$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: iWpovnEUI/NqY1/C5XZC3jkexs8FYg1TqU/O7yrWkPg= Subject key identifier: 3B:3A:13:52:1B:DD:01:97:5B:D9:EC:7B:B4:9E:4A:4F:27:09:15:E5 Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 01CD Signing time: Sat 19 Jul 2025 03:03:38 +0000 Manifest this update: Sat 19 Jul 2025 03:03:37 +0000 Manifest next update: Sat 26 Jul 2025 03:03:37 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: tseS78sDzsc3tuj40l45hxZ27gDnWSv6C501k6zgdFY=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: 9FynllD8H+NI8HSEXg9Jjmq002CiTaGo7ZssucPUw/c=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: Jul 19 03:03:37 2025 GMT Not After : Jul 26 03:03:37 2025 GMT Subject: CN=687b0b09-b652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:05:75:00:0e:8d:37:16:03:35:b8:37:81: 0d:ae:a8:f7:56:f1:48:7c:3d:f9:a4:79:aa:95:8e: 57:f0:4b:48:90:9a:74:f7:54:61:23:b0:78:49:93: 03:16:f4:68:a2:27:4a:58:78:d4:d4:69:1c:cb:f5: 4b:f4:94:84:25:db:bc:2f:58:ed:1b:b5:70:33:91: ef:2d:65:f2:89:85:30:86:66:83:84:50:6d:8c:81: 72:38:9e:3a:b3:e0:09:5e:0f:a0:77:8d:3c:7e:d5: d8:7e:93:09:ad:10:84:12:5f:1b:d6:5b:01:5b:14: 39:8c:4a:e6:48:60:05:75:1f:a1:8d:f0:01:ed:b8: a0:b5:1a:65:87:ae:96:48:fa:b7:e4:b3:6a:5d:f0: 65:bd:d7:37:3b:f5:62:44:fe:81:7a:c9:c8:7f:2d: 52:71:e3:71:92:93:6b:a0:c1:f7:55:5b:1a:9e:7f: 58:1b:79:f5:72:36:ce:ca:ec:9d:0a:30:b1:72:43: fa:62:c2:0b:ff:f0:0b:a6:49:15:43:12:f8:0d:29: ed:3a:0d:71:f4:c3:88:b6:73:b0:43:0f:22:91:8b: e8:ee:ac:41:6f:fb:5d:03:51:2f:e1:6e:75:41:b6: 47:33:c6:2c:a5:7e:6d:81:40:fd:42:5e:2a:84:3f: 2c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3A:13:52:1B:DD:01:97:5B:D9:EC:7B:B4:9E:4A:4F:27:09:15:E5 X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:84:84:41:bb:ff:73:94:20:3c:00:92:94:f8:22:8b:36:f9: e7:8a:25:79:ac:f6:8f:2a:6f:32:25:88:c0:4a:c7:5a:ed:a9: 33:29:f4:2a:15:cc:10:b5:6c:e7:cb:93:68:a7:e4:5f:d3:09: 2a:16:81:41:03:2b:7b:df:b7:ad:06:37:6e:f3:38:79:f8:82: cc:21:68:44:10:eb:03:3a:20:13:61:85:de:bb:48:fc:39:ad: 0d:00:4c:52:7d:72:47:d1:a7:02:0d:ad:91:da:4c:b8:82:9d: 05:16:dc:8c:a2:5f:ca:30:71:f5:38:e4:73:11:50:89:36:51: 3b:96:86:72:03:2e:df:0d:c8:e7:cc:f9:52:c2:25:3b:25:18: 04:b2:0d:32:97:2d:38:fb:dd:77:36:f2:4f:4c:37:1d:c1:69: d3:9c:aa:ea:98:e3:49:87:03:69:e6:6c:03:ca:fb:d6:54:61: 18:88:7b:5e:a0:3b:64:38:99:bd:4d:db:47:f3:fd:0a:5f:cb: a6:ee:6a:42:01:2a:4c:1c:a5:22:3a:16:82:2a:30:1d:e8:e8: f4:ef:93:9c:2d:f4:d5:7f:d1:77:0d:1d:c4:71:5d:b9:ee:39: 4e:75:3e:74:c1:6b:6c:26:41:c2:7a:2c:7a:18:22:29:00:8d: ce:65:58:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjUwNzE5MDMwMzM3WhcNMjUwNzI2MDMwMzM3WjAYMRYwFAYD VQQDEw02ODdiMGIwOS1iNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMAFdQAOjTcWAzW4N4ENrqj3VvFIfD35pHmqlY5X8EtIkJp091RhI7B4SZMD FvRooidKWHjU1Gkcy/VL9JSEJdu8L1jtG7VwM5HvLWXyiYUwhmaDhFBtjIFyOJ46 s+AJXg+gd408ftXYfpMJrRCEEl8b1lsBWxQ5jErmSGAFdR+hjfAB7bigtRplh66W SPq35LNqXfBlvdc3O/ViRP6BesnIfy1SceNxkpNroMH3VVsann9YG3n1cjbOyuyd CjCxckP6YsIL//ALpkkVQxL4DSntOg1x9MOItnOwQw8ikYvo7qxBb/tdA1Ev4W51 QbZHM8YspX5tgUD9Ql4qhD8s8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDs6E1Ib 3QGXW9nse7SeSk8nCRXlMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYhIRBu/9zlCA8AJKU+CKLNvnniiV5rPaPKm8yJYjASsda7akzKfQq FcwQtWzny5Nop+Rf0wkqFoFBAyt737etBjdu8zh5+ILMIWhEEOsDOiATYYXeu0j8 Oa0NAExSfXJH0acCDa2R2ky4gp0FFtyMol/KMHH1OORzEVCJNlE7loZyAy7fDcjn zPlSwiU7JRgEsg0yly04+913NvJPTDcdwWnTnKrqmONJhwNp5mwDyvvWVGEYiHte oDtkOJm9TdtH8/0KX8um7mpCASpMHKUiOhaCKjAd6Oj075OcLfTVf9F3DR3EcV25 7jlOdT50wWtsJkHCeix6GCIpAI3OZVji -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:28 2025 by rpki-client