$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: 089lEpK7WVKIPk4Gh2DPiDzeRWGe4eNGLtAkD5htMTs= Subject key identifier: BD:8C:46:40:8A:1F:B9:C2:FA:EB:E3:A5:18:DF:E7:51:35:99:8F:1A Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 1077 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 1070 Signing time: Wed 02 Jul 2025 17:33:44 +0000 Manifest this update: Wed 02 Jul 2025 17:33:43 +0000 Manifest next update: Wed 09 Jul 2025 17:33:43 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: VAdW4uwWHVpuBfDHMg3FYudZ0EYUxYB6e3eA33rZO6A=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: tyb0mMEVFvr0b00WBN86r+sNpOhKC86WXh33owud0/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4215 (0x1077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Jul 2 17:33:43 2025 GMT Not After : Jul 9 17:33:43 2025 GMT Subject: CN=68656d77-8e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:68:21:92:9d:ee:e9:e0:90:5b:ad:5d:a4: 4e:59:79:54:8e:7b:59:82:5f:bc:0c:7d:55:8b:bf: f3:56:90:4b:89:8f:bf:d3:2d:dd:4c:23:40:f3:0c: 94:c8:94:b5:f4:f3:f8:7e:69:a9:d1:52:be:cf:ba: 6d:19:94:bc:b5:84:8c:e8:9a:71:5b:26:1c:72:0b: 74:bf:d5:22:07:f8:c6:9b:bc:02:1c:31:8a:1b:31: bf:eb:c8:58:dc:07:8e:83:56:14:96:47:ea:e7:30: fe:97:3c:97:07:dd:ad:c1:3e:f7:b1:c5:a9:01:a1: 73:c5:a3:07:2e:22:ff:0c:4d:c6:c5:01:c7:7f:1f: d9:e7:af:1b:de:91:09:ca:0c:ec:87:93:cb:64:d6: 9f:e1:51:be:96:64:c4:5f:11:83:ed:f3:93:56:1a: 9c:bc:45:ef:55:82:6c:c8:df:38:23:d1:cc:6f:9f: 26:2d:e5:70:31:5e:e9:97:92:ef:68:a6:a1:c9:69: ca:43:44:e3:8b:c8:44:3e:4a:df:82:33:b3:e1:36: 40:fc:bf:b8:ba:5b:82:c2:13:67:a1:32:e7:f1:f1: e3:ba:fd:50:12:c0:f8:5f:a6:a4:a1:9d:1c:be:18: 41:4f:e5:d9:70:e6:de:7d:34:31:db:18:01:15:9b: 00:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8C:46:40:8A:1F:B9:C2:FA:EB:E3:A5:18:DF:E7:51:35:99:8F:1A X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:51:83:62:42:43:dc:e5:4d:2a:f3:ea:31:4d:b5:6e:66:d3: f2:ba:78:96:94:10:25:aa:33:7c:cd:3c:b7:4a:7e:f3:14:e4: 46:3c:10:34:a4:c6:02:5a:f8:e6:ac:c8:90:0a:72:99:95:a1: eb:8f:e7:17:f7:b7:5b:38:ca:2c:a6:14:81:01:ec:0e:eb:08: 25:27:de:69:ea:17:34:bb:aa:56:89:ad:f3:0c:93:fc:39:69: 82:32:49:ac:d7:63:40:80:23:a3:9c:4e:80:3f:20:7f:93:c6: eb:cf:11:18:dc:53:04:e8:4c:8c:23:4a:7e:e4:e8:2e:31:cb: 78:ae:b2:29:ae:46:fd:31:b4:61:5b:48:2f:9a:f4:77:b7:2a: f6:5a:12:96:27:dc:e8:9f:c5:de:4f:58:ce:36:fe:b6:5f:ac: 35:fe:22:45:18:0f:b4:c6:5c:55:24:aa:86:71:17:91:47:58: 00:ef:d1:3c:46:0a:87:ae:5a:23:1d:92:7e:32:ce:e0:ec:16: b9:bf:29:81:65:b8:d4:f7:14:37:16:de:b5:e1:de:02:3a:e9: 3b:14:36:65:00:87:4f:36:c3:08:55:61:b2:b8:14:35:5a:8a: 19:91:53:93:28:eb:7b:f3:b6:d3:8f:8f:23:25:79:94:07:20: 8c:db:9e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjUwNzAyMTczMzQzWhcNMjUwNzA5MTczMzQzWjAYMRYwFAYD VQQDEw02ODY1NmQ3Ny04ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJdoIZKd7ungkFutXaROWXlUjntZgl+8DH1Vi7/zVpBLiY+/0y3dTCNA8wyU yJS19PP4fmmp0VK+z7ptGZS8tYSM6JpxWyYccgt0v9UiB/jGm7wCHDGKGzG/68hY 3AeOg1YUlkfq5zD+lzyXB92twT73scWpAaFzxaMHLiL/DE3GxQHHfx/Z568b3pEJ ygzsh5PLZNaf4VG+lmTEXxGD7fOTVhqcvEXvVYJsyN84I9HMb58mLeVwMV7pl5Lv aKahyWnKQ0Tji8hEPkrfgjOz4TZA/L+4uluCwhNnoTLn8fHjuv1QEsD4X6akoZ0c vhhBT+XZcObefTQx2xgBFZsApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2MRkCK H7nC+uvjpRjf51E1mY8aMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTUYNiQkPc5U0q8+oxTbVuZtPyuniWlBAlqjN8zTy3Sn7zFORGPBA0 pMYCWvjmrMiQCnKZlaHrj+cX97dbOMosphSBAewO6wglJ95p6hc0u6pWia3zDJP8 OWmCMkms12NAgCOjnE6APyB/k8brzxEY3FME6EyMI0p+5OguMct4rrIprkb9MbRh W0gvmvR3tyr2WhKWJ9zon8XeT1jONv62X6w1/iJFGA+0xlxVJKqGcReRR1gA79E8 RgqHrlojHZJ+Ms7g7Ba5vymBZbjU9xQ3Ft614d4COuk7FDZlAIdPNsMIVWGyuBQ1 WooZkVOTKOt787bTj48jJXmUByCM256/ -----END CERTIFICATE-----Generated at Thu Jul 3 14:18:28 2025 by rpki-client