$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: WDnoncGxUiVTJoU4HGbmccvo5zVpCoccskELUFA7n48= Subject key identifier: C6:9F:E6:47:55:C9:3B:BD:AE:94:C9:7A:FA:E4:02:83:CE:02:26:01 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0DC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0DBE Signing time: Fri 08 Aug 2025 18:06:39 +0000 Manifest this update: Fri 08 Aug 2025 18:06:39 +0000 Manifest next update: Fri 15 Aug 2025 18:06:39 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: JEBJ4o+LQJOOFpTcc75WTiJ6FMgTEB8b90PvFdYkEGo=) 2: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (hash: Bv4wN8OF2Bm5se8xe4Mu+kG3hxKKklF4aauYgHDM/QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3526 (0xdc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Aug 8 18:06:39 2025 GMT Not After : Aug 15 18:06:39 2025 GMT Subject: CN=68963caf-f96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:16:c4:10:c3:5c:28:73:87:ab:48:b4:74:2c: b5:c4:21:83:2c:a9:19:ef:fe:2b:98:d5:61:d6:14: 0c:5b:d1:79:0f:f9:f4:6f:1b:e1:97:f9:a1:3d:e5: 8e:4e:d8:57:4f:44:c0:21:03:81:4d:89:e5:9b:78: 7b:8b:fc:f4:cb:b7:d4:e3:0f:c5:19:d1:c4:ab:05: 65:1e:6a:36:59:e6:1a:41:fd:c3:82:c8:92:c7:e9: 92:2a:98:23:c0:59:8a:5b:92:74:4e:f6:3d:cc:e7: 39:c1:df:22:c8:99:af:b4:b6:81:3a:0e:a8:e4:f8: 14:d3:fd:83:97:08:b8:4a:a6:6c:34:2f:36:48:61: 9c:b6:08:e4:0b:92:62:e3:11:ec:f9:15:98:e9:f6: 9d:ab:9d:36:05:6e:ae:98:20:73:fc:4a:1b:3f:cc: 27:a1:a1:13:d1:75:f5:6d:68:d1:52:64:c4:49:ab: 07:ae:a2:b6:d1:c2:3d:e8:27:20:03:89:33:55:02: d1:1a:ed:e4:91:ce:5a:d0:97:14:7c:17:b0:f8:f3: 1f:7b:2c:7b:c4:87:d0:21:4a:56:b6:4f:f6:a1:2f: 26:a3:c7:52:aa:36:e9:66:69:75:a7:c2:59:55:0c: 59:4d:01:e0:07:cb:3e:6b:a4:a1:52:30:77:bc:3a: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:E6:47:55:C9:3B:BD:AE:94:C9:7A:FA:E4:02:83:CE:02:26:01 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ab:f1:86:53:47:e4:de:14:80:60:40:d4:59:f9:90:be:6b: db:fd:aa:56:90:8d:35:79:f0:4d:66:02:aa:08:10:ef:45:94: d1:f4:0d:7b:34:91:37:83:75:52:cb:44:e3:01:97:50:02:d7: 91:f4:17:74:ec:45:92:4b:37:0d:e2:7c:ac:ec:06:68:c0:1a: 68:3d:64:50:37:db:cf:56:b1:e9:c2:c7:93:13:49:fd:1e:d7: dc:4d:55:d2:76:12:a9:7f:53:97:74:c3:a7:6c:c4:62:a9:2b: 2d:69:02:b3:e5:ea:e8:3b:ab:7d:bb:38:59:1f:57:23:2e:cf: 37:ef:ed:e1:7e:a8:9d:8a:97:3b:43:fe:b3:a9:9c:89:89:bd: a4:16:b6:11:13:bb:70:53:5f:2c:b4:83:23:78:a0:80:c9:09: e3:79:45:2b:82:3f:56:52:60:66:55:72:6e:ca:15:27:43:c3: 66:ea:78:a9:0e:96:73:db:9c:4c:b9:05:f1:61:6a:89:0b:d3: d6:71:45:b0:b6:bd:03:3c:56:a1:7a:bb:1b:1e:d0:09:a9:1a: 4f:b9:42:3d:cd:bd:52:f8:aa:c3:b2:ef:1c:ec:9a:9e:01:18: 5a:3f:83:1f:f8:d6:a1:6f:6e:3f:08:45:3c:a1:4f:73:c8:f1: e5:9e:e5:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjUwODA4MTgwNjM5WhcNMjUwODE1MTgwNjM5WjAYMRYwFAYD VQQDEw02ODk2M2NhZi1mOTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hbEEMNcKHOHq0i0dCy1xCGDLKkZ7/4rmNVh1hQMW9F5D/n0bxvhl/mhPeWO TthXT0TAIQOBTYnlm3h7i/z0y7fU4w/FGdHEqwVlHmo2WeYaQf3DgsiSx+mSKpgj wFmKW5J0TvY9zOc5wd8iyJmvtLaBOg6o5PgU0/2Dlwi4SqZsNC82SGGctgjkC5Ji 4xHs+RWY6fadq502BW6umCBz/EobP8wnoaET0XX1bWjRUmTESasHrqK20cI96Ccg A4kzVQLRGu3kkc5a0JcUfBew+PMfeyx7xIfQIUpWtk/2oS8mo8dSqjbpZml1p8JZ VQxZTQHgB8s+a6ShUjB3vDqo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaf5kdV yTu9rpTJevrkAoPOAiYBMB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNq/GGU0fk3hSAYEDUWfmQvmvb/apWkI01efBNZgKqCBDvRZTR9A17 NJE3g3VSy0TjAZdQAteR9Bd07EWSSzcN4nys7AZowBpoPWRQN9vPVrHpwseTE0n9 HtfcTVXSdhKpf1OXdMOnbMRiqSstaQKz5eroO6t9uzhZH1cjLs837+3hfqidipc7 Q/6zqZyJib2kFrYRE7twU18stIMjeKCAyQnjeUUrgj9WUmBmVXJuyhUnQ8Nm6nip DpZz25xMuQXxYWqJC9PWcUWwtr0DPFahersbHtAJqRpPuUI9zb1S+KrDsu8c7Jqe ARhaP4Mf+Nahb24/CEU8oU9zyPHlnuUP -----END CERTIFICATE-----Generated at Sun Aug 10 05:44:22 2025 by rpki-client