$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: lyMSAkR6kmM9WRgP0LCCGu4jkVSqfgnD1EEefTSdvsw= Subject key identifier: 8C:59:0F:3E:D5:42:65:12:AC:25:40:BE:38:DE:AA:32:46:AB:A4:C1 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 07C8 Signing time: Fri 18 Jul 2025 21:29:40 +0000 Manifest this update: Fri 18 Jul 2025 21:29:39 +0000 Manifest next update: Fri 25 Jul 2025 21:29:39 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: B9phL6hRDKvWO4JIkkRa3sxjOrS6V1ujgFAzLzNvV8Y=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: OdlMqUDNtGzAyirklP55vsYTOSuUBKJCfr9lvqlqHYg=) 3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: P7lzuIcT4OJPq2KVjR4hbm4014N8PEGkbXpO5IhqpWQ=) 4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: ap536R4mDpEQmVBUvi08sdQ4AGgP2k0XYVc0G1WQzN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Jul 18 21:29:39 2025 GMT Not After : Jul 25 21:29:39 2025 GMT Subject: CN=687abcc4-4877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:cf:20:a2:cf:f7:67:e6:bc:f5:9d:b3:8e: 5e:e1:26:a6:fa:95:56:78:70:a9:76:34:31:41:6c: 2c:ac:f5:63:dd:23:20:29:04:9d:0d:d8:a6:20:ed: ba:c1:d5:ea:6a:d9:f2:bf:6a:c9:76:de:e3:06:eb: 04:a6:87:3d:ae:2f:dd:53:20:a6:e1:da:a1:d7:ba: eb:36:44:2a:08:18:d3:5e:04:63:be:31:2d:5e:94: a9:c5:9b:e4:11:07:4d:df:40:6a:e9:0c:21:7f:c2: 4d:21:fc:72:e4:f8:e1:73:03:e7:46:ec:96:11:69: a2:95:2d:5a:88:58:35:63:b2:4d:38:20:64:e6:b4: f5:34:6a:b0:c5:d9:f2:16:1c:8c:22:1d:81:3a:01: 54:d3:fe:64:1b:d1:6c:19:6c:f4:8f:a5:a1:6f:c7: c0:63:d4:e4:56:9e:25:57:08:ac:30:2f:bb:cd:2a: 1d:df:a6:a8:8f:6c:f9:b3:34:ed:bc:f8:78:84:b8: 18:5e:86:bd:cc:8f:c4:50:f3:a6:0f:47:63:e7:cc: 9d:da:a7:2c:40:09:82:1e:51:68:d9:3f:dd:b7:9b: 30:6a:7b:ee:00:22:fe:e2:ca:89:08:24:4e:d3:65: ea:8c:eb:50:e0:f3:3b:85:08:72:17:76:c4:a5:93: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:59:0F:3E:D5:42:65:12:AC:25:40:BE:38:DE:AA:32:46:AB:A4:C1 X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:07:f7:5e:8a:c1:0f:ad:00:4b:b2:cf:86:3c:d9:0b:2b:05: 02:23:d3:9b:f0:e6:9d:09:d4:40:84:9a:56:f6:3a:44:de:4d: 87:74:47:55:5f:27:20:66:ee:58:7e:2c:ae:c5:da:84:51:cf: 69:da:6e:ab:b4:b6:2c:5f:78:5c:10:dc:0e:3d:1f:c5:b0:5f: 53:66:50:86:f4:6c:5b:d9:d7:30:7d:6a:85:bd:4d:d1:b5:9c: b1:c2:94:ee:bc:0a:e7:91:f6:41:60:84:ee:39:9d:0e:86:75: f1:0e:8a:77:5e:7c:f6:d6:dc:6f:d9:33:c8:d2:54:2e:ee:fa: ff:99:51:91:54:d9:ec:37:76:a4:9d:ef:fc:cf:9f:39:4c:da: 6a:0f:9e:55:7e:dd:a3:ac:27:39:49:8c:ad:de:9a:0e:5f:48: 3b:f4:a6:3b:37:aa:25:95:96:89:92:f7:17:64:ac:83:0a:7e: e1:84:cf:16:41:02:ad:d8:82:b0:ee:8a:9a:34:31:55:e4:23: a9:52:54:f3:a1:ff:98:1f:15:25:a0:50:bb:b3:dc:b6:1a:97: 5d:a6:31:ff:42:eb:d6:59:68:23:c9:37:76:c7:f9:34:c1:c5: 11:02:61:8e:13:c6:4e:ea:cc:af:9c:4a:9c:df:a2:9d:e5:4b: 44:8e:68:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwNzE4MjEyOTM5WhcNMjUwNzI1MjEyOTM5WjAYMRYwFAYD VQQDEw02ODdhYmNjNC00ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PDPIKLP92fmvPWds45e4Sam+pVWeHCpdjQxQWwsrPVj3SMgKQSdDdimIO26 wdXqatnyv2rJdt7jBusEpoc9ri/dUyCm4dqh17rrNkQqCBjTXgRjvjEtXpSpxZvk EQdN30Bq6Qwhf8JNIfxy5PjhcwPnRuyWEWmilS1aiFg1Y7JNOCBk5rT1NGqwxdny FhyMIh2BOgFU0/5kG9FsGWz0j6Whb8fAY9TkVp4lVwisMC+7zSod36aoj2z5szTt vPh4hLgYXoa9zI/EUPOmD0dj58yd2qcsQAmCHlFo2T/dt5swanvuACL+4sqJCCRO 02XqjOtQ4PM7hQhyF3bEpZM2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxZDz7V QmUSrCVAvjjeqjJGq6TBMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqB/deisEPrQBLss+GPNkLKwUCI9Ob8OadCdRAhJpW9jpE3k2HdEdV XycgZu5YfiyuxdqEUc9p2m6rtLYsX3hcENwOPR/FsF9TZlCG9Gxb2dcwfWqFvU3R tZyxwpTuvArnkfZBYITuOZ0OhnXxDop3Xnz21txv2TPI0lQu7vr/mVGRVNnsN3ak ne/8z585TNpqD55Vft2jrCc5SYyt3poOX0g79KY7N6ollZaJkvcXZKyDCn7hhM8W QQKt2IKw7oqaNDFV5COpUlTzof+YHxUloFC7s9y2GpddpjH/QuvWWWgjyTd2x/k0 wcURAmGOE8ZO6syvnEqc36Kd5UtEjmg0 -----END CERTIFICATE-----Generated at Sun Jul 20 12:19:41 2025 by rpki-client