$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: 82NUZlD4W730vq4w30sorT6R7lv+Wd4c9AtX1AxpJB4= Subject key identifier: F1:39:BA:58:EF:AD:F7:AE:A0:35:70:8D:3E:6D:12:03:5B:D0:A0:CF Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 11E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 11D9 Signing time: Tue 22 Jul 2025 17:19:47 +0000 Manifest this update: Tue 22 Jul 2025 17:19:47 +0000 Manifest next update: Tue 29 Jul 2025 17:19:47 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: owfzDPxy5ntw2ywIvflFokgbaJdS8DpbvpcQQhap80A=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4583 (0x11e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Jul 22 17:19:47 2025 GMT Not After : Jul 29 17:19:47 2025 GMT Subject: CN=687fc833-af5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:a8:1f:9e:1b:ab:85:aa:d2:e0:c0:03:ef: bb:39:2b:02:fb:13:65:f8:fc:e3:60:9d:d1:73:8f: f4:c4:fb:04:78:d2:af:9c:e0:95:18:4c:9c:19:9b: 75:a3:39:7d:6e:60:7e:41:b7:29:40:32:b1:9d:48: 60:16:cc:df:45:fa:70:e9:6e:e3:cc:60:87:75:7b: 90:20:86:ec:74:a6:ab:af:52:93:d8:4a:dd:e8:a0: 17:fd:ea:91:c7:75:1d:25:27:78:a2:42:23:e9:c5: ae:e6:7a:09:6e:ba:c9:c2:2a:b8:0b:1d:05:85:83: e4:75:bf:7a:fa:82:51:3c:01:b0:de:53:42:89:b3: c2:85:7b:dd:2c:cd:3a:4d:c9:ae:8c:81:b1:c4:48: b8:1e:4e:a7:55:d2:e9:fe:45:32:1d:dc:dc:b3:98: 68:c9:35:5a:c5:37:44:b4:2b:98:62:8d:4d:83:ad: ad:ea:6b:3a:8d:16:3c:74:58:69:e0:19:77:e8:eb: 40:3d:86:52:db:74:f5:e6:15:ae:5d:d7:b4:2a:24: 24:b1:42:f3:48:ee:77:e7:62:4d:71:bf:c2:c2:4d: f9:a8:f1:bc:8c:f9:49:f4:b2:15:82:16:31:d2:e2: a6:45:73:eb:4d:8a:3a:84:d3:b1:6a:7d:0e:7f:1d: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:BA:58:EF:AD:F7:AE:A0:35:70:8D:3E:6D:12:03:5B:D0:A0:CF X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:81:21:50:e6:e7:57:70:37:d3:3d:2c:ff:da:dd:1a:7d:39: d9:8f:79:b7:01:07:24:26:f2:d3:a6:bf:93:0c:3e:e1:f4:b6: 03:5b:4f:bd:84:a5:c9:b5:17:7d:a0:a1:62:86:b9:fb:0d:cb: bd:70:fc:e5:87:a9:e6:aa:87:f0:d3:a3:28:ac:6d:7c:40:3e: 29:f7:82:3c:33:73:e4:5a:a8:4c:e9:49:7b:63:57:d4:83:7f: 85:c7:7c:b3:06:65:c0:cf:65:66:6a:96:33:2d:62:ca:56:97: ad:9b:b8:6e:8c:2d:91:93:d3:54:67:0f:c9:c4:cd:47:8b:43: c6:4b:ab:b8:ea:1f:88:99:35:20:7d:fe:93:2e:24:cf:96:1c: a2:4c:ce:69:da:9a:26:e9:2f:eb:06:2a:2b:f2:e1:0c:22:c3: cb:bb:ea:f8:ba:0c:ae:51:84:da:75:00:78:c9:43:56:ae:67: f0:eb:0c:ee:93:0f:c4:46:21:43:f4:69:96:4c:b0:9b:85:47: b2:99:bc:26:e4:3c:30:0d:ef:57:50:98:f2:f5:28:3f:ef:2f: 9e:68:83:72:91:01:b1:36:a9:4e:1c:df:73:9e:5f:88:9f:4a: 2d:9c:70:2f:b5:86:3e:61:b1:7f:23:0c:4e:dd:28:b7:6c:f4: a6:d1:98:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUwNzIyMTcxOTQ3WhcNMjUwNzI5MTcxOTQ3WjAYMRYwFAYD VQQDEw02ODdmYzgzMy1hZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFaoH54bq4Wq0uDAA++7OSsC+xNl+PzjYJ3Rc4/0xPsEeNKvnOCVGEycGZt1 ozl9bmB+QbcpQDKxnUhgFszfRfpw6W7jzGCHdXuQIIbsdKarr1KT2Erd6KAX/eqR x3UdJSd4okIj6cWu5noJbrrJwiq4Cx0FhYPkdb96+oJRPAGw3lNCibPChXvdLM06 TcmujIGxxEi4Hk6nVdLp/kUyHdzcs5hoyTVaxTdEtCuYYo1Ng62t6ms6jRY8dFhp 4Bl36OtAPYZS23T15hWuXde0KiQksULzSO5352JNcb/Cwk35qPG8jPlJ9LIVghYx 0uKmRXPrTYo6hNOxan0Ofx2T6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPE5uljv rfeuoDVwjT5tEgNb0KDPMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBygSFQ5udXcDfTPSz/2t0afTnZj3m3AQckJvLTpr+TDD7h9LYDW0+9 hKXJtRd9oKFihrn7Dcu9cPzlh6nmqofw06MorG18QD4p94I8M3PkWqhM6Ul7Y1fU g3+Fx3yzBmXAz2VmapYzLWLKVpetm7hujC2Rk9NUZw/JxM1Hi0PGS6u46h+ImTUg ff6TLiTPlhyiTM5p2pom6S/rBior8uEMIsPLu+r4ugyuUYTadQB4yUNWrmfw6wzu kw/ERiFD9GmWTLCbhUeymbwm5DwwDe9XUJjy9Sg/7y+eaINykQGxNqlOHN9znl+I n0otnHAvtYY+YbF/IwxO3Si3bPSm0Zhi -----END CERTIFICATE-----Generated at Thu Jul 24 04:59:22 2025 by rpki-client