$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json) Hash identifier: WUFhVUU/5ir4vY3ViW64iWVbqfR4T0aNreNQyoNPNPc= Subject key identifier: 77:3D:18:D2:F9:50:C8:3B:DE:29:31:E2:E2:65:2A:C0:27:1A:DE:88 Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft Manifest number: 040F Signing time: Sun 03 Aug 2025 00:59:24 +0000 Manifest this update: Sun 03 Aug 2025 00:59:24 +0000 Manifest next update: Sun 10 Aug 2025 00:59:24 +0000 Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: vP3ma0khUUvrymMfYTAei0TOWD/WDiKu5cLmxzwgYM0=) 2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: n7VFHzeUDeBuyUWNvkox2wNIAXMws0upgX8rIok/ab4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952 Validity Not Before: Aug 3 00:59:24 2025 GMT Not After : Aug 10 00:59:24 2025 GMT Subject: CN=688eb46c-ebea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:82:fd:e0:2a:40:8d:95:e2:5c:45:66:72: 98:88:2a:ed:20:2b:8e:cb:56:69:c2:70:7a:83:9b: a5:a9:37:4a:24:d6:01:25:05:1f:d7:0b:8c:6d:27: 99:08:dd:25:02:e3:4b:4c:3b:d5:a5:4f:10:61:7c: f8:e3:80:89:3b:ea:a6:e6:ea:4e:22:ce:6f:4c:4d: 57:84:d8:73:a4:fd:fd:60:bb:a1:92:7a:b0:64:0c: f3:d0:40:06:f1:e2:45:09:f8:3a:d6:ce:db:a3:44: 95:a1:1c:64:db:9f:78:e2:1d:e6:a0:20:1b:a8:b5: 3b:8b:bb:77:6a:6e:17:c7:97:89:54:be:1d:b6:b7: 3b:8d:2b:99:69:0e:72:73:83:a5:d6:42:df:b9:c4: 7d:b2:5b:8c:4d:27:ca:67:98:9b:9f:9b:1a:f3:96: 3b:d4:68:b5:bd:3e:89:87:38:39:5b:21:65:a6:4c: df:17:33:5c:fe:5f:d6:e5:93:b5:49:87:34:69:09: 5d:9e:f8:ef:c3:42:9e:c8:f3:69:ff:2d:7a:8b:72: 5e:62:f1:52:35:b3:d4:31:2b:e2:16:51:cd:fd:5b: f0:8b:89:04:04:c4:c9:ff:8a:5d:19:f7:78:f0:55: ac:53:17:7e:24:69:ac:39:4b:39:f9:a4:2d:9f:a6: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:18:D2:F9:50:C8:3B:DE:29:31:E2:E2:65:2A:C0:27:1A:DE:88 X509v3 Authority Key Identifier: keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5e:6a:51:97:87:c3:d8:8a:d7:7c:75:bd:16:a1:67:1d:da: 13:cb:7b:e7:ea:5f:c2:b1:64:e2:bd:00:0b:56:7a:a8:9b:e2: 11:34:3b:51:35:c6:27:c8:c7:91:e9:0c:fb:e0:1c:11:53:1d: da:97:25:b0:91:a7:68:b7:0e:d8:5f:4a:99:7b:f0:3e:bf:14: 3f:67:ab:c8:82:72:8d:2d:e3:0e:ad:90:dc:cd:23:af:e2:49: 80:6f:c1:0c:98:43:e9:12:5b:a9:8b:62:b9:67:fb:07:26:67: 77:44:79:23:cf:2b:40:88:1c:3d:cb:e8:2d:ac:a0:23:53:af: bc:95:af:25:85:eb:0a:8e:c2:80:8a:84:01:f3:39:95:97:a2: f7:d5:42:e4:9a:6d:1d:0c:4a:0f:4c:35:fb:a9:90:3e:7b:19: 71:2a:19:5c:3b:8c:3c:cc:89:f8:75:c1:ce:91:35:54:2f:a9: b0:9a:93:e1:12:15:33:cc:5b:c5:a0:07:12:9f:3b:1c:ff:c0: fc:9f:46:d4:6b:cc:35:b1:a2:93:f3:c5:23:3f:30:61:a3:59: a9:ee:8c:56:d9:9d:bc:fb:62:6e:86:90:29:3d:c0:4c:52:2c: 11:07:f5:d7:18:e8:f7:69:60:e8:d4:31:c3:0c:44:c3:dd:40: f2:77:3d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVBNjIxMTAvBgNVBAUTKDg5RjU5NjExMDAzMEJEQzlCM0JBRDc2Q0ZEMDVDMzEy NDYxN0M5NTIwHhcNMjUwODAzMDA1OTI0WhcNMjUwODEwMDA1OTI0WjAYMRYwFAYD VQQDEw02ODhlYjQ2Yy1lYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8SaC/eAqQI2V4lxFZnKYiCrtICuOy1ZpwnB6g5ulqTdKJNYBJQUf1wuMbSeZ CN0lAuNLTDvVpU8QYXz444CJO+qm5upOIs5vTE1XhNhzpP39YLuhknqwZAzz0EAG 8eJFCfg61s7bo0SVoRxk25944h3moCAbqLU7i7t3am4Xx5eJVL4dtrc7jSuZaQ5y c4Ol1kLfucR9sluMTSfKZ5ibn5sa85Y71Gi1vT6Jhzg5WyFlpkzfFzNc/l/W5ZO1 SYc0aQldnvjvw0KeyPNp/y16i3JeYvFSNbPUMSviFlHN/Vvwi4kEBMTJ/4pdGfd4 8FWsUxd+JGmsOUs5+aQtn6YyzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHc9GNL5 UMg73ikx4uJlKsAnGt6IMB8GA1UdIwQYMBaAFIn1lhEAML3Js7rXbP0FwxJGF8lS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUE2Mi8xMTY4MjExQzgw NkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3ZjbXp1dGRzX1FYREVrWVh5 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9pZldXRVFBd3Zj bXp1dGRzX1FYREVrWVh5VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXmpRl4fD2IrXfHW9FqFnHdoTy3vn6l/CsWTivQALVnqom+IRNDtR NcYnyMeR6Qz74BwRUx3alyWwkadotw7YX0qZe/A+vxQ/Z6vIgnKNLeMOrZDczSOv 4kmAb8EMmEPpElupi2K5Z/sHJmd3RHkjzytAiBw9y+gtrKAjU6+8la8lhesKjsKA ioQB8zmVl6L31ULkmm0dDEoPTDX7qZA+exlxKhlcO4w8zIn4dcHOkTVUL6mwmpPh EhUzzFvFoAcSnzsc/8D8n0bUa8w1saKT88UjPzBho1mp7oxW2Z28+2JuhpApPcBM UiwRB/XXGOj3aWDo1DHDDETD3UDydz0d -----END CERTIFICATE-----Generated at Mon Aug 4 15:37:26 2025 by rpki-client