$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: GlwF0EeKB7VzHA5qFnkmfzJhTsWs6nIe9Ua3tnbmwZk= Subject key identifier: A6:0A:67:C4:AF:8B:C7:BC:B4:B8:99:44:F2:40:B6:9E:57:44:DC:CF Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 011E Signing time: Sat 19 Jul 2025 05:01:39 +0000 Manifest this update: Sat 19 Jul 2025 05:01:38 +0000 Manifest next update: Sat 26 Jul 2025 05:01:38 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: +Uw4PtEvevpmxXcUkobqwUsn0Aif3Md4Md71Rsp5tYM=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Jul 19 05:01:38 2025 GMT Not After : Jul 26 05:01:38 2025 GMT Subject: CN=687b26b3-8fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:28:a4:5b:5d:5a:94:52:54:b5:72:83:ce: d0:1b:5f:43:4a:6b:0f:d6:12:52:f9:47:35:a1:8b: b4:23:f9:d5:59:ac:eb:2c:68:9f:2e:d6:cd:97:83: ba:15:4c:c6:25:3d:40:34:4e:a2:98:1a:6e:6a:8a: 1d:51:7f:bd:32:2c:da:22:5f:8e:7e:8c:45:57:7b: d1:c6:18:b8:b6:47:c5:58:a2:93:5a:a8:e6:1e:62: a3:48:f7:53:ec:96:b4:e0:0c:5b:fb:76:f8:37:d1: 26:f5:38:7f:64:87:f4:ed:e2:cd:7b:13:66:48:ce: c5:b8:1d:1c:b9:b9:6e:e0:9d:c8:4a:e0:90:1c:6d: 6d:3d:c0:1c:c7:78:3f:e3:6f:10:e9:96:6a:86:33: e4:6f:f0:54:dc:dd:0b:bf:4b:e4:00:88:23:26:07: b1:d4:92:4a:89:8d:4d:74:91:1e:31:fb:49:3d:c7: d3:2c:89:58:81:83:5a:ef:d9:01:1b:5e:54:f0:f3: 74:69:22:41:64:08:d3:7b:ca:8e:df:ea:be:d1:38: b8:bf:c4:60:e0:22:49:cd:fa:66:58:c7:29:46:44: ee:07:54:64:04:96:4f:3b:b6:53:1d:5b:36:ba:09: 6a:49:71:6f:6c:05:79:63:ec:b8:f1:b1:37:26:5c: 68:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0A:67:C4:AF:8B:C7:BC:B4:B8:99:44:F2:40:B6:9E:57:44:DC:CF X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c8:a4:92:27:6b:1e:04:b2:cb:92:c9:8b:9c:8e:c8:cb:76: 7e:ca:0b:34:c0:9a:ad:2b:d0:ff:95:65:e8:ed:17:bd:e4:c9: f6:96:03:93:fd:e2:ec:69:02:da:0b:fa:b2:00:f3:d3:28:fe: 5f:83:46:c8:8d:d1:eb:ad:b7:52:0f:d2:70:70:e7:29:8a:e2: 50:61:98:f2:ca:f8:cb:7e:b9:f1:1a:89:b8:ac:2f:55:bd:13: cf:d9:76:f5:c0:9a:92:bb:18:c7:9d:31:20:45:a3:c5:d5:6a: 8a:3d:3b:20:43:eb:a0:3d:99:82:b4:8a:80:d0:84:b9:f3:fd: 86:f9:1b:37:07:43:1c:7e:c7:af:94:de:45:13:4c:f7:f4:00: 06:6a:fb:d5:2e:fb:96:85:59:80:5e:c9:d2:c5:da:29:d8:aa: 17:fa:cb:44:41:06:d2:a0:02:54:13:c9:42:f9:fb:18:ed:31: ab:c7:79:eb:44:ea:c5:f9:4a:fc:a7:0a:b5:96:57:b1:d1:c9: 6c:89:d9:3a:d7:0a:2d:e5:0f:9c:ad:17:6d:40:f3:cf:79:d4: c3:da:cf:07:fa:68:77:32:24:75:dc:2d:a3:ef:40:d9:aa:03: 18:cd:a4:71:fa:a7:3d:a3:10:ce:fb:1b:0d:74:f2:e1:e3:5b: 4d:a8:d3:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwNzE5MDUwMTM4WhcNMjUwNzI2MDUwMTM4WjAYMRYwFAYD VQQDEw02ODdiMjZiMy04ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKQopFtdWpRSVLVyg87QG19DSmsP1hJS+Uc1oYu0I/nVWazrLGifLtbNl4O6 FUzGJT1ANE6imBpuaoodUX+9MizaIl+OfoxFV3vRxhi4tkfFWKKTWqjmHmKjSPdT 7Ja04Axb+3b4N9Em9Th/ZIf07eLNexNmSM7FuB0cublu4J3ISuCQHG1tPcAcx3g/ 428Q6ZZqhjPkb/BU3N0Lv0vkAIgjJgex1JJKiY1NdJEeMftJPcfTLIlYgYNa79kB G15U8PN0aSJBZAjTe8qO3+q+0Ti4v8Rg4CJJzfpmWMcpRkTuB1RkBJZPO7ZTHVs2 uglqSXFvbAV5Y+y48bE3Jlxo+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYKZ8Sv i8e8tLiZRPJAtp5XRNzPMB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvyKSSJ2seBLLLksmLnI7Iy3Z+ygs0wJqtK9D/lWXo7Re95Mn2lgOT /eLsaQLaC/qyAPPTKP5fg0bIjdHrrbdSD9JwcOcpiuJQYZjyyvjLfrnxGom4rC9V vRPP2Xb1wJqSuxjHnTEgRaPF1WqKPTsgQ+ugPZmCtIqA0IS58/2G+Rs3B0Mcfsev lN5FE0z39AAGavvVLvuWhVmAXsnSxdop2KoX+stEQQbSoAJUE8lC+fsY7TGrx3nr ROrF+Ur8pwq1llex0clsidk61wot5Q+crRdtQPPPedTD2s8H+mh3MiR13C2j70DZ qgMYzaRx+qc9oxDO+xsNdPLh41tNqNOQ -----END CERTIFICATE-----Generated at Sun Jul 20 21:57:04 2025 by rpki-client