$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: wwvPTagH3Pzc1V/5hiJcQ+47Hy10UNx/NOJStqSJjkc= Subject key identifier: 1B:63:F1:99:A2:4A:45:29:8C:17:4C:6D:95:94:C4:0B:81:24:52:16 Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 34BB Signing time: Fri 18 Jul 2025 15:03:12 +0000 Manifest this update: Fri 18 Jul 2025 15:03:12 +0000 Manifest next update: Fri 25 Jul 2025 15:03:12 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: HwOUyqu7S7ZG09h2dHC4+4DZ8LH2meuEluLyCauFqx8=) 2: 450B9058E3B511EF8A23824BC4F9AE02.roa (hash: wj/1Mo7HUdvLQn991ZBW+Mw/nWFqliNn0q6RaB+vnjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Jul 18 15:03:12 2025 GMT Not After : Jul 25 15:03:12 2025 GMT Subject: CN=687a6230-9f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:3a:03:65:98:74:e7:90:88:db:0f:17:cf: 9a:a4:ff:26:8a:68:78:b6:ea:4b:20:36:87:60:07: b5:81:ea:22:69:60:7a:98:ac:0b:89:b3:31:2d:b6: f8:60:83:18:3a:68:12:91:9a:ca:3d:bb:bd:89:66: 92:07:44:91:9d:14:6e:1f:ea:76:6c:59:05:fd:f9: d2:8e:56:3b:d4:a3:c8:d6:d6:18:bd:f2:83:c3:7f: be:ff:a2:0b:94:f2:ab:68:0e:85:b1:75:18:40:ee: 4c:07:64:74:39:da:ed:cf:11:79:61:0f:fd:b0:59: 20:99:48:9c:8f:2e:e4:ff:12:b4:6f:88:ac:b3:e3: 3d:e8:2a:28:58:55:02:1f:20:fd:9c:c9:c9:d2:61: df:dc:74:94:d6:e8:b2:05:5b:cd:10:30:54:e4:00: 67:7d:35:9a:e1:e0:c2:28:d9:61:8e:a8:f4:47:6b: 4e:71:1c:40:09:cb:c4:54:06:31:d3:dc:97:f6:b8: ee:50:2d:22:be:c6:ac:5e:ee:e8:65:2b:2c:be:ab: b0:93:1d:88:54:b0:b3:d3:d1:1b:e7:a5:7a:4d:f5: 2c:1d:2c:cf:29:e2:c7:13:41:b5:99:97:a9:25:fa: 4f:7d:7a:d4:b0:8b:6c:09:f3:64:3e:c2:a1:4a:ff: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:63:F1:99:A2:4A:45:29:8C:17:4C:6D:95:94:C4:0B:81:24:52:16 X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:d3:ce:05:f6:55:69:39:8d:59:b0:55:d4:39:e9:c6:bc: ca:1e:cf:80:35:06:22:05:f4:4e:fa:4c:85:3b:2f:9e:a2:6a: 1b:8d:68:7e:81:a1:28:f8:8d:69:5c:f9:83:6b:3a:78:f3:2e: 59:ad:c4:c9:0b:d8:65:7f:9e:20:ae:b7:3c:05:d2:9f:4f:96: 18:c4:1a:f4:ab:7d:b9:8d:a3:05:83:c0:11:10:79:6a:1a:d7: 65:43:05:99:39:98:a9:23:ac:60:0a:06:8f:c7:8e:4c:36:d3: ce:0f:78:fd:89:db:87:3e:57:da:52:26:98:c7:25:ef:39:fa: bd:8d:bc:fc:05:e2:19:c8:35:0b:2b:f9:26:f5:d6:83:f7:78: ec:c8:c5:b0:4c:65:67:b2:c9:8d:82:b3:72:cf:56:d4:c4:57: 26:13:98:67:88:95:28:a8:f2:fb:3e:13:61:aa:7c:e4:33:a3: a2:0f:2b:ca:a2:b5:9f:40:04:26:a9:b3:7f:12:28:f6:01:d5: fd:d8:64:9e:2e:0b:b6:7c:81:4d:75:69:c9:7c:dd:fe:f4:f2: ac:04:9d:8f:b6:7d:2c:76:de:b9:4f:0a:2f:4f:46:6d:ba:f6: 08:ca:ee:5e:4f:c7:bb:22:3c:5d:f9:b8:4f:bc:44:75:4b:d9: da:13:09:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUwNzE4MTUwMzEyWhcNMjUwNzI1MTUwMzEyWjAYMRYwFAYD VQQDEw02ODdhNjIzMC05ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUA6A2WYdOeQiNsPF8+apP8mimh4tupLIDaHYAe1geoiaWB6mKwLibMxLbb4 YIMYOmgSkZrKPbu9iWaSB0SRnRRuH+p2bFkF/fnSjlY71KPI1tYYvfKDw3++/6IL lPKraA6FsXUYQO5MB2R0OdrtzxF5YQ/9sFkgmUicjy7k/xK0b4iss+M96CooWFUC HyD9nMnJ0mHf3HSU1uiyBVvNEDBU5ABnfTWa4eDCKNlhjqj0R2tOcRxACcvEVAYx 09yX9rjuUC0ivsasXu7oZSssvquwkx2IVLCz09Eb56V6TfUsHSzPKeLHE0G1mZep JfpPfXrUsItsCfNkPsKhSv+/MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtj8Zmi SkUpjBdMbZWUxAuBJFIWMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPPtPOBfZVaTmNWbBV1DnpxrzKHs+ANQYiBfRO+kyFOy+eomobjWh+ gaEo+I1pXPmDazp48y5ZrcTJC9hlf54grrc8BdKfT5YYxBr0q325jaMFg8AREHlq GtdlQwWZOZipI6xgCgaPx45MNtPOD3j9iduHPlfaUiaYxyXvOfq9jbz8BeIZyDUL K/km9daD93jsyMWwTGVnssmNgrNyz1bUxFcmE5hniJUoqPL7PhNhqnzkM6OiDyvK orWfQAQmqbN/Eij2AdX92GSeLgu2fIFNdWnJfN3+9PKsBJ2Ptn0sdt65TwovT0Zt uvYIyu5eT8e7Ijxd+bhPvER1S9naEwkJ -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:04 2025 by rpki-client