$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft File: cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json) Hash identifier: FvPnlGXGjNYOofEnKj8V83FmVouObcW5XUpKz2uJIU0= Subject key identifier: 57:72:86:16:3D:81:C4:4C:81:CD:A7:C3:72:7B:27:98:A0:C4:AE:67 Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft Manifest number: 70 Signing time: Sat 23 Aug 2025 07:10:12 +0000 Manifest this update: Sat 23 Aug 2025 07:10:11 +0000 Manifest next update: Sat 30 Aug 2025 07:10:11 +0000 Files and hashes: 1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: zBL9yGn5owCOOXHzH0IlxI5XPdMc/nYCN2yDFKsgbT0=) 2: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: LfZGAfyu1X1XJTr/vcwjFbw+uPCbKT4FYiAcrfY1D/8=) 3: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: cBCbayG35pbvXFF84Ac3SexGmqWa/cegNEnjqBSTQ7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E Validity Not Before: Aug 23 07:10:11 2025 GMT Not After : Aug 30 07:10:11 2025 GMT Subject: CN=68a96954-3db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:50:81:64:57:ed:5b:6a:0a:b9:2a:a1:c3: 42:89:f7:f8:2a:87:7d:ee:81:cc:0c:aa:6b:2a:94: a5:5b:4b:60:e7:4a:54:03:ec:5f:70:c7:57:8e:e5: 88:d2:3a:df:07:d2:11:45:13:2b:36:20:53:c8:5f: d3:ed:10:f1:2d:23:43:68:ca:f3:f6:43:f4:ad:75: f6:46:f0:5b:62:9a:92:46:ec:1c:4d:84:cb:76:5b: 05:58:c1:82:c1:f1:3b:88:8f:0f:83:52:77:23:94: dd:35:9d:79:89:9b:8b:b1:29:cf:cf:81:d0:80:71: 2c:cd:c6:fd:8c:e6:c8:85:c1:c6:b3:08:69:a0:c6: 33:da:ee:64:2e:6e:4e:42:e1:93:63:bc:1d:c4:4c: 07:55:0b:4d:0c:81:31:1d:59:61:2e:b7:3d:01:6b: d1:bd:32:b7:78:04:05:cf:42:8a:53:04:df:aa:42: 5c:f1:b9:22:ee:27:2b:27:36:33:29:49:fa:78:ce: 6f:ee:22:7e:02:9f:39:9a:38:28:c9:9c:b3:eb:bd: 69:82:62:b6:40:88:7f:55:5b:6d:ff:d5:90:8c:0f: 4b:17:e8:39:bb:1b:4d:36:b4:7e:be:9b:e0:2a:81: 97:2e:7a:9d:8d:27:8f:90:53:1b:a2:75:05:88:0b: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:72:86:16:3D:81:C4:4C:81:CD:A7:C3:72:7B:27:98:A0:C4:AE:67 X509v3 Authority Key Identifier: keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:66:3b:15:93:76:5d:52:12:1d:d8:74:21:90:60:52:0e:0b: 81:55:a8:b4:25:89:7f:bb:36:4d:0b:0b:df:9d:e0:fb:97:85: cc:a1:0a:aa:db:bc:83:a3:21:37:8b:d8:71:e3:7c:3b:9e:7c: ff:85:19:59:6a:2e:2b:b5:20:36:92:20:04:05:26:dc:b3:5a: 52:61:3d:1c:4d:12:26:41:0c:91:72:17:11:e8:48:55:70:69: 94:fe:5d:c6:6a:b0:ba:e4:12:d9:f6:7f:a9:dd:11:d0:16:3c: 4c:aa:1c:ef:f2:e5:21:df:03:01:51:e0:f4:ca:0a:77:c7:75: 5a:2c:a1:3b:cb:2d:80:df:6c:57:87:c0:77:79:72:8c:ef:06: 5f:42:32:7a:53:78:08:cf:54:27:46:51:98:0c:bb:a9:fe:75: 14:0d:f8:21:40:d3:7e:06:1c:c9:83:b2:c6:23:21:c7:5e:de: 63:43:6d:08:10:d5:91:f2:fa:8e:7d:a9:1c:e2:90:a7:29:49: ca:14:24:8e:43:7c:17:da:08:96:83:bc:2c:71:c8:3e:6f:99: 60:d5:6b:96:21:6e:dd:90:8a:ff:1c:50:f5:44:93:b1:e6:60: 2e:b8:bc:09:bb:87:f4:8c:a5:f1:cd:e6:08:69:a2:06:6b:13: d3:5e:fd:39 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB QzJGOTcwRTAeFw0yNTA4MjMwNzEwMTFaFw0yNTA4MzAwNzEwMTFaMBgxFjAUBgNV BAMTDTY4YTk2OTU0LTNkYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHqlCBZFftW2oKuSqhw0KJ9/gqh33ugcwMqmsqlKVbS2DnSlQD7F9wx1eO5YjS Ot8H0hFFEys2IFPIX9PtEPEtI0NoyvP2Q/StdfZG8FtimpJG7BxNhMt2WwVYwYLB 8TuIjw+DUncjlN01nXmJm4uxKc/PgdCAcSzNxv2M5siFwcazCGmgxjPa7mQubk5C 4ZNjvB3ETAdVC00MgTEdWWEutz0Ba9G9Mrd4BAXPQopTBN+qQlzxuSLuJysnNjMp Sfp4zm/uIn4CnzmaOCjJnLPrvWmCYrZAiH9VW23/1ZCMD0sX6Dm7G002tH6+m+Aq gZcuep2NJ4+QUxuidQWIC90lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV3KGFj2B xEyBzafDcnsnmKDErmcwHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NTlFLzU1NjY2QjU2RDlEMDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElm dzFLekduSzJ4dnF3dmx3NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALRmOxWTdl1SEh3YdCGQYFIOC4FVqLQliX+7Nk0LC9+d4PuXhcyhCqrb vIOjITeL2HHjfDuefP+FGVlqLiu1IDaSIAQFJtyzWlJhPRxNEiZBDJFyFxHoSFVw aZT+XcZqsLrkEtn2f6ndEdAWPEyqHO/y5SHfAwFR4PTKCnfHdVosoTvLLYDfbFeH wHd5cozvBl9CMnpTeAjPVCdGUZgMu6n+dRQN+CFA034GHMmDssYjIcde3mNDbQgQ 1ZHy+o59qRzikKcpScoUJI5DfBfaCJaDvCxxyD5vmWDVa5Yhbt2Qiv8cUPVEk7Hm YC64vAm7h/SMpfHN5ghpogZrE9Ne/Tk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:56 2025 by rpki-client