$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: eWHLRz6wBamSRYalTAT+rAcDXd8cuxC0N/d8VHlz9CI= Subject key identifier: AD:EA:38:C9:57:01:93:A4:47:1A:96:24:49:75:AA:08:E8:39:52:D2 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0D2A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0CAF Signing time: Fri 18 Jul 2025 17:01:21 +0000 Manifest this update: Fri 18 Jul 2025 17:01:21 +0000 Manifest next update: Fri 25 Jul 2025 17:01:21 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: uSEca5Ghrqci4FW7zJRPecSQQybhyrWWFepxBN2+750=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: r61Y1na2DnCg+opz0fva/EXKcH2bwZStVIeQ3Bbr1wo=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: OUewL85nRVoETpSnxouJtXZ3L1bDXbwRe3ztxVw9Gdo=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: yNX5r0uH9AVD8jLHxtfDr9wVdFkZMT+8LiQ4egrCNYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3370 (0xd2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jul 18 17:01:21 2025 GMT Not After : Jul 25 17:01:21 2025 GMT Subject: CN=687a7de1-248a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:78:46:b8:6e:e0:c7:f9:ed:e5:ef:51:a2: 92:14:fa:77:ff:cd:fa:db:d8:5e:4d:4f:77:cc:9e: 9e:8a:34:77:e7:71:20:c5:5b:ff:58:e9:b6:37:a6: 07:a7:81:b3:79:b0:9b:3f:1f:e0:d5:34:ae:5b:b0: 3f:08:79:61:a8:80:63:1d:8a:85:66:f3:7c:d5:fd: 56:d2:37:6a:a7:2d:c3:ec:7e:56:4a:7b:3f:7f:96: e2:91:2e:cf:e6:6a:3f:56:d2:28:f0:e1:d0:f4:91: e9:1e:d5:81:ab:72:41:b7:7c:56:51:30:5f:05:b9: 8a:19:0b:d3:38:f5:84:d1:01:45:ab:65:e3:d2:f6: e6:64:ec:8e:e4:fb:98:d1:17:88:8b:e9:46:c6:99: 4e:62:d8:ac:3b:6d:32:12:62:97:9e:7c:a3:b1:6e: ae:3b:6a:f9:ec:77:50:41:0b:91:d0:75:7f:eb:ac: 83:28:10:bc:fd:77:fb:be:bb:29:d2:c0:c8:e7:9c: bd:6a:e3:4f:83:e8:73:59:94:42:61:ea:62:49:e7: b2:11:6b:a9:de:0f:5f:ea:37:c9:eb:25:2e:bb:96: a7:c4:04:9f:be:0a:52:40:9a:8e:44:34:1d:fc:b7: c2:c9:fb:7f:6f:4c:3a:8d:97:b6:cb:3e:93:4d:db: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EA:38:C9:57:01:93:A4:47:1A:96:24:49:75:AA:08:E8:39:52:D2 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:0b:88:04:da:c9:5a:bb:12:d3:e8:86:67:23:aa:e6:09: 09:18:85:9f:29:93:0c:e5:0d:56:16:51:d0:99:84:1a:56:1e: 55:9b:92:e5:5e:4a:55:8b:83:bf:91:0c:84:ae:b2:19:43:9c: 32:1c:14:a7:f1:87:8c:c2:b5:74:00:15:cb:32:02:8c:60:da: 67:c8:9d:f5:4e:8a:cb:4a:cd:9c:54:67:ea:40:16:9d:f9:51: bb:d1:7f:00:ca:2c:c9:b4:2a:ab:8f:09:48:ff:e7:df:8e:c8: f3:52:37:3b:08:52:00:28:26:90:b8:d5:9c:d2:b8:80:98:9d: 34:19:e1:73:c4:b0:5c:53:ae:24:23:dc:57:dc:31:5f:f3:06: 74:a1:10:95:ce:db:57:a8:0d:bd:dc:ab:77:db:a7:0f:e9:ea: 3a:71:1a:6d:29:55:fd:11:e8:1f:8b:11:72:72:9e:20:b2:a3: 23:ec:0a:aa:2f:d0:ae:3c:f8:d1:ec:f4:fb:00:9c:7b:06:67: 39:56:81:7c:f0:dc:a6:95:3f:f8:88:e4:06:ab:38:58:47:3c: 97:9b:f5:2f:50:b5:c5:fa:da:34:5c:1b:49:f2:0c:bb:7d:b7: 8e:06:47:fa:1c:90:c4:ff:4c:75:50:e2:ef:cf:36:f0:82:a8: a4:ae:9d:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUwNzE4MTcwMTIxWhcNMjUwNzI1MTcwMTIxWjAYMRYwFAYD VQQDEw02ODdhN2RlMS0yNDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVV4Rrhu4Mf57eXvUaKSFPp3/83629heTU93zJ6eijR353EgxVv/WOm2N6YH p4GzebCbPx/g1TSuW7A/CHlhqIBjHYqFZvN81f1W0jdqpy3D7H5WSns/f5bikS7P 5mo/VtIo8OHQ9JHpHtWBq3JBt3xWUTBfBbmKGQvTOPWE0QFFq2Xj0vbmZOyO5PuY 0ReIi+lGxplOYtisO20yEmKXnnyjsW6uO2r57HdQQQuR0HV/66yDKBC8/Xf7vrsp 0sDI55y9auNPg+hzWZRCYepiSeeyEWup3g9f6jfJ6yUuu5anxASfvgpSQJqORDQd /LfCyft/b0w6jZe2yz6TTdveWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3qOMlX AZOkRxqWJEl1qgjoOVLSMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxnAuIBNrJWrsS0+iGZyOq5gkJGIWfKZMM5Q1WFlHQmYQaVh5Vm5Ll XkpVi4O/kQyErrIZQ5wyHBSn8YeMwrV0ABXLMgKMYNpnyJ31TorLSs2cVGfqQBad +VG70X8AyizJtCqrjwlI/+ffjsjzUjc7CFIAKCaQuNWc0riAmJ00GeFzxLBcU64k I9xX3DFf8wZ0oRCVzttXqA293Kt326cP6eo6cRptKVX9EegfixFycp4gsqMj7Aqq L9CuPPjR7PT7AJx7Bmc5VoF88NymlT/4iOQGqzhYRzyXm/UvULXF+to0XBtJ8gy7 fbeOBkf6HJDE/0x1UOLvzzbwgqikrp3+ -----END CERTIFICATE-----Generated at Sun Jul 20 15:14:09 2025 by rpki-client