$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft File: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft (raw, json) Hash identifier: R3im92js8pZy67StQic4rt6TQdJXpVJR1teP1vTb/PY= Subject key identifier: A1:9F:55:04:44:1C:19:1D:1B:BF:C3:D3:EA:69:53:F7:31:D7:C4:7E Authority key identifier: BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF Certificate issuer: /CN=A9123CB8/serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft Manifest number: 47 Signing time: Sat 19 Jul 2025 07:40:21 +0000 Manifest this update: Sat 19 Jul 2025 07:40:20 +0000 Manifest next update: Sat 26 Jul 2025 07:40:20 +0000 Files and hashes: 1: vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl (hash: WVqEMB0m1fqbiGy3l5KxceuF6AtpufD2G0n1XQI1b7o=) 2: C1AA9588FB5B11EF9D5B421BC4F9AE02.roa (hash: 0DLCAtjJobno4Q2kUlLojdgSL4CQH+92FiMu9ZCx0jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123CB8, serialNumber=BC1E232190D1C63169D7F4FD176155975649B8DF Validity Not Before: Jul 19 07:40:20 2025 GMT Not After : Jul 26 07:40:20 2025 GMT Subject: CN=687b4be4-655a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:50:c4:39:e7:25:34:7b:13:2a:e6:c2:32: 83:4a:8e:2c:e0:6e:d5:f3:77:0a:c3:2d:35:68:58: bf:ff:15:3f:aa:1d:ec:5d:a2:7f:8c:a9:df:2e:32: c8:f3:e8:75:0e:aa:37:5c:bb:8f:87:50:d0:bb:f8: 07:0a:35:7d:8a:17:88:af:48:dd:3a:06:66:c7:65: be:2a:70:e8:b1:44:1f:2e:07:f7:6b:23:73:8b:e1: 5e:51:01:d5:24:68:13:92:32:c8:b1:25:1d:76:b9: 70:b1:77:c6:14:00:67:a8:cd:ea:65:48:eb:de:ea: c0:e3:13:17:84:30:f3:da:c3:c0:44:69:a9:78:04: e5:11:77:03:c9:c3:64:65:b7:b6:d9:fa:51:82:55: fb:7f:fc:f6:7f:47:b9:09:67:a6:45:a6:06:75:dc: 22:ef:83:38:56:a9:95:af:4a:e4:a2:5f:e4:53:20: 52:d1:9c:c6:dd:84:5a:12:ef:ce:7e:9b:9c:ad:ba: 01:af:e2:45:3a:9d:6b:c0:2f:30:c0:c9:eb:d7:d7: 53:b2:4e:94:bd:c6:50:6d:97:45:49:c3:8e:45:e5: 0c:00:0f:a9:f5:da:3d:91:22:f4:a2:9b:70:87:1a: 67:22:fa:ac:08:8e:90:1e:3d:aa:ab:e3:2a:db:17: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:55:04:44:1C:19:1D:1B:BF:C3:D3:EA:69:53:F7:31:D7:C4:7E X509v3 Authority Key Identifier: keyid:BC:1E:23:21:90:D1:C6:31:69:D7:F4:FD:17:61:55:97:56:49:B8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CB8/4C769FF0FB5B11EF86687E1AC4F9AE02/vB4jIZDRxjFp1_T9F2FVl1ZJuN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:12:98:88:6c:c2:7f:66:c9:d6:99:93:dd:1f:7a:5b:ad:74: 5d:f5:e1:0b:ae:98:03:0b:94:39:6e:8a:cc:10:b0:3e:49:74: 93:ef:fc:50:8b:5b:ed:27:87:f2:12:16:ca:c7:23:a9:c8:46: dd:6b:b7:55:94:c1:18:73:f3:2f:99:fa:eb:d6:c8:c3:21:3a: 6c:38:a1:bb:0b:29:7b:32:66:d9:e5:eb:fa:dd:02:ed:be:1a: 0d:af:9f:13:a2:e6:ff:16:b4:00:a2:2a:eb:cc:43:84:75:0c: 01:43:3f:52:d1:5c:28:14:ef:0e:92:b4:a5:a3:8d:e5:bd:7f: 09:09:64:bc:e2:ab:e0:01:44:99:c6:cd:f4:5c:20:48:be:d6: b5:c3:96:09:7c:84:2a:1b:4c:c6:3a:d3:1f:f1:57:f6:2c:f4: 06:3d:cf:36:c0:57:4e:23:37:b8:d8:43:25:51:e7:e1:17:47: ea:06:5a:2c:43:e4:2d:3d:f0:dc:fd:eb:9d:1c:94:8c:b5:be: eb:77:b0:ec:94:a3:e9:b8:12:c2:1a:d7:30:a8:b2:a0:9d:ad: c3:7c:82:de:89:81:4d:1f:b7:5c:59:f5:d0:7d:4e:11:92:e5: 59:64:61:da:dc:f8:dd:78:65:68:18:e6:2c:87:20:49:65:61: b7:12:14:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy M0NCODExMC8GA1UEBRMoQkMxRTIzMjE5MEQxQzYzMTY5RDdGNEZEMTc2MTU1OTc1 NjQ5QjhERjAeFw0yNTA3MTkwNzQwMjBaFw0yNTA3MjYwNzQwMjBaMBgxFjAUBgNV BAMTDTY4N2I0YmU0LTY1NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWfFDEOeclNHsTKubCMoNKjizgbtXzdwrDLTVoWL//FT+qHexdon+Mqd8uMsjz 6HUOqjdcu4+HUNC7+AcKNX2KF4ivSN06BmbHZb4qcOixRB8uB/drI3OL4V5RAdUk aBOSMsixJR12uXCxd8YUAGeozeplSOve6sDjExeEMPPaw8BEaal4BOURdwPJw2Rl t7bZ+lGCVft//PZ/R7kJZ6ZFpgZ13CLvgzhWqZWvSuSiX+RTIFLRnMbdhFoS785+ m5ytugGv4kU6nWvALzDAyevX11OyTpS9xlBtl0VJw45F5QwAD6n12j2RIvSim3CH Gmci+qwIjpAePaqr4yrbFynZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoZ9VBEQc GR0bv8PT6mlT9zHXxH4wHwYDVR0jBBgwFoAUvB4jIZDRxjFp1/T9F2FVl1ZJuN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzQ0I4LzRDNzY5RkYwRkI1 QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpGcDFfVDlGMkZWbDFaSnVO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkI0aklaRFJ4akZwMV9UOUYyRlZsMVpKdU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz Q0I4LzRDNzY5RkYwRkI1QjExRUY4NjY4N0UxQUM0RjlBRTAyL3ZCNGpJWkRSeGpG cDFfVDlGMkZWbDFaSnVOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABsSmIhswn9mydaZk90felutdF314QuumAMLlDluiswQsD5JdJPv/FCL W+0nh/ISFsrHI6nIRt1rt1WUwRhz8y+Z+uvWyMMhOmw4obsLKXsyZtnl6/rdAu2+ Gg2vnxOi5v8WtACiKuvMQ4R1DAFDP1LRXCgU7w6StKWjjeW9fwkJZLziq+ABRJnG zfRcIEi+1rXDlgl8hCobTMY60x/xV/Ys9AY9zzbAV04jN7jYQyVR5+EXR+oGWixD 5C098Nz9650clIy1vut3sOyUo+m4EsIa1zCosqCdrcN8gt6JgU0ft1xZ9dB9ThGS 5VlkYdrc+N14ZWgY5iyHIEllYbcSFOU= -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:48 2025 by rpki-client