$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: Gs89fekoaOhC6pBXGTMpbC3LtoQzAP6K+b8NrNWw6h8= Subject key identifier: AB:AF:C1:B8:1B:3B:C7:AC:6B:34:23:3D:70:EE:11:9B:76:5F:2B:81 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 112A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1122 Signing time: Thu 24 Jul 2025 17:25:42 +0000 Manifest this update: Thu 24 Jul 2025 17:25:41 +0000 Manifest next update: Thu 31 Jul 2025 17:25:41 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: pGmRUM7EnIJoMsngCGXmbgx8lPHvamkibO1ObRljZ7k=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4394 (0x112a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Jul 24 17:25:41 2025 GMT Not After : Jul 31 17:25:41 2025 GMT Subject: CN=68826c96-0c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:d9:50:99:03:3e:a0:99:3c:98:0a:98:b6:6f: c8:23:14:c3:46:f3:43:22:40:71:71:2c:67:62:ed: 18:9f:46:8e:3d:54:ba:05:be:d0:09:59:b4:21:bf: 9a:b5:aa:68:6c:22:67:08:a5:97:33:13:12:54:18: 00:72:26:68:66:c3:d8:6d:d1:4d:c8:dc:78:5f:28: 14:10:57:1f:d2:0f:09:af:44:ce:39:c6:61:5e:a2: b4:b0:f1:38:4f:d6:45:ab:c8:ca:25:9c:16:81:0e: 06:99:e3:cd:b3:e5:6d:55:f6:0e:e0:fd:7f:42:eb: 27:69:30:c0:47:af:71:8f:f8:99:da:2b:70:5f:69: 64:22:0b:1f:af:6f:e1:ef:94:92:a4:4f:23:45:eb: a7:18:f9:39:23:dd:87:96:88:d3:49:c0:28:a4:f2: 9e:a2:ec:6b:73:c3:09:1c:a0:56:a8:c0:f4:2a:fd: df:fe:e7:25:db:72:33:d0:a5:96:e1:0d:af:48:81: 0c:83:8e:51:b5:14:dc:30:15:f8:82:fa:a9:6d:07: 99:b9:32:5d:5f:17:e5:d7:cc:d5:13:67:87:ce:27: 88:aa:af:51:ef:04:77:6e:c5:47:92:a3:a2:00:85: d4:cc:2a:38:2a:38:c0:5f:e2:c1:07:dd:9b:c9:b8: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AF:C1:B8:1B:3B:C7:AC:6B:34:23:3D:70:EE:11:9B:76:5F:2B:81 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:44:d3:71:af:45:ca:1f:96:34:7e:fa:28:e7:41:d0:5a:d2: 07:c9:47:ed:d5:58:f4:15:8c:f6:e3:4f:9b:71:5a:fa:20:62: 78:22:8b:d9:40:d1:34:08:fd:fb:30:e4:99:9e:58:2c:a8:c3: 43:84:f0:8d:cd:fc:ac:2c:02:b6:a0:a0:48:22:26:98:10:35: 37:cb:c5:dc:e5:21:f0:f9:af:42:d8:6e:5f:7f:95:3b:3e:f9: 11:cf:b4:6f:94:33:34:9f:ff:1f:58:04:fa:a8:ae:b9:a1:e1: 48:a9:54:da:58:9f:aa:a2:ed:93:3f:5d:38:e4:d7:cf:c5:59: 9a:c9:c3:73:e4:21:fa:4e:5c:2b:4c:6c:be:02:af:ae:c6:c2: 69:0d:2d:9b:4d:bb:67:6e:61:85:ce:87:c2:04:66:cb:06:12: 0f:ea:46:f8:73:f6:6c:27:fb:4a:3b:39:77:25:25:11:20:4b: 93:46:a9:a1:f3:75:13:ee:89:a1:d9:44:11:08:1f:07:89:54: ce:e0:63:9a:39:0f:b3:50:d4:85:43:86:ce:6a:c7:f6:25:d0: 7c:39:58:1d:b0:73:0b:0b:c0:c0:91:db:61:85:a6:b3:49:ff: f2:e9:d8:9a:ee:8b:a5:f3:eb:38:7b:16:df:3d:b6:1b:ba:e6: c4:fb:1e:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwNzI0MTcyNTQxWhcNMjUwNzMxMTcyNTQxWjAYMRYwFAYD VQQDEw02ODgyNmM5Ni0wYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/9lQmQM+oJk8mAqYtm/IIxTDRvNDIkBxcSxnYu0Yn0aOPVS6Bb7QCVm0Ib+a tapobCJnCKWXMxMSVBgAciZoZsPYbdFNyNx4XygUEFcf0g8Jr0TOOcZhXqK0sPE4 T9ZFq8jKJZwWgQ4GmePNs+VtVfYO4P1/QusnaTDAR69xj/iZ2itwX2lkIgsfr2/h 75SSpE8jReunGPk5I92HlojTScAopPKeouxrc8MJHKBWqMD0Kv3f/ucl23Iz0KWW 4Q2vSIEMg45RtRTcMBX4gvqpbQeZuTJdXxfl18zVE2eHzieIqq9R7wR3bsVHkqOi AIXUzCo4KjjAX+LBB92bybgkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuvwbgb O8esazQjPXDuEZt2XyuBMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKRNNxr0XKH5Y0fvoo50HQWtIHyUft1Vj0FYz240+bcVr6IGJ4IovZ QNE0CP37MOSZnlgsqMNDhPCNzfysLAK2oKBIIiaYEDU3y8Xc5SHw+a9C2G5ff5U7 PvkRz7RvlDM0n/8fWAT6qK65oeFIqVTaWJ+qou2TP1045NfPxVmaycNz5CH6Tlwr TGy+Aq+uxsJpDS2bTbtnbmGFzofCBGbLBhIP6kb4c/ZsJ/tKOzl3JSURIEuTRqmh 83UT7omh2UQRCB8HiVTO4GOaOQ+zUNSFQ4bOasf2JdB8OVgdsHMLC8DAkdthhaaz Sf/y6dia7oul8+s4exbfPbYbuubE+x4F -----END CERTIFICATE-----Generated at Sat Jul 26 02:04:06 2025 by rpki-client