$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft File: atr7oploMMUdaBwyEtBLXHJMEx0.mft (raw, json) Hash identifier: HpLXSsLLcCBrsbmtLJjW8MU3bZ7nGib2lDk+dxQyQME= Subject key identifier: 07:3A:16:74:47:9F:92:DA:E5:F9:50:D3:D7:01:60:E2:9E:30:44:89 Authority key identifier: 6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D Certificate issuer: /CN=A913F8FC/serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft Manifest number: 0115 Signing time: Thu 03 Jul 2025 05:09:24 +0000 Manifest this update: Thu 03 Jul 2025 05:09:23 +0000 Manifest next update: Thu 10 Jul 2025 05:09:23 +0000 Files and hashes: 1: atr7oploMMUdaBwyEtBLXHJMEx0.crl (hash: TusmoQS4oxrSfjZIvtVx8eLLUIikel7gLTp7vSXoB28=) 2: 0A3010E62EFE11F0B225630AC4F9AE02.roa (hash: SL+u5xNb94LlIO3MGszlS8G25kmb10774LbEot0uqXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8FC, serialNumber=6ADAFBA2996830C51D681C3212D04B5C724C131D Validity Not Before: Jul 3 05:09:23 2025 GMT Not After : Jul 10 05:09:23 2025 GMT Subject: CN=68661084-c689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:0d:25:84:cf:9a:d0:83:df:84:c8:36:df: fe:68:75:41:07:74:b7:0a:96:b2:3e:99:4b:a2:a6: 05:75:ef:d7:7f:21:4c:eb:22:ed:06:b2:a2:96:3c: b9:74:11:23:2b:4e:fa:48:12:cb:2f:ee:ae:74:64: 90:73:f0:a5:a8:1d:7f:18:7c:c2:c9:f6:b0:56:0c: b0:a2:68:ee:14:04:10:60:19:00:62:f8:db:0e:3d: ea:fd:ba:81:ce:f9:a9:18:88:75:74:84:26:c6:d4: 91:df:c0:cd:c9:8a:33:f3:65:77:88:65:53:55:6d: 0c:0e:ec:ab:c7:2c:08:c4:29:6a:80:e2:97:eb:6e: 7b:be:02:af:11:91:4f:bd:f2:35:a2:a6:60:d8:de: 78:d2:c8:c7:50:f9:dc:c9:af:07:bb:f1:13:f4:26: 0e:3a:5d:f3:6d:00:77:4e:02:1e:26:b4:e3:c9:25: 26:b1:5a:13:bc:63:5f:bc:f3:a6:57:78:91:b4:e0: 77:ff:77:79:60:72:8f:2c:11:67:47:aa:80:3d:9f: 14:f8:3c:58:bf:2b:45:cf:00:d3:01:ea:39:dd:c3: c5:d1:a3:f1:e9:55:59:fb:85:64:b4:a8:93:d1:ee: d8:e8:ff:bd:ad:dd:e6:83:a1:f5:16:19:dd:13:86: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3A:16:74:47:9F:92:DA:E5:F9:50:D3:D7:01:60:E2:9E:30:44:89 X509v3 Authority Key Identifier: keyid:6A:DA:FB:A2:99:68:30:C5:1D:68:1C:32:12:D0:4B:5C:72:4C:13:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atr7oploMMUdaBwyEtBLXHJMEx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8FC/F739A4F8BD1511EE800F482CC4F9AE02/atr7oploMMUdaBwyEtBLXHJMEx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:2f:f9:cf:c6:66:b0:12:fd:24:a6:fd:4e:f0:4a:d8:ec: b9:2e:a6:25:ee:73:af:8c:34:69:da:49:d5:d2:be:7f:0b:e5: 31:fe:af:2c:e1:c5:06:68:4f:24:ae:82:d2:96:55:2b:82:01: a6:cb:50:80:86:5c:23:50:42:19:92:d7:f8:e7:39:67:2c:b0: 1b:6b:8f:14:8c:4e:57:6c:6a:c5:50:5e:ba:62:95:e8:b5:34: ce:f0:60:4a:7c:a9:f2:7b:3f:28:80:65:06:ee:f0:c6:78:a8: aa:f8:e3:f6:41:68:5f:c0:a6:e4:94:eb:96:f0:57:d7:c0:53: 3a:d5:95:99:30:28:2b:e8:bf:74:c2:2d:47:d7:9d:48:66:d9: 73:2b:35:5e:16:b7:cd:a5:ab:77:71:2b:8a:8c:d2:55:c7:90: fc:8b:18:ca:0c:03:ef:8c:5e:44:ed:47:9b:94:fd:aa:1f:8c: b8:61:85:74:92:ca:95:77:51:a7:9c:3b:50:32:24:0e:01:5c: 81:a4:b7:42:20:c7:df:91:9c:c1:9c:e5:d0:e4:9b:23:a7:c8: b0:af:68:d5:78:87:30:c3:03:ef:50:5d:7f:09:2d:72:9d:5b: 1a:0a:01:50:8d:43:5f:7f:90:a7:c6:c8:4f:cb:f2:c6:9e:d8: ff:2a:04:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4RkMxMTAvBgNVBAUTKDZBREFGQkEyOTk2ODMwQzUxRDY4MUMzMjEyRDA0QjVD NzI0QzEzMUQwHhcNMjUwNzAzMDUwOTIzWhcNMjUwNzEwMDUwOTIzWjAYMRYwFAYD VQQDEw02ODY2MTA4NC1jNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOENJYTPmtCD34TINt/+aHVBB3S3CpayPplLoqYFde/XfyFM6yLtBrKiljy5 dBEjK076SBLLL+6udGSQc/ClqB1/GHzCyfawVgywomjuFAQQYBkAYvjbDj3q/bqB zvmpGIh1dIQmxtSR38DNyYoz82V3iGVTVW0MDuyrxywIxClqgOKX6257vgKvEZFP vfI1oqZg2N540sjHUPncya8Hu/ET9CYOOl3zbQB3TgIeJrTjySUmsVoTvGNfvPOm V3iRtOB3/3d5YHKPLBFnR6qAPZ8U+DxYvytFzwDTAeo53cPF0aPx6VVZ+4VktKiT 0e7Y6P+9rd3mg6H1FhndE4aFAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc6FnRH n5La5flQ09cBYOKeMESJMB8GA1UdIwQYMBaAFGra+6KZaDDFHWgcMhLQS1xyTBMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhGQy9GNzM5QTRGOEJE MTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01NVWRhQnd5RXRCTFhISk1F eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0cjdvcGxvTU1VZGFCd3lFdEJMWEhKTUV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhGQy9GNzM5QTRGOEJEMTUxMUVFODAwRjQ4MkNDNEY5QUUwMi9hdHI3b3Bsb01N VWRhQnd5RXRCTFhISk1FeDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAduy/5z8ZmsBL9JKb9TvBK2Oy5LqYl7nOvjDRp2knV0r5/C+Ux/q8s 4cUGaE8kroLSllUrggGmy1CAhlwjUEIZktf45zlnLLAba48UjE5XbGrFUF66YpXo tTTO8GBKfKnyez8ogGUG7vDGeKiq+OP2QWhfwKbklOuW8FfXwFM61ZWZMCgr6L90 wi1H151IZtlzKzVeFrfNpat3cSuKjNJVx5D8ixjKDAPvjF5E7UeblP2qH4y4YYV0 ksqVd1GnnDtQMiQOAVyBpLdCIMffkZzBnOXQ5Jsjp8iwr2jVeIcwwwPvUF1/CS1y nVsaCgFQjUNff5CnxshPy/LGntj/KgRU -----END CERTIFICATE-----Generated at Thu Jul 3 10:42:26 2025 by rpki-client