$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: 9tv+ACTRaZBH3tpabVOO84GMkIRY/YwyHhJNPCZmjII= Subject key identifier: 4A:82:66:71:1A:61:92:F1:B7:8E:2F:A9:30:8A:67:6C:72:0B:A5:AD Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 07B1 Signing time: Fri 18 Jul 2025 21:30:34 +0000 Manifest this update: Fri 18 Jul 2025 21:30:33 +0000 Manifest next update: Fri 25 Jul 2025 21:30:33 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: t1gtrqtUOobpD/nC56wo+z5xK17/S0zqUvsCYh7IIBY=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: Jul 18 21:30:33 2025 GMT Not After : Jul 25 21:30:33 2025 GMT Subject: CN=687abcfa-42ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:f5:02:96:fd:90:14:88:6a:16:8c:13:4a: e5:b6:66:89:ce:00:77:36:d3:7d:5c:f3:e0:ed:64: f1:4c:4d:7c:b4:31:d5:16:04:cd:4c:43:53:0d:0c: ae:83:bf:d3:c0:4e:fc:04:7c:0e:3b:b8:50:e3:8e: 7d:0e:27:cc:7a:59:4a:d2:00:be:1d:0d:86:6b:2b: 9e:73:38:83:4b:98:4d:19:b4:96:da:b9:50:52:c3: a9:64:6b:5c:44:72:6e:54:28:29:d4:30:05:f4:e7: 0c:29:f3:4a:8d:55:c8:83:57:de:d4:98:4a:23:ba: 27:be:96:ac:b3:26:4e:bb:cc:3f:de:2c:dc:aa:f1: 88:cd:de:50:1d:a5:79:93:f4:5f:26:9f:ec:c2:56: 88:7e:87:21:ed:5a:00:a8:d7:28:e8:0a:fe:c3:0a: 5b:5c:aa:b4:66:13:ab:48:ab:41:a9:be:20:c3:2a: dc:20:a6:25:2d:de:79:06:48:12:6c:bd:42:a6:2f: 30:b1:e5:42:8c:33:8e:8a:6b:9a:8e:07:a5:61:c2: e9:2c:7a:8f:3e:6c:c4:cc:25:79:28:0e:55:e5:1f: a5:66:2f:d9:b3:31:9e:db:a1:5c:94:e0:76:f8:52: 6f:e4:8c:36:64:56:e8:ae:66:96:12:3b:4c:3c:d6: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:66:71:1A:61:92:F1:B7:8E:2F:A9:30:8A:67:6C:72:0B:A5:AD X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b4:88:01:a4:9b:ac:48:a1:33:a9:a3:5a:6e:e6:46:32:49: a1:50:32:24:be:34:dd:a6:37:70:d5:c7:fa:9a:b7:4d:9f:48: 4b:dd:7e:d3:87:4a:8b:2f:0e:48:4f:13:60:60:71:50:b5:51: e6:99:1f:88:df:e5:f8:5d:2e:a2:a8:7b:7b:af:f2:d6:1f:16: 66:7d:ce:88:60:1e:6a:cd:12:df:03:3b:ce:26:d5:f2:68:f0: d7:74:fe:e1:e6:f0:75:8c:c3:05:2f:85:d6:ba:4d:09:72:83: a1:3c:b2:88:9a:e3:ae:00:66:5c:ae:2f:24:3e:ae:99:a0:4e: 0c:60:9f:27:52:3b:a6:a3:b8:82:1e:78:cd:81:5a:02:6e:b2: 54:60:88:a8:7c:f8:63:44:69:b2:5a:c8:ab:2a:59:30:3c:ae: 54:a0:6a:a3:4c:96:25:7a:2c:33:19:86:9f:56:2d:41:11:e4: a7:5d:a0:4e:7e:5d:f2:88:f9:78:4a:e2:91:4c:c2:87:c6:5d: eb:ae:ad:24:74:a2:08:1b:dc:d1:c0:aa:d1:37:57:87:0e:e5: 8c:55:a5:58:eb:b5:ab:35:d3:81:d4:c7:8c:90:8c:b0:86:f0: ea:27:d8:33:ee:69:28:2b:41:ab:ae:50:c9:f3:98:97:df:e8: 07:7d:a3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjUwNzE4MjEzMDMzWhcNMjUwNzI1MjEzMDMzWjAYMRYwFAYD VQQDEw02ODdhYmNmYS00MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTX1Apb9kBSIahaME0rltmaJzgB3NtN9XPPg7WTxTE18tDHVFgTNTENTDQyu g7/TwE78BHwOO7hQ4459DifMellK0gC+HQ2GayuecziDS5hNGbSW2rlQUsOpZGtc RHJuVCgp1DAF9OcMKfNKjVXIg1fe1JhKI7onvpassyZOu8w/3izcqvGIzd5QHaV5 k/RfJp/swlaIfoch7VoAqNco6Ar+wwpbXKq0ZhOrSKtBqb4gwyrcIKYlLd55BkgS bL1Cpi8wseVCjDOOimuajgelYcLpLHqPPmzEzCV5KA5V5R+lZi/ZszGe26FclOB2 +FJv5Iw2ZFbormaWEjtMPNb+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqCZnEa YZLxt44vqTCKZ2xyC6WtMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6tIgBpJusSKEzqaNabuZGMkmhUDIkvjTdpjdw1cf6mrdNn0hL3X7T h0qLLw5ITxNgYHFQtVHmmR+I3+X4XS6iqHt7r/LWHxZmfc6IYB5qzRLfAzvOJtXy aPDXdP7h5vB1jMMFL4XWuk0JcoOhPLKImuOuAGZcri8kPq6ZoE4MYJ8nUjumo7iC HnjNgVoCbrJUYIiofPhjRGmyWsirKlkwPK5UoGqjTJYleiwzGYafVi1BEeSnXaBO fl3yiPl4SuKRTMKHxl3rrq0kdKIIG9zRwKrRN1eHDuWMVaVY67WrNdOB1MeMkIyw hvDqJ9gz7mkoK0GrrlDJ85iX3+gHfaMn -----END CERTIFICATE-----Generated at Sun Jul 20 10:34:27 2025 by rpki-client