$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: EBgKAqhtWv6/EzdBXUSn2w7FvZkp2yMcxV5DW+dbUyw= Subject key identifier: BB:53:50:1B:7E:4B:40:E2:D9:D6:E3:83:D2:4A:6B:E5:97:A4:52:35 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 347A Signing time: Wed 16 Jul 2025 15:20:25 +0000 Manifest this update: Wed 16 Jul 2025 15:20:25 +0000 Manifest next update: Wed 23 Jul 2025 15:20:25 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: hbjKU/Dib8Zl2+liSLbLjE/lXVF34//G/M6g4ehJkwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Jul 16 15:20:25 2025 GMT Not After : Jul 23 15:20:25 2025 GMT Subject: CN=6877c339-5fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:43:29:7d:b8:98:ad:f1:44:18:a0:10:f0: d5:82:57:a2:fb:f8:a0:fa:2c:f3:02:91:92:24:cf: 0a:97:5a:f1:df:1c:38:02:1b:63:5e:6e:48:04:6c: 2e:b4:80:b0:d5:3c:4f:2e:1b:ed:ad:a0:30:c5:ca: 8c:9f:2b:1a:9f:08:37:bd:54:1e:f5:1c:4c:80:f3: 42:fb:d5:23:cc:ec:09:c8:4a:7d:52:10:3a:fd:61: 7d:43:c2:f8:27:fb:71:0a:eb:8f:9d:23:4b:35:f7: d9:07:72:8d:aa:6d:c6:28:8e:b5:1c:2f:c6:23:0b: 0a:d0:9f:57:cd:0a:21:07:27:2b:cc:21:a2:05:db: e7:04:f5:33:da:f0:31:55:26:d4:fc:52:63:fe:66: 88:62:5c:0f:c1:0c:79:68:9a:99:8c:5e:31:48:e9: 0e:52:5c:83:a5:0d:31:3e:f1:f3:78:73:0c:d9:d9: d4:be:ce:7b:65:bd:78:d1:13:57:38:5c:a6:f3:cd: 94:25:e5:9b:96:4d:c6:90:44:46:a8:a1:c0:47:4b: 7d:b7:0d:33:d1:a1:4b:b6:8c:42:1e:c3:8d:17:d4: f3:82:e0:88:91:c3:3f:c6:65:d3:d3:f1:24:24:9a: d9:60:64:b8:8c:42:63:8f:c0:ec:7e:e5:0c:53:65: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:50:1B:7E:4B:40:E2:D9:D6:E3:83:D2:4A:6B:E5:97:A4:52:35 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9b:79:5d:c0:c4:a2:4b:91:bc:ca:7f:04:28:d4:b8:4e:f5: 7d:53:59:0a:d1:44:56:2e:47:21:89:f0:8e:06:14:87:93:8d: 45:a8:d0:6f:52:1b:b4:61:87:3a:c4:2f:09:08:48:7c:f1:54: 63:0d:65:9c:b8:d7:af:04:d6:8e:30:3e:b1:3b:25:38:ac:81: 64:52:f6:b1:1c:33:9d:ae:4b:91:5e:ee:2e:ee:ac:63:1b:77: d8:73:6e:ad:ce:f3:0a:dd:57:e0:96:9f:d0:ea:71:8e:63:04: 0e:8a:e5:00:1d:0a:42:52:96:9b:ad:7a:3a:93:8e:88:3d:a9: f6:c2:74:9e:76:15:5b:59:ec:de:26:b0:d6:d2:74:02:bc:1d: b3:7d:cf:c0:da:ca:87:a9:97:c7:81:57:82:88:59:43:4c:e3: 31:82:eb:52:89:77:a8:8a:ff:f4:28:a6:8d:8b:31:0d:90:09: 3c:3a:49:f0:08:73:92:e1:f8:24:d6:45:86:ea:e3:23:b8:02: 60:1e:2b:3f:6e:41:fe:fa:c8:b9:2d:a2:a1:93:00:6a:38:b0: 61:ab:aa:c1:83:87:a7:1f:16:ad:36:aa:82:f1:2c:6b:80:c2: c7:fd:f9:e2:a0:b6:95:f9:f5:7c:0f:88:40:91:87:bf:5c:f5: 9e:90:03:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwNzE2MTUyMDI1WhcNMjUwNzIzMTUyMDI1WjAYMRYwFAYD VQQDEw02ODc3YzMzOS01ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MxDKX24mK3xRBigEPDVglei+/ig+izzApGSJM8Kl1rx3xw4AhtjXm5IBGwu tICw1TxPLhvtraAwxcqMnysanwg3vVQe9RxMgPNC+9UjzOwJyEp9UhA6/WF9Q8L4 J/txCuuPnSNLNffZB3KNqm3GKI61HC/GIwsK0J9XzQohBycrzCGiBdvnBPUz2vAx VSbU/FJj/maIYlwPwQx5aJqZjF4xSOkOUlyDpQ0xPvHzeHMM2dnUvs57Zb140RNX OFym882UJeWblk3GkERGqKHAR0t9tw0z0aFLtoxCHsONF9TzguCIkcM/xmXT0/Ek JJrZYGS4jEJjj8DsfuUMU2UhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtTUBt+ S0Di2dbjg9JKa+WXpFI1MB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5m3ldwMSiS5G8yn8EKNS4TvV9U1kK0URWLkchifCOBhSHk41FqNBv Uhu0YYc6xC8JCEh88VRjDWWcuNevBNaOMD6xOyU4rIFkUvaxHDOdrkuRXu4u7qxj G3fYc26tzvMK3Vfglp/Q6nGOYwQOiuUAHQpCUpabrXo6k46IPan2wnSedhVbWeze JrDW0nQCvB2zfc/A2sqHqZfHgVeCiFlDTOMxgutSiXeoiv/0KKaNizENkAk8Oknw CHOS4fgk1kWG6uMjuAJgHis/bkH++si5LaKhkwBqOLBhq6rBg4enHxatNqqC8Sxr gMLH/fnioLaV+fV8D4hAkYe/XPWekAMn -----END CERTIFICATE-----Generated at Wed Jul 16 19:14:34 2025 by rpki-client