$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: VfSGM4rnsSvwzIWulJL3EVV6AM8KAYkxl2CZNf0UM28= Subject key identifier: 39:55:79:CE:FE:08:DC:ED:A7:22:EC:BD:C4:04:49:6F:70:A9:AC:44 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 38 Signing time: Wed 23 Jul 2025 07:57:27 +0000 Manifest this update: Wed 23 Jul 2025 07:57:27 +0000 Manifest next update: Wed 30 Jul 2025 07:57:27 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: Sr7/aMtBvNhYd+kDekTHmgx3sQJWzN5tBT1HLjY8J1s=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Jul 23 07:57:27 2025 GMT Not After : Jul 30 07:57:27 2025 GMT Subject: CN=688095e7-e26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:42:db:e6:86:7f:c0:76:90:82:5a:f7:44: 09:18:da:c1:64:76:2c:31:a7:ac:cf:05:95:60:af: f8:08:9c:79:29:0d:cf:b7:d0:3c:ae:4c:ab:ea:5a: 75:90:ca:a5:0c:d8:bf:cf:f8:bd:28:76:cf:76:d0: 92:9b:8e:83:5e:67:78:67:f3:fa:4f:55:c7:8e:63: bf:58:31:5d:89:34:74:da:02:f3:ab:72:13:16:7e: f2:b6:3d:ad:f5:37:49:6e:53:6f:49:48:9d:4e:1f: c6:10:9b:31:92:17:cd:33:ad:12:43:f0:34:c9:29: 41:4f:de:9f:29:48:d8:bc:1e:ae:83:bc:4d:04:11: 68:00:a6:7f:ed:fb:b5:2a:a2:ae:1f:c5:5a:18:97: 76:6a:f4:90:eb:dc:75:4e:13:0b:68:0b:96:c4:a3: e6:dd:ec:38:d6:0b:af:23:ed:70:ed:09:5f:8b:21: 5b:dd:b9:ff:4c:54:23:11:3c:07:9a:44:30:7d:69: b4:32:18:43:b6:23:03:c0:31:e4:7d:b3:fd:0b:a6: 56:96:bb:d7:c6:9e:40:a2:64:bd:ac:c5:da:dd:7f: 6e:0b:b2:4e:91:f8:f8:fa:4b:4b:f3:3c:2c:a1:d7: aa:af:4c:b3:dc:ec:5a:a2:22:75:7f:a3:85:3e:66: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:79:CE:FE:08:DC:ED:A7:22:EC:BD:C4:04:49:6F:70:A9:AC:44 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ff:29:a5:10:e0:64:3c:e0:5d:a1:1f:ad:54:9a:b9:a6:85: 81:ba:98:90:84:67:f4:ca:46:c8:22:69:47:c9:d8:34:c7:3e: 7e:0c:1e:72:a1:ec:18:ab:d7:17:4a:1e:6c:36:b3:74:80:fe: 4c:93:e6:8e:78:6e:1a:bd:09:16:3a:b1:e4:40:92:5a:d2:36: 51:59:17:c5:16:33:9f:f3:45:1b:61:fa:af:58:af:04:c0:25: b1:31:4c:9c:75:d2:01:59:58:89:69:04:e5:60:cd:6b:c4:1b: 96:df:ae:02:90:19:e2:3e:60:d0:73:cc:c5:ca:4b:5e:02:d7: e2:da:1c:c3:e9:07:f3:2e:75:5b:fc:94:9f:44:4c:18:5f:bb: c5:76:e3:df:37:76:69:3a:1c:1e:b4:61:a9:7a:ba:a1:a6:6f: 2e:89:ed:4e:e2:ff:81:7d:e5:73:61:4e:19:ad:4a:96:f1:e5: e6:b9:d5:c1:e4:a6:0f:8a:6f:12:11:34:20:60:f0:79:57:6c: be:d5:dc:1f:c6:59:fa:3b:fb:92:d8:04:94:90:87:09:39:20: 7b:f1:fe:f8:e6:15:6e:c0:9c:18:78:47:a2:be:c2:3b:90:86: 1f:a3:c4:68:66:1a:f4:ee:8b:ef:e6:89:e2:64:36:eb:e8:c8: 0b:f2:80:2e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTA3MjMwNzU3MjdaFw0yNTA3MzAwNzU3MjdaMBgxFjAUBgNV BAMTDTY4ODA5NWU3LWUyNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9tULb5oZ/wHaQglr3RAkY2sFkdiwxp6zPBZVgr/gInHkpDc+30DyuTKvqWnWQ yqUM2L/P+L0ods920JKbjoNeZ3hn8/pPVceOY79YMV2JNHTaAvOrchMWfvK2Pa31 N0luU29JSJ1OH8YQmzGSF80zrRJD8DTJKUFP3p8pSNi8Hq6DvE0EEWgApn/t+7Uq oq4fxVoYl3Zq9JDr3HVOEwtoC5bEo+bd7DjWC68j7XDtCV+LIVvduf9MVCMRPAea RDB9abQyGEO2IwPAMeR9s/0LplaWu9fGnkCiZL2sxdrdf24Lsk6R+Pj6S0vzPCyh 16qvTLPc7FqiInV/o4U+Zr3xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOVV5zv4I 3O2nIuy9xARJb3CprEQwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAn/KaUQ4GQ84F2hH61UmrmmhYG6mJCEZ/TKRsgiaUfJ2DTHPn4MHnKh 7Bir1xdKHmw2s3SA/kyT5o54bhq9CRY6seRAklrSNlFZF8UWM5/zRRth+q9YrwTA JbExTJx10gFZWIlpBOVgzWvEG5bfrgKQGeI+YNBzzMXKS14C1+LaHMPpB/MudVv8 lJ9ETBhfu8V24983dmk6HB60Yal6uqGmby6J7U7i/4F95XNhThmtSpbx5ea51cHk pg+KbxIRNCBg8HlXbL7V3B/GWfo7+5LYBJSQhwk5IHvx/vjmFW7AnBh4R6K+wjuQ hh+jxGhmGvTui+/mieJkNuvoyAvygC4= -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:58 2025 by rpki-client