$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: xa7Svv0GXN/mgrDh3m02jlbb+4VXqgdk6tkqiGYGXU0= Subject key identifier: 7D:E8:60:C7:2C:BE:1D:D3:97:E3:C3:F7:95:75:F8:70:09:99:5F:2F Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 01BD Signing time: Sat 19 Jul 2025 03:18:34 +0000 Manifest this update: Sat 19 Jul 2025 03:18:34 +0000 Manifest next update: Sat 26 Jul 2025 03:18:34 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: gP8GYzXxAjIRyCFhzPstYabHWiHop3KRzmmu/4gEdfg=) 2: BCAE303EF6C611EE8AA17A87C4F9AE02.roa (hash: b9dTa2nX+qFG6d7y+XsHyu+bx2asCK2u/yxDxyFKOqQ=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: wwr+xiQ0ICFC4K2aFb1fxrN51KszvejW5t2iwGw5e3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Jul 19 03:18:34 2025 GMT Not After : Jul 26 03:18:34 2025 GMT Subject: CN=687b0e8a-bb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:d2:f8:44:9c:c6:27:28:c9:32:35:bd:c9: fd:b1:3b:67:cc:d7:ad:d2:e5:74:d3:50:5e:34:1e: 04:ee:d9:58:8e:c5:8c:59:6b:00:f6:5e:9b:d0:33: 15:ba:87:3e:33:98:ad:a3:25:5b:50:f5:94:fa:e1: 11:55:37:6d:e3:85:fc:95:49:d4:9c:51:3f:38:63: f1:9f:f6:a1:c3:61:41:43:e8:ad:1c:84:b9:93:68: 40:36:41:bd:3c:85:56:37:54:48:98:b4:99:93:16: e5:1e:0e:70:74:9e:64:44:9c:e8:e7:25:7f:6d:12: 8a:41:92:f4:05:0a:f2:63:81:c6:9e:92:0e:e1:31: 10:2c:06:4d:37:60:ab:4a:96:7f:b0:1a:72:ad:68: 5e:dc:f7:32:61:dd:f5:94:f7:65:66:05:c1:84:94: 69:99:61:d7:0e:4f:2a:25:d2:63:d0:68:c3:88:7c: f9:d4:8c:b9:be:4c:06:c9:8a:ea:0a:99:d5:29:6a: 50:4a:af:07:dd:80:29:cb:a2:59:8d:2c:2f:4a:48: 01:e5:5f:be:62:d3:7f:e8:41:41:2c:13:17:5c:a9: dd:6c:ad:12:14:ee:26:3f:54:16:ef:3f:3f:d7:bb: f8:bb:0e:cb:af:b9:a1:80:af:ce:0d:9d:88:59:2a: 60:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E8:60:C7:2C:BE:1D:D3:97:E3:C3:F7:95:75:F8:70:09:99:5F:2F X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:36:66:b4:9c:3b:df:20:63:59:1e:b2:d2:89:df:a4:39:43: 58:c1:63:30:ed:b2:2c:aa:31:ec:53:8b:f2:9a:36:bb:ea:fe: 97:6f:a0:64:01:e9:09:64:39:2c:25:dd:35:e3:c9:73:8c:e5: 23:24:a5:cb:53:96:81:f8:eb:17:be:26:8b:69:33:ad:01:4d: a3:0d:a7:ba:de:a6:57:19:c7:61:c7:fb:74:23:64:8d:5d:75: 0f:76:94:88:11:83:13:38:d0:c9:bd:53:a7:4c:06:d7:e5:a6: 57:cd:93:fb:66:17:8a:0e:a0:86:5e:84:de:8b:68:2e:10:51: 39:94:35:d4:7a:74:74:5c:25:58:69:3a:77:09:14:57:43:7f: d2:fb:d3:12:9e:06:ef:25:be:8c:61:58:05:5b:b9:2b:01:38: 25:eb:2d:e4:86:92:09:6d:70:d5:24:13:e9:08:fe:6e:d6:ee: d4:71:bf:30:91:3c:87:97:ad:1e:e9:a4:11:97:3b:ec:55:ee: ad:1a:2a:c2:79:82:8a:c3:e9:7b:0c:76:00:3a:96:13:44:01: e8:27:cd:c7:b2:5d:28:62:55:c4:07:5b:92:f1:8f:78:4e:ac: f5:23:e1:7d:b9:e4:b9:aa:04:a3:57:07:80:bd:fa:1f:46:7a: 59:64:8a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjUwNzE5MDMxODM0WhcNMjUwNzI2MDMxODM0WjAYMRYwFAYD VQQDEw02ODdiMGU4YS1iYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAps7S+EScxicoyTI1vcn9sTtnzNet0uV001BeNB4E7tlYjsWMWWsA9l6b0DMV uoc+M5itoyVbUPWU+uERVTdt44X8lUnUnFE/OGPxn/ahw2FBQ+itHIS5k2hANkG9 PIVWN1RImLSZkxblHg5wdJ5kRJzo5yV/bRKKQZL0BQryY4HGnpIO4TEQLAZNN2Cr SpZ/sBpyrWhe3PcyYd31lPdlZgXBhJRpmWHXDk8qJdJj0GjDiHz51Iy5vkwGyYrq CpnVKWpQSq8H3YApy6JZjSwvSkgB5V++YtN/6EFBLBMXXKndbK0SFO4mP1QW7z8/ 17v4uw7Lr7mhgK/ODZ2IWSpg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3oYMcs vh3Tl+PD95V1+HAJmV8vMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvNma0nDvfIGNZHrLSid+kOUNYwWMw7bIsqjHsU4vymja76v6Xb6Bk AekJZDksJd0148lzjOUjJKXLU5aB+OsXviaLaTOtAU2jDae63qZXGcdhx/t0I2SN XXUPdpSIEYMTONDJvVOnTAbX5aZXzZP7ZheKDqCGXoTei2guEFE5lDXUenR0XCVY aTp3CRRXQ3/S+9MSngbvJb6MYVgFW7krATgl6y3khpIJbXDVJBPpCP5u1u7Ucb8w kTyHl60e6aQRlzvsVe6tGirCeYKKw+l7DHYAOpYTRAHoJ83Hsl0oYlXEB1uS8Y94 Tqz1I+F9ueS5qgSjVweAvfofRnpZZIrz -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:45 2025 by rpki-client