$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json) Hash identifier: D0o48cQXq6qNyE8dzlYOvqDmlxwit2Qg7jdpkyUuvZw= Subject key identifier: 19:DF:AF:B7:90:34:19:3E:2E:3A:AE:FE:EA:4F:4F:7B:12:79:8D:74 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft Manifest number: 73 Signing time: Wed 06 Aug 2025 23:21:50 +0000 Manifest this update: Wed 06 Aug 2025 23:21:49 +0000 Manifest next update: Wed 13 Aug 2025 23:21:49 +0000 Files and hashes: 1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: 5YJY2j3fUqeVWzR05rXYSZ4n6FpJcCWBXWYJSX2yzxA=) 2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: eqsW8B/nzh24Js41J8yQQdlaY75NMXqpYi5U4uiBwdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Validity Not Before: Aug 6 23:21:49 2025 GMT Not After : Aug 13 23:21:49 2025 GMT Subject: CN=6893e38d-9440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c4:1b:55:d8:23:6d:cd:bc:09:da:01:92:da: 5f:97:4b:75:e1:14:94:a8:95:85:59:74:a0:c6:4b: 76:df:5c:20:08:f3:85:85:83:90:66:7f:95:d1:ef: 36:0b:a6:79:ae:27:87:d8:f5:bc:c8:d5:30:65:ed: b1:e7:0b:a1:3e:7a:da:cc:32:35:52:c9:13:72:18: 83:a2:ab:c1:2d:ac:ce:5a:08:68:96:e9:79:8d:5f: 9e:3d:ae:5f:7f:92:3a:68:6a:2f:46:13:ca:8f:f1: f8:0c:ac:ee:09:53:17:95:db:38:7f:65:89:57:88: db:b2:9a:72:85:19:4d:72:41:1c:7a:24:90:1c:fc: d1:ef:89:9d:e5:86:28:25:f9:95:54:45:95:eb:bd: 95:83:30:49:7a:28:4e:00:48:7b:79:9f:fb:52:70: a1:cf:00:03:3c:64:b1:76:04:c6:52:be:d9:ac:b8: f4:0f:77:42:cf:1a:4d:0d:29:db:fd:8b:e0:e9:3c: ce:5c:6c:10:35:fe:ab:ad:ef:3a:f4:3a:7c:5d:e1: 1a:9b:48:13:63:eb:63:eb:ca:92:54:a3:a6:e2:1f: 4c:62:d7:7d:5c:e0:df:c7:36:0f:57:d2:72:c7:08: e7:bb:ce:9a:47:42:bf:18:c4:11:2d:b1:9d:55:0a: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DF:AF:B7:90:34:19:3E:2E:3A:AE:FE:EA:4F:4F:7B:12:79:8D:74 X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:28:39:08:09:c9:66:b3:83:98:68:25:55:77:b0:fd:a1:54: e7:27:2d:2c:4f:7c:10:07:aa:7e:25:61:01:3e:8b:ec:71:be: 80:26:e1:fd:a6:b5:03:43:d6:d1:5b:a4:f2:5e:04:a1:68:e9: b7:58:d0:2d:eb:61:3a:d7:70:39:52:b1:8e:67:13:4a:90:e0: ec:d5:5a:4d:18:c5:11:ce:11:02:da:1c:6b:26:85:8e:6b:ba: 58:da:a6:f8:53:e7:6e:07:ec:b5:da:58:c1:8d:6a:cb:b6:1d: 01:a3:f8:f0:ad:bc:2c:61:f7:d7:a9:d2:52:a4:7a:4b:14:25: 64:c8:84:c9:d9:a8:83:d5:2e:86:db:9a:1a:62:91:5d:f6:b4: a7:68:87:33:af:1c:e9:5e:98:e7:42:1f:39:55:d5:0f:bf:58: e0:8b:54:a8:15:a4:fc:b4:d4:81:6a:5a:2a:1b:66:ae:d5:22: 2e:7d:30:a3:e4:a9:4c:1a:46:87:53:89:14:dd:b6:0b:26:93: bd:ec:82:58:be:1d:7d:fd:4b:2a:1a:11:b7:4a:30:ca:62:59: c0:69:60:24:b6:6f:5e:ae:4d:d5:55:e4:0d:6f:18:3c:4e:fd: f5:79:29:64:2a:5e:1c:79:a3:e3:28:06:b4:a2:67:33:8a:60: 5c:e0:84:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3NkYyMjZDMjE4 OEFBMTU2RjAeFw0yNTA4MDYyMzIxNDlaFw0yNTA4MTMyMzIxNDlaMBgxFjAUBgNV BAMTDTY4OTNlMzhkLTk0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1xBtV2CNtzbwJ2gGS2l+XS3XhFJSolYVZdKDGS3bfXCAI84WFg5Bmf5XR7zYL pnmuJ4fY9bzI1TBl7bHnC6E+etrMMjVSyRNyGIOiq8EtrM5aCGiW6XmNX549rl9/ kjpoai9GE8qP8fgMrO4JUxeV2zh/ZYlXiNuymnKFGU1yQRx6JJAc/NHviZ3lhigl +ZVURZXrvZWDMEl6KE4ASHt5n/tScKHPAAM8ZLF2BMZSvtmsuPQPd0LPGk0NKdv9 i+DpPM5cbBA1/qut7zr0Onxd4RqbSBNj62PrypJUo6biH0xi131c4N/HNg9X0nLH COe7zppHQr8YxBEtsZ1VCjsnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGd+vt5A0 GT4uOq7+6k9PexJ5jXQwHwYDVR0jBBgwFoAUaEE9QfYAXgMW4OJXbyJsIYiqFW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQTgyL0Y2OTlFMzU0Q0Yx MjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVFOVFmWUFYZ01XNE9KWGJ5SnNJWWlxRlc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QTgyL0Y2OTlFMzU0Q0YxMjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdN VzRPSlhieUpzSVlpcUZXOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACcoOQgJyWazg5hoJVV3sP2hVOcnLSxPfBAHqn4lYQE+i+xxvoAm4f2m tQND1tFbpPJeBKFo6bdY0C3rYTrXcDlSsY5nE0qQ4OzVWk0YxRHOEQLaHGsmhY5r uljapvhT524H7LXaWMGNasu2HQGj+PCtvCxh99ep0lKkeksUJWTIhMnZqIPVLobb mhpikV32tKdohzOvHOlemOdCHzlV1Q+/WOCLVKgVpPy01IFqWiobZq7VIi59MKPk qUwaRodTiRTdtgsmk73sgli+HX39SyoaEbdKMMpiWcBpYCS2b16uTdVV5A1vGDxO /fV5KWQqXhx5o+MoBrSiZzOKYFzghGE= -----END CERTIFICATE-----Generated at Fri Aug 8 20:59:07 2025 by rpki-client