$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: gy6rwyRBgFmn4lgcVrtgtDxs0xkl1tRZJuzipfRTAv4= Subject key identifier: 29:16:D2:03:23:3F:05:DC:66:68:41:24:B5:E8:D0:46:F2:DC:15:9C Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: E3 Signing time: Mon 21 Jul 2025 05:39:43 +0000 Manifest this update: Mon 21 Jul 2025 05:39:42 +0000 Manifest next update: Mon 28 Jul 2025 05:39:42 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: IDLXOPdn+U4hYbchUu6l+AMT/e4sWXXzFEe0925s1LU=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Jul 21 05:39:42 2025 GMT Not After : Jul 28 05:39:42 2025 GMT Subject: CN=687dd29f-e1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:6a:5e:36:b6:39:ce:ae:87:e9:61:5f:f4: 04:ed:67:7e:25:1b:6c:d9:51:d0:20:53:c2:81:52: 0c:37:f3:4d:d0:01:ae:1a:07:b1:28:e2:88:f4:c0: 6a:fe:10:03:1d:37:0a:a5:c9:fb:43:43:ba:85:bc: e1:30:c5:67:93:6e:21:c7:6e:c9:d7:a9:22:fd:02: 7d:8d:26:e7:75:c5:0f:47:51:29:04:6c:13:ba:e3: 75:2e:6e:59:70:66:9c:85:6f:a4:82:7b:62:2c:11: 20:10:d5:d8:f4:00:8e:9b:b5:d8:a4:02:51:83:79: 0f:45:f2:58:e3:46:ba:6e:2f:e4:3d:f3:26:89:17: bd:d5:b7:c5:7d:e2:91:3f:eb:7d:b4:4d:4b:69:40: 2c:72:b4:d5:53:b8:59:07:32:88:81:01:7a:83:42: 63:ad:53:92:fc:6e:48:59:d8:49:6d:a3:e8:27:c2: 43:83:fe:83:7b:ab:03:c2:46:89:67:02:a3:72:ab: 56:7a:f2:76:a2:34:22:5c:6b:b7:11:81:be:5f:72: 23:24:33:f4:51:47:b9:4c:a8:81:7e:5e:0a:61:5a: 0b:92:10:47:69:50:e7:50:61:35:12:bc:e0:0e:da: a3:74:fe:5f:3c:19:78:c1:60:0d:07:30:0e:a0:26: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:16:D2:03:23:3F:05:DC:66:68:41:24:B5:E8:D0:46:F2:DC:15:9C X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fa:66:89:3f:26:53:7a:d4:fc:69:de:06:c5:cb:71:23:f7: 85:c4:0a:3f:c4:d3:8d:b9:e6:e8:69:11:75:25:a0:44:cb:36: 2e:0e:f3:90:b5:4d:fc:98:fa:9d:21:bc:84:dc:c8:f4:f2:18: f2:a3:e4:4e:22:60:e1:d0:aa:3f:ca:37:41:00:4e:31:fa:31: 72:de:af:82:fd:8f:7d:e8:55:66:9f:fd:71:f8:94:46:56:94: 12:86:c1:b4:08:c5:cb:24:01:64:98:d5:0e:ed:30:2c:88:00: 0d:ff:25:d3:a8:c5:5f:77:74:39:2d:9c:8b:71:e9:1e:87:ac: ad:40:7a:f7:cf:e5:43:4c:db:aa:12:cc:eb:21:9e:9e:a8:7e: b3:4f:c6:63:3a:1c:5e:8b:a6:8a:61:95:b3:64:71:f5:66:fa: 54:73:b9:e7:0e:43:f1:10:6f:c8:7e:13:f7:9d:22:57:1a:1b: 3b:5a:64:31:05:1d:f3:05:be:c0:46:0b:c9:e5:be:b4:ff:f1: ca:61:1c:1c:da:97:fd:e2:4b:01:1f:30:13:b1:82:d7:ae:08: 16:dc:c7:25:a9:36:d7:d8:9b:78:77:7d:59:e9:f1:f7:90:ac: fe:80:26:53:b7:de:a5:85:7e:84:2b:25:ed:0f:76:2a:e5:12: cf:d0:65:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUwNzIxMDUzOTQyWhcNMjUwNzI4MDUzOTQyWjAYMRYwFAYD VQQDEw02ODdkZDI5Zi1lMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVNqXja2Oc6uh+lhX/QE7Wd+JRts2VHQIFPCgVIMN/NN0AGuGgexKOKI9MBq /hADHTcKpcn7Q0O6hbzhMMVnk24hx27J16ki/QJ9jSbndcUPR1EpBGwTuuN1Lm5Z cGachW+kgntiLBEgENXY9ACOm7XYpAJRg3kPRfJY40a6bi/kPfMmiRe91bfFfeKR P+t9tE1LaUAscrTVU7hZBzKIgQF6g0JjrVOS/G5IWdhJbaPoJ8JDg/6De6sDwkaJ ZwKjcqtWevJ2ojQiXGu3EYG+X3IjJDP0UUe5TKiBfl4KYVoLkhBHaVDnUGE1Erzg DtqjdP5fPBl4wWANBzAOoCboPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkW0gMj PwXcZmhBJLXo0Eby3BWcMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv+maJPyZTetT8ad4GxctxI/eFxAo/xNONueboaRF1JaBEyzYuDvOQ tU38mPqdIbyE3Mj08hjyo+ROImDh0Ko/yjdBAE4x+jFy3q+C/Y996FVmn/1x+JRG VpQShsG0CMXLJAFkmNUO7TAsiAAN/yXTqMVfd3Q5LZyLcekeh6ytQHr3z+VDTNuq EszrIZ6eqH6zT8ZjOhxei6aKYZWzZHH1ZvpUc7nnDkPxEG/IfhP3nSJXGhs7WmQx BR3zBb7ARgvJ5b60//HKYRwc2pf94ksBHzATsYLXrggW3MclqTbX2Jt4d31Z6fH3 kKz+gCZTt96lhX6EKyXtD3Yq5RLP0GWA -----END CERTIFICATE-----Generated at Mon Jul 21 13:42:24 2025 by rpki-client