$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json) Hash identifier: SUiqv2XObGiUX4LtI3DbD5vydgdvy12aznwdwI+A39w= Subject key identifier: E8:76:C1:1B:21:F6:89:8D:E3:40:61:EB:4C:B3:D0:C2:6E:50:1D:F7 Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft Manifest number: 0110 Signing time: Sat 19 Jul 2025 05:10:59 +0000 Manifest this update: Sat 19 Jul 2025 05:10:59 +0000 Manifest next update: Sat 26 Jul 2025 05:10:59 +0000 Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: sG1RzByNFrGiREixwbUHMKV3olh5U/0pep7ZMw2f/lc=) 2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: fj5an6uMsWFMPTZr6PrKep91XRX3rQER6UmH0deptJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C Validity Not Before: Jul 19 05:10:59 2025 GMT Not After : Jul 26 05:10:59 2025 GMT Subject: CN=687b28e3-059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:eb:bc:91:00:3e:cf:3f:99:33:a0:ec:c6:9f: 2a:4b:67:51:4c:a9:08:b9:53:ef:6b:6f:5b:51:9f: 17:62:9a:fa:66:61:8f:93:0b:64:61:a1:bf:67:d9: 8d:5c:a5:38:18:54:d3:8b:ed:04:00:2e:a6:f9:80: 6f:66:1b:58:8f:66:84:93:d2:15:1d:1c:98:85:71: ee:51:80:10:37:cc:96:43:15:3a:8b:c3:5d:59:6f: 4f:cf:49:e5:a2:3a:51:ca:84:1e:62:21:86:62:74: 95:87:fc:1b:4f:22:d2:31:b6:21:e2:f5:b7:2e:b9: 18:fb:c6:ac:dd:f1:08:ac:46:f9:4f:e5:27:04:80: e5:1e:98:40:43:55:2f:85:b3:4e:ec:c4:21:9c:58: 0d:4f:d1:b7:c2:ee:21:cf:06:bf:b1:b5:97:42:7f: 2f:f4:12:b0:e1:2a:ee:3f:b1:64:d6:b1:1d:9f:fa: 1a:e9:71:e8:42:87:02:2c:d9:52:84:f3:7d:2f:71: b0:c1:bb:c8:c5:c7:c6:fb:d6:9b:76:cd:e3:74:a1: 2b:39:96:7c:a9:4d:b5:a9:b8:10:b3:6d:dc:d4:61: b2:39:ee:42:2d:02:40:8e:96:b8:4e:23:66:e4:5a: 88:cb:bc:c2:2a:1f:d8:6e:69:fd:b0:7b:ad:c7:c4: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:76:C1:1B:21:F6:89:8D:E3:40:61:EB:4C:B3:D0:C2:6E:50:1D:F7 X509v3 Authority Key Identifier: keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5b:97:61:e7:f9:d7:12:1f:98:90:ec:cc:0c:dc:19:84:92: 5b:37:36:da:2b:2b:f8:6b:24:cd:51:99:18:ef:3f:5a:38:99: 09:92:07:11:34:f0:58:1a:d5:df:42:d0:f4:68:39:2c:3b:b1: 41:b9:6e:3b:1a:ba:bc:76:ee:12:63:7d:54:bb:12:32:01:3c: e4:68:7d:48:0a:f7:77:87:dc:7b:0e:22:58:03:19:a0:c7:4a: 75:41:32:3f:0d:78:dd:86:a4:ff:8f:57:7b:e4:55:40:43:f2: a6:fa:cc:da:ca:e2:cd:20:00:74:2b:ef:46:ba:bd:24:ed:2a: f7:e5:c9:2a:57:b8:9b:81:8b:cb:fd:bb:f3:38:e7:43:98:a7: f2:84:41:c8:87:b2:5f:5f:06:83:b0:5f:32:a6:76:d3:4e:73: 8b:cc:39:f8:1e:38:34:3a:ec:8d:82:5d:72:15:8e:6f:02:4e: 7c:0b:75:7d:2f:ed:d1:f0:22:13:b1:de:ac:33:83:1f:54:ac: fd:54:aa:00:38:65:f7:e4:30:12:59:5f:46:3f:97:cf:87:d3: e3:d5:fe:92:46:46:13:92:a0:f0:89:be:7d:9f:a3:ba:38:bf: c3:9a:c1:90:7e:3c:55:cc:fc:75:8e:e0:b7:45:3c:e5:61:b1: 4d:60:34:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz NDA5ODY3NEMwHhcNMjUwNzE5MDUxMDU5WhcNMjUwNzI2MDUxMDU5WjAYMRYwFAYD VQQDEw02ODdiMjhlMy0wNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzeu8kQA+zz+ZM6Dsxp8qS2dRTKkIuVPva29bUZ8XYpr6ZmGPkwtkYaG/Z9mN XKU4GFTTi+0EAC6m+YBvZhtYj2aEk9IVHRyYhXHuUYAQN8yWQxU6i8NdWW9Pz0nl ojpRyoQeYiGGYnSVh/wbTyLSMbYh4vW3LrkY+8as3fEIrEb5T+UnBIDlHphAQ1Uv hbNO7MQhnFgNT9G3wu4hzwa/sbWXQn8v9BKw4SruP7Fk1rEdn/oa6XHoQocCLNlS hPN9L3GwwbvIxcfG+9abds3jdKErOZZ8qU21qbgQs23c1GGyOe5CLQJAjpa4TiNm 5FqIy7zCKh/Ybmn9sHutx8TK2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh2wRsh 9omN40Bh60yz0MJuUB33MB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2 aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARW5dh5/nXEh+YkOzMDNwZhJJbNzbaKyv4ayTNUZkY7z9aOJkJkgcR NPBYGtXfQtD0aDksO7FBuW47Grq8du4SY31UuxIyATzkaH1ICvd3h9x7DiJYAxmg x0p1QTI/DXjdhqT/j1d75FVAQ/Km+szayuLNIAB0K+9Gur0k7Sr35ckqV7ibgYvL /bvzOOdDmKfyhEHIh7JfXwaDsF8ypnbTTnOLzDn4Hjg0OuyNgl1yFY5vAk58C3V9 L+3R8CITsd6sM4MfVKz9VKoAOGX35DASWV9GP5fPh9Pj1f6SRkYTkqDwib59n6O6 OL/DmsGQfjxVzPx1juC3RTzlYbFNYDRk -----END CERTIFICATE-----Generated at Sun Jul 20 03:34:54 2025 by rpki-client