$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: Yk9qg2IRr1Jqn+Vz+jv+i3izEueVpNB0h1iJdU3eG6c= Subject key identifier: 39:67:28:7D:4A:B7:B1:F4:16:04:31:65:EE:B4:D6:30:11:DA:A2:CF Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 03C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 03BC Signing time: Tue 05 Aug 2025 01:11:20 +0000 Manifest this update: Tue 05 Aug 2025 01:11:20 +0000 Manifest next update: Tue 12 Aug 2025 01:11:20 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: VLu/Wz+2u6/s23iqLRKHRZ6d9zvLhkeSipqClBqg1sg=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: p2rd5X9PRaHj3dg5SJAK0M8GBgiGK7ul3HPfe5PMkz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 961 (0x3c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Aug 5 01:11:20 2025 GMT Not After : Aug 12 01:11:20 2025 GMT Subject: CN=68915a38-8c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:b1:ff:ce:44:d1:7d:6b:3e:d7:85:04:0b: 18:9b:ac:5c:98:a8:6f:e9:a4:1a:fe:a2:94:3b:76: 76:97:1c:31:6a:69:e3:3b:e0:b7:c6:a8:08:51:3f: d3:45:01:c0:65:c1:3f:7d:e6:26:33:4e:ae:29:5f: b5:69:b1:ae:fa:bf:2d:77:86:c3:31:a9:2e:5b:34: 41:38:8f:96:e8:b3:1e:13:2a:1c:2f:8b:92:13:dd: ac:98:f5:34:b8:60:a5:65:3f:2e:7f:b0:b6:ba:cf: 7d:4a:71:e9:5e:68:d1:10:1e:c5:ef:00:b9:85:d0: e2:e3:a2:3f:89:e1:02:a0:26:b2:5b:3b:1d:77:62: ee:44:5d:92:6d:00:79:1c:b5:49:27:e8:48:6f:de: ae:fa:05:41:9c:db:46:97:8e:62:55:5c:5f:28:be: 43:41:60:26:ca:71:45:2b:6e:09:9a:30:fa:79:44: 76:82:6c:c9:35:eb:40:0c:4e:95:4d:2b:d3:2a:70: 4e:db:9d:5e:66:18:73:2e:dd:62:df:78:f0:46:27: c3:80:27:e0:5a:d9:71:6f:98:67:ca:93:00:a7:bd: 70:ed:e7:05:f8:e1:fa:61:de:3f:5e:7f:ad:02:f4: c8:39:fc:1e:3c:a1:71:ef:38:af:42:11:bb:80:6c: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:67:28:7D:4A:B7:B1:F4:16:04:31:65:EE:B4:D6:30:11:DA:A2:CF X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:47:4e:b4:21:4e:3b:ed:d5:0e:1b:41:e6:44:9b:83:e1:79: 45:3f:a1:20:66:88:7f:cf:1a:01:39:0d:0d:f2:e0:01:87:91: 6f:f6:fa:d5:97:fe:c6:e5:b8:4b:06:98:de:6a:e1:5b:cf:c9: 89:a3:f4:d2:ce:85:31:ac:9f:32:1b:05:91:2f:27:3b:3c:00: 89:13:30:25:7b:20:2d:00:9a:6c:5c:53:7e:4d:3f:f7:e0:21: 88:b1:80:78:51:7a:8f:ab:c6:ae:1c:4f:65:cf:5b:32:ed:b0: f0:b2:e0:d1:f8:5f:0e:c3:6c:df:5f:f9:d1:b2:6d:3d:4e:33: 1f:cf:a0:31:45:49:f8:09:dc:82:4e:88:03:46:34:cc:78:c4: 74:b9:58:9e:4f:3b:de:f5:1e:ac:21:8b:00:75:1a:de:da:c7: 3b:d3:71:46:fe:b9:80:dc:3a:18:b7:5e:46:4b:ce:f3:00:20: 18:98:59:7f:d8:f6:83:9b:e2:5f:99:5f:26:58:98:a8:bb:1e: e9:6c:69:1b:cb:26:57:d0:19:f0:56:7d:36:4c:54:0f:b1:cd: 5a:e6:6f:08:bb:23:9b:59:b2:a8:83:cc:aa:6b:44:4c:51:28: 48:97:15:f9:b8:0e:c4:95:53:45:99:f4:69:47:9d:41:5d:74: c3:18:11:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjUwODA1MDExMTIwWhcNMjUwODEyMDExMTIwWjAYMRYwFAYD VQQDEw02ODkxNWEzOC04YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBCx/85E0X1rPteFBAsYm6xcmKhv6aQa/qKUO3Z2lxwxamnjO+C3xqgIUT/T RQHAZcE/feYmM06uKV+1abGu+r8td4bDMakuWzRBOI+W6LMeEyocL4uSE92smPU0 uGClZT8uf7C2us99SnHpXmjREB7F7wC5hdDi46I/ieECoCayWzsdd2LuRF2SbQB5 HLVJJ+hIb96u+gVBnNtGl45iVVxfKL5DQWAmynFFK24JmjD6eUR2gmzJNetADE6V TSvTKnBO251eZhhzLt1i33jwRifDgCfgWtlxb5hnypMAp71w7ecF+OH6Yd4/Xn+t AvTIOfwePKFx7zivQhG7gGxhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlnKH1K t7H0FgQxZe601jAR2qLPMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtR060IU477dUOG0HmRJuD4XlFP6EgZoh/zxoBOQ0N8uABh5Fv9vrV l/7G5bhLBpjeauFbz8mJo/TSzoUxrJ8yGwWRLyc7PACJEzAleyAtAJpsXFN+TT/3 4CGIsYB4UXqPq8auHE9lz1sy7bDwsuDR+F8Ow2zfX/nRsm09TjMfz6AxRUn4CdyC TogDRjTMeMR0uVieTzve9R6sIYsAdRre2sc703FG/rmA3DoYt15GS87zACAYmFl/ 2PaDm+JfmV8mWJioux7pbGkbyyZX0BnwVn02TFQPsc1a5m8IuyObWbKog8yqa0RM UShIlxX5uA7ElVNFmfRpR51BXXTDGBF2 -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:16 2025 by rpki-client