$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json) Hash identifier: w3Qt8ziJ0kLpfKzY4T8+xLA424XKfGZ3nQyFwFJW+wA= Subject key identifier: 8C:FF:87:08:E2:AB:1D:40:63:F0:84:37:33:22:3D:B2:14:92:F3:84 Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft Manifest number: 017D Signing time: Sat 19 Jul 2025 04:12:08 +0000 Manifest this update: Sat 19 Jul 2025 04:12:07 +0000 Manifest next update: Sat 26 Jul 2025 04:12:07 +0000 Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: +pPmuy5somaM+sLvifVCV7DKZlRO2BreEVS9OyMehdI=) 2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=) 3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: bYvF1gDJX1ZeUVWwtl4pq/MaUKBYzhyJEZ9Gr/fKvjk=) 4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: tbP1wHLZXWdBy80smo7nwsfBeTkYD2DmwbznFImHmJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Validity Not Before: Jul 19 04:12:07 2025 GMT Not After : Jul 26 04:12:07 2025 GMT Subject: CN=687b1b18-023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:7e:38:95:fb:c3:bf:bf:45:9d:69:11:11: fd:a4:58:d5:42:b2:b2:7a:60:9a:48:8b:61:91:67: bf:e6:4b:dc:ee:ad:a3:03:ff:d7:bd:94:e6:02:cc: cd:39:dc:47:e5:88:b4:5c:67:d2:d2:a4:aa:7f:76: ea:c9:4a:e1:ad:e4:98:e4:31:b0:44:a1:8d:e1:ab: 2d:7c:c1:5b:d0:53:a0:a1:9a:ee:a4:51:6b:c8:a1: 69:e2:ba:ac:7b:d0:2d:5c:17:86:b4:1a:76:a8:99: 36:4b:84:bc:eb:9d:b2:bc:fb:d0:ba:6a:69:d2:ba: 4e:64:8c:ef:9a:6d:29:d8:7d:0a:f4:fb:3c:79:71: 69:00:9d:09:d3:0e:d3:4f:3c:c1:8a:88:9f:4a:8c: e7:a9:1d:98:ee:79:bd:ce:4c:8e:32:5d:d5:29:92: 11:9a:db:c1:e0:b3:4d:c9:58:21:40:b5:4e:0c:1b: 36:0c:9a:45:c4:b4:22:4f:14:57:a6:f8:be:6e:a4: 28:7a:25:2b:f5:19:a0:75:22:1f:88:7f:2b:3a:6a: 53:dd:f5:a7:5d:af:23:1d:b7:64:c6:a3:6c:8e:f6: 42:35:0e:fb:79:bc:94:22:cc:09:66:be:a7:f1:e7: b2:fa:ee:2a:97:2d:dd:f9:6a:a0:fe:25:66:81:2e: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FF:87:08:E2:AB:1D:40:63:F0:84:37:33:22:3D:B2:14:92:F3:84 X509v3 Authority Key Identifier: keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9e:73:fc:78:95:5d:95:86:c2:01:1f:8c:39:71:44:3b:8d: 31:ad:50:97:9f:6d:03:44:af:f4:02:5c:a5:53:62:9f:d4:23: 0d:ef:67:18:16:a2:f8:15:40:d1:7f:a7:55:60:59:38:79:d5: 01:13:c6:74:9f:07:59:ab:33:36:41:61:16:3d:cd:30:f6:e0: a2:6c:8d:28:1d:e4:dd:e3:8b:6c:f8:40:d2:36:85:e2:ec:09: cc:ac:9a:84:cb:c7:eb:80:04:a0:32:fb:8b:c4:3a:17:e5:c2: a6:30:ac:54:75:35:0b:0c:34:8d:1a:df:22:0a:e2:2e:bd:80: cc:3b:49:57:26:c4:91:b1:f0:79:11:76:4e:e3:a1:dd:bc:49: 51:de:b6:12:cc:ad:c7:87:4a:29:19:2c:89:33:91:ea:9d:f4: ed:d9:57:bb:a9:5e:e8:53:41:17:cf:89:3b:b5:85:4e:86:70: 7f:e9:82:62:40:95:a0:b2:54:87:c7:16:7d:1b:e1:06:0b:de: c5:0b:d7:99:fe:5f:89:07:66:cf:ce:64:d4:6d:0d:21:2b:d8: e7:db:fb:52:81:a5:16:b4:8f:e5:5a:04:14:ea:44:aa:32:ad: 53:96:cf:62:fb:e6:0b:c6:bd:2a:32:a9:b9:d0:0b:8e:d7:5d: 9d:ee:d0:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw MDZCQjUxODYwHhcNMjUwNzE5MDQxMjA3WhcNMjUwNzI2MDQxMjA3WjAYMRYwFAYD VQQDEw02ODdiMWIxOC0wMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zt+OJX7w7+/RZ1pERH9pFjVQrKyemCaSIthkWe/5kvc7q2jA//XvZTmAszN OdxH5Yi0XGfS0qSqf3bqyUrhreSY5DGwRKGN4astfMFb0FOgoZrupFFryKFp4rqs e9AtXBeGtBp2qJk2S4S8652yvPvQumpp0rpOZIzvmm0p2H0K9Ps8eXFpAJ0J0w7T TzzBioifSoznqR2Y7nm9zkyOMl3VKZIRmtvB4LNNyVghQLVODBs2DJpFxLQiTxRX pvi+bqQoeiUr9RmgdSIfiH8rOmpT3fWnXa8jHbdkxqNsjvZCNQ77ebyUIswJZr6n 8eey+u4qly3d+Wqg/iVmgS4MMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz/hwji qx1AY/CENzMiPbIUkvOEMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFnnP8eJVdlYbCAR+MOXFEO40xrVCXn20DRK/0AlylU2Kf1CMN72cY FqL4FUDRf6dVYFk4edUBE8Z0nwdZqzM2QWEWPc0w9uCibI0oHeTd44ts+EDSNoXi 7AnMrJqEy8frgASgMvuLxDoX5cKmMKxUdTULDDSNGt8iCuIuvYDMO0lXJsSRsfB5 EXZO46HdvElR3rYSzK3Hh0opGSyJM5HqnfTt2Ve7qV7oU0EXz4k7tYVOhnB/6YJi QJWgslSHxxZ9G+EGC97FC9eZ/l+JB2bPzmTUbQ0hK9jn2/tSgaUWtI/lWgQU6kSq Mq1Tls9i++YLxr0qMqm50AuO112d7tAC -----END CERTIFICATE-----Generated at Sun Jul 20 15:08:53 2025 by rpki-client