$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: 4RGvqn8oF1fwYYk/xHghTJsLtYGp7ofMwBz/iBz+x1U= Subject key identifier: AF:32:37:3A:34:43:CB:F7:97:E1:14:2F:C0:CF:A3:40:E1:8C:2A:26 Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: 22 Signing time: Sat 09 Aug 2025 08:21:58 +0000 Manifest this update: Sat 09 Aug 2025 08:21:58 +0000 Manifest next update: Sat 16 Aug 2025 08:21:58 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: Qy2gTSpI5ldS/ZYC7tb1kmgAExooJGStXrt3biTB19c=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: yl2cL3cHIW46lNiv/5lOmjEF6XN4CiYiCi/4pbPGnEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Aug 9 08:21:58 2025 GMT Not After : Aug 16 08:21:58 2025 GMT Subject: CN=68970526-60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:12:91:dd:c8:c6:53:1a:2b:cb:e9:32:a7: 5d:a5:da:a0:cf:2c:b1:ab:f2:3f:b2:5c:38:8e:e1: 0c:30:a4:5e:cc:de:c6:5e:54:ce:02:94:32:ee:17: 8b:a0:5e:96:b8:76:db:4b:f7:ee:a3:7f:c3:0e:bc: 43:f3:58:9c:2f:f8:e2:f0:1d:a1:d0:9a:d4:cb:d3: e9:75:a7:84:22:0a:55:4c:fc:0b:86:b6:ea:11:74: 7d:14:b9:06:b8:d3:85:b6:29:f8:d3:ae:e3:9f:35: 3c:f3:b4:e0:9c:11:36:ab:48:18:9b:94:2d:15:a1: 7b:fe:7f:68:28:08:26:77:38:b9:6d:56:9b:c9:9f: e6:76:ff:6b:2e:d5:e0:fc:e5:3b:ed:45:40:36:b2: 11:80:12:f9:f7:5f:f3:3a:83:3c:72:1e:fd:4e:39: 43:19:2b:4c:5a:f2:5a:bf:9d:95:c3:fb:75:15:2c: 0c:c4:20:7c:2a:81:a5:fd:2c:ec:48:37:dc:53:3e: 3f:d0:83:70:75:8a:3a:c0:b6:f8:ba:95:db:33:76: b9:a3:2e:c0:56:aa:e8:14:7c:ad:87:ce:d3:e4:96: 97:e1:fe:25:81:87:a9:8d:44:75:f8:e4:1a:75:93: 3c:5c:2c:b0:e5:5b:8b:6a:12:d1:8d:dc:40:e9:71: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:37:3A:34:43:CB:F7:97:E1:14:2F:C0:CF:A3:40:E1:8C:2A:26 X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:a4:c7:b5:e4:40:f2:d1:40:cb:4c:a4:4a:7d:84:5f:01: ad:c1:63:e5:dd:75:0f:9e:43:fd:da:0b:bf:fa:f3:92:27:08: 10:2d:b9:42:3f:25:a2:e9:bb:a7:f4:dc:fd:d3:db:be:bc:89: 6f:8f:ab:3b:f0:bb:de:b0:15:d8:15:90:d9:26:b2:b6:78:c6: b5:2d:d9:bc:05:dd:e7:c8:64:d2:2c:bd:e6:37:bc:21:ed:1f: c9:da:11:d2:8b:ce:1b:4f:e5:63:ea:f5:61:b8:27:23:42:33: ae:37:f9:63:35:4b:9d:c2:b6:87:64:38:60:16:21:94:d2:86: 6d:40:d2:d5:a5:79:ef:24:87:a3:33:48:14:c5:50:81:f7:3a: 3e:e0:21:cb:4d:2c:37:39:a2:34:da:69:5c:a8:44:34:00:0f: b7:86:e8:25:a9:ec:69:10:28:ec:cb:93:60:85:fb:20:e8:f8: 7d:9c:4d:96:54:2c:b2:02:b7:71:d7:e7:2b:98:b1:a3:09:48: c4:8f:19:7a:bd:94:c3:64:84:4f:03:13:88:41:cc:11:29:b6: 82:27:63:93:84:b8:71:f2:06:ba:45:84:59:b3:84:e8:75:24: 19:2f:c9:1b:d3:e2:53:e8:18:e0:26:a1:7e:e2:59:1c:ab:33: 38:78:f8:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QkEyNzExMC8GA1UEBRMoNzc3RDU0MEUxNjFGQTY3MUZCMjQ1OEEzM0ZGRTRCRjMz RDZBNzAxNTAeFw0yNTA4MDkwODIxNThaFw0yNTA4MTYwODIxNThaMBgxFjAUBgNV BAMTDTY4OTcwNTI2LTYwYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDchxKR3cjGUxory+kyp12l2qDPLLGr8j+yXDiO4QwwpF7M3sZeVM4ClDLuF4ug Xpa4dttL9+6jf8MOvEPzWJwv+OLwHaHQmtTL0+l1p4QiClVM/AuGtuoRdH0UuQa4 04W2KfjTruOfNTzztOCcETarSBiblC0VoXv+f2goCCZ3OLltVpvJn+Z2/2su1eD8 5TvtRUA2shGAEvn3X/M6gzxyHv1OOUMZK0xa8lq/nZXD+3UVLAzEIHwqgaX9LOxI N9xTPj/Qg3B1ijrAtvi6ldszdrmjLsBWqugUfK2HztPklpfh/iWBh6mNRHX45Bp1 kzxcLLDlW4tqEtGN3EDpccEHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrzI3OjRD y/eX4RQvwM+jQOGMKiYwHwYDVR0jBBgwFoAUd31UDhYfpnH7JFijP/5L8z1qcBUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQTI3L0VBNEU2NjlDNDU4 QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNC VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMxVURoWWZwbkg3SkZpalBfNUw4ejFxY0JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC QTI3L0VBNEU2NjlDNDU4QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5I N0pGaWpQXzVMOHoxcWNCVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIk2pMe15EDy0UDLTKRKfYRfAa3BY+XddQ+eQ/3aC7/685InCBAtuUI/ JaLpu6f03P3T2768iW+Pqzvwu96wFdgVkNkmsrZ4xrUt2bwF3efIZNIsveY3vCHt H8naEdKLzhtP5WPq9WG4JyNCM643+WM1S53CtodkOGAWIZTShm1A0tWlee8kh6Mz SBTFUIH3Oj7gIctNLDc5ojTaaVyoRDQAD7eG6CWp7GkQKOzLk2CF+yDo+H2cTZZU LLICt3HX5yuYsaMJSMSPGXq9lMNkhE8DE4hBzBEptoInY5OEuHHyBrpFhFmzhOh1 JBkvyRvT4lPoGOAmoX7iWRyrMzh4+HM= -----END CERTIFICATE-----Generated at Mon Aug 11 07:29:35 2025 by rpki-client