$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json) Hash identifier: iaUd/Y4k6WT+XVt+HeQoKJG5ejklWvs+6UJTk303oMw= Subject key identifier: 4D:E3:9C:C4:41:A8:74:AB:B8:20:1A:BB:67:E3:21:FC:E8:28:B6:8A Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft Manifest number: 01C2 Signing time: Thu 07 Aug 2025 03:29:45 +0000 Manifest this update: Thu 07 Aug 2025 03:29:44 +0000 Manifest next update: Thu 14 Aug 2025 03:29:44 +0000 Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: Ivv3R7uwQYKEhZPpl/0U6hop1WJUDYzA59udxK6zrWg=) 2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: frHxqt/yG7rr6fCbelfcQdfPa8QFjBnwgHPUnZu57so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455 Validity Not Before: Aug 7 03:29:44 2025 GMT Not After : Aug 14 03:29:44 2025 GMT Subject: CN=68941da9-fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e7:6c:10:e1:90:36:5b:79:2b:50:97:a8:a8: 8b:0c:ce:25:59:22:21:3e:23:7f:92:94:3a:8b:c1: 4d:fb:d4:3f:b8:2a:61:cc:67:5c:5f:9f:de:85:b6: 7f:52:0f:08:36:ca:80:2e:40:f4:d7:bb:09:94:3f: ac:ab:be:0b:8f:6c:04:b4:73:b6:fd:c2:2d:44:42: e0:c3:a4:47:d7:27:de:2c:2b:88:ef:91:5a:2f:d1: 59:2e:12:b7:3a:58:e0:78:73:62:37:8b:5a:fa:0b: cf:4c:e4:2d:84:69:4a:00:5a:ef:9b:57:90:9b:63: 19:8d:c6:d3:ef:08:4e:76:a5:ea:61:ec:6c:7a:ae: d0:40:fd:28:bd:c8:6c:c5:29:a9:fd:97:72:c5:c9: d7:ba:d0:91:5e:16:f8:41:c4:df:ec:7e:02:7e:0a: 37:82:68:bb:80:00:b8:3b:38:3a:a9:5e:a4:a0:e6: 38:dd:58:c6:30:0d:a9:9d:eb:ba:fc:4f:d8:6d:3a: 2f:20:cf:af:29:d5:45:ad:98:34:12:3e:30:8e:f2: 60:d3:fe:bc:52:dd:9c:70:93:53:3e:70:c5:23:9f: ee:04:af:f0:c4:2f:5d:7b:fc:1a:f1:27:04:31:f4: 75:07:3b:36:20:8b:4d:3e:1f:3e:0a:0b:ba:1d:cd: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E3:9C:C4:41:A8:74:AB:B8:20:1A:BB:67:E3:21:FC:E8:28:B6:8A X509v3 Authority Key Identifier: keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b0:6b:55:54:4c:a6:dc:cc:66:3c:e3:67:61:dd:fa:7e:30: fb:23:4d:78:ed:0d:59:f0:90:78:6e:ce:54:e2:7c:e6:e5:df: 46:55:21:53:c4:cc:60:2e:03:d2:78:16:c9:7f:42:b3:1c:15: ad:51:6c:8e:f6:b3:22:5a:ea:14:7a:d0:85:36:80:05:a3:f9: a3:ac:e9:3a:98:1f:8b:fd:77:23:82:d1:04:1e:f0:c1:85:2d: 53:b0:76:f2:54:fb:36:14:c3:93:26:6e:c7:ac:8e:8e:4a:0d: 3f:01:a0:c3:92:39:59:96:7a:d3:a0:6e:a0:9c:a4:7e:15:de: 57:d1:87:a4:31:ac:e4:ce:17:4a:79:9a:78:33:02:fe:b0:ff: c2:b7:95:94:90:23:88:af:a3:20:c2:32:ba:75:99:78:c3:0d: 85:a8:89:25:59:c5:20:ec:75:d7:14:d7:f1:5b:36:c2:5a:fb: 16:b1:2c:dd:39:f8:90:46:56:83:fb:ff:e1:25:a3:fd:21:61: ce:b3:40:80:7d:89:6a:13:88:95:ef:69:73:13:25:d9:f2:01: 23:ba:ca:d5:9a:5d:54:6d:7c:b7:98:31:ab:7d:ed:d0:46:07: aa:46:16:c2:34:78:90:11:67:41:68:a9:3e:07:e9:c0:b1:d4: 17:3e:73:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKDQ2OEM2QTc5MkFCQjNFNDVGRUVFMjIyOEQyOEU3ODAz MTM3MkI0NTUwHhcNMjUwODA3MDMyOTQ0WhcNMjUwODE0MDMyOTQ0WjAYMRYwFAYD VQQDEw02ODk0MWRhOS1mYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+dsEOGQNlt5K1CXqKiLDM4lWSIhPiN/kpQ6i8FN+9Q/uCphzGdcX5/ehbZ/ Ug8INsqALkD017sJlD+sq74Lj2wEtHO2/cItRELgw6RH1yfeLCuI75FaL9FZLhK3 OljgeHNiN4ta+gvPTOQthGlKAFrvm1eQm2MZjcbT7whOdqXqYexseq7QQP0ovchs xSmp/ZdyxcnXutCRXhb4QcTf7H4Cfgo3gmi7gAC4Ozg6qV6koOY43VjGMA2pneu6 /E/YbTovIM+vKdVFrZg0Ej4wjvJg0/68Ut2ccJNTPnDFI5/uBK/wxC9de/wa8ScE MfR1Bzs2IItNPh8+Cgu6Hc2t5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3jnMRB qHSruCAau2fjIfzoKLaKMB8GA1UdIwQYMBaAFEaMankquz5F/u4iKNKOeAMTcrRV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9CREFEQTg2MEND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1BrWC03aUlvMG81NEF4Tnl0 RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JveHFlU3E3UGtYLTdpSW8wbzU0QXhOeXRGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9CREFEQTg2MENDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi9Sb3hxZVNxN1Br WC03aUlvMG81NEF4Tnl0RlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdsGtVVEym3MxmPONnYd36fjD7I0147Q1Z8JB4bs5U4nzm5d9GVSFT xMxgLgPSeBbJf0KzHBWtUWyO9rMiWuoUetCFNoAFo/mjrOk6mB+L/XcjgtEEHvDB hS1TsHbyVPs2FMOTJm7HrI6OSg0/AaDDkjlZlnrToG6gnKR+Fd5X0YekMazkzhdK eZp4MwL+sP/Ct5WUkCOIr6MgwjK6dZl4ww2FqIklWcUg7HXXFNfxWzbCWvsWsSzd OfiQRlaD+//hJaP9IWHOs0CAfYlqE4iV72lzEyXZ8gEjusrVml1UbXy3mDGrfe3Q RgeqRhbCNHiQEWdBaKk+B+nAsdQXPnOz -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:08 2025 by rpki-client