$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json) Hash identifier: PvkfkYohDQK1S0wSJ0TVheFMhF9tdr8uClc3jvoCUjk= Subject key identifier: 40:6E:6E:2E:C1:2C:EC:37:59:6D:1D:48:95:C1:03:9A:A6:8F:BA:ED Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft Manifest number: E1 Signing time: Mon 21 Jul 2025 05:50:29 +0000 Manifest this update: Mon 21 Jul 2025 05:50:29 +0000 Manifest next update: Mon 28 Jul 2025 05:50:29 +0000 Files and hashes: 1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: ILHbuvzzIo4ctNYbqA6KWrHiSIEWRrmAEg0JeBAuXo0=) 2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: /VsZS9ufttBO1fjkHbj0xKp60CqOiBgm395Efx5G+zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B Validity Not Before: Jul 21 05:50:29 2025 GMT Not After : Jul 28 05:50:29 2025 GMT Subject: CN=687dd525-d9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c4:e4:d7:e7:48:1a:8e:6a:53:61:b4:16:29: 3a:5e:3e:96:d8:47:7d:5e:f5:32:de:b3:14:ce:b2: 03:aa:9b:89:e9:9d:c2:2c:38:07:d6:a3:a9:76:7b: 6a:44:6a:34:f9:e1:7c:c2:82:e1:7b:c7:5a:f5:0b: 33:24:fc:5f:d1:ab:0a:12:5a:42:70:36:72:3f:04: 98:81:cb:13:f5:d4:c3:4a:4f:4a:80:08:cb:ef:b0: bc:2f:8c:82:61:23:60:36:4a:7c:70:e4:7a:bc:55: fb:9a:35:3c:84:14:00:9c:97:ba:65:1d:9e:36:0c: 6f:fb:28:80:b9:83:23:f6:ca:ad:c8:9e:f1:9e:57: f2:3d:20:3b:f4:e8:a7:9b:a7:25:91:4b:7a:a8:db: 2c:d9:10:c5:8b:f6:07:ee:83:c8:91:b2:71:21:dc: cb:37:8a:ca:16:2e:e9:df:4b:0f:f5:fb:13:42:9f: a3:97:29:b4:c6:4a:06:7e:e6:fc:3b:26:68:d6:cb: 1b:9a:55:cd:61:c1:aa:ee:ce:d0:45:88:a2:d1:5e: ff:8a:f6:d4:86:8f:43:f5:5b:7b:c5:35:4d:96:8b: 2d:a3:3b:e3:76:37:c0:4e:64:0f:67:ee:7f:e4:83: e6:a9:2e:93:42:3a:eb:84:9b:04:2a:8c:3b:49:51: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6E:6E:2E:C1:2C:EC:37:59:6D:1D:48:95:C1:03:9A:A6:8F:BA:ED X509v3 Authority Key Identifier: keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:51:95:27:db:8e:1d:8f:e9:7b:47:66:ef:4d:a7:dc:3b:2a: 6f:f5:b2:f5:24:16:da:3d:e3:f5:ca:53:d4:e5:4d:b0:66:bf: 7b:f5:86:04:3c:af:a3:03:e2:b4:09:ff:b1:da:d8:71:16:c4: cf:79:10:b9:e3:c7:bc:41:93:de:42:52:7c:da:75:d2:70:50: 07:18:63:bb:59:b4:13:aa:5f:7b:62:bb:8a:9e:20:d2:30:ef: f0:98:9e:82:49:ff:49:9d:9b:78:5d:38:25:8f:fa:3c:48:92: 5a:7c:4b:39:da:dc:54:5e:49:0c:0e:08:95:69:48:03:62:1e: 3f:f5:37:11:0e:75:5e:80:c3:e5:9e:fa:62:86:c8:84:15:44: b4:2c:a6:8b:89:10:d0:e0:9c:b5:64:f4:2b:0e:b1:28:50:9d: 69:29:fc:33:b9:0f:02:91:e8:3d:f5:cb:50:4c:ff:35:ae:3c: 3a:f5:d1:8f:95:17:bf:14:62:98:f5:a1:f6:27:d4:c0:3d:2c: e5:a1:d7:e6:5f:ff:6d:6d:05:94:ce:d0:38:e0:8c:74:36:5a: cf:b9:83:a3:1d:f2:ed:24:b3:29:42:7f:11:1e:fb:93:a1:1c: c4:d9:04:94:3e:9c:4f:9c:37:f7:dc:83:70:02:8d:70:89:82: b5:2b:26:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKEFDQ0JGMjZBMTlEOUUxNEMzMUY1RjM3RTFCOTY2RDg2 QTUwNEI0NkIwHhcNMjUwNzIxMDU1MDI5WhcNMjUwNzI4MDU1MDI5WjAYMRYwFAYD VQQDEw02ODdkZDUyNS1kOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MTk1+dIGo5qU2G0Fik6Xj6W2Ed9XvUy3rMUzrIDqpuJ6Z3CLDgH1qOpdntq RGo0+eF8woLhe8da9QszJPxf0asKElpCcDZyPwSYgcsT9dTDSk9KgAjL77C8L4yC YSNgNkp8cOR6vFX7mjU8hBQAnJe6ZR2eNgxv+yiAuYMj9sqtyJ7xnlfyPSA79Oin m6clkUt6qNss2RDFi/YH7oPIkbJxIdzLN4rKFi7p30sP9fsTQp+jlym0xkoGfub8 OyZo1ssbmlXNYcGq7s7QRYii0V7/ivbUho9D9Vt7xTVNlostozvjdjfATmQPZ+5/ 5IPmqS6TQjrrhJsEKow7SVFY4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBubi7B LOw3WW0dSJXBA5qmj7rtMB8GA1UdIwQYMBaAFKzL8moZ2eFMMfXzfhuWbYalBLRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FQjM5M0Q0RTJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRVd3g5Zk4tRzVadGhxVUV0 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNdnlhaG5aNFV3eDlmTi1HNVp0aHFVRXRHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FQjM5M0Q0RTJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9yTXZ5YWhuWjRV d3g5Zk4tRzVadGhxVUV0R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUZUn244dj+l7R2bvTafcOypv9bL1JBbaPeP1ylPU5U2wZr979YYE PK+jA+K0Cf+x2thxFsTPeRC548e8QZPeQlJ82nXScFAHGGO7WbQTql97YruKniDS MO/wmJ6CSf9JnZt4XTglj/o8SJJafEs52txUXkkMDgiVaUgDYh4/9TcRDnVegMPl nvpihsiEFUS0LKaLiRDQ4Jy1ZPQrDrEoUJ1pKfwzuQ8Ckeg99ctQTP81rjw69dGP lRe/FGKY9aH2J9TAPSzlodfmX/9tbQWUztA44Ix0NlrPuYOjHfLtJLMpQn8RHvuT oRzE2QSUPpxPnDf33INwAo1wiYK1KyYq -----END CERTIFICATE-----Generated at Tue Jul 22 00:00:21 2025 by rpki-client