$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: 7hNZafbFGgwzZ3De80qVICM8o804kKGpOrpUz2qZxSE= Subject key identifier: 99:FE:33:95:D2:F6:97:04:01:34:86:5D:3B:EC:32:2C:6C:B1:E6:79 Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 602E Signing time: Sun 20 Jul 2025 14:15:22 +0000 Manifest this update: Sun 20 Jul 2025 14:15:21 +0000 Manifest next update: Sun 27 Jul 2025 14:15:21 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: ju1Y/Q2+CChtCzNXPG9HZ9m9aChYlX+4Rk6APNc9854=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: Jul 20 14:15:21 2025 GMT Not After : Jul 27 14:15:21 2025 GMT Subject: CN=687cf9f9-aed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:8c:0e:f8:d8:98:f4:c9:09:8e:04:99:56: 97:1f:2a:6c:0a:e2:e5:b2:f8:d5:43:b4:86:8d:d7: 2a:7b:bf:06:45:b0:3e:d3:fe:9c:1d:2a:67:0f:c1: 94:2f:f6:52:c2:94:7b:3f:e0:b7:21:2c:71:c0:b4: 19:ee:65:bb:77:33:61:27:4b:9f:b0:30:11:73:a5: 14:07:af:13:58:bd:13:00:7e:57:e6:f1:0c:e8:d6: bd:bd:58:23:14:93:1c:a7:de:c1:df:da:6f:52:8a: 95:61:1d:f6:42:02:d7:53:49:5e:1f:26:c1:1a:9e: 04:b6:76:e8:59:77:b0:70:66:87:4b:4f:e6:ae:ba: 00:7f:7e:ca:c6:5c:28:54:ee:a8:b9:dc:3e:66:0b: 9b:9b:6d:9e:02:97:3f:70:17:dc:4c:d6:7f:a9:f2: 45:2e:0a:89:b9:fb:3b:0a:66:64:82:ec:71:65:e6: 25:80:13:96:ca:01:45:7f:1a:38:c2:75:9d:bd:97: 77:79:90:a7:2d:76:c3:d1:3d:0e:26:92:01:f5:19: 5b:dc:2a:a9:48:af:71:ed:71:5b:50:59:b0:6b:31: 67:db:c3:77:fe:ca:91:17:4e:99:9a:11:ec:69:fd: 8a:a1:d2:6f:ee:ef:e5:a8:fa:a0:7c:e4:3d:13:9e: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:33:95:D2:F6:97:04:01:34:86:5D:3B:EC:32:2C:6C:B1:E6:79 X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:75:ac:b0:3e:54:77:15:46:79:33:89:ce:fa:22:d3:10:d5: dc:69:01:6a:f2:28:4a:b2:a0:b1:43:20:56:53:87:3f:e0:b1: 21:03:a0:0f:f2:a1:89:4e:43:c6:56:bb:36:88:f5:be:cb:68: c0:a4:57:23:09:04:84:7b:d4:31:b1:02:e1:dc:7f:e6:9c:2d: a6:6f:25:23:db:e6:9c:39:a4:90:9a:8c:9d:96:90:e7:43:3e: 12:2b:06:20:3d:d7:1b:7c:33:44:fc:8b:47:0c:8f:ce:bb:71: f9:a3:95:2a:c5:41:5d:4c:41:af:0b:da:01:d8:2e:d1:03:74: d7:5e:a5:b8:a6:3c:bd:8c:c9:4b:25:e2:24:55:a1:9f:ba:97: d6:2e:4b:e3:e1:10:e6:90:6f:c6:1c:56:86:cb:ad:de:0f:99: 22:f6:f5:c8:9b:26:e7:ea:ac:88:b9:4a:42:a5:2c:79:10:dc: 7a:01:8b:df:79:3f:76:15:51:b8:e4:19:78:67:e4:6e:52:86: a6:62:ee:e8:52:da:dc:88:60:f5:03:4a:c6:31:02:08:53:5b: 8e:e5:2a:46:24:92:57:84:a4:f7:eb:f6:74:72:22:d3:6e:d9: cc:20:d6:77:af:e0:05:7c:dc:56:15:67:ae:62:d0:55:0c:3a: 9c:9f:2c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUwNzIwMTQxNTIxWhcNMjUwNzI3MTQxNTIxWjAYMRYwFAYD VQQDEw02ODdjZjlmOS1hZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ReMDvjYmPTJCY4EmVaXHypsCuLlsvjVQ7SGjdcqe78GRbA+0/6cHSpnD8GU L/ZSwpR7P+C3ISxxwLQZ7mW7dzNhJ0ufsDARc6UUB68TWL0TAH5X5vEM6Na9vVgj FJMcp97B39pvUoqVYR32QgLXU0leHybBGp4EtnboWXewcGaHS0/mrroAf37Kxlwo VO6oudw+Zgubm22eApc/cBfcTNZ/qfJFLgqJufs7CmZkguxxZeYlgBOWygFFfxo4 wnWdvZd3eZCnLXbD0T0OJpIB9Rlb3CqpSK9x7XFbUFmwazFn28N3/sqRF06ZmhHs af2KodJv7u/lqPqgfOQ9E562/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn+M5XS 9pcEATSGXTvsMixsseZ5MB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDdaywPlR3FUZ5M4nO+iLTENXcaQFq8ihKsqCxQyBWU4c/4LEhA6AP 8qGJTkPGVrs2iPW+y2jApFcjCQSEe9QxsQLh3H/mnC2mbyUj2+acOaSQmoydlpDn Qz4SKwYgPdcbfDNE/ItHDI/Ou3H5o5UqxUFdTEGvC9oB2C7RA3TXXqW4pjy9jMlL JeIkVaGfupfWLkvj4RDmkG/GHFaGy63eD5ki9vXImybn6qyIuUpCpSx5ENx6AYvf eT92FVG45Bl4Z+RuUoamYu7oUtrciGD1A0rGMQIIU1uO5SpGJJJXhKT36/Z0ciLT btnMINZ3r+AFfNxWFWeuYtBVDDqcnyxV -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:44 2025 by rpki-client