$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: HrXOzs95bjbw9X8xoD0nRFpLHjTxsU1sqVPZ+oY1Cuc= Subject key identifier: C8:D1:8D:33:F1:4F:24:31:F7:D4:B1:82:DA:93:E6:A9:35:AC:03:FD Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0943 Signing time: Fri 18 Jul 2025 20:27:20 +0000 Manifest this update: Fri 18 Jul 2025 20:27:20 +0000 Manifest next update: Fri 25 Jul 2025 20:27:20 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: VWd+0pVMH1TV19MYsT5uNS6wPLPK9DkyRhm2goMjU8o=) 2: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (hash: 1FGtJ70RwOEt2vELLPRWi7Z3eHoh6/fo9RZfKjZFNaM=) 3: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (hash: AKSEq1IptkG7ARfIThlwJQkrUndd8XeZnVMmB6yQVcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jul 18 20:27:20 2025 GMT Not After : Jul 25 20:27:20 2025 GMT Subject: CN=687aae28-4c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:95:35:f5:d4:3f:d7:1d:e8:9b:0f:20:6e: 8c:7d:31:33:51:73:a2:d0:87:0c:b3:c6:e2:1f:48: 66:46:69:af:4c:3e:1a:83:d8:2f:0a:2d:15:33:bb: 3c:18:2e:2e:97:80:93:49:f9:f4:a3:e8:59:fc:25: de:9b:ef:c0:70:ec:c6:e5:0a:be:f8:c3:34:64:c8: cb:2a:01:ff:cf:10:aa:0d:ba:f5:27:b2:3f:5b:e8: 19:b1:76:de:6f:18:22:93:8c:67:75:31:9d:9c:71: a9:64:ce:7f:38:18:e2:eb:29:98:20:82:7e:51:48: 15:8a:31:4a:94:e1:88:ef:96:b7:04:36:c1:f9:66: 12:64:ae:f6:c8:29:c4:f1:ef:b6:d6:70:14:a8:8b: 47:3c:ee:fe:b9:36:2d:5e:1c:d9:43:60:1d:d9:50: fd:87:39:42:52:7f:fa:80:b7:cf:aa:b4:e8:0f:f9: f6:00:fa:32:a8:29:5b:92:fe:57:b1:30:6d:c1:59: 9b:92:e6:32:f9:5a:e3:65:d5:72:cf:f1:2e:f4:55: 49:7b:1c:0d:e0:47:2b:4b:32:91:7c:12:fd:69:92: a6:ba:6c:3c:f0:d2:e5:16:42:3e:36:e4:57:cb:86: 47:65:e6:0f:67:1c:a7:94:05:7c:30:85:6d:a6:55: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D1:8D:33:F1:4F:24:31:F7:D4:B1:82:DA:93:E6:A9:35:AC:03:FD X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9f:14:78:c0:28:2c:23:2a:e2:f5:59:f0:8e:78:5c:45:4d: fd:e7:5e:66:ad:ab:c3:54:6e:b8:64:0e:cc:b3:a5:cd:ab:51: ba:cf:eb:cb:a7:b9:5a:43:3e:be:2e:4d:73:5a:a9:e5:94:07: 70:ad:b7:2a:a0:12:d8:40:5b:a8:b6:74:27:27:77:ad:c7:0d: e3:e6:ea:00:88:f9:6d:1a:4b:10:00:5a:89:3b:e6:30:81:3a: 08:7e:68:8e:c3:69:5b:49:3d:8a:89:f8:c3:a8:76:0d:16:09: cc:ac:3c:10:ca:a5:d6:da:76:f9:70:96:f9:ef:05:bf:c8:b3: e8:56:b0:b9:9d:20:1c:2f:44:63:2b:ba:e8:bc:c9:1c:9b:bf: 40:c1:42:8b:05:27:53:74:52:f3:ad:fa:69:96:20:84:95:15: 39:64:e5:89:9b:8d:4e:a4:f3:19:19:43:02:30:25:a7:d6:82: 2d:ee:91:08:f6:cc:20:e0:f3:ff:36:20:d2:cf:b4:05:4d:ef: eb:24:04:63:8f:38:6d:1a:fd:4d:f7:a4:f8:f9:9f:36:33:a9: 71:0e:37:35:8f:45:16:31:3a:5e:f4:36:35:a5:c0:b5:67:78: 0b:40:1f:f0:be:85:90:2d:03:65:cd:cc:c5:a4:cb:ad:75:87: f9:2c:2d:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNzE4MjAyNzIwWhcNMjUwNzI1MjAyNzIwWjAYMRYwFAYD VQQDEw02ODdhYWUyOC00YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfeVNfXUP9cd6JsPIG6MfTEzUXOi0IcMs8biH0hmRmmvTD4ag9gvCi0VM7s8 GC4ul4CTSfn0o+hZ/CXem+/AcOzG5Qq++MM0ZMjLKgH/zxCqDbr1J7I/W+gZsXbe bxgik4xndTGdnHGpZM5/OBji6ymYIIJ+UUgVijFKlOGI75a3BDbB+WYSZK72yCnE 8e+21nAUqItHPO7+uTYtXhzZQ2Ad2VD9hzlCUn/6gLfPqrToD/n2APoyqClbkv5X sTBtwVmbkuYy+VrjZdVyz/Eu9FVJexwN4EcrSzKRfBL9aZKmumw88NLlFkI+NuRX y4ZHZeYPZxynlAV8MIVtplWh1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjRjTPx TyQx99SxgtqT5qk1rAP9MB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCenxR4wCgsIyri9VnwjnhcRU39515mravDVG64ZA7Ms6XNq1G6z+vL p7laQz6+Lk1zWqnllAdwrbcqoBLYQFuotnQnJ3etxw3j5uoAiPltGksQAFqJO+Yw gToIfmiOw2lbST2KifjDqHYNFgnMrDwQyqXW2nb5cJb57wW/yLPoVrC5nSAcL0Rj K7rovMkcm79AwUKLBSdTdFLzrfppliCElRU5ZOWJm41OpPMZGUMCMCWn1oIt7pEI 9swg4PP/NiDSz7QFTe/rJARjjzhtGv1N96T4+Z82M6lxDjc1j0UWMTpe9DY1pcC1 Z3gLQB/wvoWQLQNlzczFpMutdYf5LC1p -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:50 2025 by rpki-client