$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: d60Y8KMBsfd4BCJ7GtGita1Ryj7mgv3RE5YWihxdaF4= Subject key identifier: B5:E9:D5:9C:59:CC:6B:35:28:85:3F:8D:3D:E9:10:F7:75:A2:BB:DC Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0B57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0B42 Signing time: Sun 20 Jul 2025 19:16:02 +0000 Manifest this update: Sun 20 Jul 2025 19:16:01 +0000 Manifest next update: Sun 27 Jul 2025 19:16:01 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: JmVjymBj+MXo3uYWHqjY2fUgeCQWwih8WpLlwoch6FA=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Jul 20 19:16:01 2025 GMT Not After : Jul 27 19:16:01 2025 GMT Subject: CN=687d4071-c98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:58:41:98:b5:f2:82:27:21:eb:7b:6f:ef: c7:89:cf:40:14:0d:18:65:6f:3a:4f:7e:89:08:7f: 4d:42:21:79:34:46:87:10:40:06:35:6c:81:10:c1: 1f:76:ff:9e:67:e3:6e:b5:fd:17:1e:f1:d9:3a:79: 74:cc:46:0a:bc:e3:c1:8f:bc:20:2f:ab:8e:ec:ec: 23:b0:a8:07:a9:c8:2a:00:af:b1:6d:2e:5a:f7:8b: 81:87:9f:3e:66:03:2a:a5:f3:31:73:97:be:1f:82: 29:15:33:5e:53:5c:53:68:05:9b:6c:22:07:70:63: ae:fa:a0:9a:55:b6:7f:12:80:5b:90:46:a3:4a:29: 81:9b:89:df:4b:44:eb:a8:ac:09:65:cb:c4:18:0a: e5:68:97:ae:80:6e:43:97:d5:78:7c:13:97:c0:e2: 8e:e9:2a:23:0e:d9:b4:87:d7:4f:2a:e7:dc:6a:b9: 6b:ec:90:70:25:ed:e1:ae:f8:ef:c9:71:0b:92:46: e2:d8:07:ad:18:b6:7b:f0:e2:c4:1a:31:a6:bc:a2: ce:dd:61:ea:4c:fa:d1:03:31:c9:7e:f1:0a:9d:a6: 7a:0c:75:4a:d6:7f:71:4d:e0:e3:5c:01:bc:53:c5: 4d:79:76:ce:d4:36:86:51:38:54:5f:98:7c:2c:ca: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E9:D5:9C:59:CC:6B:35:28:85:3F:8D:3D:E9:10:F7:75:A2:BB:DC X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:04:44:6f:f3:29:9c:50:49:97:e0:b9:63:2b:61:fe:fa:78: 56:84:10:35:20:7f:28:ad:c4:81:54:b0:86:27:2d:c7:79:f8: 4d:60:12:b4:5d:53:e7:c1:f6:61:09:f5:17:db:4d:0c:d8:cb: a7:a2:2d:9b:3b:bb:ee:38:1d:c2:7d:b8:73:0b:a3:79:7e:75: ad:7e:20:32:14:f2:d4:c2:18:0b:85:96:63:e6:39:8d:69:b4: d4:7e:92:4f:89:85:5d:d9:f8:8c:1e:78:6c:c9:e8:75:a3:28: 14:d2:5e:c9:22:74:ca:4f:65:d1:06:ab:ad:23:30:e8:f2:15: 3e:ae:68:ab:e3:7f:c8:82:41:cc:90:eb:ba:cd:37:c1:3a:7a: 9a:fc:75:12:71:dd:13:1b:0e:af:92:34:9b:43:ac:c4:31:74: 1d:b3:30:2f:58:12:45:bc:38:2f:40:54:ce:1e:1e:e5:08:c1: 67:9f:2d:53:19:63:56:05:ed:69:53:e0:43:b4:a7:f7:2c:5f: dc:bc:86:b6:69:e3:6c:c3:54:35:83:8b:c2:55:bb:02:7c:08: b7:6a:1a:73:47:d5:4e:71:43:07:97:18:ad:d8:83:48:92:84: cf:e7:c0:26:71:21:59:a8:ad:e3:10:bb:19:c5:26:ad:bc:b8: 13:87:26:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjUwNzIwMTkxNjAxWhcNMjUwNzI3MTkxNjAxWjAYMRYwFAYD VQQDEw02ODdkNDA3MS1jOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA351YQZi18oInIet7b+/Hic9AFA0YZW86T36JCH9NQiF5NEaHEEAGNWyBEMEf dv+eZ+Nutf0XHvHZOnl0zEYKvOPBj7wgL6uO7OwjsKgHqcgqAK+xbS5a94uBh58+ ZgMqpfMxc5e+H4IpFTNeU1xTaAWbbCIHcGOu+qCaVbZ/EoBbkEajSimBm4nfS0Tr qKwJZcvEGArlaJeugG5Dl9V4fBOXwOKO6SojDtm0h9dPKufcarlr7JBwJe3hrvjv yXELkkbi2AetGLZ78OLEGjGmvKLO3WHqTPrRAzHJfvEKnaZ6DHVK1n9xTeDjXAG8 U8VNeXbO1DaGUThUX5h8LMqLJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXp1ZxZ zGs1KIU/jT3pEPd1orvcMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaBERv8ymcUEmX4LljK2H++nhWhBA1IH8orcSBVLCGJy3HefhNYBK0 XVPnwfZhCfUX200M2Munoi2bO7vuOB3CfbhzC6N5fnWtfiAyFPLUwhgLhZZj5jmN abTUfpJPiYVd2fiMHnhsyeh1oygU0l7JInTKT2XRBqutIzDo8hU+rmir43/IgkHM kOu6zTfBOnqa/HUScd0TGw6vkjSbQ6zEMXQdszAvWBJFvDgvQFTOHh7lCMFnny1T GWNWBe1pU+BDtKf3LF/cvIa2aeNsw1Q1g4vCVbsCfAi3ahpzR9VOcUMHlxit2INI koTP58AmcSFZqK3jELsZxSatvLgThyZy -----END CERTIFICATE-----Generated at Mon Jul 21 07:02:20 2025 by rpki-client