$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: slS4WsmRq7dPL088ig7GnfO/dbt2FOnX6MTUSI7au4M= Subject key identifier: 7B:40:96:A0:11:D8:09:99:87:22:22:99:B3:EB:C7:21:94:25:D6:54 Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 03B3 Signing time: Sat 19 Jul 2025 01:07:15 +0000 Manifest this update: Sat 19 Jul 2025 01:07:15 +0000 Manifest next update: Sat 26 Jul 2025 01:07:15 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: 8ArT6WGhs1O150vszBdtdmE5z+C9a20cq2USBRO2ZXo=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: p2rd5X9PRaHj3dg5SJAK0M8GBgiGK7ul3HPfe5PMkz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Jul 19 01:07:15 2025 GMT Not After : Jul 26 01:07:15 2025 GMT Subject: CN=687aefc3-502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:2d:46:73:18:89:e1:21:a0:08:dd:ad:37: 6e:d7:b5:41:ef:8e:8d:64:00:f6:db:b3:c5:64:bf: eb:bf:4a:6b:ed:d5:4a:9e:db:c9:a2:aa:f8:73:83: b1:bf:d6:b5:b1:8e:74:d5:e9:30:2a:41:a6:f2:4c: a7:df:36:e6:15:5a:e9:7e:98:1e:df:34:08:10:02: 51:c3:1d:c9:52:6d:d7:b9:4d:fb:78:38:9b:99:58: 72:c0:4b:6e:be:e8:1d:58:f2:df:67:71:b9:32:a2: 55:31:4e:44:56:e3:cd:66:bd:c1:9c:69:42:2a:60: 69:a2:f4:29:68:6f:ea:aa:60:d4:1d:ba:6b:d9:55: f3:ee:6a:08:29:43:b2:68:ef:27:ab:dd:4d:fd:78: bc:cf:ce:d7:ca:ed:b9:0d:e4:b0:db:6c:35:1a:9e: 09:50:ae:d7:82:5b:28:91:cd:52:43:45:62:7f:36: 80:8c:a9:94:2f:18:bb:9b:94:84:64:b9:60:d7:89: 39:63:7c:5b:a5:e4:8d:82:23:9d:0a:c6:d8:62:20: 19:02:e6:5f:eb:f6:2e:9d:8c:f2:1a:e8:ff:a5:7f: 56:81:37:64:f8:1d:1f:ae:00:45:b7:09:26:d8:57: 8b:0b:b5:b6:50:cf:ee:91:37:5a:8b:4b:d5:0f:d7: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:40:96:A0:11:D8:09:99:87:22:22:99:B3:EB:C7:21:94:25:D6:54 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:fe:65:14:90:bd:16:9d:51:b0:da:1c:28:9c:56:56:e6: 45:fa:91:db:d2:76:38:36:ff:ef:f5:be:62:f9:74:62:77:a4: 22:2d:fd:ef:0d:87:53:90:39:fb:28:e3:af:3a:06:33:e3:35: b3:59:e1:e1:65:08:ac:a9:fb:cb:b5:7e:fe:8a:3f:c6:a3:2e: 32:79:2b:d4:91:90:7f:8c:d0:71:fd:90:1e:91:2d:63:5a:47: d4:7f:83:49:b2:a4:b8:75:0f:3d:d9:37:40:70:b7:65:c4:94: 39:a6:24:00:60:12:03:d0:5c:c8:53:cb:2c:d8:ba:5b:04:6e: 52:b5:80:f8:51:41:f5:c8:03:5d:91:9c:f1:c5:a2:48:26:65: b9:dc:31:dd:4a:17:9a:0f:ec:e5:75:fb:af:67:07:34:1c:42: 90:fe:bb:01:e1:b5:08:ce:9b:6c:0c:34:e6:b0:1b:39:12:b9: 07:18:75:61:bc:dd:e0:27:24:d3:5d:68:a7:76:25:3d:25:c2: 46:a0:53:e1:6d:2b:40:00:29:99:cb:45:d5:3d:4f:f5:02:8f: 9d:01:56:59:33:79:a4:1e:04:58:96:7e:19:d7:5a:5d:f3:f1: 65:21:47:01:82:07:53:12:e5:1c:19:b7:df:6d:aa:31:aa:bf: 59:0c:b4:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjUwNzE5MDEwNzE1WhcNMjUwNzI2MDEwNzE1WjAYMRYwFAYD VQQDEw02ODdhZWZjMy01MDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueUtRnMYieEhoAjdrTdu17VB746NZAD227PFZL/rv0pr7dVKntvJoqr4c4Ox v9a1sY501ekwKkGm8kyn3zbmFVrpfpge3zQIEAJRwx3JUm3XuU37eDibmVhywEtu vugdWPLfZ3G5MqJVMU5EVuPNZr3BnGlCKmBpovQpaG/qqmDUHbpr2VXz7moIKUOy aO8nq91N/Xi8z87Xyu25DeSw22w1Gp4JUK7Xglsokc1SQ0VifzaAjKmULxi7m5SE ZLlg14k5Y3xbpeSNgiOdCsbYYiAZAuZf6/YunYzyGuj/pX9WgTdk+B0frgBFtwkm 2FeLC7W2UM/ukTdai0vVD9clTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtAlqAR 2AmZhyIimbPrxyGUJdZUMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB63v5lFJC9Fp1RsNocKJxWVuZF+pHb0nY4Nv/v9b5i+XRid6QiLf3v DYdTkDn7KOOvOgYz4zWzWeHhZQisqfvLtX7+ij/Goy4yeSvUkZB/jNBx/ZAekS1j WkfUf4NJsqS4dQ892TdAcLdlxJQ5piQAYBID0FzIU8ss2LpbBG5StYD4UUH1yANd kZzxxaJIJmW53DHdSheaD+zldfuvZwc0HEKQ/rsB4bUIzptsDDTmsBs5ErkHGHVh vN3gJyTTXWindiU9JcJGoFPhbStAACmZy0XVPU/1Ao+dAVZZM3mkHgRYln4Z11pd 8/FlIUcBggdTEuUcGbffbaoxqr9ZDLQn -----END CERTIFICATE-----Generated at Sun Jul 20 06:13:40 2025 by rpki-client