$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft File: Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json) Hash identifier: mWJ17TXzjmrZp0l27Hz7qXP6Jf1HEwXUjAQiGf4TgLg= Subject key identifier: 84:A0:5B:DC:8B:29:8E:90:C0:10:72:EE:8C:A4:F4:BD:14:0A:8D:16 Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft Manifest number: 0207 Signing time: Thu 07 Aug 2025 02:47:15 +0000 Manifest this update: Thu 07 Aug 2025 02:47:15 +0000 Manifest next update: Thu 14 Aug 2025 02:47:15 +0000 Files and hashes: 1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: sBNz0jrj66HEqMSYS/AFlmaM3hvFdSyoX/ZS3UbRlVw=) 2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: J1WS3Wr+Cq+Ya2W/A8acH4GDeK/tNPuqzs+ITQkHcD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45 Validity Not Before: Aug 7 02:47:15 2025 GMT Not After : Aug 14 02:47:15 2025 GMT Subject: CN=689413b3-da64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:3a:e1:2e:b1:86:63:1b:36:7e:3c:e7:47: 66:cd:1c:f6:fa:b9:61:53:de:25:94:32:69:3f:08: 17:68:21:f6:25:c5:47:ef:0a:d1:0b:c9:ef:e4:c1: ef:be:af:11:1b:59:b8:85:48:de:d2:cf:d1:5e:fc: d8:bc:f9:ad:21:94:d7:d7:8e:6f:5e:a0:c5:b5:0a: 07:a9:78:5d:0c:dd:56:c9:66:5c:1b:bf:01:70:04: f3:c5:4a:11:60:b8:08:bc:24:6c:b8:8e:4a:35:0b: 73:6d:ff:df:3d:7f:0f:99:b1:f9:b9:3d:53:9f:60: 65:68:2d:c9:80:47:cd:46:68:39:77:d4:e1:76:3b: 92:1b:22:06:87:16:a2:a5:06:04:11:46:0c:04:94: 6d:1a:98:a1:6f:99:a6:38:73:6b:6e:19:84:f4:bb: ea:36:1e:32:09:23:54:76:fc:b0:6b:60:c2:1d:2b: 13:ce:4a:c6:4b:03:4b:e8:73:28:9c:4c:e4:89:71: 6a:25:db:78:7d:37:3f:ef:d0:bd:39:d2:f8:50:1b: b5:78:f8:43:cf:08:04:80:1f:ae:34:28:96:9f:eb: 47:cd:2a:10:47:9c:a7:94:dd:c0:95:20:52:11:80: 72:5c:29:68:db:a9:8a:51:d2:47:b8:a7:e8:a7:4c: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:5B:DC:8B:29:8E:90:C0:10:72:EE:8C:A4:F4:BD:14:0A:8D:16 X509v3 Authority Key Identifier: keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2c:13:28:fc:71:d0:28:db:d7:bf:92:47:28:9f:e1:09:45: b9:a6:2b:e7:7f:8a:e0:9f:ad:c3:40:19:04:9f:98:76:17:17: b2:57:80:7f:ba:aa:0d:7e:55:11:77:61:07:4c:39:aa:78:52: ca:b8:7b:5e:51:55:9b:5a:88:0c:93:0f:7a:16:10:49:aa:1b: 57:85:74:3c:bb:76:f6:1b:fd:5c:ae:d7:b1:cc:95:40:86:ca: 0e:1c:e7:f9:ae:5d:6e:de:b0:80:9c:d9:0c:23:7e:51:9d:49: ca:48:de:11:54:4a:04:5c:d7:78:f4:33:57:30:32:2f:d0:b5: f6:83:29:89:e5:e0:5a:82:58:e7:4d:60:27:be:74:49:f4:b6: f1:a2:c5:ae:6c:d4:07:fc:c7:67:f5:fd:b8:67:dc:87:b6:f3: 70:4f:68:7e:37:70:f5:c3:34:02:5a:8b:14:85:98:54:16:c1: 18:fc:75:b1:fe:48:a9:d9:02:db:af:9c:1d:7e:dc:05:d6:af: f9:f5:3d:d3:9d:cc:0d:42:72:16:e7:d0:2a:a5:7b:c9:b0:22: 5b:8d:ab:02:f2:3b:91:95:05:a6:f2:e8:a2:08:29:58:89:63: d7:9c:23:86:9e:12:e1:66:ac:eb:5e:25:02:99:29:70:e8:9b: e5:6e:f8:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGRUYxMTAvBgNVBAUTKDMyMUQwQUI3OEExQUJFMzUxQTdEQjc5MzIwRDlGRkQz NzJBMDhDNDUwHhcNMjUwODA3MDI0NzE1WhcNMjUwODE0MDI0NzE1WjAYMRYwFAYD VQQDEw02ODk0MTNiMy1kYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RI64S6xhmMbNn4850dmzRz2+rlhU94llDJpPwgXaCH2JcVH7wrRC8nv5MHv vq8RG1m4hUje0s/RXvzYvPmtIZTX145vXqDFtQoHqXhdDN1WyWZcG78BcATzxUoR YLgIvCRsuI5KNQtzbf/fPX8PmbH5uT1Tn2BlaC3JgEfNRmg5d9ThdjuSGyIGhxai pQYEEUYMBJRtGpihb5mmOHNrbhmE9LvqNh4yCSNUdvywa2DCHSsTzkrGSwNL6HMo nEzkiXFqJdt4fTc/79C9OdL4UBu1ePhDzwgEgB+uNCiWn+tHzSoQR5ynlN3AlSBS EYByXClo26mKUdJHuKfop0z5BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISgW9yL KY6QwBBy7oyk9L0UCo0WMB8GA1UdIwQYMBaAFDIdCreKGr41Gn23kyDZ/9NyoIxF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEZFRi9CMDM2M0Q2MDY0 RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZqVWFmYmVUSU5uXzAzS2dq RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oMEt0NG9hdmpVYWZiZVRJTm5fMDNLZ2pFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEZFRi9CMDM2M0Q2MDY0RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZq VWFmYmVUSU5uXzAzS2dqRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLBMo/HHQKNvXv5JHKJ/hCUW5pivnf4rgn63DQBkEn5h2FxeyV4B/ uqoNflURd2EHTDmqeFLKuHteUVWbWogMkw96FhBJqhtXhXQ8u3b2G/1crtexzJVA hsoOHOf5rl1u3rCAnNkMI35RnUnKSN4RVEoEXNd49DNXMDIv0LX2gymJ5eBagljn TWAnvnRJ9LbxosWubNQH/Mdn9f24Z9yHtvNwT2h+N3D1wzQCWosUhZhUFsEY/HWx /kip2QLbr5wdftwF1q/59T3TncwNQnIW59AqpXvJsCJbjasC8juRlQWm8uiiCClY iWPXnCOGnhLhZqzrXiUCmSlw6Jvlbvjg -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:32 2025 by rpki-client