$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: up50BZbKXJvpd2KuW3WF0LeXOxsWRiuwGrmrE89xAwM= Subject key identifier: 98:C5:A0:EC:D6:FB:3F:3A:52:33:DA:31:37:3D:C5:5F:8D:75:08:52 Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 07AC Signing time: Mon 04 Aug 2025 21:39:06 +0000 Manifest this update: Mon 04 Aug 2025 21:39:06 +0000 Manifest next update: Mon 11 Aug 2025 21:39:06 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: LjElE3cPzwX30MBogY5NJ2Ocx0dfLPvOVPxFJEkoEBA=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: jLCgtQuVltt3/VZJ3eAvwdfbtQsE4HY8zDX+9B0R7hY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Aug 4 21:39:06 2025 GMT Not After : Aug 11 21:39:06 2025 GMT Subject: CN=6891287a-2a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:a5:30:88:e2:ea:08:4c:84:49:ef:00:ea: 4a:18:0a:56:c6:b7:8a:6f:44:91:3e:92:2f:0a:41: b5:8e:6e:b1:74:46:11:6f:6e:e8:46:08:20:63:1b: 71:ea:35:33:78:d3:9e:2b:ac:5a:f4:fc:56:6e:5c: e3:b7:08:da:92:80:1e:02:62:7f:0e:4a:da:a1:aa: 99:9d:3d:ed:50:c3:0d:20:c9:d8:de:d5:71:eb:21: 4c:f8:f0:eb:34:2b:5d:8d:72:9a:cc:b0:8e:80:22: 58:61:0c:4e:39:bf:95:b8:71:97:32:bc:1a:fe:d4: 5c:7f:79:93:e5:30:02:26:a6:80:99:c6:cc:02:15: 4a:50:18:4f:9a:b5:8d:bc:ce:43:27:3f:16:09:9d: a3:c4:f1:72:b8:d7:c1:03:20:ea:30:be:1b:83:8c: 95:cc:e8:93:e8:aa:32:d2:f8:75:7b:e8:5d:f0:58: 3b:6b:c1:75:b5:7f:00:3a:4c:06:de:8d:4f:7d:d5: 3c:a5:fb:8a:fc:7b:71:7b:26:32:14:58:c7:0f:9e: 31:be:2b:b6:06:13:90:3a:c8:5b:fc:38:79:68:08: fa:90:2f:21:bc:d6:aa:ef:9b:32:15:40:8e:a3:d8: 9e:5e:34:1f:67:fb:e1:9c:cb:d1:06:ed:7b:74:8f: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:A0:EC:D6:FB:3F:3A:52:33:DA:31:37:3D:C5:5F:8D:75:08:52 X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:02:94:8e:21:5d:d0:6b:b0:06:fe:5f:d3:d5:24:9e:32:bd: 78:67:fd:c0:19:79:93:78:91:02:5f:bb:38:c1:03:1f:0f:b1: 29:bb:6f:f5:33:c6:85:47:f7:a3:84:69:e1:86:67:a2:7f:c4: 29:c7:1c:9c:2c:4d:0c:93:09:59:5a:85:72:2a:aa:7f:05:6d: 5f:3e:b0:82:18:a6:de:83:20:35:93:49:cb:2b:20:37:a3:f0: a6:a2:3e:65:92:7a:f5:b5:47:39:19:f8:48:3b:ac:4a:f1:d4: eb:a6:7e:54:9a:64:70:60:b7:14:a4:7d:d2:13:db:33:d5:da: 4d:b5:8c:f4:b4:27:64:8d:3f:f9:e9:79:c7:1f:db:03:2c:70: 3a:ef:84:5f:b0:f9:c7:a9:4a:99:70:bd:67:f6:06:22:84:fc: 71:ab:e4:94:f5:d6:08:d4:e5:fe:58:ce:81:7c:25:cc:c0:50: d2:6f:af:ea:27:47:ab:4c:31:1c:81:f2:27:aa:1a:b7:44:7c: c5:0c:ca:a1:f3:b6:fa:80:4b:7c:62:c4:a6:2d:6b:8a:6e:a6: 9b:73:9b:76:a1:2a:5a:66:04:12:82:81:bd:40:72:3b:b7:a5: dd:48:30:25:10:46:f1:59:db:21:05:19:3a:a4:df:26:a1:47: bb:e5:12:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjUwODA0MjEzOTA2WhcNMjUwODExMjEzOTA2WjAYMRYwFAYD VQQDEw02ODkxMjg3YS0yYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf+lMIji6ghMhEnvAOpKGApWxreKb0SRPpIvCkG1jm6xdEYRb27oRgggYxtx 6jUzeNOeK6xa9PxWblzjtwjakoAeAmJ/DkraoaqZnT3tUMMNIMnY3tVx6yFM+PDr NCtdjXKazLCOgCJYYQxOOb+VuHGXMrwa/tRcf3mT5TACJqaAmcbMAhVKUBhPmrWN vM5DJz8WCZ2jxPFyuNfBAyDqML4bg4yVzOiT6Koy0vh1e+hd8Fg7a8F1tX8AOkwG 3o1PfdU8pfuK/HtxeyYyFFjHD54xviu2BhOQOshb/Dh5aAj6kC8hvNaq75syFUCO o9ieXjQfZ/vhnMvRBu17dI/JiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjFoOzW +z86UjPaMTc9xV+NdQhSMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHApSOIV3Qa7AG/l/T1SSeMr14Z/3AGXmTeJECX7s4wQMfD7Epu2/1 M8aFR/ejhGnhhmeif8QpxxycLE0MkwlZWoVyKqp/BW1fPrCCGKbegyA1k0nLKyA3 o/Cmoj5lknr1tUc5GfhIO6xK8dTrpn5UmmRwYLcUpH3SE9sz1dpNtYz0tCdkjT/5 6XnHH9sDLHA674RfsPnHqUqZcL1n9gYihPxxq+SU9dYI1OX+WM6BfCXMwFDSb6/q J0erTDEcgfInqhq3RHzFDMqh87b6gEt8YsSmLWuKbqabc5t2oSpaZgQSgoG9QHI7 t6XdSDAlEEbxWdshBRk6pN8moUe75RKl -----END CERTIFICATE-----Generated at Wed Aug 6 09:28:34 2025 by rpki-client