$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: Tk4qQUeZUGyg9o7QYh9j2L/yqAo+SEhxHEdulraRtc0= Subject key identifier: 78:D0:85:FD:9F:B9:6F:D4:2F:0D:FA:D4:30:B0:0F:61:ED:9E:DB:F7 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 063B Signing time: Sun 20 Jul 2025 22:52:41 +0000 Manifest this update: Sun 20 Jul 2025 22:52:41 +0000 Manifest next update: Sun 27 Jul 2025 22:52:41 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: ZXdr5jijH0BunvYj++2E/VhpTYlqmuCh1+4w/CwwFeQ=) 2: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: DVBw64dsT56+0QYycGeLUBxP/l2bdU+aNtZ1EMIv6Js=) 3: D043FFB2EEEA11EF8476F316C4F9AE02.roa (hash: 2LmuP3C8i2g82+GxEzyhXfhPVuIYh5+gy6RWprCcpgs=) 4: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: cAf8Pq1ZJkKmC+TeXFz0VwR4TUY4CLV62jWZ7ILw/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Jul 20 22:52:41 2025 GMT Not After : Jul 27 22:52:41 2025 GMT Subject: CN=687d7339-3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:45:c4:17:83:3f:84:66:51:64:80:96:2b: 2f:35:87:b3:d3:58:4d:fd:17:86:ba:2e:6f:7e:95: 8c:a6:af:d8:ad:0e:90:2a:8a:e9:cb:2a:db:db:9d: e3:a2:8d:cf:90:ee:03:72:13:ce:b9:db:91:57:75: 1c:a1:8c:a2:57:c6:ae:2b:82:2d:20:e2:9e:db:6c: 0b:da:68:be:73:68:56:68:09:7f:58:bb:46:3d:d6: 60:da:e5:05:85:11:66:4d:ae:67:75:26:86:c5:dc: c8:8f:49:46:c0:4a:9a:f6:96:0c:10:23:16:e5:1a: 3a:25:f9:74:dd:e3:aa:83:1d:86:a6:7c:7f:cb:2f: 08:d1:22:81:8e:0d:26:92:4c:d9:56:68:b5:8a:9b: 88:43:0a:77:9b:83:d7:90:d1:d0:7d:9c:51:7b:b5: 0f:b9:9a:ef:8d:e7:94:17:e3:39:ad:ea:59:7d:cb: 60:c0:8f:9b:fe:c7:41:84:f4:11:82:56:f0:49:0d: 06:24:96:5b:74:d0:9b:72:68:32:57:63:87:00:f5: 23:1b:97:80:3f:89:92:84:04:49:47:c2:7f:ce:14: 64:a0:71:1d:e2:69:2f:d0:c6:eb:06:2f:bd:22:ea: 66:37:db:30:52:dd:a6:20:e8:57:c1:d2:c2:58:4e: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D0:85:FD:9F:B9:6F:D4:2F:0D:FA:D4:30:B0:0F:61:ED:9E:DB:F7 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:c1:93:66:a9:bf:d5:31:89:35:3f:1f:5d:59:1a:d8:e3: 38:5a:38:c9:9f:3b:8e:8a:dd:00:2b:a9:d3:f0:0b:c0:6b:c0: d5:58:c5:b6:e9:df:bf:83:37:51:ad:e0:dd:1b:3a:09:f6:7a: f1:45:06:98:6e:03:38:1a:e4:0d:b1:0a:00:59:b2:bd:53:bb: 8a:77:d9:ce:19:dc:c7:9a:18:b1:23:d1:c1:eb:09:5e:b2:17: fa:1a:e7:03:6d:11:8b:8e:59:5c:71:0b:22:a8:ca:2c:14:6f: 2f:57:8a:ae:5a:c1:a0:7f:22:61:2a:f5:ae:ad:b5:be:e8:c4: 4c:b8:58:e1:2d:e5:5c:a5:c1:72:bc:81:44:ef:b3:d3:9c:dc: ad:ac:57:56:98:0c:f6:73:f0:82:4f:38:ac:61:ed:08:4c:8f: 1f:40:64:dc:71:66:aa:ea:6f:70:d2:8e:ef:c5:c1:3f:ab:43: 5d:86:ec:43:94:5b:7d:06:06:5c:96:13:ea:3f:5d:30:f3:75: b4:f0:f9:69:4b:38:fa:08:df:e7:f4:21:79:67:32:9b:21:8b: ac:ce:8c:a6:9e:b6:0b:cc:ba:fb:1e:47:50:04:36:f6:3a:b1: 45:a9:c8:9b:09:84:f2:ac:91:92:d4:7d:0e:2c:cf:13:e0:86: 72:74:c6:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjUwNzIwMjI1MjQxWhcNMjUwNzI3MjI1MjQxWjAYMRYwFAYD VQQDEw02ODdkNzMzOS0zZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vZFxBeDP4RmUWSAlisvNYez01hN/ReGui5vfpWMpq/YrQ6QKorpyyrb253j oo3PkO4DchPOuduRV3UcoYyiV8auK4ItIOKe22wL2mi+c2hWaAl/WLtGPdZg2uUF hRFmTa5ndSaGxdzIj0lGwEqa9pYMECMW5Ro6Jfl03eOqgx2Gpnx/yy8I0SKBjg0m kkzZVmi1ipuIQwp3m4PXkNHQfZxRe7UPuZrvjeeUF+M5repZfctgwI+b/sdBhPQR glbwSQ0GJJZbdNCbcmgyV2OHAPUjG5eAP4mShARJR8J/zhRkoHEd4mkv0MbrBi+9 IupmN9swUt2mIOhXwdLCWE52dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjQhf2f uW/ULw361DCwD2Htntv3MB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA0sGTZqm/1TGJNT8fXVka2OM4WjjJnzuOit0AK6nT8AvAa8DVWMW2 6d+/gzdRreDdGzoJ9nrxRQaYbgM4GuQNsQoAWbK9U7uKd9nOGdzHmhixI9HB6wle shf6GucDbRGLjllccQsiqMosFG8vV4quWsGgfyJhKvWurbW+6MRMuFjhLeVcpcFy vIFE77PTnNytrFdWmAz2c/CCTzisYe0ITI8fQGTccWaq6m9w0o7vxcE/q0NdhuxD lFt9BgZclhPqP10w83W08PlpSzj6CN/n9CF5ZzKbIYuszoymnrYLzLr7HkdQBDb2 OrFFqcibCYTyrJGS1H0OLM8T4IZydMaA -----END CERTIFICATE-----Generated at Mon Jul 21 03:14:20 2025 by rpki-client