$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: JNbHFbEHSS75MLf5n6XhGJnsZrSBzq9J5WB/OsTT2n8= Subject key identifier: 7C:AA:C5:21:B2:8D:EF:E8:D0:16:75:EC:ED:3C:91:1F:13:5C:B5:1E Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 0905 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 08C8 Signing time: Sun 20 Jul 2025 20:39:56 +0000 Manifest this update: Sun 20 Jul 2025 20:39:55 +0000 Manifest next update: Sun 27 Jul 2025 20:39:55 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: WIG6mjuoViMBbvdpgRKp1MsFUFXp/YOzib5aN3Ez1rI=) 2: CDD4DA8E298311F0BD5B4B35C4F9AE02.roa (hash: iP/ASGN9KdZyYFGKnxTAiQtkxJveg1GRV/nsSZO4Yjg=) 3: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=) 4: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=) 5: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=) 6: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2309 (0x905) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Jul 20 20:39:55 2025 GMT Not After : Jul 27 20:39:55 2025 GMT Subject: CN=687d541b-c3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:37:48:e6:1b:3e:7e:57:97:07:ef:37:d0: 62:95:1d:14:d6:7f:5f:d3:1d:a7:d0:f5:04:8e:5e: 79:da:87:2c:a1:df:78:34:fc:4b:96:e1:24:5d:4d: ff:f7:ed:78:56:d6:19:8b:1f:ff:14:84:ba:4f:ec: 06:46:90:0e:bf:49:fa:c3:55:50:5d:71:4b:f1:13: cf:a0:e9:28:65:fa:43:7c:f6:ab:0a:3e:d3:7d:9d: 98:5c:9c:b2:e2:54:d2:0c:f4:5f:d2:07:ee:78:ba: f2:56:cf:e5:d9:c2:fe:b9:8a:dd:7e:0e:73:6d:15: 9d:02:c1:25:20:a8:ae:a2:5e:da:ba:51:0c:08:19: ec:6b:d8:a6:7e:d9:20:f5:ce:da:be:67:dc:ae:84: 59:b7:67:6e:4c:0d:21:fb:e6:50:0c:49:85:89:39: 9a:53:09:e6:15:f7:1c:2e:68:19:37:75:ae:a2:a7: 8d:b7:1e:d2:b1:2c:b8:05:fd:0d:f9:ef:df:83:e7: 80:40:98:99:66:78:cd:f5:e5:af:6e:c2:49:2c:b7: 98:1d:0b:6c:b8:34:e1:2f:82:2e:64:28:d1:f3:11: fb:99:49:d8:12:8f:58:50:e8:aa:e5:46:5d:6f:55: e0:27:07:8a:77:1a:d2:ba:98:e8:e3:85:5f:79:ed: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AA:C5:21:B2:8D:EF:E8:D0:16:75:EC:ED:3C:91:1F:13:5C:B5:1E X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a5:10:4a:81:83:65:b2:d6:18:1e:02:1c:40:77:01:8e:93: 3e:ff:a5:1e:62:67:e0:66:d7:af:2f:0a:1f:06:b9:dd:7b:e1: 8b:3f:0f:57:ef:ed:3c:1e:37:2a:38:6a:a6:9d:98:4e:ec:dd: ec:79:16:77:a7:50:a4:17:91:a2:0c:55:a0:e5:32:f7:41:b0: 9b:55:e6:6f:ab:36:c9:23:f8:d1:be:fa:b2:6d:b8:01:83:45: 4e:49:32:b3:42:17:80:d6:af:54:f2:69:62:a0:eb:44:ab:04: 3a:46:92:52:0e:a1:e8:2f:d5:37:29:e9:de:0a:9d:34:c8:08: 5a:8c:05:75:31:bd:06:bc:5a:e7:15:9d:c9:06:36:c1:7f:20: 0f:22:85:b8:6f:47:af:84:79:d7:6a:cd:ff:ee:fb:a3:a1:79: c7:f2:06:42:7c:91:47:d4:ec:96:26:df:32:8f:85:10:8f:e3: 29:08:f3:98:95:51:6f:94:c0:26:3d:44:c5:66:67:ef:83:43: cf:95:8e:7c:04:29:59:e1:81:04:43:44:b4:f5:e6:fe:fb:50: 0a:f7:61:f2:5b:da:cc:cb:49:a8:a3:fe:df:41:23:26:70:ff: 05:a9:13:f7:6e:72:23:a4:f5:2b:55:d4:81:2a:78:f1:4b:a1: 30:dc:5a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUwNzIwMjAzOTU1WhcNMjUwNzI3MjAzOTU1WjAYMRYwFAYD VQQDEw02ODdkNTQxYi1jM2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTQ3SOYbPn5XlwfvN9BilR0U1n9f0x2n0PUEjl552ocsod94NPxLluEkXU3/ 9+14VtYZix//FIS6T+wGRpAOv0n6w1VQXXFL8RPPoOkoZfpDfParCj7TfZ2YXJyy 4lTSDPRf0gfueLryVs/l2cL+uYrdfg5zbRWdAsElIKiuol7aulEMCBnsa9imftkg 9c7avmfcroRZt2duTA0h++ZQDEmFiTmaUwnmFfccLmgZN3WuoqeNtx7SsSy4Bf0N +e/fg+eAQJiZZnjN9eWvbsJJLLeYHQtsuDThL4IuZCjR8xH7mUnYEo9YUOiq5UZd b1XgJweKdxrSupjo44Vfee3/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyqxSGy je/o0BZ17O08kR8TXLUeMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAipRBKgYNlstYYHgIcQHcBjpM+/6UeYmfgZtevLwofBrnde+GLPw9X 7+08HjcqOGqmnZhO7N3seRZ3p1CkF5GiDFWg5TL3QbCbVeZvqzbJI/jRvvqybbgB g0VOSTKzQheA1q9U8mlioOtEqwQ6RpJSDqHoL9U3KeneCp00yAhajAV1Mb0GvFrn FZ3JBjbBfyAPIoW4b0evhHnXas3/7vujoXnH8gZCfJFH1OyWJt8yj4UQj+MpCPOY lVFvlMAmPUTFZmfvg0PPlY58BClZ4YEEQ0S09eb++1AK92HyW9rMy0moo/7fQSMm cP8FqRP3bnIjpPUrVdSBKnjxS6Ew3FoZ -----END CERTIFICATE-----Generated at Mon Jul 21 08:57:19 2025 by rpki-client