$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: hJCBWECLoHX66RqBgpyg17er3Jd1yW3owXJV5Gt6gYk= Subject key identifier: 01:D3:42:77:9C:6C:BB:20:E4:28:C8:81:D4:4D:6F:5C:BE:2F:62:AE Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0CA4 Signing time: Fri 18 Jul 2025 18:23:17 +0000 Manifest this update: Fri 18 Jul 2025 18:23:16 +0000 Manifest next update: Fri 25 Jul 2025 18:23:16 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: eTt1zeC1Avvn5okIkxk7hd7LfUdoqp/kJDNcmG9LSlE=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: nc7TBefBbU0mXqPXG5FtS5khsHRLeEqmotd1zbLKCfY=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: tjqskq9N3o/egf3xRNWQ42djlqYwKoTyXRLEqPg8Ljw=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: QVZHVEKIjuuhqR8CaduzUx2n60lfnPfkbZyqpQZ1wv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Jul 18 18:23:16 2025 GMT Not After : Jul 25 18:23:16 2025 GMT Subject: CN=687a9115-38fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:db:34:c8:bd:ce:30:7d:4e:ae:fb:88:69: ea:ce:a3:19:ce:7e:02:bb:46:58:4f:c1:39:95:71: da:31:cf:15:6d:be:ac:bb:54:33:cf:9d:86:c9:2f: a1:e0:e2:0e:29:4e:58:ee:41:d7:7b:40:62:a4:2e: 58:33:0c:d3:98:a9:81:7b:5e:37:70:8f:bb:cf:05: d5:39:b2:f0:1b:7b:d9:ef:f8:fd:7b:a7:1f:66:42: b8:2a:b5:5b:9a:9b:b6:e5:e1:d5:90:7d:b5:7d:39: fb:50:da:d4:70:24:2f:f9:a1:0e:dc:61:f0:b1:f2: 21:f1:c5:a2:79:70:8d:96:13:3f:43:ed:c5:9e:33: 5c:72:d6:6a:70:a1:b6:24:09:8a:29:15:87:85:97: dc:4e:51:64:9b:fe:24:89:3f:94:28:93:5d:95:43: 7f:44:35:48:1a:6c:2d:0e:6b:56:ad:10:95:b1:ff: 1c:f4:81:0d:bf:6a:92:c2:8e:7e:57:27:17:22:0c: 6d:05:1d:15:8b:fe:5e:c5:8f:2d:ca:7b:b5:a0:04: ce:86:b4:f5:d5:4d:1c:51:68:3e:0f:3c:79:b0:2a: c0:51:3d:08:df:75:3b:31:bb:7c:10:c6:9c:cb:11: 72:e8:c2:eb:ba:53:f9:49:0f:0b:d6:40:ec:e0:5f: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:42:77:9C:6C:BB:20:E4:28:C8:81:D4:4D:6F:5C:BE:2F:62:AE X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:00:ac:11:54:c1:57:a8:7c:fa:42:86:70:da:ae:2f:04:52: fc:60:20:cf:75:d5:45:42:14:a9:63:ae:22:3b:cd:d5:8d:fc: 40:fb:b0:09:05:a9:fc:28:d2:9f:14:6e:50:38:cd:b1:5f:77: f9:4b:08:51:e6:a4:79:8b:5d:7a:d6:12:c1:e0:47:07:a3:70: d0:f0:66:6d:f6:10:4b:99:cd:f0:85:fb:a3:a8:88:27:9f:55: e6:47:4f:82:ed:0c:97:6e:b6:12:43:e8:d0:88:78:47:f3:72: 7a:f6:7c:59:e3:c7:3d:ae:ea:ea:7e:df:33:e9:3e:cf:f0:3f: df:8e:b9:48:ed:67:3c:16:b9:d7:6b:a8:72:ac:5a:bc:92:67: 5d:ef:0b:ea:4e:91:d3:d2:d6:a9:33:4e:f8:2d:1a:66:7c:56: 87:25:8b:04:90:63:a1:ed:f8:82:ac:50:14:ee:2a:82:19:f1: d7:19:ba:23:f3:e2:66:a5:34:05:9f:2e:ce:89:44:e2:dd:f8: 7a:f1:8e:fe:e2:3a:e0:34:e0:c8:63:76:59:8c:05:d2:b1:8d: c1:9c:3c:10:d0:5d:c7:6f:f7:93:90:c8:c9:af:6b:f8:0d:3b: d3:b4:ad:d5:4d:4f:59:a7:c1:a8:a3:61:80:83:26:45:7b:fb: e6:43:f2:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjUwNzE4MTgyMzE2WhcNMjUwNzI1MTgyMzE2WjAYMRYwFAYD VQQDEw02ODdhOTExNS0zOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj3bNMi9zjB9Tq77iGnqzqMZzn4Cu0ZYT8E5lXHaMc8Vbb6su1Qzz52GyS+h 4OIOKU5Y7kHXe0BipC5YMwzTmKmBe143cI+7zwXVObLwG3vZ7/j9e6cfZkK4KrVb mpu25eHVkH21fTn7UNrUcCQv+aEO3GHwsfIh8cWieXCNlhM/Q+3FnjNcctZqcKG2 JAmKKRWHhZfcTlFkm/4kiT+UKJNdlUN/RDVIGmwtDmtWrRCVsf8c9IENv2qSwo5+ VycXIgxtBR0Vi/5exY8tynu1oATOhrT11U0cUWg+Dzx5sCrAUT0I33U7Mbt8EMac yxFy6MLrulP5SQ8L1kDs4F/BiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHTQnec bLsg5CjIgdRNb1y+L2KuMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGAKwRVMFXqHz6QoZw2q4vBFL8YCDPddVFQhSpY64iO83VjfxA+7AJ Ban8KNKfFG5QOM2xX3f5SwhR5qR5i1161hLB4EcHo3DQ8GZt9hBLmc3whfujqIgn n1XmR0+C7QyXbrYSQ+jQiHhH83J69nxZ48c9rurqft8z6T7P8D/fjrlI7Wc8FrnX a6hyrFq8kmdd7wvqTpHT0tapM074LRpmfFaHJYsEkGOh7fiCrFAU7iqCGfHXGboj 8+JmpTQFny7OiUTi3fh68Y7+4jrgNODIY3ZZjAXSsY3BnDwQ0F3Hb/eTkMjJr2v4 DTvTtK3VTU9Zp8Goo2GAgyZFe/vmQ/KU -----END CERTIFICATE-----Generated at Sun Jul 20 14:54:40 2025 by rpki-client