$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: 9W4YSp0i1+ezIZlOSxC6X9jd5D459VVhFcELX6ew4iw= Subject key identifier: 99:A2:D0:5A:F0:49:49:37:86:CE:37:03:03:84:66:1C:94:F3:E0:58 Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: AD Signing time: Sat 19 Jul 2025 06:18:18 +0000 Manifest this update: Sat 19 Jul 2025 06:18:18 +0000 Manifest next update: Sat 26 Jul 2025 06:18:18 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: wVLjouU6r4e/mOEdvfToDYk5d676kagVVPhcN0bfhZE=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: MZgkuhZaLuaH742l5Nmqx23G0Q6+kgWllUIicpxtkRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Jul 19 06:18:18 2025 GMT Not After : Jul 26 06:18:18 2025 GMT Subject: CN=687b38aa-c16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7f:d4:c1:ac:6c:17:ee:72:37:34:83:52:58: 88:ca:e0:ba:bf:47:a9:17:dd:51:f1:68:04:67:71: 52:50:9d:02:f0:1a:81:52:b1:dc:6f:91:f5:e6:84: 9c:c5:b8:46:9c:ec:09:2e:b6:b0:ea:c4:80:34:02: ed:c6:83:f7:be:bd:3a:97:02:b0:2e:b1:88:78:33: 68:51:d5:6c:48:98:21:04:aa:b3:4e:23:f4:72:5c: 4e:f5:16:85:90:86:d4:a3:25:30:50:47:2b:cd:d7: df:c7:bc:d8:45:a5:ed:15:3f:b7:c8:bb:a5:0e:c6: 4f:50:2a:47:4e:a3:42:d6:2d:33:ce:58:b5:a5:9f: 93:4f:59:aa:6b:4f:1a:98:e6:88:01:46:78:63:d3: 34:3e:3b:be:55:63:87:65:d9:90:93:59:4d:c3:e2: cb:43:b5:a1:96:ce:5d:d5:7c:cc:1a:a8:b5:6e:19: fc:61:b6:53:a7:0b:0d:ec:ee:99:b1:43:ed:80:d0: a0:69:a9:d6:20:c4:9c:fb:34:93:a8:74:52:fe:f6: 95:8d:15:74:be:4d:02:a0:72:0f:c4:b7:d6:f2:a7: 85:91:fc:4e:2a:e7:72:5d:0c:e5:51:3c:aa:46:73: 12:b3:55:e6:b2:25:f4:94:86:1d:d5:d0:f0:82:67: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:D0:5A:F0:49:49:37:86:CE:37:03:03:84:66:1C:94:F3:E0:58 X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:47:9c:5b:d9:3e:4f:b2:ab:84:3a:1a:d4:14:c7:9f:27:c2: 61:ad:48:3b:8c:3d:9c:1c:99:57:fc:bb:10:e5:a0:64:0c:8f: b1:61:dd:5e:fd:69:40:1b:15:03:ce:6b:cd:59:41:e5:8b:74: 7b:b2:78:ae:9b:62:ce:46:e0:df:00:0a:64:03:41:6c:73:0d: 24:e6:37:e3:16:c3:d1:92:ad:c8:4f:b0:43:97:47:fb:49:00: 16:77:9e:0f:dd:2a:fe:c6:38:e9:ce:f8:b7:65:5d:fb:99:9c: ab:c0:9c:61:65:8b:32:e1:13:a9:7e:c8:ca:b4:07:4e:ea:a9: 1c:63:a2:af:c4:93:b2:3e:0c:a3:f0:e1:ec:bb:94:1a:62:c7: ae:78:91:d9:1b:44:39:d3:14:ed:ab:dd:37:84:18:11:32:2a: ba:18:44:d0:e2:34:d8:9f:50:24:32:1c:e3:be:50:e1:68:48: ba:61:58:7b:49:91:2a:22:84:76:2d:c1:6f:34:06:4b:e6:d3: 4b:10:68:4b:c4:f3:bc:88:1f:04:e8:3e:a5:34:cb:d2:9b:79: 1e:b2:fa:84:a7:db:ed:e5:e5:e9:9a:c0:7b:b3:99:3c:af:35: 86:aa:f4:51:3b:7e:44:68:ac:5a:ef:1f:13:5b:a0:18:54:e0: 6f:74:75:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwNzE5MDYxODE4WhcNMjUwNzI2MDYxODE4WjAYMRYwFAYD VQQDEw02ODdiMzhhYS1jMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9X/UwaxsF+5yNzSDUliIyuC6v0epF91R8WgEZ3FSUJ0C8BqBUrHcb5H15oSc xbhGnOwJLraw6sSANALtxoP3vr06lwKwLrGIeDNoUdVsSJghBKqzTiP0clxO9RaF kIbUoyUwUEcrzdffx7zYRaXtFT+3yLulDsZPUCpHTqNC1i0zzli1pZ+TT1mqa08a mOaIAUZ4Y9M0Pju+VWOHZdmQk1lNw+LLQ7Whls5d1XzMGqi1bhn8YbZTpwsN7O6Z sUPtgNCgaanWIMSc+zSTqHRS/vaVjRV0vk0CoHIPxLfW8qeFkfxOKudyXQzlUTyq RnMSs1XmsiX0lIYd1dDwgmfvSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmi0Frw SUk3hs43AwOEZhyU8+BYMB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHR5xb2T5PsquEOhrUFMefJ8JhrUg7jD2cHJlX/LsQ5aBkDI+xYd1e /WlAGxUDzmvNWUHli3R7snium2LORuDfAApkA0Fscw0k5jfjFsPRkq3IT7BDl0f7 SQAWd54P3Sr+xjjpzvi3ZV37mZyrwJxhZYsy4ROpfsjKtAdO6qkcY6KvxJOyPgyj 8OHsu5QaYseueJHZG0Q50xTtq903hBgRMiq6GETQ4jTYn1AkMhzjvlDhaEi6YVh7 SZEqIoR2LcFvNAZL5tNLEGhLxPO8iB8E6D6lNMvSm3kesvqEp9vt5eXpmsB7s5k8 rzWGqvRRO35EaKxa7x8TW6AYVOBvdHWZ -----END CERTIFICATE-----Generated at Sun Jul 20 06:13:39 2025 by rpki-client