$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: h0kd9k54qa6upo7VK8klJOdUdWtVS6uhJQMAYvCHe6E= Subject key identifier: 20:0E:0C:8E:01:7F:96:8C:78:AA:72:F6:71:71:F9:02:86:75:0E:A5 Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 01F5 Signing time: Sat 19 Jul 2025 02:37:30 +0000 Manifest this update: Sat 19 Jul 2025 02:37:29 +0000 Manifest next update: Sat 26 Jul 2025 02:37:29 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: JiG3PKwYmcm2spEE1K07LZkafzVaAMmz/1C6g4eIY2s=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: Bfu/ALycXYH90jyLAqZWBRVy+FwJZTHe9HY8IeLE+Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Jul 19 02:37:29 2025 GMT Not After : Jul 26 02:37:29 2025 GMT Subject: CN=687b04e9-45b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:c6:a3:ed:8d:5c:50:19:23:a2:54:7f:23: 44:dd:7e:8a:e2:be:06:d0:b1:62:df:aa:6e:92:20: 96:e9:20:d3:5f:68:5e:d5:09:88:84:e5:89:91:44: a5:df:76:20:2e:1a:9d:15:73:40:37:74:76:94:f0: bd:94:f7:ec:32:ba:58:5c:e3:c1:77:97:6d:65:54: 11:78:3b:99:a7:9a:32:e3:03:2e:96:e6:64:86:a3: 8c:7a:a3:49:1f:a7:83:2e:87:9b:e5:b8:f3:6d:08: 96:9c:c3:65:16:6b:05:1b:55:ce:34:be:64:b7:15: ab:2c:10:9f:84:d9:fa:6d:34:f9:06:13:0b:d7:e3: a7:84:b1:a6:f0:ec:52:ee:41:d9:b4:92:e0:43:a4: 22:b2:77:08:34:4c:5d:e0:57:92:2b:41:5a:7f:1c: 0c:e8:2a:67:95:ea:c6:73:4d:c2:c1:9d:88:11:e8: 83:17:56:c1:a0:28:aa:93:4c:1b:68:85:0d:98:b9: 8b:81:9b:f1:e6:c1:98:2a:f3:64:b2:cb:a6:0c:aa: 46:18:dd:a0:48:a6:10:e7:4d:a1:60:cf:be:ac:98: 11:71:3b:8d:c2:f5:0c:d8:d0:07:bc:19:3b:68:e0: 33:8a:6c:08:a1:93:ec:3d:4a:96:d1:21:39:01:7d: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:0C:8E:01:7F:96:8C:78:AA:72:F6:71:71:F9:02:86:75:0E:A5 X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:1d:91:27:73:97:e3:0f:ef:c9:32:83:d0:42:95:fc:5d: 97:5f:52:1d:18:2b:6f:e4:82:9d:45:ec:69:fb:7a:00:21:01: 7c:95:75:08:01:d6:85:15:4c:00:1f:43:dd:ba:70:17:7d:20: 3d:1f:fe:64:24:6f:6f:78:3c:f6:4b:19:8e:10:df:1f:f6:e7: 61:94:43:09:b9:47:64:58:33:8b:d6:e8:b0:3b:20:78:b8:31: 33:cc:62:a1:a0:b2:b7:31:58:2b:25:9a:c5:66:8c:ae:d7:13: 68:55:35:e0:15:e0:a3:2b:11:30:04:e8:0a:fa:59:c5:ef:ee: 5a:c0:c6:4b:04:3b:a5:70:e7:91:39:4f:8c:1d:5d:5b:d4:d1: df:c5:fe:1d:9a:79:50:8d:9e:8e:6b:02:14:3e:89:ff:ae:f2: 67:2c:16:1f:15:1a:75:51:b6:86:0f:12:ed:5a:4b:b8:dd:e9: dd:09:da:e9:52:c3:14:a8:d7:ea:b4:00:b0:d4:54:e4:5e:22: f0:88:67:0b:e0:78:61:81:33:de:39:91:29:0c:ae:90:e6:52: 24:03:b6:03:6e:e3:ff:24:1a:50:28:b7:19:93:08:fc:70:1e: a8:e0:e5:ab:a9:17:eb:22:e0:8f:95:40:70:63:b7:f1:52:c4: 84:77:ce:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjUwNzE5MDIzNzI5WhcNMjUwNzI2MDIzNzI5WjAYMRYwFAYD VQQDEw02ODdiMDRlOS00NWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoofGo+2NXFAZI6JUfyNE3X6K4r4G0LFi36pukiCW6SDTX2he1QmIhOWJkUSl 33YgLhqdFXNAN3R2lPC9lPfsMrpYXOPBd5dtZVQReDuZp5oy4wMuluZkhqOMeqNJ H6eDLoeb5bjzbQiWnMNlFmsFG1XONL5ktxWrLBCfhNn6bTT5BhML1+OnhLGm8OxS 7kHZtJLgQ6QisncINExd4FeSK0FafxwM6CpnlerGc03CwZ2IEeiDF1bBoCiqk0wb aIUNmLmLgZvx5sGYKvNkssumDKpGGN2gSKYQ502hYM++rJgRcTuNwvUM2NAHvBk7 aOAzimwIoZPsPUqW0SE5AX2vxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAODI4B f5aMeKpy9nFx+QKGdQ6lMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SR2RJ3OX4w/vyTKD0EKV/F2XX1IdGCtv5IKdRexp+3oAIQF8lXUI AdaFFUwAH0PdunAXfSA9H/5kJG9veDz2SxmOEN8f9udhlEMJuUdkWDOL1uiwOyB4 uDEzzGKhoLK3MVgrJZrFZoyu1xNoVTXgFeCjKxEwBOgK+lnF7+5awMZLBDulcOeR OU+MHV1b1NHfxf4dmnlQjZ6OawIUPon/rvJnLBYfFRp1UbaGDxLtWku43endCdrp UsMUqNfqtACw1FTkXiLwiGcL4HhhgTPeOZEpDK6Q5lIkA7YDbuP/JBpQKLcZkwj8 cB6o4OWrqRfrIuCPlUBwY7fxUsSEd86Z -----END CERTIFICATE-----Generated at Sun Jul 20 06:40:42 2025 by rpki-client