$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: ouh/1FM7BmmBKxrb4YLzYQzQH5VCNY21naRCxGnRujk= Subject key identifier: 1A:5A:7C:32:4E:8B:09:4B:35:4C:FF:E5:E3:75:4E:61:33:9C:1B:DB Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 34CC Signing time: Tue 05 Aug 2025 11:50:58 +0000 Manifest this update: Tue 05 Aug 2025 11:50:57 +0000 Manifest next update: Tue 12 Aug 2025 11:50:57 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: WTLgAXRGzGr5XFQM7ccDt6gzCiyLxnqqYCDuyqUb+HM=) 2: 450B9058E3B511EF8A23824BC4F9AE02.roa (hash: ty5I3DahkDwmuQG0MkBj34whcyz61V92kdrY50JAllc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 11:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Aug 5 11:50:57 2025 GMT Not After : Aug 12 11:50:57 2025 GMT Subject: CN=6891f021-c95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:58:8a:70:78:ce:cc:4b:8d:26:aa:2a:ce: 8a:bc:68:09:c1:23:b4:aa:9d:ff:6f:9c:5b:c2:61: 9b:91:84:94:ea:c4:08:92:c6:41:23:cc:c5:2f:cd: c9:64:f8:f9:ed:4b:13:9f:00:bf:64:40:c8:8a:43: 23:f3:47:c6:e3:43:c9:49:bc:9d:6f:49:b9:60:2e: e6:48:9e:d0:5e:c2:04:62:e9:3f:1c:8f:f3:c5:91: 6b:80:a5:fd:0e:95:fb:ca:58:5c:37:61:74:a6:86: 63:ca:f0:c7:eb:1f:86:2e:0b:bf:3c:14:bb:fa:c4: a3:4d:f2:17:5d:ae:34:8b:20:de:96:62:95:68:b2: 68:96:99:4f:5a:81:7b:17:b0:5b:0f:8e:b6:e6:e8: b4:91:04:57:8a:25:60:a2:8f:2d:aa:68:11:a0:b5: 5e:f9:f4:ae:3a:61:82:4b:ef:63:a1:b1:c9:36:9e: 4b:30:3b:6b:e8:54:f4:5f:08:89:c9:21:55:b3:b5: 86:30:25:0b:b3:58:06:58:32:2a:61:80:ee:a0:92: 55:2c:95:18:97:06:b4:df:3a:ca:bf:29:44:a5:ba: fc:ec:1c:d3:00:6f:25:0e:49:7f:8e:62:cf:b2:70: 9d:1c:6a:5d:db:d0:27:4c:5c:ac:56:c4:72:1c:39: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5A:7C:32:4E:8B:09:4B:35:4C:FF:E5:E3:75:4E:61:33:9C:1B:DB X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:20:6c:aa:4d:00:24:9b:3e:51:d8:1e:8d:49:2c:75:62: c3:a1:a5:c5:3a:54:d2:69:f6:e1:96:fd:9a:3a:ec:6b:3c:b9: 4e:98:10:49:d9:c2:73:a7:92:e9:4d:8b:ec:c5:3a:90:5f:d4: 38:f7:29:25:dd:9d:62:d6:b1:e7:c8:ec:7b:7e:02:28:a2:1e: 3f:f6:76:94:83:0b:0a:7b:bd:3f:03:14:57:77:3d:09:1b:62: 4a:ed:09:60:e8:e8:c3:ab:cf:c2:21:a0:91:97:4f:d2:bc:d0: ca:0a:32:81:ab:6a:3b:ac:03:18:44:ec:14:62:f8:8d:41:e4: d4:da:e0:b4:2f:00:33:22:1e:11:40:4e:c9:e2:e6:62:97:b3: c2:46:46:66:56:08:1f:b2:90:7c:f8:ec:41:e6:0b:49:c7:b7: 38:57:18:d6:f1:14:34:fe:33:40:7a:6b:7a:c1:ad:d9:78:6a: 6b:53:af:ce:e7:13:a2:92:ab:a8:a0:94:6b:47:26:bb:9e:00: 6b:22:cf:9c:33:c3:5f:62:7e:fd:6d:28:83:02:4c:58:33:02: b5:eb:3a:c5:1d:d8:9e:62:e8:98:ea:65:59:de:c2:da:15:39: 24:bb:ad:f0:13:e5:33:7b:51:c2:6b:f4:83:3f:89:7e:92:19: e0:4c:8b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUwODA1MTE1MDU3WhcNMjUwODEyMTE1MDU3WjAYMRYwFAYD VQQDEw02ODkxZjAyMS1jOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m5YinB4zsxLjSaqKs6KvGgJwSO0qp3/b5xbwmGbkYSU6sQIksZBI8zFL83J ZPj57UsTnwC/ZEDIikMj80fG40PJSbydb0m5YC7mSJ7QXsIEYuk/HI/zxZFrgKX9 DpX7ylhcN2F0poZjyvDH6x+GLgu/PBS7+sSjTfIXXa40iyDelmKVaLJolplPWoF7 F7BbD4625ui0kQRXiiVgoo8tqmgRoLVe+fSuOmGCS+9jobHJNp5LMDtr6FT0XwiJ ySFVs7WGMCULs1gGWDIqYYDuoJJVLJUYlwa03zrKvylEpbr87BzTAG8lDkl/jmLP snCdHGpd29AnTFysVsRyHDmcAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpafDJO iwlLNUz/5eN1TmEznBvbMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0QSBsqk0AJJs+UdgejUksdWLDoaXFOlTSafbhlv2aOuxrPLlOmBBJ 2cJzp5LpTYvsxTqQX9Q49ykl3Z1i1rHnyOx7fgIooh4/9naUgwsKe70/AxRXdz0J G2JK7Qlg6OjDq8/CIaCRl0/SvNDKCjKBq2o7rAMYROwUYviNQeTU2uC0LwAzIh4R QE7J4uZil7PCRkZmVggfspB8+OxB5gtJx7c4VxjW8RQ0/jNAemt6wa3ZeGprU6/O 5xOikquooJRrRya7ngBrIs+cM8NfYn79bSiDAkxYMwK16zrFHdieYuiY6mVZ3sLa FTkku63wE+Uze1HCa/SDP4l+khngTIuH -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:33 2025 by rpki-client