$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft File: at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json) Hash identifier: sOcnaD00bBtfBsVDfOhJYdzXZPboaRdEnUa5Nx/0W5U= Subject key identifier: 9A:49:D4:FE:FC:91:B0:F6:F9:58:EF:16:B8:FC:D7:A9:6F:D9:CC:7A Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft Manifest number: 0731 Signing time: Tue 12 Aug 2025 22:08:24 +0000 Manifest this update: Tue 12 Aug 2025 22:08:23 +0000 Manifest next update: Tue 19 Aug 2025 22:08:23 +0000 Files and hashes: 1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: Vx+YA9i3ZCpFkzdSy00FANuMusTXJdX1lGfVlUIXV/A=) 2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=) 3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883 Validity Not Before: Aug 12 22:08:23 2025 GMT Not After : Aug 19 22:08:23 2025 GMT Subject: CN=689bbb58-5b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:72:c1:4e:77:f7:88:7f:6e:38:60:0e:e2: e5:f1:97:84:dc:25:3c:bc:f6:8c:9f:fd:88:c6:3d: 6e:15:10:97:7f:c5:47:d2:0e:5f:92:5f:c1:86:66: a4:a5:5a:ea:a7:32:7f:14:55:83:a9:c3:62:e2:f2: 20:7d:09:46:39:d2:3e:4c:f6:ff:4b:c8:e2:33:03: d3:2b:8d:55:02:f6:e0:2f:3c:69:5d:47:4b:7d:ff: a6:ec:37:33:19:0b:94:c0:b1:87:e1:06:6f:5f:84: 4f:cf:76:6a:83:ec:d3:75:11:19:42:f2:3b:93:47: e0:de:d9:34:ca:93:8d:83:4f:47:0d:7f:1c:50:f4: 40:b0:51:d8:d9:a1:e1:23:04:c3:f3:40:c9:c1:36: 7e:6f:d3:a9:69:8c:c3:98:2b:37:f0:6d:d9:61:36: 4b:63:70:61:34:73:8b:3c:1a:99:16:38:34:f3:d3: a0:d8:d8:70:06:65:1d:2d:33:f1:3b:51:73:51:6c: 51:4e:3f:be:a8:14:4b:8d:87:52:c5:a2:55:bd:78: 0a:35:e7:b9:8f:ba:c1:1b:95:5e:a0:d5:8b:18:74: 24:bd:3d:3b:de:f8:75:59:ff:08:37:00:71:0a:93: e4:05:79:e3:ff:a1:9d:9c:5e:39:1d:94:29:cc:3b: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:49:D4:FE:FC:91:B0:F6:F9:58:EF:16:B8:FC:D7:A9:6F:D9:CC:7A X509v3 Authority Key Identifier: keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7a:ba:7c:14:bb:22:d4:a4:6b:f8:e7:50:2d:ff:4b:29:67: 63:2a:a6:af:8a:6f:7f:db:fb:50:a1:15:9e:97:d4:63:6b:50: b5:6d:fd:08:e3:af:89:b9:66:63:1c:8e:60:04:44:1a:f9:92: 2f:2c:17:88:79:68:f0:7b:7a:eb:cb:c4:fd:22:91:d9:3f:17: f8:ad:75:ea:46:1c:ed:02:40:a5:05:3f:b0:f1:c5:9e:9c:df: 07:ab:f4:de:c3:f0:f0:1c:a7:48:43:1c:39:11:50:3d:4b:40: 77:65:76:c1:c6:b5:6f:c0:b7:3a:d4:ed:73:65:08:8e:5d:ce: ac:e8:09:e9:cd:b8:92:f7:0e:cd:96:27:ad:16:8d:17:9a:87: 13:e3:d9:b4:17:e6:b8:ed:6b:37:86:20:1c:23:1e:09:af:3d: 17:2d:21:64:6b:b1:f0:80:6b:5d:c8:58:8b:9c:00:24:ae:b7: c0:77:87:03:b5:ac:cd:63:b7:cf:20:e6:d4:f1:db:d7:b9:61: 7f:6b:99:f9:77:61:2d:ca:7d:19:60:97:1c:22:36:a4:ff:89: 06:fc:2b:bc:61:07:fc:94:46:af:2d:8d:1a:e1:42:2f:2c:74: f8:ca:a6:17:ac:03:22:0b:ae:cf:2c:63:9a:f9:c7:8b:c9:35: 19:20:c4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz RkU4NzY4ODMwHhcNMjUwODEyMjIwODIzWhcNMjUwODE5MjIwODIzWjAYMRYwFAYD VQQDEw02ODliYmI1OC01YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4n5ywU5394h/bjhgDuLl8ZeE3CU8vPaMn/2Ixj1uFRCXf8VH0g5fkl/Bhmak pVrqpzJ/FFWDqcNi4vIgfQlGOdI+TPb/S8jiMwPTK41VAvbgLzxpXUdLff+m7Dcz GQuUwLGH4QZvX4RPz3Zqg+zTdREZQvI7k0fg3tk0ypONg09HDX8cUPRAsFHY2aHh IwTD80DJwTZ+b9OpaYzDmCs38G3ZYTZLY3BhNHOLPBqZFjg089Og2NhwBmUdLTPx O1FzUWxRTj++qBRLjYdSxaJVvXgKNee5j7rBG5VeoNWLGHQkvT073vh1Wf8INwBx CpPkBXnj/6GdnF45HZQpzDvOrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpJ1P78 kbD2+VjvFrj816lv2cx6MB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBverp8FLsi1KRr+OdQLf9LKWdjKqavim9/2/tQoRWel9Rja1C1bf0I 46+JuWZjHI5gBEQa+ZIvLBeIeWjwe3rry8T9IpHZPxf4rXXqRhztAkClBT+w8cWe nN8Hq/Tew/DwHKdIQxw5EVA9S0B3ZXbBxrVvwLc61O1zZQiOXc6s6AnpzbiS9w7N lietFo0XmocT49m0F+a47Ws3hiAcIx4Jrz0XLSFka7HwgGtdyFiLnAAkrrfAd4cD tazNY7fPIObU8dvXuWF/a5n5d2Etyn0ZYJccIjak/4kG/Cu8YQf8lEavLY0a4UIv LHT4yqYXrAMiC67PLGOa+ceLyTUZIMQq -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:09 2025 by rpki-client