$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: zBg76UzUgWKjviCFCkE1IOBkeVMEP9WyjhzwtTLcSzg= Subject key identifier: F5:90:6B:48:89:90:7D:ED:10:93:0D:02:EF:CA:57:A2:E8:6F:93:B4 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 082A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 081D Signing time: Sun 20 Jul 2025 20:58:16 +0000 Manifest this update: Sun 20 Jul 2025 20:58:16 +0000 Manifest next update: Sun 27 Jul 2025 20:58:16 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: pRNrII1akxNJKefOVpFkPKy+1vfDTzm3mCLZ9nk5fSw=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Jul 20 20:58:16 2025 GMT Not After : Jul 27 20:58:16 2025 GMT Subject: CN=687d5868-3ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:28:97:90:23:37:fc:f5:3c:f9:9d:42:ed: b5:73:02:9b:b2:75:61:6e:ff:9b:a4:c4:a1:f9:a8: ee:37:57:4c:3a:30:b0:1d:d4:2b:9a:c6:7d:36:2e: f7:d4:6d:0d:03:78:ac:4d:dc:33:e7:b7:c0:6a:32: 11:fc:22:db:5b:4e:18:3f:54:d6:7f:1b:fe:8f:5b: 7e:d6:69:aa:3f:00:ca:34:05:03:8c:3f:cb:27:b3: 2a:97:26:50:b5:2c:72:9b:83:7f:71:94:10:58:fe: 89:c4:2a:a0:e6:b5:a0:f0:99:03:2a:63:54:c2:40: 1f:c6:70:60:92:c0:8b:a7:e2:c6:ee:c0:1f:b8:46: 34:cc:2a:76:a8:a6:09:95:6d:47:88:1c:ac:86:a4: 1f:17:40:91:44:c7:b7:86:9c:b7:2b:b7:82:5e:9a: 6a:1b:ea:ee:39:59:83:38:7f:89:a8:97:f0:02:05: d7:70:28:4a:e4:cd:15:12:a1:59:34:a2:65:15:da: 80:75:7f:0d:f2:51:1f:f6:cc:c4:29:9c:b7:f8:38: d5:dd:db:df:37:d9:be:00:da:a2:15:47:80:69:99: 73:53:1e:ec:03:81:76:59:93:ef:86:07:bc:c4:55: c5:af:bd:82:07:23:70:49:8b:5c:7b:6d:60:c8:ad: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:90:6B:48:89:90:7D:ED:10:93:0D:02:EF:CA:57:A2:E8:6F:93:B4 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:64:a2:29:89:2c:92:5f:ec:48:76:ab:83:25:ce:fd:be:28: eb:f2:ee:14:67:89:a0:7c:d8:28:bd:1c:9f:ca:b1:ae:08:05: e1:8a:82:dd:e7:40:dc:8d:8c:73:cd:99:35:1b:f3:7e:56:53: 7c:9b:f8:13:5d:dc:06:30:3b:d8:99:09:a5:ca:0a:4e:8c:b7: aa:9b:7a:01:9a:d2:91:a4:41:13:bb:48:5d:81:60:f3:a9:f2: bc:eb:73:6c:69:24:68:28:da:65:6d:11:4c:95:db:90:33:aa: d2:24:89:39:9d:45:0f:57:2b:02:4e:61:55:f2:7f:3f:71:78: 42:96:65:6d:1e:5d:4e:1a:27:10:d1:11:6e:44:d2:69:29:c3: d1:a3:a2:76:39:8f:aa:5c:d0:bc:dd:23:bb:67:51:c7:b9:91: 83:db:aa:21:ca:e9:8e:48:b7:83:95:44:05:89:d0:b1:a2:f5: 8a:b3:b7:b5:25:68:c3:3f:2d:ea:52:f1:e2:c3:44:20:5a:c9: f5:f9:88:8e:76:e1:39:f5:db:de:34:57:a0:fe:5c:3f:9c:2c: b7:ef:58:ef:1e:dc:96:44:fb:44:8e:7d:99:a3:5b:55:06:8e: 2b:f4:71:b5:16:7e:ee:5c:46:69:2b:8a:7e:de:7b:21:7a:8f: dd:53:f5:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUwNzIwMjA1ODE2WhcNMjUwNzI3MjA1ODE2WjAYMRYwFAYD VQQDEw02ODdkNTg2OC0zZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYUol5AjN/z1PPmdQu21cwKbsnVhbv+bpMSh+ajuN1dMOjCwHdQrmsZ9Ni73 1G0NA3isTdwz57fAajIR/CLbW04YP1TWfxv+j1t+1mmqPwDKNAUDjD/LJ7MqlyZQ tSxym4N/cZQQWP6JxCqg5rWg8JkDKmNUwkAfxnBgksCLp+LG7sAfuEY0zCp2qKYJ lW1HiByshqQfF0CRRMe3hpy3K7eCXppqG+ruOVmDOH+JqJfwAgXXcChK5M0VEqFZ NKJlFdqAdX8N8lEf9szEKZy3+DjV3dvfN9m+ANqiFUeAaZlzUx7sA4F2WZPvhge8 xFXFr72CByNwSYtce21gyK0m1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWQa0iJ kH3tEJMNAu/KV6Lob5O0MB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtZKIpiSySX+xIdquDJc79vijr8u4UZ4mgfNgovRyfyrGuCAXhioLd 50DcjYxzzZk1G/N+VlN8m/gTXdwGMDvYmQmlygpOjLeqm3oBmtKRpEETu0hdgWDz qfK863NsaSRoKNplbRFMlduQM6rSJIk5nUUPVysCTmFV8n8/cXhClmVtHl1OGicQ 0RFuRNJpKcPRo6J2OY+qXNC83SO7Z1HHuZGD26ohyumOSLeDlUQFidCxovWKs7e1 JWjDPy3qUvHiw0QgWsn1+YiOduE59dveNFeg/lw/nCy371jvHtyWRPtEjn2Zo1tV Bo4r9HG1Fn7uXEZpK4p+3nsheo/dU/Ud -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:26 2025 by rpki-client