$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: lSF4zbwmFJerXjwEcIzMChcw5/uJYPHvXdTomWd9fh0= Subject key identifier: 4A:AD:74:53:FD:0A:56:34:37:D3:2A:D0:CD:17:7B:99:A4:B1:B4:62 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 83 Signing time: Thu 03 Jul 2025 07:11:34 +0000 Manifest this update: Thu 03 Jul 2025 07:11:34 +0000 Manifest next update: Thu 10 Jul 2025 07:11:34 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: gNm4ZAXmVwF5OStBNChRNY2a6SvCyIyozoDu6a9jYsY=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Jul 3 07:11:34 2025 GMT Not After : Jul 10 07:11:34 2025 GMT Subject: CN=68662d26-3f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:10:47:7e:9a:fb:2b:22:f1:3c:a0:5c:fe: fa:43:9c:4f:40:da:e1:dd:68:f9:dc:06:2f:c5:09: f4:f2:5f:eb:a7:76:2f:64:55:fa:e1:1a:e9:0b:d3: 89:df:1f:2a:bc:ef:34:7b:a2:e8:41:e9:4d:2e:44: 6f:15:bc:8b:54:e6:56:fe:7e:84:20:3d:66:8a:48: 28:23:0e:8c:0c:6c:15:08:2a:d2:f5:5e:7c:c2:73: f2:5b:eb:23:d0:69:c4:0f:cb:4b:10:d7:bb:17:93: c7:25:4b:19:9a:e0:32:6d:52:db:33:b2:a4:f3:ba: 1b:6a:e3:e1:ba:70:c3:f2:82:ef:5f:48:c4:6a:7a: e8:e3:9e:4c:53:3c:57:b8:04:45:86:cc:67:7b:08: 46:53:b6:e4:e7:d8:14:2a:2a:b5:81:ae:e4:d1:00: f5:67:33:3a:48:f4:aa:eb:11:be:a4:6d:56:92:83: 34:f7:05:60:d4:3f:1e:64:5a:5f:08:45:8f:da:af: 00:d6:61:33:1d:65:bb:cf:96:c2:bc:6a:bd:5c:45: a9:b4:91:26:2e:c0:54:b8:62:30:e6:26:6a:19:78: 47:b0:85:6d:47:0c:18:b2:8e:6c:cf:2b:59:16:21: fe:11:11:26:5a:33:28:a8:e9:5c:81:82:0e:07:79: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:74:53:FD:0A:56:34:37:D3:2A:D0:CD:17:7B:99:A4:B1:B4:62 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:40:e2:bb:c5:2c:01:99:03:90:b7:05:86:cd:50:8f:71:30: 1c:ad:d2:e4:6c:7c:ab:ca:4d:0f:3a:2f:de:8c:af:6b:70:fb: 2f:8d:61:4d:23:2d:32:70:7c:69:41:88:8b:ae:b0:96:37:50: fa:fc:85:3b:12:3c:72:84:f5:fd:5c:4e:83:34:df:e0:cf:2d: ac:3f:31:a8:9a:ba:af:d4:eb:f2:48:e1:0b:de:d1:0b:43:c6: b0:79:3d:7b:7e:0d:06:1b:05:fb:9c:c1:b0:6a:e4:e4:94:b4: db:d7:01:6c:94:6e:6d:23:5a:21:f8:da:5b:e6:00:6b:e5:e7: e9:30:40:62:31:87:07:50:20:aa:b8:93:24:06:fe:6e:7b:8c: dc:0d:fb:01:2c:7d:0c:65:32:a6:fe:94:13:99:b6:5d:60:c6: 26:18:a6:6d:7c:53:10:cf:cb:ce:7a:a7:80:bc:cf:b2:bf:e5: a8:b3:47:fc:b4:8b:4c:2e:43:04:dd:f9:db:0b:ed:fa:db:53: 32:47:3a:08:29:5e:5e:b5:ee:b0:7d:18:51:75:13:9e:07:20: 5f:2f:e1:b1:5d:40:07:a8:eb:b8:ce:2f:c5:d4:bb:34:2b:b5: b9:5a:cb:2d:7a:ce:7a:c3:b0:a3:45:aa:68:8b:2e:59:b1:06: 4a:e6:90:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUwNzAzMDcxMTM0WhcNMjUwNzEwMDcxMTM0WjAYMRYwFAYD VQQDEw02ODY2MmQyNi0zZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UMQR36a+ysi8TygXP76Q5xPQNrh3Wj53AYvxQn08l/rp3YvZFX64RrpC9OJ 3x8qvO80e6LoQelNLkRvFbyLVOZW/n6EID1mikgoIw6MDGwVCCrS9V58wnPyW+sj 0GnED8tLENe7F5PHJUsZmuAybVLbM7Kk87obauPhunDD8oLvX0jEanro455MUzxX uARFhsxnewhGU7bk59gUKiq1ga7k0QD1ZzM6SPSq6xG+pG1WkoM09wVg1D8eZFpf CEWP2q8A1mEzHWW7z5bCvGq9XEWptJEmLsBUuGIw5iZqGXhHsIVtRwwYso5szytZ FiH+EREmWjMoqOlcgYIOB3m/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqtdFP9 ClY0N9Mq0M0Xe5mksbRiMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUQOK7xSwBmQOQtwWGzVCPcTAcrdLkbHyryk0POi/ejK9rcPsvjWFN Iy0ycHxpQYiLrrCWN1D6/IU7EjxyhPX9XE6DNN/gzy2sPzGomrqv1OvySOEL3tEL Q8aweT17fg0GGwX7nMGwauTklLTb1wFslG5tI1oh+Npb5gBr5efpMEBiMYcHUCCq uJMkBv5ue4zcDfsBLH0MZTKm/pQTmbZdYMYmGKZtfFMQz8vOeqeAvM+yv+Wos0f8 tItMLkME3fnbC+3621MyRzoIKV5ete6wfRhRdROeByBfL+GxXUAHqOu4zi/F1Ls0 K7W5Wsstes56w7CjRapoiy5ZsQZK5pCj -----END CERTIFICATE-----Generated at Thu Jul 3 19:16:25 2025 by rpki-client