$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft File: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft (raw, json) Hash identifier: LUrWN97TZ4x4gomh9Fe+gRL0UU/pa3aOLx0UnEVRoYU= Subject key identifier: 1D:BB:E4:B1:02:AB:73:3B:18:81:71:06:A9:79:1A:0B:72:8E:DE:5C Authority key identifier: AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B Certificate issuer: /CN=A9111D25/serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft Manifest number: F1 Signing time: Mon 21 Jul 2025 05:24:59 +0000 Manifest this update: Mon 21 Jul 2025 05:24:59 +0000 Manifest next update: Mon 28 Jul 2025 05:24:59 +0000 Files and hashes: 1: rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl (hash: 1AsOcd9BS5Fp1q625DS7roLS3nmsow7qkOPU2qbR2bY=) 2: F869F6E6F27D11EE83652C2FC4F9AE02.roa (hash: wbE6Gfx7gEn/j1uk0tHQyPp2/l2ifTqo+zhIWQUgB5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D25, serialNumber=AD6EE7BA1958650FAA846C83D0A8A4B365DAF55B Validity Not Before: Jul 21 05:24:59 2025 GMT Not After : Jul 28 05:24:59 2025 GMT Subject: CN=687dcf2b-c76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:be:50:f0:f4:65:c7:17:c8:aa:0f:d0:b5: cf:40:44:75:22:26:58:88:50:0a:de:d1:00:e5:25: 66:99:47:9e:85:3d:b4:f2:48:f0:c5:e2:9b:de:07: 85:b4:aa:d0:89:3f:92:46:9b:1f:66:53:ae:0d:79: 1e:a8:b8:3d:de:ed:df:a5:79:d6:76:8b:34:33:6e: 2d:1d:c1:10:67:f8:77:3c:ea:fc:da:62:71:77:ff: 1f:04:83:ac:b0:b5:17:5d:a1:27:55:62:3d:87:7f: 72:8c:d3:07:e5:dd:69:78:e9:33:fa:1d:cd:e8:9b: 5d:ad:12:96:9c:8c:73:e4:c8:44:c0:d3:d8:04:ec: 2a:c2:66:1c:50:ba:f0:03:9b:19:a6:3d:8e:0b:d8: 53:f1:d0:ef:ee:2b:45:ef:e3:47:6b:4d:1a:9a:ab: b8:e7:b9:d4:f0:4b:0f:72:a6:2d:e8:26:8f:44:0b: 68:78:4f:71:47:54:09:07:eb:3d:9b:01:88:cf:82: 9a:ac:a3:76:58:90:e4:af:9f:d1:68:dc:42:45:48: 55:7e:c0:be:a6:ba:fd:77:8f:46:d4:ee:e2:6a:2d: 0c:d3:5b:ef:87:48:a9:48:f2:95:52:aa:e1:53:12: e2:49:92:60:8f:cc:05:48:61:5b:7b:13:a0:09:92: 08:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BB:E4:B1:02:AB:73:3B:18:81:71:06:A9:79:1A:0B:72:8E:DE:5C X509v3 Authority Key Identifier: keyid:AD:6E:E7:BA:19:58:65:0F:AA:84:6C:83:D0:A8:A4:B3:65:DA:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D25/8F9F0386F27D11EE87D96C28C4F9AE02/rW7nuhlYZQ-qhGyD0Kiks2Xa9Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:24:44:c1:a4:5a:c9:26:d4:87:83:04:fd:6e:87:cd:9a: 17:60:3d:88:eb:49:c9:88:68:18:cd:b2:d1:97:26:57:d6:cd: ea:09:dc:95:ac:94:6d:88:c2:ba:9d:de:37:83:fb:42:af:5d: bf:d5:05:64:a1:8f:60:e0:bd:74:50:1e:c6:e8:93:fa:b8:54: 2c:a1:d6:b2:00:49:d6:4d:51:92:92:63:9f:58:f5:e3:27:50: 01:56:18:db:fb:ca:90:8d:64:a6:f2:6f:46:a4:1c:85:ff:cb: f4:14:ba:74:59:3a:6a:f0:41:7e:e4:ed:c2:50:c1:18:c8:02: fe:e2:b7:ec:87:dc:7e:a4:b9:e9:c8:a0:e1:5b:ad:50:bf:9c: 31:98:35:17:e8:3d:ec:aa:af:ed:95:a1:7a:f5:68:e2:22:46: 6d:0c:10:1b:54:4b:2e:11:9a:d0:46:64:83:4a:fc:66:f7:39: e6:f8:0f:01:d5:cb:b6:83:51:73:51:45:f1:f7:57:31:77:a3: ba:36:76:d7:07:4e:7e:f7:1d:35:6b:a2:03:84:12:54:42:79: 3f:f2:3d:bb:c7:31:ce:bd:2c:da:2c:94:55:84:42:8c:40:51: 0b:6c:ff:79:06:5a:4e:57:59:dc:ca:83:53:24:ba:3b:2b:68: bf:1f:a7:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMjUxMTAvBgNVBAUTKEFENkVFN0JBMTk1ODY1MEZBQTg0NkM4M0QwQThBNEIz NjVEQUY1NUIwHhcNMjUwNzIxMDUyNDU5WhcNMjUwNzI4MDUyNDU5WjAYMRYwFAYD VQQDEw02ODdkY2YyYi1jNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRm+UPD0ZccXyKoP0LXPQER1IiZYiFAK3tEA5SVmmUeehT208kjwxeKb3geF tKrQiT+SRpsfZlOuDXkeqLg93u3fpXnWdos0M24tHcEQZ/h3POr82mJxd/8fBIOs sLUXXaEnVWI9h39yjNMH5d1peOkz+h3N6JtdrRKWnIxz5MhEwNPYBOwqwmYcULrw A5sZpj2OC9hT8dDv7itF7+NHa00amqu457nU8EsPcqYt6CaPRAtoeE9xR1QJB+s9 mwGIz4KarKN2WJDkr5/RaNxCRUhVfsC+prr9d49G1O7iai0M01vvh0ipSPKVUqrh UxLiSZJgj8wFSGFbexOgCZIIjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB275LEC q3M7GIFxBql5Ggtyjt5cMB8GA1UdIwQYMBaAFK1u57oZWGUPqoRsg9CopLNl2vVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQyNS84RjlGMDM4NkYy N0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpRLXFoR3lEMEtpa3MyWGE5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXN251aGxZWlEtcWhHeUQwS2lrczJYYTlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUQyNS84RjlGMDM4NkYyN0QxMUVFODdEOTZDMjhDNEY5QUUwMi9yVzdudWhsWVpR LXFoR3lEMEtpa3MyWGE5VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOCiREwaRaySbUh4ME/W6HzZoXYD2I60nJiGgYzbLRlyZX1s3qCdyV rJRtiMK6nd43g/tCr12/1QVkoY9g4L10UB7G6JP6uFQsodayAEnWTVGSkmOfWPXj J1ABVhjb+8qQjWSm8m9GpByF/8v0FLp0WTpq8EF+5O3CUMEYyAL+4rfsh9x+pLnp yKDhW61Qv5wxmDUX6D3sqq/tlaF69WjiIkZtDBAbVEsuEZrQRmSDSvxm9znm+A8B 1cu2g1FzUUXx91cxd6O6NnbXB05+9x01a6IDhBJUQnk/8j27xzHOvSzaLJRVhEKM QFELbP95BlpOV1ncyoNTJLo7K2i/H6c2 -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:44 2025 by rpki-client