$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json) Hash identifier: b5moSpitg1+V2hr6MscZBpCO/W4+OzVPPOJ6/qreVcU= Subject key identifier: E0:A0:39:65:F0:9C:75:BC:CB:AE:2D:53:7E:64:C6:D2:06:1A:B9:4F Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft Manifest number: B2 Signing time: Sat 09 Aug 2025 06:28:15 +0000 Manifest this update: Sat 09 Aug 2025 06:28:15 +0000 Manifest next update: Sat 16 Aug 2025 06:28:15 +0000 Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: W900+2UD3Rn9Bp0MJDKHAp3Q73YD2k/OsNNtCUV5sx0=) 2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: TL1SnZ/gVu4gXR6fktiVjS67hjGfn2PQM4oWEdnN0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527 Validity Not Before: Aug 9 06:28:15 2025 GMT Not After : Aug 16 06:28:15 2025 GMT Subject: CN=6896ea7f-f8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:42:b4:25:9c:1e:03:f7:d6:18:99:05:48: bf:be:7b:71:42:95:44:0d:11:03:59:98:4a:58:a3: f1:4c:f6:38:df:ec:ef:63:cd:ba:27:bf:86:c7:06: ed:bf:a2:a3:1d:67:4e:2f:29:95:f5:58:d2:c9:eb: 0e:06:32:2a:d9:4b:13:69:ed:4e:9e:10:da:10:8a: d8:25:2d:45:4b:05:17:00:f7:d1:a1:61:f4:5f:72: f5:35:c1:66:49:cf:3b:6f:4f:7b:7f:5a:ba:54:b1: 21:f9:be:52:1a:55:20:5a:28:97:d3:a9:9a:a1:d5: 0f:a3:c4:34:92:32:0c:68:51:82:3d:37:95:9b:ec: 82:71:81:fb:b0:28:71:31:15:53:07:61:bf:ac:47: f4:de:ff:4f:5d:9f:6f:d1:ec:fc:10:bd:cc:6b:54: db:48:c1:e0:c3:f6:91:8f:30:25:6d:f3:17:58:b5: f2:11:ae:54:e5:95:10:11:72:0a:ca:d7:c9:b5:a2: 5a:47:9f:fd:55:1b:e8:26:17:c0:62:27:d8:6c:6e: d5:0b:56:cb:be:8f:d9:27:b2:0d:f4:22:3a:12:9e: 78:74:68:66:7d:cf:68:eb:ae:b4:e1:87:66:3d:6a: 83:76:fd:ff:57:2a:0c:ba:40:3b:09:20:29:97:a1: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A0:39:65:F0:9C:75:BC:CB:AE:2D:53:7E:64:C6:D2:06:1A:B9:4F X509v3 Authority Key Identifier: keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:48:62:46:5d:c6:93:4d:1a:e0:fd:b3:26:54:24:f0:a8:83: d6:2b:86:fe:16:0b:0e:6c:21:ff:b2:2c:fc:1e:63:9b:68:5e: 1f:c7:49:a5:f0:bf:f4:fb:1a:58:1b:35:9f:ad:2d:96:8a:82: e8:ee:1e:d6:ae:bc:6d:00:f1:47:91:40:b2:34:3b:c1:3d:02: eb:fa:b2:34:c5:c0:7d:63:0f:9b:df:62:ff:e4:3e:a3:1d:b5: 01:c5:f3:48:84:f4:0d:21:8e:46:39:a4:0b:07:0f:b0:48:7c: 56:01:5b:f2:45:af:09:f6:04:01:2a:6d:ab:23:21:23:b8:34: 07:b8:57:e0:9d:18:5b:64:e1:c9:8f:16:13:dd:0d:5c:29:24: 62:0d:48:f2:ad:5a:49:14:d5:35:35:6a:8c:d6:76:57:85:78: f0:aa:8c:02:7e:c9:6b:e3:16:a5:e3:c3:e7:c4:c4:1a:5b:54: df:e6:b8:60:53:78:c0:ed:1c:ea:d7:fc:1e:b1:49:6d:03:72: 37:7c:8a:63:93:27:8e:d6:60:d1:9e:2e:14:70:64:8d:ec:2f: 40:87:b2:36:b6:35:fa:0b:7e:83:31:5e:53:38:3f:34:b9:a7: 0d:9b:dc:88:3c:29:06:53:eb:b2:31:45:5c:2f:db:e5:b6:f5: 68:c2:ff:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3 RDhFODM1MjcwHhcNMjUwODA5MDYyODE1WhcNMjUwODE2MDYyODE1WjAYMRYwFAYD VQQDEw02ODk2ZWE3Zi1mOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4IpCtCWcHgP31hiZBUi/vntxQpVEDREDWZhKWKPxTPY43+zvY826J7+Gxwbt v6KjHWdOLymV9VjSyesOBjIq2UsTae1OnhDaEIrYJS1FSwUXAPfRoWH0X3L1NcFm Sc87b097f1q6VLEh+b5SGlUgWiiX06maodUPo8Q0kjIMaFGCPTeVm+yCcYH7sChx MRVTB2G/rEf03v9PXZ9v0ez8EL3Ma1TbSMHgw/aRjzAlbfMXWLXyEa5U5ZUQEXIK ytfJtaJaR5/9VRvoJhfAYifYbG7VC1bLvo/ZJ7IN9CI6Ep54dGhmfc9o66604Ydm PWqDdv3/VyoMukA7CSApl6EaoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCgOWXw nHW8y64tU35kxtIGGrlPMB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0 REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD T2pnaHJJZUZESkY5am9OU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNSGJGXcaTTRrg/bMmVCTwqIPWK4b+FgsObCH/siz8HmObaF4fx0ml 8L/0+xpYGzWfrS2WioLo7h7WrrxtAPFHkUCyNDvBPQLr+rI0xcB9Yw+b32L/5D6j HbUBxfNIhPQNIY5GOaQLBw+wSHxWAVvyRa8J9gQBKm2rIyEjuDQHuFfgnRhbZOHJ jxYT3Q1cKSRiDUjyrVpJFNU1NWqM1nZXhXjwqowCfslr4xal48PnxMQaW1Tf5rhg U3jA7Rzq1/wesUltA3I3fIpjkyeO1mDRni4UcGSN7C9Ah7I2tjX6C36DMV5TOD80 uacNm9yIPCkGU+uyMUVcL9vltvVowv/g -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:50 2025 by rpki-client