$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: 1mBipSCDP3r6i6cc0ng6+ebJMmdozHBz7qFa9MM1N5Q= Subject key identifier: 76:78:52:8A:BB:A7:0A:5C:AE:98:F5:F4:5A:A6:2B:97:50:34:29:AF Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0146 Signing time: Sat 19 Jul 2025 04:30:47 +0000 Manifest this update: Sat 19 Jul 2025 04:30:46 +0000 Manifest next update: Sat 26 Jul 2025 04:30:46 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: eET8wPG+bldRs3xHlAx0Zol7myTKWb7UzM84Dj5oFxs=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: 6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Jul 19 04:30:46 2025 GMT Not After : Jul 26 04:30:46 2025 GMT Subject: CN=687b1f76-3a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:f3:fb:33:45:3c:c0:86:3d:11:53:d8:dd: 9b:c1:b5:91:d8:5d:96:6d:e5:79:f3:fd:af:0d:a2: df:1c:13:cb:f9:1f:fb:0f:02:8e:95:32:56:53:5a: d1:7e:ac:d3:0c:0f:a7:9e:07:5e:9d:1f:41:b5:3c: fc:85:2d:c3:30:77:cd:d8:e2:b7:69:2b:6e:37:a2: e9:9d:f5:83:1d:66:a0:06:2f:3c:a6:db:6a:86:f5: ef:b5:fe:fd:76:5e:24:55:93:6b:95:e4:df:53:e4: a3:26:12:e0:3a:2f:cf:8d:b3:7f:56:6b:d9:de:38: 4f:fc:29:11:2f:dc:1c:14:58:87:8a:4d:93:03:9d: 16:6b:ea:24:d9:f1:ad:11:df:33:34:7a:25:ba:d8: d1:62:da:74:68:ea:3d:c2:69:47:dd:6f:22:28:f6: b7:b3:f8:c9:c4:ae:09:d2:4d:bc:05:92:1c:75:47: 83:89:56:53:c4:15:ee:a0:ac:30:40:27:2e:b6:b6: 71:1d:ed:27:04:92:80:ff:b4:b6:d8:f1:28:29:8f: cd:9b:a6:b2:c0:bd:d6:20:e5:34:a0:d3:3f:83:eb: 4e:ca:56:cf:cb:fd:12:d6:88:19:a5:bd:6a:f0:76: 0e:ed:f9:a4:80:38:93:82:a0:72:0b:16:b7:9d:76: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:52:8A:BB:A7:0A:5C:AE:98:F5:F4:5A:A6:2B:97:50:34:29:AF X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:3e:98:e2:44:da:f8:fe:44:52:3c:5b:b1:45:e7:52:1c: 53:84:fa:e7:e2:8e:e0:a6:78:5c:6e:be:01:ef:02:09:a9:61: a1:b5:d1:61:7d:b1:26:f3:ea:d1:a8:a7:f6:89:f2:06:74:7d: f8:1d:ac:80:b2:36:ae:f7:2e:30:d4:d4:79:2c:06:60:26:1c: d1:a2:35:1d:08:ad:ca:3b:73:69:8f:9a:82:79:09:d3:50:43: 4a:29:fa:04:b2:c2:15:1d:36:1b:67:90:78:9d:c7:52:6b:25: 02:20:5a:6c:11:43:9e:20:8f:2e:64:0c:17:85:ad:62:f2:75: 77:ae:bf:ee:2e:da:c2:26:2a:4d:0d:a5:85:e4:9b:9c:56:50: 6b:07:62:0e:f6:38:c6:36:a1:e0:69:a9:a3:35:04:81:10:01: 6c:e3:e9:fd:9d:9a:3f:84:bb:37:d8:f6:92:31:6c:0e:be:50: fa:c9:ee:10:f8:f0:b7:c0:1d:f6:f5:9b:bc:7b:62:9b:ef:6e: 95:d0:33:3a:23:97:97:27:c3:b5:1b:12:08:c6:08:b5:a3:ba: 99:ac:a2:bd:1b:74:75:13:6b:19:da:e4:34:63:29:d5:55:e1: 29:22:64:48:a3:ec:1c:97:26:65:67:7d:f5:ea:10:df:bc:b8: 91:50:c6:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUwNzE5MDQzMDQ2WhcNMjUwNzI2MDQzMDQ2WjAYMRYwFAYD VQQDEw02ODdiMWY3Ni0zYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UXz+zNFPMCGPRFT2N2bwbWR2F2WbeV58/2vDaLfHBPL+R/7DwKOlTJWU1rR fqzTDA+nngdenR9BtTz8hS3DMHfN2OK3aStuN6LpnfWDHWagBi88pttqhvXvtf79 dl4kVZNrleTfU+SjJhLgOi/PjbN/VmvZ3jhP/CkRL9wcFFiHik2TA50Wa+ok2fGt Ed8zNHolutjRYtp0aOo9wmlH3W8iKPa3s/jJxK4J0k28BZIcdUeDiVZTxBXuoKww QCcutrZxHe0nBJKA/7S22PEoKY/Nm6aywL3WIOU0oNM/g+tOylbPy/0S1ogZpb1q 8HYO7fmkgDiTgqByCxa3nXbMaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ4Uoq7 pwpcrpj19FqmK5dQNCmvMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWoD6Y4kTa+P5EUjxbsUXnUhxThPrn4o7gpnhcbr4B7wIJqWGhtdFh fbEm8+rRqKf2ifIGdH34HayAsjau9y4w1NR5LAZgJhzRojUdCK3KO3Npj5qCeQnT UENKKfoEssIVHTYbZ5B4ncdSayUCIFpsEUOeII8uZAwXha1i8nV3rr/uLtrCJipN DaWF5JucVlBrB2IO9jjGNqHgaamjNQSBEAFs4+n9nZo/hLs32PaSMWwOvlD6ye4Q +PC3wB329Zu8e2Kb726V0DM6I5eXJ8O1GxIIxgi1o7qZrKK9G3R1E2sZ2uQ0YynV VeEpImRIo+wclyZlZ3316hDfvLiRUMY8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:31 2025 by rpki-client