$ rpki-client -vvf rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft File: 9RwbzQ28E1ptm8RasFnm3ifpOwM.mft (raw, json) Hash identifier: uGR5OfMZmJC1hlm5Ogg4d4ENaNzbqF9AVvy9iMEgffQ= Subject key identifier: 23:52:1C:96:83:59:F3:89:69:0E:34:B9:86:B6:6D:0F:F8:DE:E1:92 Authority key identifier: F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 Certificate issuer: /CN=A913C1F9/serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft Manifest number: 0155 Signing time: Mon 21 Jul 2025 04:13:01 +0000 Manifest this update: Mon 21 Jul 2025 04:13:00 +0000 Manifest next update: Mon 28 Jul 2025 04:13:00 +0000 Files and hashes: 1: 9RwbzQ28E1ptm8RasFnm3ifpOwM.crl (hash: PNyvSaW649rgxT1IAb+WiHD+iPSAHbnCXJcOQT870g8=) 2: 9EEDB94662C111EE8F200F60C4F9AE02.roa (hash: nyq8KHP8dGY9X8L7b113gFAzdF9IMtkS8NNdIrOA99k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C1F9, serialNumber=F51C1BCD0DBC135A6D9BC45AB059E6DE27E93B03 Validity Not Before: Jul 21 04:13:00 2025 GMT Not After : Jul 28 04:13:00 2025 GMT Subject: CN=687dbe4c-cd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0e:56:dc:46:65:a6:f8:d5:56:09:78:44:50: 7a:d5:90:1d:42:06:e9:6a:5d:05:52:a0:d7:98:14: 41:12:32:a4:a4:f1:e3:b1:bc:aa:b5:b2:98:db:18: 7b:0f:b1:5c:87:e8:23:9d:12:eb:35:55:5a:9b:f5: 05:f5:f6:6c:75:ab:d0:d3:e1:1d:f2:2b:4d:f2:5d: 41:31:1a:32:fc:5f:6c:4f:1e:34:b9:86:20:39:1c: 63:7e:8b:16:1a:6c:cc:f8:34:22:0e:12:d2:66:9f: b5:f8:34:ea:07:57:f9:d7:8b:51:26:53:6b:8b:cc: df:0d:ea:21:94:54:b0:d5:84:2d:8a:c2:47:88:39: 9e:25:ac:a7:45:ba:02:c8:f0:f6:32:fd:a5:29:1d: 98:a9:a5:49:3b:f4:63:fc:6c:ac:08:3c:77:d8:e2: d8:37:7a:23:9e:d5:1f:11:40:82:e8:6d:49:f7:2f: 8e:cb:c8:b1:ed:62:26:5d:89:33:a7:40:63:b4:e0: 01:cd:23:46:e2:b6:38:7f:cc:8f:ad:55:ad:8f:8d: 3c:47:72:7e:3c:2c:e3:4f:53:be:de:2e:88:19:55: 44:0b:8b:20:a2:79:18:3e:43:5f:cf:81:e2:17:a3: 03:ea:12:1d:ff:3b:f9:cd:c5:e8:32:d8:35:ea:9b: 9c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:52:1C:96:83:59:F3:89:69:0E:34:B9:86:B6:6D:0F:F8:DE:E1:92 X509v3 Authority Key Identifier: keyid:F5:1C:1B:CD:0D:BC:13:5A:6D:9B:C4:5A:B0:59:E6:DE:27:E9:3B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RwbzQ28E1ptm8RasFnm3ifpOwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C1F9/7E437D065D3B11EEA215FD72C4F9AE02/9RwbzQ28E1ptm8RasFnm3ifpOwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:ab:5d:4c:a3:bd:46:a1:90:62:76:86:42:4f:7e:e8:b7: 6f:37:e2:77:66:e0:00:cd:df:a4:f1:30:08:a0:fa:1a:28:26: f2:03:24:fd:36:e6:a9:c5:9f:2b:1a:08:7b:ca:fe:7d:b3:29: 59:e5:ae:62:91:8d:b4:31:dc:6e:5f:ab:2c:39:e3:e5:1e:e0: 8a:ab:1f:5e:32:b6:ed:36:95:8c:ce:31:c1:e9:1a:ea:98:b4: f4:78:64:03:ae:d7:bc:fe:0f:d8:56:19:e6:2c:32:83:26:8c: 79:b9:66:c8:ce:fa:d8:35:84:9e:23:9e:17:f7:49:79:0a:35: a0:38:30:bd:7c:bf:85:e5:81:f7:22:11:83:f7:c3:09:b1:f8: ec:01:a4:1b:fc:90:a8:6b:66:99:5f:9c:d3:5b:38:99:81:b8: 38:e4:65:6b:79:b7:73:33:a9:a6:92:a4:34:e8:d3:df:36:cb: 88:9a:29:68:34:38:b8:6c:2d:6b:d7:e7:aa:30:0e:2c:55:49: 8b:1f:b1:68:1d:4c:0c:87:d5:6b:e5:fb:5c:15:5b:b6:79:ec: 8b:94:b2:94:ab:be:b6:30:28:25:ed:d0:95:90:5b:8b:04:e8: 15:06:cd:79:dd:09:b7:60:2e:8c:b7:f8:35:94:0f:0c:cb:21: 1b:46:a3:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MxRjkxMTAvBgNVBAUTKEY1MUMxQkNEMERCQzEzNUE2RDlCQzQ1QUIwNTlFNkRF MjdFOTNCMDMwHhcNMjUwNzIxMDQxMzAwWhcNMjUwNzI4MDQxMzAwWjAYMRYwFAYD VQQDEw02ODdkYmU0Yy1jZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0g5W3EZlpvjVVgl4RFB61ZAdQgbpal0FUqDXmBRBEjKkpPHjsbyqtbKY2xh7 D7Fch+gjnRLrNVVam/UF9fZsdavQ0+Ed8itN8l1BMRoy/F9sTx40uYYgORxjfosW GmzM+DQiDhLSZp+1+DTqB1f514tRJlNri8zfDeohlFSw1YQtisJHiDmeJaynRboC yPD2Mv2lKR2YqaVJO/Rj/GysCDx32OLYN3ojntUfEUCC6G1J9y+Oy8ix7WImXYkz p0BjtOABzSNG4rY4f8yPrVWtj408R3J+PCzjT1O+3i6IGVVEC4sgonkYPkNfz4Hi F6MD6hId/zv5zcXoMtg16puciwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNSHJaD WfOJaQ40uYa2bQ/43uGSMB8GA1UdIwQYMBaAFPUcG80NvBNabZvEWrBZ5t4n6TsD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzFGOS83RTQzN0QwNjVE M0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUxcHRtOFJhc0ZubTNpZnBP d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSd2J6UTI4RTFwdG04UmFzRm5tM2lmcE93TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzFGOS83RTQzN0QwNjVEM0IxMUVFQTIxNUZENzJDNEY5QUUwMi85UndielEyOEUx cHRtOFJhc0ZubTNpZnBPd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtbqtdTKO9RqGQYnaGQk9+6LdvN+J3ZuAAzd+k8TAIoPoaKCbyAyT9 NuapxZ8rGgh7yv59sylZ5a5ikY20MdxuX6ssOePlHuCKqx9eMrbtNpWMzjHB6Rrq mLT0eGQDrte8/g/YVhnmLDKDJox5uWbIzvrYNYSeI54X90l5CjWgODC9fL+F5YH3 IhGD98MJsfjsAaQb/JCoa2aZX5zTWziZgbg45GVrebdzM6mmkqQ06NPfNsuImilo NDi4bC1r1+eqMA4sVUmLH7FoHUwMh9Vr5ftcFVu2eeyLlLKUq762MCgl7dCVkFuL BOgVBs153Qm3YC6Mt/g1lA8MyyEbRqO1 -----END CERTIFICATE-----Generated at Mon Jul 21 18:50:34 2025 by rpki-client