$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: KDwp4wxfQRd4i1+wqaBC4BCzJfO1GoYnaXvqK6nviKg= Subject key identifier: D9:AC:E4:7D:FE:18:8E:FC:2F:D6:E7:00:52:EF:92:5A:D6:CD:7B:FA Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0E6F Signing time: Fri 08 Aug 2025 17:54:56 +0000 Manifest this update: Fri 08 Aug 2025 17:54:55 +0000 Manifest next update: Fri 15 Aug 2025 17:54:55 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: eeghf5vedqKrddPe4CslswW03LaMnGlgOzlA1TvN468=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: xrn7kqtWfpKDJ8ptvmKz6itXOdAPKg554aAbP2n2DQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Aug 8 17:54:55 2025 GMT Not After : Aug 15 17:54:55 2025 GMT Subject: CN=689639f0-e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:18:65:17:16:8f:fa:5a:78:08:3c:61:b6: 5c:6f:75:2f:4e:4d:e1:31:91:05:8e:ad:79:a1:2a: e5:6a:f5:cf:ca:c1:11:a7:ef:77:46:fa:f8:d2:07: f5:8c:1e:e0:fd:70:6b:f5:a2:24:ac:40:7c:86:e5: 10:d1:65:0f:b7:9c:c8:56:3b:c2:30:56:70:6b:60: 4f:da:02:d0:08:c3:2e:17:a6:8a:01:90:53:05:20: 9d:e9:c2:8b:ad:a5:03:0a:7d:4a:b9:a2:bc:8f:22: 70:3e:c1:13:13:c6:e1:c5:a0:a1:1f:01:6d:ef:a5: 06:f9:d2:1a:b5:e2:c3:84:57:8a:e9:c1:ee:70:fb: b8:9f:3a:3e:64:88:b1:cb:2c:8b:36:7d:95:64:95: 1b:bb:4c:d7:a0:24:59:ad:9c:bf:ad:90:f0:40:70: 13:4a:11:54:e2:d9:34:27:71:3c:cd:0b:ee:90:c1: 58:ac:65:e2:ca:f0:15:36:77:d4:9a:7e:a3:5e:0b: ad:0f:54:3a:8e:c3:4b:38:67:92:4b:74:a1:09:21: c5:78:86:ee:74:9f:82:f9:b3:d8:e4:e7:61:1f:f7: bb:87:1b:94:e4:4d:58:60:7f:d1:0f:a1:6c:6a:a3: ef:66:5a:60:67:1a:b3:e5:d5:30:93:b2:45:10:21: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:E4:7D:FE:18:8E:FC:2F:D6:E7:00:52:EF:92:5A:D6:CD:7B:FA X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ed:a9:30:d3:62:58:7e:f1:06:e4:cd:f0:0f:7f:28:8c:cc: 54:95:15:02:8e:7e:2e:b0:6b:2f:bc:78:04:22:9b:4f:fc:c3: 8d:2e:1e:49:5a:dd:8a:2e:69:f0:54:c5:ac:5f:7d:b9:1a:24: 4a:c4:20:06:c1:78:ee:9f:c5:5c:df:4b:15:0e:df:f6:b0:6b: 1a:ba:02:38:3c:ab:c8:c6:80:c0:30:20:42:fa:2d:6a:f2:2a: 17:7a:86:96:4d:d3:52:4a:3a:03:ac:fd:58:05:fd:88:56:0a: 78:9d:ef:d0:fe:a0:ed:ce:49:e6:96:86:5b:32:84:ab:cd:a3: 61:08:2b:9d:fe:66:7f:7c:19:c4:dd:b6:45:f5:58:92:8d:8d: fd:7b:45:bc:bc:77:39:af:42:e4:dc:9b:80:96:82:19:64:e7: 55:f7:e3:45:dc:cd:3c:9b:f0:66:70:55:90:22:6e:d0:80:e7: 39:8e:7e:a0:96:06:a8:9e:d8:89:f2:ac:23:df:96:59:f0:d3: 34:7e:39:9e:29:0b:06:f4:0b:76:71:74:d1:6a:e5:32:11:83: 6c:c3:a6:81:88:bc:cc:6c:e9:55:ce:2b:2c:2d:90:ef:0b:ad: 8d:73:10:38:ab:cd:f0:04:9d:9b:7d:bd:88:04:9e:85:cb:fb: 70:9f:ee:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjUwODA4MTc1NDU1WhcNMjUwODE1MTc1NDU1WjAYMRYwFAYD VQQDEw02ODk2MzlmMC1lNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xYYZRcWj/paeAg8YbZcb3UvTk3hMZEFjq15oSrlavXPysERp+93Rvr40gf1 jB7g/XBr9aIkrEB8huUQ0WUPt5zIVjvCMFZwa2BP2gLQCMMuF6aKAZBTBSCd6cKL raUDCn1KuaK8jyJwPsETE8bhxaChHwFt76UG+dIateLDhFeK6cHucPu4nzo+ZIix yyyLNn2VZJUbu0zXoCRZrZy/rZDwQHATShFU4tk0J3E8zQvukMFYrGXiyvAVNnfU mn6jXgutD1Q6jsNLOGeSS3ShCSHFeIbudJ+C+bPY5OdhH/e7hxuU5E1YYH/RD6Fs aqPvZlpgZxqz5dUwk7JFECHh1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNms5H3+ GI78L9bnAFLvklrWzXv6MB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB97akw02JYfvEG5M3wD38ojMxUlRUCjn4usGsvvHgEIptP/MONLh5J Wt2KLmnwVMWsX325GiRKxCAGwXjun8Vc30sVDt/2sGsaugI4PKvIxoDAMCBC+i1q 8ioXeoaWTdNSSjoDrP1YBf2IVgp4ne/Q/qDtzknmloZbMoSrzaNhCCud/mZ/fBnE 3bZF9ViSjY39e0W8vHc5r0Lk3JuAloIZZOdV9+NF3M08m/BmcFWQIm7QgOc5jn6g lgaontiJ8qwj35ZZ8NM0fjmeKQsG9At2cXTRauUyEYNsw6aBiLzMbOlVzissLZDv C62NcxA4q83wBJ2bfb2IBJ6Fy/twn+7o -----END CERTIFICATE-----Generated at Sat Aug 9 20:52:23 2025 by rpki-client