$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft File: T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft (raw, json) Hash identifier: QazA8lq5wzm6xqJld0j8YOI11QfMGXIoSpCVdMI87es= Subject key identifier: 7E:1B:20:56:EB:91:E0:E0:0E:7E:31:C7:84:6A:CE:29:01:DA:94:A7 Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft Manifest number: 6E Signing time: Sat 19 Jul 2025 07:10:49 +0000 Manifest this update: Sat 19 Jul 2025 07:10:49 +0000 Manifest next update: Sat 26 Jul 2025 07:10:49 +0000 Files and hashes: 1: T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl (hash: MAUgUO/Gokct/P1lumCEVzJBnakyuFv5Ui3uVIJaiXQ=) 2: 13CA64E4C35B11EFA021A243C4F9AE02.roa (hash: UhUF/9TtUZwnLWqWalCeHKKjGi9TCpHZ26MzC5XnFdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: Jul 19 07:10:49 2025 GMT Not After : Jul 26 07:10:49 2025 GMT Subject: CN=687b44f9-74e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:dd:67:20:2c:c9:ab:f0:27:7e:e2:29:72: 20:0d:51:56:82:50:b0:42:b0:8c:88:4f:04:6c:9c: d1:7f:bc:a1:1f:84:8f:64:fa:75:4b:0b:3a:92:62: 2b:16:26:84:ad:6b:0a:b2:83:13:be:aa:53:8b:ce: 74:66:10:bf:a2:13:03:66:b6:cd:1c:7e:77:73:40: 8b:c4:a1:7f:12:e5:41:5b:ec:ea:8d:59:1b:14:94: 59:d1:29:18:e9:f9:4f:be:d9:e3:20:98:60:cb:9c: ec:73:56:ad:d0:f5:f4:24:e5:3d:ec:f3:2a:07:8b: 6d:8c:ae:0e:67:f6:5c:46:27:ba:c4:22:6d:85:cf: 7f:3e:2b:9a:b7:c1:15:36:00:fa:c8:8f:f0:1b:61: af:06:11:3a:7d:86:cc:30:ca:f1:11:77:3f:6f:28: f9:5e:28:06:51:6c:e9:d1:f9:b2:43:bb:11:77:21: 98:f7:a1:74:d4:d6:ad:96:53:fc:2c:64:1a:6f:ce: 75:30:cc:64:87:bf:60:e8:a5:f4:2c:59:a5:e0:7e: da:8b:a0:1b:c6:a6:23:40:9d:89:56:ec:0d:dc:b3: 8c:b3:a1:88:cd:4c:52:a3:d9:63:d2:0c:44:ea:6f: 46:2f:d2:64:1a:77:15:1e:a1:13:8b:73:ef:71:18: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:20:56:EB:91:E0:E0:0E:7E:31:C7:84:6A:CE:29:01:DA:94:A7 X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:08:67:ea:1c:59:f7:09:1c:0e:22:f1:a0:63:29:80:92:d3: fe:f7:dd:7a:11:b4:de:2e:1e:ae:f8:b8:27:a3:02:81:ad:4b: ae:55:b6:b1:58:98:89:df:db:98:f0:ee:98:7e:5c:f4:a4:3a: 68:2a:02:ee:0d:f7:a9:76:1e:3d:81:a7:60:81:ce:2e:ec:f8: ab:8a:04:95:28:43:5f:6f:58:5b:a3:38:67:38:15:04:4d:5c: 56:33:c7:4b:f8:96:aa:5f:a4:61:ea:3a:60:58:29:fa:01:78: ec:9a:05:70:44:99:18:b6:6b:79:b1:8d:35:a1:ad:20:03:75: ad:4d:54:e6:0e:81:df:40:fe:27:46:3f:24:8c:c8:5a:9c:87: 58:4d:3a:30:82:25:2a:3d:cc:8f:aa:5a:0a:3f:c3:c0:45:6d: f2:25:aa:81:77:26:4f:9c:13:8a:99:23:62:49:aa:cb:76:94: 69:ce:e0:44:46:79:eb:58:f1:de:f8:56:61:f2:f1:ea:47:f8: e2:25:19:7f:78:99:f3:43:61:13:cc:13:8a:69:51:5f:7c:7f: 62:c0:39:ff:45:8e:99:c5:a1:4d:4a:f6:90:6a:90:24:57:83: 9a:0f:6d:19:0b:ee:e1:07:1d:bb:3f:5f:e0:1b:14:d2:08:09: 2e:0e:23:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoNEY5RUZENDNCQTc5QTM0OTQ1NTEwOURCMjAwODQ1QTg5 MDhDREM1QzAeFw0yNTA3MTkwNzEwNDlaFw0yNTA3MjYwNzEwNDlaMBgxFjAUBgNV BAMTDTY4N2I0NGY5LTc0ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC63t1nICzJq/AnfuIpciANUVaCULBCsIyITwRsnNF/vKEfhI9k+nVLCzqSYisW JoStawqygxO+qlOLznRmEL+iEwNmts0cfndzQIvEoX8S5UFb7OqNWRsUlFnRKRjp +U++2eMgmGDLnOxzVq3Q9fQk5T3s8yoHi22Mrg5n9lxGJ7rEIm2Fz38+K5q3wRU2 APrIj/AbYa8GETp9hswwyvERdz9vKPleKAZRbOnR+bJDuxF3IZj3oXTU1q2WU/ws ZBpvznUwzGSHv2DopfQsWaXgftqLoBvGpiNAnYlW7A3cs4yzoYjNTFKj2WPSDETq b0Yv0mQadxUeoROLc+9xGJ9LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfhsgVuuR 4OAOfjHHhGrOKQHalKcwHwYDVR0jBBgwFoAUT579Q7p5o0lFUQnbIAhFqJCM3Fww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzJGNzIyQTk4QzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDU3OVE3cDVvMGxGVVFuYklBaEZxSkNNM0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzJGNzIyQTk4QzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL1Q1NzlRN3A1bzBs RlVRbmJJQWhGcUpDTTNGdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKUIZ+ocWfcJHA4i8aBjKYCS0/733XoRtN4uHq74uCejAoGtS65VtrFY mInf25jw7ph+XPSkOmgqAu4N96l2Hj2Bp2CBzi7s+KuKBJUoQ19vWFujOGc4FQRN XFYzx0v4lqpfpGHqOmBYKfoBeOyaBXBEmRi2a3mxjTWhrSADda1NVOYOgd9A/idG PySMyFqch1hNOjCCJSo9zI+qWgo/w8BFbfIlqoF3Jk+cE4qZI2JJqst2lGnO4ERG eetY8d74VmHy8epH+OIlGX94mfNDYRPME4ppUV98f2LAOf9FjpnFoU1K9pBqkCRX g5oPbRkL7uEHHbs/X+AbFNIICS4OI/s= -----END CERTIFICATE-----Generated at Sun Jul 20 11:26:35 2025 by rpki-client