$ rpki-client -vvf rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft File: AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft (raw, json) Hash identifier: dM//HKOFpZGEyu+NbMI2WHmLeoA4hMgaY1r3kwsmKAE= Subject key identifier: A4:8E:25:E7:09:7D:2E:F3:87:10:B0:9E:5C:E5:D8:02:D4:30:1D:39 Authority key identifier: 02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 Certificate issuer: /CN=A919188A/serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft Manifest number: 01D1 Signing time: Tue 05 Aug 2025 03:15:39 +0000 Manifest this update: Tue 05 Aug 2025 03:15:39 +0000 Manifest next update: Tue 12 Aug 2025 03:15:39 +0000 Files and hashes: 1: AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl (hash: jVY+FvfzWCzecbLkQ/nRUsl9P6Q6ZivZKGBNEd0Q4wI=) 2: 12AE9E92AA9711EDAAEB8345C4F9AE02.roa (hash: ZbTPGmKh281ymLxinCV1W0SdNG3gcop2OrOUFYRhJy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919188A, serialNumber=02811C31D50C91FFFD5EDA68B9EF81C3F9E9FB12 Validity Not Before: Aug 5 03:15:39 2025 GMT Not After : Aug 12 03:15:39 2025 GMT Subject: CN=6891775b-69d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:d0:58:cb:b6:03:0a:18:e5:3a:a3:3c:b9: b9:2d:b2:85:e5:a2:18:7c:e4:5e:e5:17:23:31:c1: 13:ea:0f:cd:b7:95:c0:c9:f0:76:5d:10:ec:3d:ae: 6e:97:47:5f:9f:8f:0a:07:3a:23:04:a4:35:b2:cc: 38:01:3a:b5:8b:fc:53:c9:cd:ec:f0:23:31:71:4b: b4:94:83:fd:09:55:fc:f9:01:4c:eb:8b:d6:ee:bc: 84:b5:68:5a:69:3d:52:f5:b5:65:ab:d5:cc:63:5e: 2f:0a:98:1e:83:42:01:92:7a:77:f0:a9:89:bd:ce: 40:7b:fe:42:7d:79:f5:cb:48:05:21:b3:3d:07:40: 85:ef:d0:d2:7d:2f:a9:a3:7b:8e:62:e0:73:ee:24: 52:30:30:ce:c5:b4:db:37:1b:96:5d:a0:8f:b4:37: 31:df:04:03:d5:c3:23:f7:14:da:15:77:f3:73:51: 24:5b:da:f1:bc:eb:8b:67:11:d5:83:a6:64:7e:62: 3b:40:4f:7f:48:9b:8e:e8:99:d7:bb:3a:96:be:f3: c7:02:08:32:f9:08:40:25:2d:7f:2b:e9:20:96:08: 28:36:6d:8a:0c:d3:4f:97:0e:5a:71:c3:ff:c6:2c: 4b:0b:c2:06:ab:32:0e:f0:9d:3f:7d:c7:f3:83:e5: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:25:E7:09:7D:2E:F3:87:10:B0:9E:5C:E5:D8:02:D4:30:1D:39 X509v3 Authority Key Identifier: keyid:02:81:1C:31:D5:0C:91:FF:FD:5E:DA:68:B9:EF:81:C3:F9:E9:FB:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AoEcMdUMkf_9Xtpoue-Bw_np-xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919188A/C96357CAAA9411EDB0774F45C4F9AE02/AoEcMdUMkf_9Xtpoue-Bw_np-xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:32:5e:a0:b2:49:3a:15:ed:5b:2f:f8:9f:f8:14:25:4c:1d: 87:45:4b:24:3c:74:ea:55:59:c6:e9:4e:0f:26:e1:fe:94:a3: 13:92:a8:52:3e:f9:cc:42:41:f7:c4:cb:61:c5:1a:fb:c4:1b: cd:93:90:65:53:32:1c:0f:11:12:de:d2:bd:ab:09:0d:94:a0: 42:a1:09:62:2e:1d:f0:8d:2d:8a:5c:9c:55:34:dc:2e:ae:16: 78:e9:b1:26:6c:a1:c0:ce:ba:24:92:57:ae:5d:80:17:28:14: 49:93:21:09:c5:1e:07:37:d6:18:e0:69:67:33:a8:1c:1c:62: ef:9c:85:17:f2:80:a7:39:e9:39:12:c4:e9:50:2c:79:c0:43: 30:ee:44:bc:68:9c:29:95:36:34:b1:98:64:71:c8:16:12:6b: 23:97:e6:d5:e2:68:5c:05:33:68:a1:c3:bc:ad:3f:40:97:45: 16:c4:db:15:e3:f5:0e:1f:7b:8c:62:0d:6c:c8:97:8e:0b:82: f6:3e:d4:e6:67:77:be:15:c9:0f:d0:f4:4b:7c:75:51:56:37: 24:94:97:32:eb:98:7a:8a:01:61:84:6c:eb:c5:6c:37:65:2c: de:b7:d8:65:04:72:50:b7:e0:8d:c2:43:57:c0:22:0e:84:43: a6:2d:d9:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4OEExMTAvBgNVBAUTKDAyODExQzMxRDUwQzkxRkZGRDVFREE2OEI5RUY4MUMz RjlFOUZCMTIwHhcNMjUwODA1MDMxNTM5WhcNMjUwODEyMDMxNTM5WjAYMRYwFAYD VQQDEw02ODkxNzc1Yi02OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoX/QWMu2AwoY5TqjPLm5LbKF5aIYfORe5RcjMcET6g/Nt5XAyfB2XRDsPa5u l0dfn48KBzojBKQ1ssw4ATq1i/xTyc3s8CMxcUu0lIP9CVX8+QFM64vW7ryEtWha aT1S9bVlq9XMY14vCpgeg0IBknp38KmJvc5Ae/5CfXn1y0gFIbM9B0CF79DSfS+p o3uOYuBz7iRSMDDOxbTbNxuWXaCPtDcx3wQD1cMj9xTaFXfzc1EkW9rxvOuLZxHV g6ZkfmI7QE9/SJuO6JnXuzqWvvPHAggy+QhAJS1/K+kglggoNm2KDNNPlw5accP/ xixLC8IGqzIO8J0/fcfzg+UhnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSOJecJ fS7zhxCwnlzl2ALUMB05MB8GA1UdIwQYMBaAFAKBHDHVDJH//V7aaLnvgcP56fsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4QS9DOTYzNTdDQUFB OTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtmXzlYdHBvdWUtQndfbnAt eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FvRWNNZFVNa2ZfOVh0cG91ZS1Cd19ucC14SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4QS9DOTYzNTdDQUFBOTQxMUVEQjA3NzRGNDVDNEY5QUUwMi9Bb0VjTWRVTWtm XzlYdHBvdWUtQndfbnAteEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUMl6gskk6Fe1bL/if+BQlTB2HRUskPHTqVVnG6U4PJuH+lKMTkqhS PvnMQkH3xMthxRr7xBvNk5BlUzIcDxES3tK9qwkNlKBCoQliLh3wjS2KXJxVNNwu rhZ46bEmbKHAzrokkleuXYAXKBRJkyEJxR4HN9YY4GlnM6gcHGLvnIUX8oCnOek5 EsTpUCx5wEMw7kS8aJwplTY0sZhkccgWEmsjl+bV4mhcBTNoocO8rT9Al0UWxNsV 4/UOH3uMYg1syJeOC4L2PtTmZ3e+FckP0PRLfHVRVjcklJcy65h6igFhhGzrxWw3 ZSzet9hlBHJQt+CNwkNXwCIOhEOmLdkq -----END CERTIFICATE-----Generated at Wed Aug 6 16:25:05 2025 by rpki-client