.crl (hash: j3wroOH50WicHCMUrY8Dr7Pn0nzNx5Y4B+IVsqn5yv0=) 2: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (hash: v+UfHJBNUMJhgU+Hq/Ni7UlIWeTPSw4kY7gKtnOeoHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Jul 18 16:39:22 2025 GMT Not After : Jul 25 16:39:22 2025 GMT Subject: CN=687a78ba-1c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:33:d5:22:df:3b:d0:81:a4:d4:b0:b1:58: 45:81:bb:c5:f3:6f:9b:8e:06:9e:9c:a7:8c:1c:4f: 42:a4:22:9c:8e:f9:69:57:f3:17:78:d6:3e:0e:80: 2b:e4:cd:fc:15:6a:59:5d:6c:7f:82:dc:c0:36:9a: a0:41:4d:d8:0a:8a:5a:f9:a2:49:6f:d0:f1:73:92: 65:5c:f6:87:42:c9:45:eb:a0:26:e4:83:cc:30:2a: a6:1e:bd:53:8e:71:41:84:3e:c2:28:fd:82:65:2e: dd:26:db:72:0f:dd:7c:d5:d3:9c:b9:0a:6b:5a:fb: 0a:6d:6c:d6:b7:ef:a3:84:d8:67:1b:da:be:2f:8e: cb:12:5c:75:01:06:fe:dc:95:82:70:4e:31:5b:0b: 4e:e0:ae:62:0d:e7:4c:ae:eb:c1:70:c1:36:32:32: 5d:2e:41:fc:d6:59:5b:b9:40:e8:0a:40:ba:3c:b1: 6b:4f:df:9e:bb:be:9d:73:4b:90:75:a8:d6:b1:04: a0:d1:f0:c1:f4:6f:f1:86:8f:d5:3a:7d:3d:75:fc: 9a:89:b1:ec:c4:49:87:5f:e6:a1:55:51:45:2a:7d: 2a:d9:b5:37:95:74:8a:9a:a3:b1:57:39:3d:97:92: 9e:ee:b5:f7:c5:e3:2f:03:d3:cb:6c:7f:ea:33:be: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:E3:B9:48:7E:1B:B8:38:65:10:6A:49:A8:0D:3E:4B:9E:B1:A5 X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:2c:2c:14:76:52:d2:00:ca:fc:af:b2:6f:6e:41:f2:18: 86:a3:5d:1f:24:dd:83:2b:86:5d:af:54:12:07:82:46:87:69: 87:4f:d3:e6:dc:96:5d:e4:ce:2a:d1:57:39:89:ed:2b:c4:e7: 54:54:d5:f4:f9:fe:20:f9:9a:88:b3:7b:f5:e2:a5:ed:09:fd: 8f:15:16:41:b6:7d:b2:f8:39:cf:13:6f:a6:15:1a:1c:fe:61: e7:23:a9:df:fa:64:0e:39:8a:81:70:f7:21:c3:e0:56:36:28: 72:0d:07:93:36:40:9c:7c:6c:da:47:39:21:66:8e:79:e8:1f: e9:55:a3:34:d7:fa:e0:5c:56:89:ed:e8:64:26:53:6f:40:42: 3c:a2:05:37:88:48:a9:13:82:fd:09:7a:83:65:a1:36:54:e2: 2a:76:61:93:b2:f3:cd:9f:ab:ab:fc:78:24:85:fa:54:28:46: ff:78:42:8f:07:f6:d9:b2:66:fe:5c:8b:bf:b7:f0:f5:d0:41: 6e:b5:d1:d6:ca:95:6a:e7:6f:4f:df:91:02:db:85:50:1b:7a: 07:52:a5:07:c9:17:34:cd:73:08:df:c1:e4:10:fa:64:18:23: f8:6d:ca:67:3f:09:3d:31:60:6a:ff:ea:75:ca:82:95:3d:ba: 45:58:db:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjUwNzE4MTYzOTIyWhcNMjUwNzI1MTYzOTIyWjAYMRYwFAYD VQQDEw02ODdhNzhiYS0xYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGUz1SLfO9CBpNSwsVhFgbvF82+bjgaenKeMHE9CpCKcjvlpV/MXeNY+DoAr 5M38FWpZXWx/gtzANpqgQU3YCopa+aJJb9Dxc5JlXPaHQslF66Am5IPMMCqmHr1T jnFBhD7CKP2CZS7dJttyD9181dOcuQprWvsKbWzWt++jhNhnG9q+L47LElx1AQb+ 3JWCcE4xWwtO4K5iDedMruvBcME2MjJdLkH81llbuUDoCkC6PLFrT9+eu76dc0uQ dajWsQSg0fDB9G/xho/VOn09dfyaibHsxEmHX+ahVVFFKn0q2bU3lXSKmqOxVzk9 l5Ke7rX3xeMvA9PLbH/qM75bAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIw47lI fhu4OGUQakmoDT5LnrGlMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy83QTMwMkQwMDQyQjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1 c0pnNTZvdmJqTnhabk9aWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVLCwsFHZS0gDK/K+yb25B8hiGo10fJN2DK4Zdr1QSB4JGh2mHT9Pm 3JZd5M4q0Vc5ie0rxOdUVNX0+f4g+ZqIs3v14qXtCf2PFRZBtn2y+DnPE2+mFRoc /mHnI6nf+mQOOYqBcPchw+BWNihyDQeTNkCcfGzaRzkhZo556B/pVaM01/rgXFaJ 7ehkJlNvQEI8ogU3iEipE4L9CXqDZaE2VOIqdmGTsvPNn6ur/HgkhfpUKEb/eEKP B/bZsmb+XIu/t/D10EFutdHWypVq529P35EC24VQG3oHUqUHyRc0zXMI38HkEPpk GCP4bcpnPwk9MWBq/+p1yoKVPbpFWNuR -----END CERTIFICATE-----Generated at Sun Jul 20 15:00:12 2025 by rpki-client