$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: b8zhTee5ewPtdPD9emFQ33jIOQTpk2qAG50eSFBPuls= Subject key identifier: 04:ED:E6:9D:66:94:71:61:AE:CA:C6:7F:55:97:DD:03:26:A0:B5:8F Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 11C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 11BF Signing time: Fri 08 Aug 2025 17:22:24 +0000 Manifest this update: Fri 08 Aug 2025 17:22:24 +0000 Manifest next update: Fri 15 Aug 2025 17:22:24 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: L37enrFZw5tl/hzWLrQou6Y5NlWVoyYNyfPBBrf44Hs=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: coykcxq4VLCnsonSqLhttvR91cEiMTFYZHe/zqxnEJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4551 (0x11c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Aug 8 17:22:24 2025 GMT Not After : Aug 15 17:22:24 2025 GMT Subject: CN=68963250-b43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e5:12:ca:74:07:82:fb:68:bd:c8:d6:c4:9d: d1:a0:4c:e6:64:72:98:e9:be:63:b6:a7:2f:24:d6: 40:fa:bb:a3:3e:c7:c2:6d:5c:e0:61:c8:7b:c9:d8: 75:4d:26:c3:b7:c9:1f:0a:e7:b1:d7:ca:e2:24:fb: b1:28:cc:b0:04:98:2f:fe:f8:a2:ff:ed:1b:d8:82: b5:b4:bc:c5:a1:d8:3a:3b:27:99:e2:67:3f:4c:79: 2d:f6:f9:6c:84:cf:e0:b0:3b:87:6d:fa:ee:2e:06: 5d:2c:15:65:d3:ee:14:8c:52:91:99:72:d3:65:21: 90:b9:2a:f5:3a:fd:df:88:bd:9a:c9:33:cf:89:62: ae:b8:84:ef:00:bf:5f:9c:0d:34:9a:8a:5f:73:29: c1:f8:01:52:8a:5e:f8:b4:4f:3a:eb:29:67:d0:0a: 80:ec:25:3b:fc:c1:26:61:01:13:b7:6d:d8:f2:94: 5f:02:df:f0:c1:ea:cc:2f:53:e0:72:1f:c2:a3:58: c8:2c:0f:7b:49:49:b8:fd:92:7d:e2:c9:07:f8:1e: 4d:e0:6f:d1:5f:18:d1:fe:c7:bd:71:c0:82:72:f6: 2e:0b:ef:91:c8:69:ba:bb:99:71:f5:39:60:91:b5: 2c:ed:14:c3:92:f7:fd:97:70:ba:dd:9a:5f:20:29: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:E6:9D:66:94:71:61:AE:CA:C6:7F:55:97:DD:03:26:A0:B5:8F X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:81:a5:af:74:40:3f:68:58:ee:2c:01:0c:fa:02:1b:9b:e1: 04:04:03:02:a3:f5:17:12:62:3a:e2:44:8a:de:ea:ef:31:43: d8:83:73:5f:f8:5f:0b:b4:01:34:0d:9f:b9:6c:e9:4e:85:d3: 96:da:1f:db:e0:36:9b:7b:ce:99:ee:9c:99:53:9b:31:76:f4: c5:82:3b:9f:3e:f0:fe:0b:bf:a5:63:63:70:14:81:35:28:1b: d7:c4:c6:d1:71:5b:67:c7:6e:26:ed:44:12:a5:99:55:7d:fc: eb:b4:e3:7e:89:06:21:ce:fd:d8:95:dd:cb:e7:f2:35:fd:ad: 48:4d:e6:e8:e6:15:f6:3d:ee:43:a7:8a:54:3f:ec:ed:82:09: 92:ae:07:2d:93:3c:4c:5c:dd:a1:10:b0:c2:30:b8:f8:74:b3: 24:ac:62:c0:4e:5a:17:9c:29:57:53:ee:68:15:64:90:9e:d6: 04:9f:fa:ad:0a:90:85:f5:53:bd:e6:bf:eb:1e:22:5f:88:e8: bd:eb:0e:cc:89:0c:98:47:39:e2:9d:c6:59:14:51:5f:b2:25: e7:3c:cd:72:f1:a9:b5:6d:2d:42:74:7d:2a:44:ed:d2:41:6b: 21:2c:8b:bd:8b:ff:ef:21:d8:ab:b0:1e:2a:03:86:67:a4:95: 57:0e:ab:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjUwODA4MTcyMjI0WhcNMjUwODE1MTcyMjI0WjAYMRYwFAYD VQQDEw02ODk2MzI1MC1iNDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeUSynQHgvtovcjWxJ3RoEzmZHKY6b5jtqcvJNZA+rujPsfCbVzgYch7ydh1 TSbDt8kfCuex18riJPuxKMywBJgv/vii/+0b2IK1tLzFodg6OyeZ4mc/THkt9vls hM/gsDuHbfruLgZdLBVl0+4UjFKRmXLTZSGQuSr1Ov3fiL2ayTPPiWKuuITvAL9f nA00mopfcynB+AFSil74tE866yln0AqA7CU7/MEmYQETt23Y8pRfAt/wwerML1Pg ch/Co1jILA97SUm4/ZJ94skH+B5N4G/RXxjR/se9ccCCcvYuC++RyGm6u5lx9Tlg kbUs7RTDkvf9l3C63ZpfICnOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATt5p1m lHFhrsrGf1WX3QMmoLWPMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjgaWvdEA/aFjuLAEM+gIbm+EEBAMCo/UXEmI64kSK3urvMUPYg3Nf +F8LtAE0DZ+5bOlOhdOW2h/b4Dabe86Z7pyZU5sxdvTFgjufPvD+C7+lY2NwFIE1 KBvXxMbRcVtnx24m7UQSpZlVffzrtON+iQYhzv3Yld3L5/I1/a1ITebo5hX2Pe5D p4pUP+ztggmSrgctkzxMXN2hELDCMLj4dLMkrGLATloXnClXU+5oFWSQntYEn/qt CpCF9VO95r/rHiJfiOi96w7MiQyYRznincZZFFFfsiXnPM1y8am1bS1CdH0qRO3S QWshLIu9i//vIdirsB4qA4ZnpJVXDquh -----END CERTIFICATE-----Generated at Fri Aug 8 19:28:12 2025 by rpki-client