$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft File: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json) Hash identifier: jzwfDqefYiEQrdXIZQRcqsd2cRm92BVHlVUcSle9PB8= Subject key identifier: C3:36:2A:FD:B7:A5:3F:6C:F4:57:17:A1:4F:B3:F5:B5:44:79:98:4A Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 Certificate issuer: /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft Manifest number: 4A Signing time: Mon 21 Jul 2025 07:42:19 +0000 Manifest this update: Mon 21 Jul 2025 07:42:18 +0000 Manifest next update: Mon 28 Jul 2025 07:42:18 +0000 Files and hashes: 1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: 7t9Ukio6KOHdwAjNYSWSzcO1pGEYL1IR1lSkkD1suHA=) 2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: 2g0YcwmcNYvF1yQbVU8JT3MVONcEq3Lo2nc0de/dtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70 Validity Not Before: Jul 21 07:42:18 2025 GMT Not After : Jul 28 07:42:18 2025 GMT Subject: CN=687def5a-49cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:83:13:35:81:39:8b:e3:3d:ee:f3:0b:3d: 1e:a0:f0:47:1a:35:9a:ce:9e:8a:a9:53:bc:e7:39: 72:f1:47:b0:95:87:b0:58:95:b2:e3:5c:99:c9:2f: 1e:af:19:b5:f9:d8:e1:63:57:75:a1:43:0d:43:a2: 15:70:1f:a8:bd:bb:dd:40:c6:08:ff:d4:19:e2:73: 5e:2f:33:aa:04:ac:31:1f:09:c6:59:98:95:96:23: f6:e8:af:a0:e1:81:e9:ee:37:d8:91:ea:26:b7:56: b3:64:4d:2e:26:41:49:44:6c:62:21:bf:22:d2:56: e4:de:af:a8:90:b4:26:05:17:84:25:10:32:20:0e: cd:b2:a4:93:b3:e8:50:89:bf:4c:48:5f:f9:98:e9: 0d:02:9c:ff:49:94:7b:3c:ef:a6:23:ed:17:14:76: 24:89:94:ff:42:cd:94:ab:ce:90:77:f2:c3:64:3c: 06:0f:fd:d0:ca:15:0c:fb:db:bf:70:ef:16:58:84: 81:57:77:d3:e3:f0:12:2f:66:77:ed:a3:4d:fd:46: f7:80:5c:9e:a9:d7:d3:93:84:81:4b:da:d8:26:34: 9c:31:8a:11:ba:ab:cd:71:12:76:aa:3a:a9:24:30: d3:8c:e9:61:38:2e:54:c6:4a:e1:7d:71:71:b4:41: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:2A:FD:B7:A5:3F:6C:F4:57:17:A1:4F:B3:F5:B5:44:79:98:4A X509v3 Authority Key Identifier: keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cb:a4:06:a6:b8:a8:68:01:ba:bf:6a:ba:3a:0c:54:76:ad: aa:95:7b:4b:24:f9:62:aa:b4:d9:be:73:42:28:06:eb:ca:5e: 7b:25:e2:a5:45:f4:f6:76:4c:2c:ba:bc:93:f8:f7:8b:08:af: 09:2c:e0:5f:c4:de:a1:04:7a:e9:28:49:80:cc:c2:77:ab:62: 3f:ef:04:f1:0f:d2:ca:b1:2f:76:97:52:4f:4e:4e:90:a9:80: d2:d9:ab:d1:3a:f7:0d:7f:51:8c:3e:e3:75:31:df:01:35:c0: 21:54:d2:8a:92:c8:bc:33:82:88:86:6f:58:6f:3f:ea:4b:e6: 35:16:5f:b5:2d:88:62:98:25:a1:ea:6b:a8:94:14:ff:69:11: d8:55:7c:cf:8d:f5:12:88:33:56:66:d9:55:a6:e1:e7:4a:5f: 0c:c4:da:b7:7c:da:ae:b7:21:ec:7f:c6:48:6f:fd:b3:f5:82: d9:ce:fd:05:a9:5c:4d:f5:d0:e2:4f:12:3b:b5:fe:9b:f3:21: 48:71:e9:a5:2f:b2:0c:13:17:49:47:8f:01:14:1f:62:b6:98: 04:d0:f1:da:77:d0:1a:ce:98:4e:5e:6f:6a:17:7d:7d:58:84: 92:61:f8:f8:56:66:2b:73:e3:06:e8:ff:92:dc:a7:4d:78:db: ed:89:2d:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE1NzExMC8GA1UEBRMoMjYyRUMyMEQzMkJDMTMyRDdEMjA0QzM0NDgyMjI5Nzky NDIxQ0Y3MDAeFw0yNTA3MjEwNzQyMThaFw0yNTA3MjgwNzQyMThaMBgxFjAUBgNV BAMTDTY4N2RlZjVhLTQ5Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC494MTNYE5i+M97vMLPR6g8EcaNZrOnoqpU7znOXLxR7CVh7BYlbLjXJnJLx6v GbX52OFjV3WhQw1DohVwH6i9u91Axgj/1Bnic14vM6oErDEfCcZZmJWWI/bor6Dh genuN9iR6ia3VrNkTS4mQUlEbGIhvyLSVuTer6iQtCYFF4QlEDIgDs2ypJOz6FCJ v0xIX/mY6Q0CnP9JlHs876Yj7RcUdiSJlP9CzZSrzpB38sNkPAYP/dDKFQz7279w 7xZYhIFXd9Pj8BIvZnfto039RveAXJ6p19OThIFL2tgmNJwxihG6q81xEnaqOqkk MNOM6WE4LlTGSuF9cXG0QSJFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwzYq/bel P2z0VxehT7P1tUR5mEowHwYDVR0jBBgwFoAUJi7CDTK8Ey19IEw0SCIpeSQhz3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTU3LzA2QjJCOEUyMDcy NjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHoz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmk3Q0RUSzhFeTE5SUV3MFNDSXBlU1FoejNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTU3LzA2QjJCOEUyMDcyNjExRjA4M0YzRkM3NUM0RjlBRTAyL0ppN0NEVEs4RXkx OUlFdzBTQ0lwZVNRaHozQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbLpAamuKhoAbq/aro6DFR2raqVe0sk+WKqtNm+c0IoBuvKXnsl4qVF 9PZ2TCy6vJP494sIrwks4F/E3qEEeukoSYDMwnerYj/vBPEP0sqxL3aXUk9OTpCp gNLZq9E69w1/UYw+43Ux3wE1wCFU0oqSyLwzgoiGb1hvP+pL5jUWX7UtiGKYJaHq a6iUFP9pEdhVfM+N9RKIM1Zm2VWm4edKXwzE2rd82q63Iex/xkhv/bP1gtnO/QWp XE310OJPEju1/pvzIUhx6aUvsgwTF0lHjwEUH2K2mATQ8dp30BrOmE5eb2oXfX1Y hJJh+PhWZitz4wbo/5Lcp0142+2JLe4= -----END CERTIFICATE-----Generated at Mon Jul 21 12:52:00 2025 by rpki-client