$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: w2caHazoeOOXS39M1Tuzk2P58Y5pkUJ4HdAphj5YrLY= Subject key identifier: 9A:2D:3D:B3:88:3B:FD:4F:49:EE:4A:2D:94:FE:C0:9A:FF:D8:26:43 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0558 Signing time: Wed 06 Aug 2025 23:57:08 +0000 Manifest this update: Wed 06 Aug 2025 23:57:08 +0000 Manifest next update: Wed 13 Aug 2025 23:57:08 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: RNqA4ODKr21W5kLEbfQFGWqrbHqoeVgtW11P3xT0aPc=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: MPM/fDIm7iSq8h5ZOB3ujJWuioyZyPhojtnDvre1LOg=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 6 23:57:08 2025 GMT Not After : Aug 13 23:57:08 2025 GMT Subject: CN=6893ebd4-4954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:57:25:74:a2:40:44:f8:d4:21:fd:6d:f6: b6:41:e3:15:bf:07:1a:58:21:c1:a2:71:c5:66:91: 96:17:59:34:e6:98:63:44:f0:f4:64:b4:87:38:a2: 2a:3a:b9:7c:23:45:09:f2:49:2a:de:b1:88:4e:47: 01:ad:7c:35:20:b6:0a:16:e9:b3:a9:15:4a:f2:3c: bb:17:31:35:67:58:36:22:21:c3:30:92:bf:6c:b5: 7d:4e:f4:da:e8:5c:00:20:c8:09:04:27:1c:0e:32: ba:8c:94:a3:aa:1e:2f:d7:1d:22:98:73:d4:be:dd: c9:7d:e7:ea:47:a4:c6:b6:ad:3b:a1:97:39:52:5b: d6:a6:2a:03:24:c1:13:49:6e:db:dc:9b:6b:23:5c: cf:46:ec:b2:fc:95:cd:e3:bd:af:ea:05:eb:17:90: 71:32:09:fb:f4:bd:67:f2:4c:87:72:62:dc:46:96: c8:ee:90:88:e0:31:0f:7d:90:52:18:88:42:68:53: f4:36:7e:d1:cf:36:80:9c:00:83:92:09:65:83:c4: d7:6f:fb:54:50:f9:6c:13:94:4c:52:ca:76:be:2a: c4:17:bb:87:d6:f1:7d:58:d6:c8:04:3b:f7:8e:ae: 80:b4:75:9d:e8:d4:45:ee:26:dc:7a:f1:5d:93:15: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:3D:B3:88:3B:FD:4F:49:EE:4A:2D:94:FE:C0:9A:FF:D8:26:43 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a4:3c:8c:22:86:ef:1f:87:c9:7e:57:c5:6b:79:ed:e0:64: 71:f1:d6:75:d4:51:c3:0d:e5:9d:6c:2c:e3:a0:38:c2:47:9f: dc:b0:36:5d:ce:5b:fe:2b:05:45:9f:58:b5:39:71:24:f8:19: 80:9e:89:9e:6d:4c:a4:ba:83:28:76:8c:d9:13:dd:1d:45:d6: 89:bc:49:c3:bb:26:07:98:f8:b7:ac:49:0f:9d:d9:43:25:ef: 5a:82:f9:65:a7:f0:ef:c1:1c:d4:df:ee:b7:ca:18:5b:f3:70: b5:0a:1f:dd:04:e5:0f:b8:3e:b8:6f:14:90:3e:ae:2e:2e:0f: 53:ec:39:eb:0a:e2:c6:90:ec:e7:4a:d5:4b:19:8a:5c:2f:2f: 0c:78:e1:2d:f5:46:f5:f8:19:13:8e:a5:74:20:e9:25:c4:ac: c8:4d:75:7b:b1:7d:23:85:e8:ca:05:3e:5a:1d:d7:2b:89:9f: 8e:e4:77:f5:54:e8:01:1d:64:4f:f3:77:30:dc:7f:75:ad:13: f7:cf:61:6d:00:eb:e2:cd:f8:8d:ac:3b:ea:fd:5b:a5:f5:38: 15:51:67:37:1e:dd:1f:49:82:66:10:8d:af:d2:de:99:7c:5e: b0:d4:ff:b4:d8:e7:3c:d1:d3:52:0b:1c:39:75:a5:f3:82:6c: 41:56:ff:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwODA2MjM1NzA4WhcNMjUwODEzMjM1NzA4WjAYMRYwFAYD VQQDEw02ODkzZWJkNC00OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH5XJXSiQET41CH9bfa2QeMVvwcaWCHBonHFZpGWF1k05phjRPD0ZLSHOKIq Orl8I0UJ8kkq3rGITkcBrXw1ILYKFumzqRVK8jy7FzE1Z1g2IiHDMJK/bLV9TvTa 6FwAIMgJBCccDjK6jJSjqh4v1x0imHPUvt3JfefqR6TGtq07oZc5UlvWpioDJMET SW7b3JtrI1zPRuyy/JXN472v6gXrF5BxMgn79L1n8kyHcmLcRpbI7pCI4DEPfZBS GIhCaFP0Nn7RzzaAnACDkgllg8TXb/tUUPlsE5RMUsp2virEF7uH1vF9WNbIBDv3 jq6AtHWd6NRF7ibcevFdkxULVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJotPbOI O/1PSe5KLZT+wJr/2CZDMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMpDyMIobvH4fJflfFa3nt4GRx8dZ11FHDDeWdbCzjoDjCR5/csDZd zlv+KwVFn1i1OXEk+BmAnomebUykuoModozZE90dRdaJvEnDuyYHmPi3rEkPndlD Je9agvllp/DvwRzU3+63yhhb83C1Ch/dBOUPuD64bxSQPq4uLg9T7DnrCuLGkOzn StVLGYpcLy8MeOEt9Ub1+BkTjqV0IOklxKzITXV7sX0jhejKBT5aHdcriZ+O5Hf1 VOgBHWRP83cw3H91rRP3z2FtAOvizfiNrDvq/Vul9TgVUWc3Ht0fSYJmEI2v0t6Z fF6w1P+02Oc80dNSCxw5daXzgmxBVv/g -----END CERTIFICATE-----Generated at Thu Aug 7 05:05:56 2025 by rpki-client