$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: 9XguvngdCBSCdMVfD3cfFSIT6pwyxe99fqJtVoVCowo= Subject key identifier: AF:46:CF:71:5A:F0:9A:AF:62:FC:3B:B7:51:BB:1C:B2:17:1F:D3:19 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 0211 Signing time: Mon 11 Aug 2025 02:24:51 +0000 Manifest this update: Mon 11 Aug 2025 02:24:51 +0000 Manifest next update: Mon 18 Aug 2025 02:24:51 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: K4KdH5rXSad1D+1oQyWdnJ/vtrK/8DONPXGujWyf9VM=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Aug 11 02:24:51 2025 GMT Not After : Aug 18 02:24:51 2025 GMT Subject: CN=68995473-4e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:e6:bb:f0:0e:b0:09:ef:2b:a1:c1:c0:94: 22:a2:7c:9c:2e:13:11:fe:01:64:4a:ff:8f:55:8b: 5b:c7:66:26:49:6f:08:e6:a7:cf:2d:0f:4b:c1:14: c4:8f:3f:7a:25:70:e3:db:4f:8e:72:80:b0:81:aa: d0:78:a8:07:05:1c:b5:f8:a3:d7:bc:56:79:a2:7d: 71:bf:91:35:db:b1:fc:4e:bf:cd:e8:22:2c:ca:19: ab:a5:be:bc:c8:e2:f7:d6:29:7a:e1:2e:c0:37:78: 41:d2:54:41:86:d2:5d:3b:f5:88:89:03:56:35:a6: c1:58:c5:2b:df:87:81:10:8d:a4:f4:c2:46:4f:7e: 17:57:fe:15:6e:34:87:97:6c:2b:7b:f1:65:24:ea: c9:ae:2a:40:47:45:59:61:a9:ea:d5:12:4d:1a:85: 1e:49:1d:66:a7:ac:00:a8:34:87:19:e7:ea:f8:d4: 0f:f3:89:0b:28:f7:15:5e:2f:08:0c:94:de:12:58: 94:bb:e1:9c:d9:d1:ed:15:9e:ee:4b:7a:d8:35:68: c1:e1:cd:19:d4:65:ca:c4:20:fd:78:a8:df:ad:ed: 92:39:38:74:d4:e8:83:db:28:cd:ba:9e:cb:66:0a: 4d:30:4e:d7:50:b4:45:6f:73:65:96:ac:a0:0d:23: 10:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:CF:71:5A:F0:9A:AF:62:FC:3B:B7:51:BB:1C:B2:17:1F:D3:19 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:13:bf:62:3e:38:b6:5c:fd:6e:9c:f5:fe:76:8c:d5:07: 37:e5:8c:c0:9e:d6:ba:c6:cc:1f:6f:27:e6:53:60:e7:0e:e1: 32:a7:c7:21:1e:99:d1:ea:df:05:6b:c4:bb:f1:7d:aa:af:97: d5:3c:49:9c:5a:a5:be:ec:ee:2c:aa:bd:1e:53:d9:b8:e8:78: 2b:b0:b7:19:46:37:e1:b8:a9:e0:55:5c:ae:7c:0a:03:1a:a7: 35:7d:b9:07:cf:63:40:7d:1c:cc:97:0e:d2:be:8e:4c:fa:f0: 4d:13:e0:84:33:bb:46:7e:a1:3c:a1:40:7e:11:af:f4:2b:8d: a8:2b:05:a2:1a:9f:23:b7:ec:1e:76:d7:dd:17:7e:88:74:d2: ff:dd:13:c8:08:c6:96:e8:d2:d0:bd:cc:c6:f6:68:20:df:c8: 9c:69:d5:c9:7e:9d:79:dd:e9:40:18:3e:25:43:a5:0e:d7:a4: a1:79:38:d1:d1:7f:61:ed:e1:bb:10:10:9b:94:b4:2f:2b:75: fe:0e:b7:d7:10:2c:df:dd:ad:14:31:a4:63:78:1e:ce:6a:24: 4f:cf:80:29:44:50:ed:bb:ca:e1:60:3c:2a:da:13:68:cd:16: 72:e2:ba:53:ee:22:b8:81:00:85:45:41:1d:d7:e3:86:a8:1e: a0:74:58:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwODExMDIyNDUxWhcNMjUwODE4MDIyNDUxWjAYMRYwFAYD VQQDEw02ODk5NTQ3My00ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQvmu/AOsAnvK6HBwJQionycLhMR/gFkSv+PVYtbx2YmSW8I5qfPLQ9LwRTE jz96JXDj20+OcoCwgarQeKgHBRy1+KPXvFZ5on1xv5E127H8Tr/N6CIsyhmrpb68 yOL31il64S7AN3hB0lRBhtJdO/WIiQNWNabBWMUr34eBEI2k9MJGT34XV/4VbjSH l2wre/FlJOrJripAR0VZYanq1RJNGoUeSR1mp6wAqDSHGefq+NQP84kLKPcVXi8I DJTeEliUu+Gc2dHtFZ7uS3rYNWjB4c0Z1GXKxCD9eKjfre2SOTh01OiD2yjNup7L ZgpNME7XULRFb3NllqygDSMQNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9Gz3Fa 8JqvYvw7t1G7HLIXH9MZMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLkxO/Yj44tlz9bpz1/naM1Qc35YzAnta6xswfbyfmU2DnDuEyp8ch HpnR6t8Fa8S78X2qr5fVPEmcWqW+7O4sqr0eU9m46HgrsLcZRjfhuKngVVyufAoD Gqc1fbkHz2NAfRzMlw7Svo5M+vBNE+CEM7tGfqE8oUB+Ea/0K42oKwWiGp8jt+we dtfdF36IdNL/3RPICMaW6NLQvczG9mgg38icadXJfp153elAGD4lQ6UO16SheTjR 0X9h7eG7EBCblLQvK3X+DrfXECzf3a0UMaRjeB7OaiRPz4ApRFDtu8rhYDwq2hNo zRZy4rpT7iK4gQCFRUEd1+OGqB6gdFiL -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:15 2025 by rpki-client