$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: Lt2fu31k37UVGO5qMC1lLLT8rRT4FlVvbcGwDze5Yts= Subject key identifier: 32:E7:91:B1:4E:01:7D:92:0A:12:E5:05:B5:AD:B6:DA:98:A7:01:2B Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 08D2 Signing time: Fri 08 Aug 2025 20:52:49 +0000 Manifest this update: Fri 08 Aug 2025 20:52:48 +0000 Manifest next update: Fri 15 Aug 2025 20:52:48 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: bXcGWx6xntoAyb3EjmMJqIT73VmsKy4KkybOifsfQxo=) 2: CDD4DA8E298311F0BD5B4B35C4F9AE02.roa (hash: iP/ASGN9KdZyYFGKnxTAiQtkxJveg1GRV/nsSZO4Yjg=) 3: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=) 4: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=) 5: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=) 6: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Aug 8 20:52:48 2025 GMT Not After : Aug 15 20:52:48 2025 GMT Subject: CN=689663a1-74a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:c2:ee:64:a8:13:6f:cd:d8:50:5c:19:02: 21:14:bf:90:f8:93:69:9b:10:82:92:8a:fd:48:a0: ae:b4:6f:ee:dd:14:f7:86:83:92:2d:b3:c6:fb:98: b0:61:dc:7a:7e:e2:be:a8:5c:f6:1a:ee:14:37:9a: 21:04:78:54:52:53:d3:8a:06:84:e0:64:7d:d3:1e: 18:b9:5f:3d:21:29:55:59:29:ee:77:65:83:09:ea: 03:a8:49:39:05:20:64:72:97:ed:75:40:24:0f:c5: 4f:0c:91:f0:00:a8:ff:cb:48:ed:f1:66:9c:fc:0f: 70:2e:a0:c4:0f:c8:89:25:a8:49:a0:26:3a:89:2b: 25:43:08:79:a2:f9:02:46:5f:13:95:5f:e9:db:32: d4:bb:ac:7f:b8:ed:ee:08:69:b4:50:35:86:b4:e3: 19:7c:09:d7:dc:18:5f:80:3b:81:e0:32:f4:46:6b: 10:66:79:20:20:47:14:8e:77:da:a0:dc:35:80:e4: 9b:1a:02:92:2a:de:76:85:e9:d2:43:ee:4e:78:3f: 95:ad:cb:20:e2:0a:ba:3b:06:78:47:82:aa:e2:23: af:85:a0:0b:80:ce:21:d5:27:4d:ba:5c:9e:00:6e: cc:e3:61:fc:30:c7:a4:50:c9:f2:ae:18:44:f4:14: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E7:91:B1:4E:01:7D:92:0A:12:E5:05:B5:AD:B6:DA:98:A7:01:2B X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e9:13:e3:a6:94:81:8f:1a:28:34:00:36:20:2b:26:3a:54: 31:38:d1:c3:00:d2:f7:19:df:ff:8c:c3:dd:7a:86:49:7e:72: e7:3b:f3:3d:e9:75:6a:35:18:43:fc:a0:a8:32:01:f1:e6:b9: a9:d6:ea:15:a7:9f:84:0c:ba:4d:96:e1:91:ca:74:02:1e:3a: 57:a9:73:51:d1:92:32:89:15:62:e9:d8:06:a1:e4:96:2d:35: 5b:a1:4d:a3:4a:69:fd:55:73:44:63:3f:0e:3c:4f:04:13:1a: dd:85:78:67:f0:68:45:93:67:fb:79:c6:b9:55:95:05:9e:f7: 9b:39:c8:d8:e1:67:9e:cb:ee:cc:b0:8f:30:21:14:64:e2:2b: 7e:c6:77:2f:cb:28:69:12:6e:82:4f:3f:8e:74:3e:05:49:13: 72:ab:0d:db:26:9d:45:30:bd:43:67:e4:48:cf:39:51:05:33: fa:27:30:fb:0d:d4:9d:1f:70:9f:54:c7:b0:22:8d:b8:22:8a: 21:4f:34:90:d4:f1:15:38:22:7c:9b:29:1c:e9:ec:ad:a2:1f: c4:0c:11:fb:09:44:8e:1c:a5:6d:19:3c:38:a3:b5:33:24:37: 2c:66:02:46:2a:c1:d1:c0:28:a0:09:75:42:e3:79:37:ae:80: 0c:1d:1f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUwODA4MjA1MjQ4WhcNMjUwODE1MjA1MjQ4WjAYMRYwFAYD VQQDEw02ODk2NjNhMS03NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugjC7mSoE2/N2FBcGQIhFL+Q+JNpmxCCkor9SKCutG/u3RT3hoOSLbPG+5iw Ydx6fuK+qFz2Gu4UN5ohBHhUUlPTigaE4GR90x4YuV89ISlVWSnud2WDCeoDqEk5 BSBkcpftdUAkD8VPDJHwAKj/y0jt8Wac/A9wLqDED8iJJahJoCY6iSslQwh5ovkC Rl8TlV/p2zLUu6x/uO3uCGm0UDWGtOMZfAnX3BhfgDuB4DL0RmsQZnkgIEcUjnfa oNw1gOSbGgKSKt52henSQ+5OeD+Vrcsg4gq6OwZ4R4Kq4iOvhaALgM4h1SdNulye AG7M42H8MMekUMnyrhhE9BQtPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLnkbFO AX2SChLlBbWtttqYpwErMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe6RPjppSBjxooNAA2ICsmOlQxONHDANL3Gd//jMPdeoZJfnLnO/M9 6XVqNRhD/KCoMgHx5rmp1uoVp5+EDLpNluGRynQCHjpXqXNR0ZIyiRVi6dgGoeSW LTVboU2jSmn9VXNEYz8OPE8EExrdhXhn8GhFk2f7eca5VZUFnvebOcjY4Weey+7M sI8wIRRk4it+xncvyyhpEm6CTz+OdD4FSRNyqw3bJp1FML1DZ+RIzzlRBTP6JzD7 DdSdH3CfVMewIo24IoohTzSQ1PEVOCJ8mykc6eytoh/EDBH7CUSOHKVtGTw4o7Uz JDcsZgJGKsHRwCigCXVC43k3roAMHR+0 -----END CERTIFICATE-----Generated at Sun Aug 10 18:51:38 2025 by rpki-client