$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json) Hash identifier: L24PvrP9dTHYTv/iK858TvumZ9ZK4WYx4+nSvEuztkg= Subject key identifier: 9B:C2:0C:8B:BD:EB:94:BB:2A:A3:3D:A7:F2:34:8F:10:20:35:4A:54 Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft Manifest number: 020F Signing time: Tue 01 Jul 2025 02:41:43 +0000 Manifest this update: Tue 01 Jul 2025 02:41:42 +0000 Manifest next update: Tue 08 Jul 2025 02:41:42 +0000 Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: 6Mz6H0+i6kAfPAx+KmbdJZmVJah0bcww8r/PEVuQe6w=) 2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: 2Fh4hwQIdZbln/uQFk/hnm7n5pbTcIACPB8cEmZ2S3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Validity Not Before: Jul 1 02:41:42 2025 GMT Not After : Jul 8 02:41:42 2025 GMT Subject: CN=68634ae6-3cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:73:f4:a4:3a:56:7e:12:28:1a:5f:44:03: 63:85:28:8a:01:e2:b3:bd:22:b2:b4:c8:2c:53:d7: ad:f7:31:10:76:32:d2:f2:1a:15:16:e2:1b:b1:14: 84:77:ff:74:71:96:9e:ec:17:6f:1e:16:51:47:d0: 8a:54:54:e4:6e:27:69:5e:5e:bc:eb:02:fa:d0:34: ac:3e:92:50:ce:23:8d:19:18:f7:72:e9:5c:1e:a6: 94:a6:d1:4c:16:b3:12:95:35:be:d9:46:91:ef:48: 85:f9:a2:44:fd:c4:49:6c:6b:d0:ba:ec:c1:76:91: 75:72:c9:c8:e7:c3:2a:c8:f3:6c:91:91:8e:a8:fa: dd:8d:d9:9d:be:bb:93:a5:7f:04:df:50:e8:42:ab: da:79:c9:48:6a:98:df:30:8c:73:d4:9b:2a:8d:83: 45:f5:63:dd:b7:fd:c9:fe:37:0e:0d:db:4e:b4:5d: 90:4a:8d:fe:cf:96:fa:6a:e3:9e:4c:b4:a7:22:47: ef:20:08:1b:27:b6:70:06:b6:b7:19:5c:87:e6:06: 6c:bf:c2:39:cd:91:8c:49:0c:7d:4a:bb:67:e7:65: 95:88:ee:b4:40:cc:69:93:af:9c:21:e0:40:b9:3d: 4f:5b:74:a3:bd:1f:dc:06:cb:da:42:a5:f6:bf:1b: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C2:0C:8B:BD:EB:94:BB:2A:A3:3D:A7:F2:34:8F:10:20:35:4A:54 X509v3 Authority Key Identifier: keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7d:1d:0f:5c:61:ff:51:41:79:a0:70:d3:c7:97:ce:f0:10: a4:dd:36:b0:8c:3e:c3:84:f4:ad:44:a4:5d:97:11:39:8a:16: 18:01:63:93:1d:93:b2:ec:eb:81:15:fd:1e:4d:ec:49:9d:c1: 4c:96:c3:19:f6:e1:16:03:3e:ce:c9:b2:ba:89:ac:16:76:18: 05:b0:d3:01:c8:d9:5e:c2:b4:52:ca:ad:39:b8:0d:4c:fc:d3: 6e:2e:76:f9:d9:96:0a:03:fa:c9:4d:ef:73:24:06:d0:1f:75: 6e:e0:fd:33:9e:d0:b4:8d:3b:71:75:4f:d9:80:b2:e2:32:a5: c7:ee:df:68:c8:a7:45:be:25:1b:79:82:11:4c:aa:66:53:ed: 6a:7f:81:9e:2d:0c:b8:b7:a4:33:19:c3:4d:6d:5b:c3:f6:7b: 23:02:67:0b:72:1b:51:0c:bc:5a:41:8e:dd:a7:97:92:f5:57: 9a:06:59:49:30:83:28:3c:b7:4f:e8:9b:3a:89:f2:e6:2b:37: 7d:fb:c7:2c:6e:e0:b8:1b:9a:7e:c3:03:e7:49:cb:9a:d4:52: 0e:9f:a9:ec:c3:1b:f7:ba:7f:d2:97:fb:d8:75:ef:61:69:c3: 43:c5:a5:c5:7c:8f:6f:6c:0a:c3:1f:6f:4f:c6:d5:28:01:da: 74:68:ae:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3 MzM1NjU3MzcwHhcNMjUwNzAxMDI0MTQyWhcNMjUwNzA4MDI0MTQyWjAYMRYwFAYD VQQDEw02ODYzNGFlNi0zY2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ehz9KQ6Vn4SKBpfRANjhSiKAeKzvSKytMgsU9et9zEQdjLS8hoVFuIbsRSE d/90cZae7BdvHhZRR9CKVFTkbidpXl686wL60DSsPpJQziONGRj3culcHqaUptFM FrMSlTW+2UaR70iF+aJE/cRJbGvQuuzBdpF1csnI58MqyPNskZGOqPrdjdmdvruT pX8E31DoQqvaeclIapjfMIxz1JsqjYNF9WPdt/3J/jcODdtOtF2QSo3+z5b6auOe TLSnIkfvIAgbJ7ZwBra3GVyH5gZsv8I5zZGMSQx9Srtn52WViO60QMxpk6+cIeBA uT1PW3SjvR/cBsvaQqX2vxsuZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvCDIu9 65S7KqM9p/I0jxAgNUpUMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF cVU3ajhHVnlwSzl6TldWemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFfR0PXGH/UUF5oHDTx5fO8BCk3TawjD7DhPStRKRdlxE5ihYYAWOT HZOy7OuBFf0eTexJncFMlsMZ9uEWAz7OybK6iawWdhgFsNMByNlewrRSyq05uA1M /NNuLnb52ZYKA/rJTe9zJAbQH3Vu4P0zntC0jTtxdU/ZgLLiMqXH7t9oyKdFviUb eYIRTKpmU+1qf4GeLQy4t6QzGcNNbVvD9nsjAmcLchtRDLxaQY7dp5eS9VeaBllJ MIMoPLdP6Js6ifLmKzd9+8csbuC4G5p+wwPnScua1FIOn6nswxv3un/Sl/vYde9h acNDxaXFfI9vbArDH29PxtUoAdp0aK4M -----END CERTIFICATE-----Generated at Wed Jul 2 21:51:29 2025 by rpki-client