$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: yWN7LVotmajthhuOX9dmT9gfXotuEo/XYdHCuPr8cx8= Subject key identifier: 2E:B3:01:BE:1D:EA:EA:D8:13:2F:29:7C:B9:92:73:F0:C5:CF:EC:F7 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0539 Signing time: Tue 22 Jul 2025 23:55:29 +0000 Manifest this update: Tue 22 Jul 2025 23:55:28 +0000 Manifest next update: Tue 29 Jul 2025 23:55:28 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: odudtcAzh394hD/Tg4xKci6/NIG50WPWJGi6uj2K7gE=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Jul 22 23:55:28 2025 GMT Not After : Jul 29 23:55:28 2025 GMT Subject: CN=688024f1-0444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:40:ce:af:88:0b:90:3c:a0:bc:93:7d:41: 9d:ff:95:52:7d:80:1f:36:d1:85:7a:4d:98:19:cb: 38:45:aa:24:c3:f5:66:58:23:fe:87:a1:47:07:e3: 96:f6:89:3b:ea:14:de:e0:0b:6b:89:d2:7c:a0:0a: d3:57:ce:d6:ff:f1:a7:68:50:26:92:4d:2c:a2:b6: 84:9d:7c:c4:cf:21:08:50:39:6b:7f:25:44:77:43: 99:04:f9:f2:9c:6a:72:d7:26:11:a9:3f:95:ba:7b: f7:dd:03:49:79:2b:46:44:07:05:9a:90:0d:57:39: 77:56:c1:68:02:89:89:11:70:58:55:8c:c1:a4:fb: 2d:27:74:89:06:e2:2d:10:87:75:56:bc:eb:bc:69: 55:68:61:3c:59:20:77:4c:a1:e1:d0:dd:7e:d5:de: a2:74:ce:ea:07:e7:0b:53:b6:24:1e:51:16:21:9b: 0b:cf:90:f6:84:99:50:10:33:d7:d7:d7:16:52:25: e9:51:30:e8:9b:e4:87:ae:b6:d3:bb:28:d1:2c:42: c3:4a:41:a9:33:1c:f2:4e:8e:8c:92:7c:dd:07:02: 64:0c:d5:09:28:8d:cf:04:6f:fe:94:08:c5:d1:f0: a4:31:a8:d5:38:a5:41:ed:7a:d1:4e:f4:44:09:28: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B3:01:BE:1D:EA:EA:D8:13:2F:29:7C:B9:92:73:F0:C5:CF:EC:F7 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:11:a7:af:1f:09:19:95:00:d8:42:f3:00:cd:e3:bf:7c:52: f6:d9:3d:3d:7d:98:3f:de:f6:ed:8e:87:7c:b2:80:d3:04:ab: 21:ce:c9:87:4e:ee:a2:54:d5:c5:96:57:dc:34:4d:b9:e9:de: 14:99:df:40:8d:2b:42:49:91:46:99:1b:0f:e9:fe:4f:4e:db: 8a:48:33:5c:83:3d:56:4c:7b:4b:56:0a:d3:66:5e:4d:39:da: 87:3d:c0:13:4d:f2:8d:52:a4:18:21:0a:40:5e:9b:f0:4c:ab: e3:b8:f9:27:22:f8:97:34:1f:e3:c0:ea:2b:3c:8f:bd:41:cd: 15:5a:0d:68:91:78:72:a7:b8:44:c6:c6:ce:0b:d6:3a:b7:12: 41:60:f7:be:ca:69:d5:83:de:08:d5:e6:dc:d2:8e:33:2c:ea: b1:06:3c:f5:ec:c8:cb:46:1e:c3:27:2c:91:de:04:92:5f:b4: 3f:33:bf:a5:19:04:07:63:0b:3d:56:1f:22:32:57:03:4d:ba: 34:5e:37:8c:09:ec:f4:ea:19:04:3c:47:de:73:c1:5d:de:b9: f3:8c:2e:7a:0d:57:ae:5a:21:c7:48:23:ea:82:0d:c5:7a:9b: c6:7e:b9:3b:da:cd:1c:b3:5e:79:e7:85:4f:84:28:af:12:c7: 6d:5a:33:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUwNzIyMjM1NTI4WhcNMjUwNzI5MjM1NTI4WjAYMRYwFAYD VQQDEw02ODgwMjRmMS0wNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhBAzq+IC5A8oLyTfUGd/5VSfYAfNtGFek2YGcs4Raokw/VmWCP+h6FHB+OW 9ok76hTe4AtridJ8oArTV87W//GnaFAmkk0soraEnXzEzyEIUDlrfyVEd0OZBPny nGpy1yYRqT+Vunv33QNJeStGRAcFmpANVzl3VsFoAomJEXBYVYzBpPstJ3SJBuIt EId1VrzrvGlVaGE8WSB3TKHh0N1+1d6idM7qB+cLU7YkHlEWIZsLz5D2hJlQEDPX 19cWUiXpUTDom+SHrrbTuyjRLELDSkGpMxzyTo6MknzdBwJkDNUJKI3PBG/+lAjF 0fCkMajVOKVB7XrRTvRECSgRpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6zAb4d 6urYEy8pfLmSc/DFz+z3MB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPEaevHwkZlQDYQvMAzeO/fFL22T09fZg/3vbtjod8soDTBKshzsmH Tu6iVNXFllfcNE256d4Umd9AjStCSZFGmRsP6f5PTtuKSDNcgz1WTHtLVgrTZl5N OdqHPcATTfKNUqQYIQpAXpvwTKvjuPknIviXNB/jwOorPI+9Qc0VWg1okXhyp7hE xsbOC9Y6txJBYPe+ymnVg94I1ebc0o4zLOqxBjz17MjLRh7DJyyR3gSSX7Q/M7+l GQQHYws9Vh8iMlcDTbo0XjeMCez06hkEPEfec8Fd3rnzjC56DVeuWiHHSCPqgg3F epvGfrk72s0cs15554VPhCivEsdtWjNs -----END CERTIFICATE-----Generated at Wed Jul 23 12:45:31 2025 by rpki-client