$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: iQTsSE/WoooX6iz9BzXvw3neCtag3tkBoCfusH0pM+A= Subject key identifier: 7E:0A:C4:92:B5:01:E0:AE:D1:D2:66:A3:F3:3F:4C:BA:10:77:4E:2D Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0125 Signing time: Mon 21 Jul 2025 04:45:24 +0000 Manifest this update: Mon 21 Jul 2025 04:45:24 +0000 Manifest next update: Mon 28 Jul 2025 04:45:24 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: Xd6bRlpfIZI2d1u+oQYnRi+5iP9DQ8sd2DUaFdKKEMw=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Jul 21 04:45:24 2025 GMT Not After : Jul 28 04:45:24 2025 GMT Subject: CN=687dc5e4-e6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:43:95:67:05:13:96:86:06:c6:d0:c2:b3: 1c:6b:16:ba:34:24:b5:b0:a5:31:93:dd:02:91:df: 37:82:46:8e:61:e6:29:ca:09:38:92:51:49:f0:3f: 37:88:1d:85:bd:d2:24:9b:3c:82:64:6a:8c:75:f7: 50:69:7a:e2:fa:b5:00:9a:8e:a2:81:00:09:f5:cb: 5e:20:ec:31:8d:19:ad:82:a7:7e:37:be:25:7f:9d: 5b:39:ff:8e:c4:df:ca:be:57:39:32:1f:b8:de:8f: 13:21:e1:95:d3:2a:ec:c4:3a:00:df:5b:7a:1a:98: 23:29:12:26:ae:dc:c0:01:99:ff:85:9a:38:05:d1: 1e:60:da:1c:e0:d6:05:1b:14:49:d7:be:61:0e:63: af:bd:fb:8a:72:a2:82:47:07:de:b4:ab:b4:cc:2c: c1:a8:53:21:aa:27:a9:1a:12:15:df:bd:e3:96:d7: f8:03:52:9e:4e:42:30:ab:21:4d:b4:d5:42:0a:9c: 5a:c4:7d:6d:e8:b9:70:b8:1a:a7:01:4d:53:ef:f8: 52:87:c8:6e:a9:08:6c:24:71:8a:be:86:21:aa:9b: 04:4e:0b:51:96:ad:bb:f1:02:e6:41:f2:83:6d:2c: 12:55:57:d2:e8:6f:b1:43:83:4c:3a:15:49:da:dc: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:C4:92:B5:01:E0:AE:D1:D2:66:A3:F3:3F:4C:BA:10:77:4E:2D X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1a:45:71:40:eb:07:26:b2:10:5b:ea:dc:94:44:11:1e:c4: da:5e:53:ad:82:5d:37:dc:de:c5:f4:4f:59:10:17:21:2c:ba: a0:39:81:6d:7d:92:31:4a:e0:8a:16:cf:c7:4c:65:ce:dc:87: 46:74:a3:1c:6a:31:04:7b:bc:91:36:da:d8:43:32:0f:ab:91: 19:5b:d0:fc:a0:98:cb:85:f8:52:77:a2:da:55:15:d2:10:23: 7d:ff:38:93:6e:85:0b:c8:65:0a:6c:bf:1f:30:8d:76:f9:8e: cc:7a:66:60:14:c6:1a:bd:3e:6f:ae:2b:94:89:97:9c:5f:8b: ea:39:f9:3b:34:f6:80:61:05:6d:8c:98:63:08:19:7a:14:98: e3:24:8d:a2:86:fb:69:a9:f0:1f:cb:5f:b4:90:24:ce:73:f5: cb:be:91:b2:82:b2:ac:d6:e5:cf:63:fd:c2:50:6d:08:98:6a: 47:10:9a:59:59:92:ec:6f:83:b6:16:77:21:80:01:66:e9:f5: c4:59:df:6c:21:e7:7c:79:78:c4:fc:bd:ce:c8:4e:95:63:b9: ec:62:74:82:02:a6:7d:4c:3f:ea:45:89:0e:2b:1f:e4:e1:31: 72:5d:76:59:86:11:1e:d5:9b:b6:c5:b7:15:c2:5a:e2:1d:0b: e6:e9:da:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwNzIxMDQ0NTI0WhcNMjUwNzI4MDQ0NTI0WjAYMRYwFAYD VQQDEw02ODdkYzVlNC1lNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHhDlWcFE5aGBsbQwrMcaxa6NCS1sKUxk90Ckd83gkaOYeYpygk4klFJ8D83 iB2FvdIkmzyCZGqMdfdQaXri+rUAmo6igQAJ9cteIOwxjRmtgqd+N74lf51bOf+O xN/Kvlc5Mh+43o8TIeGV0yrsxDoA31t6GpgjKRImrtzAAZn/hZo4BdEeYNoc4NYF GxRJ175hDmOvvfuKcqKCRwfetKu0zCzBqFMhqiepGhIV373jltf4A1KeTkIwqyFN tNVCCpxaxH1t6LlwuBqnAU1T7/hSh8huqQhsJHGKvoYhqpsETgtRlq278QLmQfKD bSwSVVfS6G+xQ4NMOhVJ2tyRiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4KxJK1 AeCu0dJmo/M/TLoQd04tMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMGkVxQOsHJrIQW+rclEQRHsTaXlOtgl033N7F9E9ZEBchLLqgOYFt fZIxSuCKFs/HTGXO3IdGdKMcajEEe7yRNtrYQzIPq5EZW9D8oJjLhfhSd6LaVRXS ECN9/ziTboULyGUKbL8fMI12+Y7MemZgFMYavT5vriuUiZecX4vqOfk7NPaAYQVt jJhjCBl6FJjjJI2ihvtpqfAfy1+0kCTOc/XLvpGygrKs1uXPY/3CUG0ImGpHEJpZ WZLsb4O2FnchgAFm6fXEWd9sIed8eXjE/L3OyE6VY7nsYnSCAqZ9TD/qRYkOKx/k 4TFyXXZZhhEe1Zu2xbcVwlriHQvm6dq/ -----END CERTIFICATE-----Generated at Mon Jul 21 07:15:04 2025 by rpki-client