$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: QUr0xBgUQPPj27mhGKvenS1TzuWIpEsQX22hmZBqqUs= Subject key identifier: B0:2C:62:2D:F6:1A:D9:68:F9:CA:35:62:18:FE:31:45:7A:DB:9D:C7 Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 02CA Signing time: Thu 07 Aug 2025 01:59:54 +0000 Manifest this update: Thu 07 Aug 2025 01:59:54 +0000 Manifest next update: Thu 14 Aug 2025 01:59:54 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 4bIeo9FJP6EEBGD/xrx+cWc6KhVnMhSpqN24Sx/XARM=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: c4/EYmjgVUl4pjL+vaUj1o6O7r/FlcrHh8JpcWomXpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Aug 7 01:59:54 2025 GMT Not After : Aug 14 01:59:54 2025 GMT Subject: CN=6894089a-017f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:b0:19:03:c9:da:63:d3:1c:27:a9:7b:0c: d7:0d:62:ce:6d:95:70:cf:34:13:5a:10:bf:73:22: 64:15:e0:48:2f:09:e9:22:8b:b4:b4:bd:f4:92:8d: 46:5b:d4:4f:ca:13:15:95:cd:51:ff:d8:59:59:4c: c4:06:31:ea:42:b0:8c:74:45:60:b4:b5:2a:e1:fc: aa:42:4a:1b:90:c1:a5:3e:41:e7:00:0b:6e:e7:70: 47:89:4d:07:42:b7:f0:66:88:02:0a:f4:31:51:92: 7e:53:e7:b9:2c:90:2d:a5:72:ea:c7:2f:2f:c2:ca: 8e:01:20:a9:3a:db:44:91:9e:34:7b:ba:56:d8:5f: 0e:39:5b:86:ef:13:b7:77:e0:41:fe:95:d5:ac:cc: 77:d2:23:37:6a:57:60:97:b3:f2:6a:a2:d0:b0:f8: bb:f9:e4:e5:0d:b3:59:52:6a:67:64:df:6e:8b:33: e8:dc:db:b6:0b:10:f1:b5:5f:2c:5c:67:a1:1a:f4: 38:df:da:6d:fa:de:da:c3:ad:03:e3:dc:dc:91:9a: 5f:f7:64:17:e4:98:85:65:80:1b:5c:3b:f3:f4:bf: b7:fc:9b:e8:39:55:63:5a:1d:ab:2a:fc:0f:5c:32: 36:50:d4:40:aa:f6:f0:63:2e:d6:21:e4:5d:b4:b3: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2C:62:2D:F6:1A:D9:68:F9:CA:35:62:18:FE:31:45:7A:DB:9D:C7 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:4a:73:e2:ee:58:08:36:7b:ce:42:54:21:70:15:ca:7f:51: 42:1e:f9:e5:2f:2f:f8:67:02:0d:01:91:68:a4:5b:2b:ef:19: 7f:36:ca:ff:1f:e2:02:80:83:d0:bd:3d:08:ed:37:e4:92:9e: a6:28:d5:43:1e:90:8b:58:f7:b1:64:9e:cf:b9:84:eb:ba:41: a9:d4:9a:4f:2f:e1:1e:ce:16:b4:d5:67:74:5e:f0:23:03:b6: 7a:98:a7:d7:84:90:68:1d:9b:c1:06:20:15:30:09:47:d3:d2: ee:81:bd:8d:0c:eb:79:84:68:42:57:1e:10:c7:9f:4c:30:6b: c0:6b:2e:cb:9c:74:a8:cf:34:84:ca:96:c3:4a:29:a9:4b:94: 2c:0e:72:91:a9:23:5f:ac:4a:70:99:d3:08:8f:3c:e5:59:59: 65:d4:67:11:dc:73:95:b7:39:8f:15:dc:2d:47:04:cc:6f:40: c5:49:46:fc:59:aa:d5:c7:31:3f:35:92:7d:25:c4:cc:a1:71: d9:8e:db:a9:94:77:8f:06:90:31:80:36:25:e6:05:8f:d5:79: ae:1f:e3:25:d4:f2:95:0e:53:a8:14:24:a7:a3:77:43:71:b1: 5c:61:41:e8:5b:e6:80:32:d2:8e:f9:88:23:43:15:ff:da:ea: 8e:ac:7b:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjUwODA3MDE1OTU0WhcNMjUwODE0MDE1OTU0WjAYMRYwFAYD VQQDEw02ODk0MDg5YS0wMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2KwGQPJ2mPTHCepewzXDWLObZVwzzQTWhC/cyJkFeBILwnpIou0tL30ko1G W9RPyhMVlc1R/9hZWUzEBjHqQrCMdEVgtLUq4fyqQkobkMGlPkHnAAtu53BHiU0H QrfwZogCCvQxUZJ+U+e5LJAtpXLqxy8vwsqOASCpOttEkZ40e7pW2F8OOVuG7xO3 d+BB/pXVrMx30iM3aldgl7PyaqLQsPi7+eTlDbNZUmpnZN9uizPo3Nu2CxDxtV8s XGehGvQ439pt+t7aw60D49zckZpf92QX5JiFZYAbXDvz9L+3/JvoOVVjWh2rKvwP XDI2UNRAqvbwYy7WIeRdtLMfZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAsYi32 Gtlo+co1Yhj+MUV6253HMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrSnPi7lgINnvOQlQhcBXKf1FCHvnlLy/4ZwINAZFopFsr7xl/Nsr/ H+ICgIPQvT0I7Tfkkp6mKNVDHpCLWPexZJ7PuYTrukGp1JpPL+Eezha01Wd0XvAj A7Z6mKfXhJBoHZvBBiAVMAlH09Lugb2NDOt5hGhCVx4Qx59MMGvAay7LnHSozzSE ypbDSimpS5QsDnKRqSNfrEpwmdMIjzzlWVll1GcR3HOVtzmPFdwtRwTMb0DFSUb8 WarVxzE/NZJ9JcTMoXHZjtuplHePBpAxgDYl5gWP1XmuH+Ml1PKVDlOoFCSno3dD cbFcYUHoW+aAMtKO+YgjQxX/2uqOrHs5 -----END CERTIFICATE-----Generated at Sat Aug 9 02:57:59 2025 by rpki-client