$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft File: aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json) Hash identifier: LfMNDXKcQbyJI+U2iq/I0FhWIJjLMj5KGdLBUFYMjMw= Subject key identifier: 52:4B:D3:8B:3B:2E:D3:CB:B2:FE:6B:E5:E3:C8:F2:00:27:95:A2:96 Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81 Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft Manifest number: C1 Signing time: Mon 21 Jul 2025 06:00:12 +0000 Manifest this update: Mon 21 Jul 2025 06:00:11 +0000 Manifest next update: Mon 28 Jul 2025 06:00:11 +0000 Files and hashes: 1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: s8Xs+1SHaZDnTggQEeo9HhXQKF+es1zJo0vuuO+ipJw=) 2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: sPbStdVNUQpgeo3cCvwb+dSIcpm/Yx/AptYb/ozc94k=) 3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: LFS2UufFNk1EGZW0kkO6tt4P+aiBcuisDdPBhJ+0Sd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81 Validity Not Before: Jul 21 06:00:11 2025 GMT Not After : Jul 28 06:00:11 2025 GMT Subject: CN=687dd76c-8b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:95:c4:15:72:01:06:a6:ef:4f:70:6d:8e: 59:36:b5:9f:bb:1f:f5:20:dd:70:6f:ab:94:4c:81: 96:c2:69:5d:61:b3:a3:45:eb:1e:d9:90:86:ce:4f: 9c:b3:be:c0:2b:e1:04:26:8f:3d:2a:33:ee:33:61: b0:7c:4c:82:49:15:76:a9:11:41:fa:4c:e0:90:28: f8:d3:7a:32:4c:24:f6:62:0b:b1:30:e0:76:f5:15: 07:b3:8e:09:c3:5c:9d:41:cd:37:7b:3d:fa:28:52: 32:55:3c:1b:3e:84:ca:f8:9c:cf:dd:fc:4c:e6:67: 63:e6:e5:d5:94:1e:d1:a0:8f:7d:10:96:5f:4e:4e: 74:0a:d8:1a:7d:fe:f1:ed:22:a4:55:ea:37:c8:e0: 08:1e:6d:3f:22:67:66:da:a0:34:e6:83:64:c4:2b: 46:56:4d:a4:bc:5d:19:ab:4b:94:d0:a2:b0:b6:e0: 31:85:22:32:eb:f0:84:8e:93:e7:09:57:0e:52:c5: 5d:8f:23:c3:a7:25:e3:dd:29:b8:c4:49:09:00:31: f2:cd:b0:d2:02:90:71:76:1d:ed:2c:aa:cb:5e:ae: 4b:6e:21:b3:d6:47:38:be:0a:c1:20:74:9f:33:7b: cb:1b:c4:6a:09:d1:09:8f:c9:fa:ea:61:df:20:5c: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4B:D3:8B:3B:2E:D3:CB:B2:FE:6B:E5:E3:C8:F2:00:27:95:A2:96 X509v3 Authority Key Identifier: keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e6:7b:a1:62:fc:b5:ef:89:51:84:47:6a:70:6d:67:47:e3: 1a:23:60:51:20:4e:02:61:fb:04:c3:7d:25:81:5d:f5:99:a7: be:a6:6b:3c:4f:4c:72:d7:e3:c3:e0:d1:61:21:21:e1:8e:0f: 31:19:06:e7:62:00:f7:e2:5c:2e:90:7a:4c:61:c0:c0:39:ff: e6:37:c4:9f:67:e5:52:ee:cf:92:2a:16:42:5e:94:92:e4:5e: 14:31:28:6d:bd:10:ba:74:e3:4a:d3:67:cb:fb:40:63:98:e6: 3e:20:e8:d2:e9:0e:f7:b7:a9:56:3d:1d:a0:1b:9f:d2:02:a5: 43:51:61:99:83:c7:1b:c4:c7:3c:c0:3a:39:51:c4:15:bd:ff: 25:43:79:44:0c:7a:d0:3e:4f:bb:c3:27:0a:93:e3:ef:a3:58: 0e:7e:82:03:e5:ca:d8:8a:c4:20:c9:47:64:0e:4a:4a:dc:54: 80:94:73:0c:fe:4b:eb:a8:d1:5a:60:93:88:c8:1c:4c:d0:75: f0:f3:bb:57:04:f0:17:c2:e4:99:da:ee:33:5d:96:80:21:1a: c3:34:a4:ae:5a:0a:c0:42:d5:43:a7:6a:db:57:58:37:c4:73: 6b:e3:b4:5a:2a:6a:6f:8d:bb:ec:54:f0:a9:f5:1e:49:0e:14: ba:ff:79:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NDgxMTAvBgNVBAUTKDY5NDg1OEI5MkJDQTdDMDg3NjVCQzZCQkMxODM5MjNF QjU3MTFGODEwHhcNMjUwNzIxMDYwMDExWhcNMjUwNzI4MDYwMDExWjAYMRYwFAYD VQQDEw02ODdkZDc2Yy04YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zSVxBVyAQam709wbY5ZNrWfux/1IN1wb6uUTIGWwmldYbOjRese2ZCGzk+c s77AK+EEJo89KjPuM2GwfEyCSRV2qRFB+kzgkCj403oyTCT2YguxMOB29RUHs44J w1ydQc03ez36KFIyVTwbPoTK+JzP3fxM5mdj5uXVlB7RoI99EJZfTk50Ctgaff7x 7SKkVeo3yOAIHm0/Imdm2qA05oNkxCtGVk2kvF0Zq0uU0KKwtuAxhSIy6/CEjpPn CVcOUsVdjyPDpyXj3Sm4xEkJADHyzbDSApBxdh3tLKrLXq5LbiGz1kc4vgrBIHSf M3vLG8RqCdEJj8n66mHfIFy1vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJL04s7 LtPLsv5r5ePI8gAnlaKWMB8GA1UdIwQYMBaAFGlIWLkrynwIdlvGu8GDkj61cR+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0OC9BMjE4MzdCMDQy QjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZBaDJXOGE3d1lPU1ByVnhI NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FVaFl1U3ZLZkFoMlc4YTd3WU9TUHJWeEg0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0OC9BMjE4MzdCMDQyQjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZB aDJXOGE3d1lPU1ByVnhINEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC25nuhYvy174lRhEdqcG1nR+MaI2BRIE4CYfsEw30lgV31mae+pms8 T0xy1+PD4NFhISHhjg8xGQbnYgD34lwukHpMYcDAOf/mN8SfZ+VS7s+SKhZCXpSS 5F4UMShtvRC6dONK02fL+0BjmOY+IOjS6Q73t6lWPR2gG5/SAqVDUWGZg8cbxMc8 wDo5UcQVvf8lQ3lEDHrQPk+7wycKk+Pvo1gOfoID5crYisQgyUdkDkpK3FSAlHMM /kvrqNFaYJOIyBxM0HXw87tXBPAXwuSZ2u4zXZaAIRrDNKSuWgrAQtVDp2rbV1g3 xHNr47RaKmpvjbvsVPCp9R5JDhS6/3mE -----END CERTIFICATE-----Generated at Mon Jul 21 07:46:26 2025 by rpki-client