$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: ca7Wxhbn1bHvuo7uGQkb+aSPG9qHBpF7/0Zo6wsnvRs= Subject key identifier: 68:44:2C:F8:1E:41:FC:B7:41:97:A6:4E:69:29:FF:F6:2B:87:77:8B Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E64 Signing time: Fri 18 Jul 2025 17:53:02 +0000 Manifest this update: Fri 18 Jul 2025 17:53:01 +0000 Manifest next update: Fri 25 Jul 2025 17:53:01 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 7KAz5dJFS7kJuqe2OhEgMXp8F4utpzvd675AJbY/EtY=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3692 (0xe6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Jul 18 17:53:01 2025 GMT Not After : Jul 25 17:53:01 2025 GMT Subject: CN=687a89fe-6aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:ef:eb:dc:56:d3:6e:40:b2:f2:82:33:99: c3:48:4f:2e:59:6c:0c:c7:96:81:44:a8:14:c4:54: 42:fa:72:95:30:5c:8c:d2:42:49:c2:74:6e:67:6e: 00:21:0c:ce:91:17:55:4c:86:44:d1:3d:58:7b:e9: ad:87:ae:c3:a2:0e:84:f8:b7:b9:d9:df:59:30:f0: 40:96:a0:15:6e:4a:74:1f:11:f9:b7:54:70:41:89: 10:2e:b0:e2:40:06:00:5c:a7:13:95:11:6c:07:d5: a6:7e:46:46:95:4d:eb:79:f7:c6:c7:b1:81:ff:88: 10:eb:23:d4:74:c2:f8:77:a4:59:cb:73:18:e7:62: 81:51:37:7d:f7:b2:96:7b:37:fe:57:dc:8a:bb:fd: 1b:87:f5:f5:6d:b1:3d:84:85:98:02:25:4c:1d:4a: 54:79:52:88:93:49:22:22:77:96:a3:b4:19:d2:61: 19:bd:d9:ab:e0:b0:ed:89:14:c1:35:eb:0c:a5:ce: 46:bd:dc:c6:57:4c:17:eb:10:a4:6f:1b:90:fe:e6: 11:1b:3e:e8:0b:34:06:cd:ed:a9:4c:73:10:a0:d6: ca:cd:9b:67:8d:d9:c9:ca:ab:8f:8f:46:b6:8f:3a: 5e:8c:0e:24:a9:09:16:e2:9c:c2:6c:c7:92:c0:d3: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:44:2C:F8:1E:41:FC:B7:41:97:A6:4E:69:29:FF:F6:2B:87:77:8B X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c4:e4:82:80:d2:c1:cb:cd:9b:ec:51:f9:af:2a:cb:57:69: 37:30:c7:80:2b:a5:72:40:72:2b:52:9b:99:3b:9c:ca:2e:41: 38:01:81:7f:96:81:61:78:84:b4:73:79:4b:11:93:71:a3:91: 2d:5c:04:0b:69:f5:97:56:c7:01:66:00:84:fe:fa:06:b1:cf: 14:7e:47:fb:7e:05:7a:0b:ea:2d:7f:49:bd:e0:5d:e8:fa:e6: f1:4d:0f:b3:70:ce:b6:f7:20:49:0b:c0:3d:53:03:6f:b0:9d: 49:02:ac:52:a0:4a:98:e1:d5:ed:3c:e6:a7:c0:f2:d1:70:45: a7:49:97:f2:b6:71:e0:08:fd:fb:74:30:d5:1f:40:32:ec:a7: 34:d9:7c:e1:89:04:03:39:42:77:51:d4:47:05:a7:bc:91:28: 2c:a9:06:66:be:bb:ec:cf:83:4b:25:26:da:47:5f:c2:73:eb: 07:ab:49:cd:8a:c6:50:53:50:eb:4d:5f:e3:31:53:e5:c5:0f: cd:8d:11:42:da:11:e2:e4:ae:dd:8b:ce:e9:07:b0:3a:0a:7a: ad:0f:16:29:1b:b9:2d:82:10:91:3a:09:e8:7a:63:45:e7:fe: bb:47:f7:18:e7:f2:ef:b1:e8:51:f0:01:52:93:7f:f8:da:18: b8:5c:e7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwNzE4MTc1MzAxWhcNMjUwNzI1MTc1MzAxWjAYMRYwFAYD VQQDEw02ODdhODlmZS02YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHzv69xW025AsvKCM5nDSE8uWWwMx5aBRKgUxFRC+nKVMFyM0kJJwnRuZ24A IQzOkRdVTIZE0T1Ye+mth67Dog6E+Le52d9ZMPBAlqAVbkp0HxH5t1RwQYkQLrDi QAYAXKcTlRFsB9WmfkZGlU3reffGx7GB/4gQ6yPUdML4d6RZy3MY52KBUTd997KW ezf+V9yKu/0bh/X1bbE9hIWYAiVMHUpUeVKIk0kiIneWo7QZ0mEZvdmr4LDtiRTB NesMpc5GvdzGV0wX6xCkbxuQ/uYRGz7oCzQGze2pTHMQoNbKzZtnjdnJyquPj0a2 jzpejA4kqQkW4pzCbMeSwNPzrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhELPge Qfy3QZemTmkp//Yrh3eLMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/xOSCgNLBy82b7FH5ryrLV2k3MMeAK6VyQHIrUpuZO5zKLkE4AYF/ loFheIS0c3lLEZNxo5EtXAQLafWXVscBZgCE/voGsc8Ufkf7fgV6C+otf0m94F3o +ubxTQ+zcM629yBJC8A9UwNvsJ1JAqxSoEqY4dXtPOanwPLRcEWnSZfytnHgCP37 dDDVH0Ay7Kc02XzhiQQDOUJ3UdRHBae8kSgsqQZmvrvsz4NLJSbaR1/Cc+sHq0nN isZQU1DrTV/jMVPlxQ/NjRFC2hHi5K7di87pB7A6CnqtDxYpG7ktghCROgnoemNF 5/67R/cY5/LvsehR8AFSk3/42hi4XOdp -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:42 2025 by rpki-client