$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: ANx07Ci0kByXuhWNY/+ubTI75r7C5W7dZVVMV/RVszk= Subject key identifier: 78:9C:25:70:E0:58:56:06:14:5A:A2:C8:6D:DB:F6:E2:88:2E:4C:04 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 0475 Signing time: Sun 10 Aug 2025 17:01:16 +0000 Manifest this update: Sun 10 Aug 2025 17:01:16 +0000 Manifest next update: Sun 17 Aug 2025 17:01:16 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: UAMeJSXBzuHfSyJ74BawG0xGwBTOXuEyGDuogmu86uA=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Aug 10 17:01:16 2025 GMT Not After : Aug 17 17:01:16 2025 GMT Subject: CN=6898d05c-3300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:16:ef:ba:d8:6e:71:8a:68:f5:0a:d2:98: 13:b9:23:d6:c9:39:f0:bd:4a:86:4b:93:dd:09:b4: b9:c9:4d:44:5b:26:5d:91:55:4b:b3:55:b7:f4:cd: e8:31:2c:64:16:ec:62:58:11:85:80:ed:f9:48:39: 13:a7:3c:9a:a5:71:8b:18:98:7b:59:ed:75:66:4e: c2:77:0a:7e:2d:67:51:68:80:cc:cd:50:20:ad:62: 6d:f2:fb:75:e3:df:ac:65:56:f3:f4:5c:76:8c:58: 5d:df:a0:a4:5a:09:15:d5:c8:f6:84:0a:ac:e3:0f: ab:02:b2:38:c8:96:3b:2c:7f:51:2e:bb:41:e5:ca: 12:6b:aa:9b:55:1b:2c:8d:09:38:d5:2f:22:89:9b: 09:69:e3:1f:05:40:9a:5e:a1:c2:0c:c7:73:4e:ef: a9:1d:31:1a:a1:1b:b3:49:49:59:24:a0:99:34:5b: 97:67:83:90:b7:11:dd:5d:aa:0c:71:d0:5b:41:ca: cc:ef:c4:55:29:6b:8a:7a:25:0f:2c:a7:11:cd:26: e1:b6:85:d3:e4:ac:9c:c5:b0:f8:a4:94:72:a0:15: 76:6d:b7:a0:ca:62:c2:35:cd:27:ed:ff:9d:4b:e6: 6c:f9:18:6d:b5:55:5c:42:35:5e:78:df:cb:27:f4: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:25:70:E0:58:56:06:14:5A:A2:C8:6D:DB:F6:E2:88:2E:4C:04 X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:48:46:e2:35:8e:6e:50:51:cf:d7:0a:b5:4e:4b:45:68:98: 80:38:4c:f9:8b:79:9a:6d:fa:16:74:21:14:ac:e0:7f:79:18: 00:05:3a:b1:4f:b1:68:0e:55:e1:b8:86:c6:1e:d9:a0:1c:ea: 07:7e:6e:73:c0:41:d8:6f:28:0d:67:38:88:6e:b6:52:7a:71: e0:45:bb:c2:f1:74:81:26:ad:c6:91:b4:4f:84:fa:94:f0:2e: 23:8e:70:c3:02:76:51:1b:51:14:12:dd:6d:ee:93:e5:e8:4c: bd:01:cf:71:55:3e:af:76:67:0c:00:2e:03:5f:b1:52:13:2a: 4e:18:09:58:d4:29:94:a1:a0:fb:29:fc:cf:c5:f7:cf:58:23: 1a:32:8f:5c:4c:ef:e8:1d:78:d1:61:db:b6:53:26:ad:32:a6: 0a:75:58:58:1b:12:9c:b9:e9:ae:b8:eb:fa:7d:5f:31:7c:44: 41:7b:71:4f:b4:f2:48:63:77:08:25:0e:b0:2f:3b:53:2e:44: 24:bf:73:1c:68:7c:46:e5:15:55:af:b1:54:bf:02:ba:6b:6b: ba:c1:be:c2:83:4e:46:8c:61:9e:3a:f9:0b:81:ac:e1:38:ef: 97:d0:bd:bd:6c:2b:c9:6b:70:e0:04:54:95:cc:fa:d5:ae:b8: 69:37:0b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUwODEwMTcwMTE2WhcNMjUwODE3MTcwMTE2WjAYMRYwFAYD VQQDEw02ODk4ZDA1Yy0zMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjUW77rYbnGKaPUK0pgTuSPWyTnwvUqGS5PdCbS5yU1EWyZdkVVLs1W39M3o MSxkFuxiWBGFgO35SDkTpzyapXGLGJh7We11Zk7Cdwp+LWdRaIDMzVAgrWJt8vt1 49+sZVbz9Fx2jFhd36CkWgkV1cj2hAqs4w+rArI4yJY7LH9RLrtB5coSa6qbVRss jQk41S8iiZsJaeMfBUCaXqHCDMdzTu+pHTEaoRuzSUlZJKCZNFuXZ4OQtxHdXaoM cdBbQcrM78RVKWuKeiUPLKcRzSbhtoXT5KycxbD4pJRyoBV2bbegymLCNc0n7f+d S+Zs+RhttVVcQjVeeN/LJ/Qn1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHicJXDg WFYGFFqiyG3b9uKILkwEMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUSEbiNY5uUFHP1wq1TktFaJiAOEz5i3mabfoWdCEUrOB/eRgABTqx T7FoDlXhuIbGHtmgHOoHfm5zwEHYbygNZziIbrZSenHgRbvC8XSBJq3GkbRPhPqU 8C4jjnDDAnZRG1EUEt1t7pPl6Ey9Ac9xVT6vdmcMAC4DX7FSEypOGAlY1CmUoaD7 KfzPxffPWCMaMo9cTO/oHXjRYdu2UyatMqYKdVhYGxKcuemuuOv6fV8xfERBe3FP tPJIY3cIJQ6wLztTLkQkv3McaHxG5RVVr7FUvwK6a2u6wb7Cg05GjGGeOvkLgazh OO+X0L29bCvJa3DgBFSVzPrVrrhpNwvT -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:04 2025 by rpki-client