$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: xWVoNV2P4qGzfW9WTJwnzM0TQbsFz7YMA0vu6bq2q1M= Subject key identifier: 23:CC:12:2E:AD:ED:38:C9:9E:74:39:24:0F:1A:1C:7B:7F:60:27:85 Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 0133 Signing time: Mon 21 Jul 2025 04:41:45 +0000 Manifest this update: Mon 21 Jul 2025 04:41:44 +0000 Manifest next update: Mon 28 Jul 2025 04:41:44 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: C9LOSDyuqGvPiOX2zG7f5WIPFbPqHOvZRafDnVTia6Q=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: 8cegSUbUuoPE7mPNDdYwV/tSOtw6Sjag/azXHzK7Lu8=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: l/0cV1WqKHlm3zfBuP747PhglBf2SLieAswGuN8ioE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Jul 21 04:41:44 2025 GMT Not After : Jul 28 04:41:44 2025 GMT Subject: CN=687dc508-24a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:d8:b2:3e:a7:08:45:b2:1e:ba:71:cb:40: 28:a1:4e:56:86:88:40:14:10:10:f5:d4:bd:f1:59: 1b:d0:86:95:f1:9a:d8:e0:c5:12:ea:98:fe:93:ca: 97:77:35:cf:a5:b8:8e:10:fd:19:57:4b:f4:c7:5c: 14:07:2f:64:c9:44:fc:82:8c:c8:2d:31:52:1c:65: f6:8f:95:fa:9c:39:77:4d:73:29:ad:c4:80:c8:c0: 5a:4e:6b:54:13:a0:8d:34:b1:dd:a0:a6:bc:e6:be: 02:22:ee:10:96:cd:6f:b0:e1:2c:65:e4:e6:c1:7a: c8:f3:d6:98:d0:64:f5:ec:61:0b:d7:9f:bf:83:1e: 57:57:87:56:63:a9:12:3d:3e:80:c2:fa:fb:ea:b4: 8d:b8:7f:bd:2c:66:86:4c:f3:24:72:26:e3:f7:91: 71:dd:47:c2:86:1a:1a:ca:21:c9:30:4e:ca:5c:76: 96:49:8f:b2:d6:65:87:cf:1c:94:47:c4:25:7c:d1: a6:94:c6:02:65:43:04:f9:6d:c3:0a:3d:4d:72:df: c3:c0:d3:4b:5a:c4:74:62:65:bd:3b:f3:59:09:3e: 91:d1:6f:4d:1e:6e:86:89:69:cf:02:be:87:8d:47: 72:54:59:5c:3f:7d:e8:92:32:2c:61:48:a7:cd:95: 87:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:12:2E:AD:ED:38:C9:9E:74:39:24:0F:1A:1C:7B:7F:60:27:85 X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7a:65:f5:13:32:ce:88:2c:f0:2c:26:91:da:4a:6d:81:f1: 98:df:69:5e:a1:88:18:f0:e8:d6:7d:3d:ec:7a:9f:81:85:39: 0f:02:fb:21:38:6e:6e:fc:08:60:e5:36:07:d6:a6:f5:15:55: cd:29:c4:79:e3:3a:fb:a9:ad:49:a0:3a:45:27:2f:38:48:bf: 29:a6:58:f6:d3:af:41:41:27:13:2b:0d:fb:3e:9d:c6:5d:5c: b4:8c:70:7f:d7:61:b7:80:de:05:6c:44:91:c8:26:d5:4a:bc: 1c:15:66:c4:1c:c7:13:a4:4e:bf:9d:6b:bf:14:ea:da:62:2d: 31:4b:e6:d4:0e:ce:40:13:06:56:c8:1b:bb:16:91:d2:58:6f: 39:90:07:44:f7:02:68:84:5d:65:d6:c0:5e:61:72:4f:2b:90: 74:e9:26:cb:51:11:f1:2f:f7:ec:a2:11:af:d5:af:d4:3f:f9: 6b:9a:80:ee:12:54:1d:12:ef:22:fe:4c:cf:8a:ef:29:26:62: 54:d1:05:4c:e0:42:25:6e:ff:5a:1e:a2:8e:80:9e:6f:94:fa: d0:3f:27:0c:e7:b8:d2:3a:39:44:9c:22:fa:61:1b:5e:2b:0d: d2:ca:9e:6e:9c:57:8d:01:01:87:66:0e:40:9b:82:a0:e0:79: 1c:2c:65:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjUwNzIxMDQ0MTQ0WhcNMjUwNzI4MDQ0MTQ0WjAYMRYwFAYD VQQDEw02ODdkYzUwOC0yNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmLYsj6nCEWyHrpxy0AooU5WhohAFBAQ9dS98Vkb0IaV8ZrY4MUS6pj+k8qX dzXPpbiOEP0ZV0v0x1wUBy9kyUT8gozILTFSHGX2j5X6nDl3TXMprcSAyMBaTmtU E6CNNLHdoKa85r4CIu4Qls1vsOEsZeTmwXrI89aY0GT17GEL15+/gx5XV4dWY6kS PT6Awvr76rSNuH+9LGaGTPMkcibj95Fx3UfChhoayiHJME7KXHaWSY+y1mWHzxyU R8QlfNGmlMYCZUME+W3DCj1Nct/DwNNLWsR0YmW9O/NZCT6R0W9NHm6GiWnPAr6H jUdyVFlcP33okjIsYUinzZWHYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPMEi6t 7TjJnnQ5JA8aHHt/YCeFMB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXemX1EzLOiCzwLCaR2kptgfGY32leoYgY8OjWfT3sep+BhTkPAvsh OG5u/Ahg5TYH1qb1FVXNKcR54zr7qa1JoDpFJy84SL8pplj2069BQScTKw37Pp3G XVy0jHB/12G3gN4FbESRyCbVSrwcFWbEHMcTpE6/nWu/FOraYi0xS+bUDs5AEwZW yBu7FpHSWG85kAdE9wJohF1l1sBeYXJPK5B06SbLURHxL/fsohGv1a/UP/lrmoDu ElQdEu8i/kzPiu8pJmJU0QVM4EIlbv9aHqKOgJ5vlPrQPycM57jSOjlEnCL6YRte Kw3Syp5unFeNAQGHZg5Am4Kg4HkcLGWX -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:43 2025 by rpki-client