$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: TQ6yahpnHvZduBDUlQNHxKCiecALXU7d5jMEOjp/yxU= Subject key identifier: D3:DD:59:48:D2:E9:11:1B:55:76:6C:2B:B0:69:D2:2C:DC:1A:0C:2C Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 01AD Signing time: Tue 05 Aug 2025 03:55:55 +0000 Manifest this update: Tue 05 Aug 2025 03:55:54 +0000 Manifest next update: Tue 12 Aug 2025 03:55:54 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: ftZUlFNJxVk0IQtJ0CPQ7lFY4yErvC6dlS5cxzcllY8=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: MfWpaMS6rRmOY6M0y/tJr6fftibzcsGmZcNhFWcJvTU=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: NNWnPeY+H+OxjWlVfrs0w5U8TUAoL0DUbiwdZQKCLSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Aug 5 03:55:54 2025 GMT Not After : Aug 12 03:55:54 2025 GMT Subject: CN=689180ca-c44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:28:94:26:97:30:bd:47:1a:e5:11:ab:47: 7d:94:a5:75:8e:df:ae:9a:c8:93:2a:b8:2a:cb:9a: ee:f8:9e:d7:f7:03:ed:91:cf:d4:ae:0b:59:00:86: 8f:bb:b8:a9:6c:a5:49:15:ac:c3:b9:8d:37:8a:83: 01:e6:f9:56:ea:3b:00:d2:5b:76:d9:c1:aa:62:18: 99:b5:2d:0b:ba:07:c5:de:9a:e2:c0:7f:26:47:f1: 5e:f8:d9:1d:04:dc:e6:c6:38:f0:1a:b7:5f:87:56: 1d:2f:5c:72:40:57:1d:2f:8c:2b:55:f4:94:d4:85: af:4b:f9:69:db:5c:e8:98:23:8f:20:ab:cd:03:0e: 90:22:f4:76:ef:c8:97:eb:7f:5c:34:49:5a:ed:1c: 4c:af:f2:ac:b9:02:28:18:51:cb:24:cf:89:ab:6e: 78:cd:c6:a3:2f:db:2a:9d:b4:31:9c:c1:9d:a5:4f: cf:b7:b7:aa:3f:6d:74:4f:15:d9:2f:49:44:98:27: e1:25:81:59:85:da:66:7e:c5:bc:01:fa:bf:60:f8: 1d:e3:fe:61:9e:67:b8:f6:99:b5:6f:85:5a:98:c9: 44:28:44:6d:83:1f:33:12:61:93:ff:7a:13:cf:1d: 54:06:69:8f:e6:f3:97:a1:bc:23:81:e4:40:2f:21: 90:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DD:59:48:D2:E9:11:1B:55:76:6C:2B:B0:69:D2:2C:DC:1A:0C:2C X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e8:95:74:41:a9:2f:41:6f:9b:33:5c:9f:84:ba:0c:ad:9b: ac:e7:dd:54:98:bf:dd:58:75:e3:dc:41:23:54:65:4d:4d:f6: a0:27:5d:cb:ac:58:c9:cf:71:7c:ee:1c:0e:9f:e8:76:97:48: 0b:2c:b3:c8:f2:6e:47:3b:04:86:c0:0c:37:bf:ce:ad:7b:db: 9c:35:1b:df:e9:dd:88:f6:87:fe:79:73:e8:b7:b0:54:f8:64: d1:0f:d1:ff:c9:ae:22:12:7c:20:52:a5:30:13:6e:d1:49:f6: d0:82:61:60:03:af:1c:62:8d:2a:05:5d:ca:0f:cc:5a:58:ac: b3:26:15:fd:b3:89:c4:24:06:b2:f5:d3:09:c5:23:9e:fa:1f: 03:46:ac:74:99:08:1c:f9:f3:d3:33:48:7f:58:2a:c2:c5:ea: 4a:e0:37:1b:d3:56:b5:6e:06:ca:7a:3c:f2:fd:90:b2:68:06: 2b:a6:c1:0e:b1:de:e8:94:63:fd:79:4d:4d:f1:69:f1:9c:f9: e2:c3:27:54:7a:7f:b5:f2:a1:8c:bd:65:52:0b:f9:8f:83:ff: 30:51:97:17:26:7b:88:8e:31:cd:55:e0:3c:05:b2:b3:8d:29: 7c:4e:3a:2f:4a:60:dc:51:d4:87:91:3d:b5:20:bb:b7:fc:58: fc:82:83:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwODA1MDM1NTU0WhcNMjUwODEyMDM1NTU0WjAYMRYwFAYD VQQDEw02ODkxODBjYS1jNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7MolCaXML1HGuURq0d9lKV1jt+umsiTKrgqy5ru+J7X9wPtkc/UrgtZAIaP u7ipbKVJFazDuY03ioMB5vlW6jsA0lt22cGqYhiZtS0LugfF3priwH8mR/Fe+Nkd BNzmxjjwGrdfh1YdL1xyQFcdL4wrVfSU1IWvS/lp21zomCOPIKvNAw6QIvR278iX 639cNEla7RxMr/KsuQIoGFHLJM+Jq254zcajL9sqnbQxnMGdpU/Pt7eqP210TxXZ L0lEmCfhJYFZhdpmfsW8Afq/YPgd4/5hnme49pm1b4VamMlEKERtgx8zEmGT/3oT zx1UBmmP5vOXobwjgeRALyGQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPdWUjS 6REbVXZsK7Bp0izcGgwsMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY6JV0QakvQW+bM1yfhLoMrZus591UmL/dWHXj3EEjVGVNTfagJ13L rFjJz3F87hwOn+h2l0gLLLPI8m5HOwSGwAw3v86te9ucNRvf6d2I9of+eXPot7BU +GTRD9H/ya4iEnwgUqUwE27RSfbQgmFgA68cYo0qBV3KD8xaWKyzJhX9s4nEJAay 9dMJxSOe+h8DRqx0mQgc+fPTM0h/WCrCxepK4Dcb01a1bgbKejzy/ZCyaAYrpsEO sd7olGP9eU1N8WnxnPniwydUen+18qGMvWVSC/mPg/8wUZcXJnuIjjHNVeA8BbKz jSl8TjovSmDcUdSHkT21ILu3/Fj8goOc -----END CERTIFICATE-----Generated at Wed Aug 6 05:21:22 2025 by rpki-client