$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: 2bNf+T1ncoiBF3EkqLpo20dBbKCvEgRdBRa1/Ar1etU= Subject key identifier: EC:12:BA:A1:4F:3B:08:B9:69:F9:4F:B6:48:88:A2:AA:0E:B6:91:30 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1BEF Signing time: Tue 22 Jul 2025 16:22:30 +0000 Manifest this update: Tue 22 Jul 2025 16:22:29 +0000 Manifest next update: Tue 29 Jul 2025 16:22:29 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 6uyqBQ/fi75Z1VHtzQ5Fi0MK+bxlz/I3Vvx3kQHNNbY=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) 3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:22:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7185 (0x1c11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Jul 22 16:22:29 2025 GMT Not After : Jul 29 16:22:29 2025 GMT Subject: CN=687fbac6-2b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:78:1c:1d:97:f9:93:b8:a8:a4:5b:33:b2: f5:ab:78:85:b8:5b:b5:01:d2:d8:53:04:86:c1:8d: 64:66:35:ff:86:07:5e:50:b9:1e:8e:b7:9f:a6:f3: c3:77:4d:20:5b:90:fe:72:6a:c7:9b:47:e6:e4:6b: b0:9d:c0:f6:30:49:ec:a6:49:7e:1d:fd:6a:77:1a: 84:c4:64:58:c0:b1:ae:ba:07:08:b4:7e:66:8b:3d: c5:55:45:d5:90:64:da:0f:9d:f2:64:92:df:8d:9d: 3c:ad:5e:41:1a:e1:bf:ec:70:ab:22:af:1b:79:ac: 5e:c4:f5:99:b3:14:0c:07:65:04:18:80:45:5f:3f: db:0a:d7:93:c0:59:f0:aa:9c:e8:1b:56:20:5f:05: 19:70:8f:5b:d3:5e:64:47:59:f3:57:73:c2:5a:ab: 60:28:e3:eb:e6:bd:4a:d9:19:14:8c:d3:5d:dc:89: f3:ad:1d:9f:c9:84:09:5d:1c:2c:19:86:8e:d9:8e: 0e:5a:e9:92:15:c2:75:cc:ec:00:15:d3:8b:fe:39: 74:b5:52:98:83:64:e9:e2:2b:f7:2e:7a:6d:09:0f: e4:9b:d0:a7:52:ea:0b:dd:b8:4a:27:2b:49:f3:bc: a5:f7:2d:d7:ba:64:a7:3e:ff:8c:8c:72:70:7d:2b: 39:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:12:BA:A1:4F:3B:08:B9:69:F9:4F:B6:48:88:A2:AA:0E:B6:91:30 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:07:a0:19:1f:b4:b4:97:00:1c:8c:a2:27:c7:1f:62:d3:84: 0e:66:d8:26:20:44:62:01:a6:3c:94:2b:08:19:08:5c:52:7c: 72:37:60:7d:b2:c6:31:48:f6:19:dd:29:3a:64:3b:9c:5e:79: 67:7e:23:56:f8:3e:4c:af:27:29:fa:b1:cd:af:6a:89:b5:58: 96:ce:82:a0:c6:12:50:0a:e1:d3:fd:50:ae:cb:48:c2:1c:b2: fe:c9:7b:48:18:53:05:88:20:4c:b6:60:41:5a:6e:2e:07:60: 48:b6:c0:e9:a4:35:f3:0e:fb:1b:ee:5c:c2:a0:16:69:c7:56: 70:ca:b9:c1:3b:c3:30:c5:3b:c3:80:85:1c:ec:1f:74:92:7d: 9c:b5:87:5c:eb:d6:47:a7:7a:9f:93:61:fd:8d:4a:24:7f:a1: c7:23:e3:b9:58:89:bb:45:f5:e8:c7:52:61:64:4c:0a:86:d2: e3:df:ec:99:0f:f6:ee:c9:c7:dc:dc:de:07:b0:23:a3:11:a7: 15:a2:fc:8b:7e:cc:68:a2:85:27:c5:89:29:b9:d6:ed:e5:e1: 07:07:27:9e:ca:cd:b0:42:7a:cc:f6:91:e7:8f:02:af:d3:9b: be:ed:48:50:04:70:55:6f:13:2b:50:19:62:47:f4:73:18:33: a0:d6:e9:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUwNzIyMTYyMjI5WhcNMjUwNzI5MTYyMjI5WjAYMRYwFAYD VQQDEw02ODdmYmFjNi0yYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IJ4HB2X+ZO4qKRbM7L1q3iFuFu1AdLYUwSGwY1kZjX/hgdeULkejrefpvPD d00gW5D+cmrHm0fm5GuwncD2MEnspkl+Hf1qdxqExGRYwLGuugcItH5miz3FVUXV kGTaD53yZJLfjZ08rV5BGuG/7HCrIq8beaxexPWZsxQMB2UEGIBFXz/bCteTwFnw qpzoG1YgXwUZcI9b015kR1nzV3PCWqtgKOPr5r1K2RkUjNNd3InzrR2fyYQJXRws GYaO2Y4OWumSFcJ1zOwAFdOL/jl0tVKYg2Tp4iv3LnptCQ/km9CnUuoL3bhKJytJ 87yl9y3XumSnPv+MjHJwfSs5awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwSuqFP Owi5aflPtkiIoqoOtpEwMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEB6AZH7S0lwAcjKInxx9i04QOZtgmIERiAaY8lCsIGQhcUnxyN2B9 ssYxSPYZ3Sk6ZDucXnlnfiNW+D5Mrycp+rHNr2qJtViWzoKgxhJQCuHT/VCuy0jC HLL+yXtIGFMFiCBMtmBBWm4uB2BItsDppDXzDvsb7lzCoBZpx1ZwyrnBO8MwxTvD gIUc7B90kn2ctYdc69ZHp3qfk2H9jUokf6HHI+O5WIm7RfXox1JhZEwKhtLj3+yZ D/buycfc3N4HsCOjEacVovyLfsxoooUnxYkpudbt5eEHByeeys2wQnrM9pHnjwKv 05u+7UhQBHBVbxMrUBliR/RzGDOg1umz -----END CERTIFICATE-----Generated at Thu Jul 24 12:15:12 2025 by rpki-client