$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: KRtoqOtk2iza81tJwcmAyIU4vXL1Rm1T82WEQCT9U8s= Subject key identifier: 11:8D:7F:34:AB:6F:89:23:44:A4:8C:01:FA:DB:49:36:63:E9:4F:16 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 082C Signing time: Fri 18 Jul 2025 21:02:56 +0000 Manifest this update: Fri 18 Jul 2025 21:02:56 +0000 Manifest next update: Fri 25 Jul 2025 21:02:56 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: OAjSLcVs7DknGHNVQs5VOE69AoOwaYav7lgZwVTn5mg=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Jul 18 21:02:56 2025 GMT Not After : Jul 25 21:02:56 2025 GMT Subject: CN=687ab680-4999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:9d:4c:f6:a8:0e:9f:c9:fc:b7:83:ea:67: 15:9e:8d:c4:cd:dd:7c:b0:97:e2:41:86:39:51:45: c2:7b:3b:e7:89:d9:f5:cb:9e:d0:16:b8:67:1b:0f: bd:fd:7f:78:0c:b0:51:d2:b1:7b:1a:bd:3d:b4:fd: 0e:b6:02:7a:3a:d9:2b:7b:5b:5c:58:dd:ec:e0:87: 25:31:d5:62:1f:05:b5:b1:e8:ce:83:99:42:56:ab: db:94:84:02:04:b8:51:db:76:c6:76:49:2d:88:9b: 65:1a:30:ec:fd:c6:e5:d4:b9:f5:47:34:71:1a:e7: c7:19:c3:f7:30:b2:6d:7d:43:83:9b:33:cb:48:aa: ce:34:11:f6:42:58:95:b0:ed:be:90:a1:33:c0:1c: 6f:ba:ad:ef:1f:53:30:ce:59:81:5e:73:ff:6c:50: fb:71:58:5b:81:70:88:c0:01:a1:ab:ee:5f:a4:95: 99:96:e5:59:cf:78:23:2a:72:0d:92:66:6a:f6:aa: 67:f4:89:db:a8:80:50:5c:a5:51:29:8f:73:b3:e6: 74:cf:6b:b4:8c:9a:be:ee:bd:37:1b:a7:69:ea:c0: f0:41:92:a1:4b:09:74:f6:2d:75:25:a7:db:fe:59: ef:25:94:b3:84:04:dd:fd:d4:3d:4b:9f:44:31:6d: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:7F:34:AB:6F:89:23:44:A4:8C:01:FA:DB:49:36:63:E9:4F:16 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d6:7f:fe:d2:21:42:bc:ce:d8:e6:e6:dd:a1:35:7e:a3:a5: 4b:71:79:bc:94:fa:54:35:02:f9:48:b9:a6:0b:b0:87:73:88: ff:3f:91:a7:f3:e1:9d:20:8b:6d:92:e2:ca:f6:f2:3d:82:77: 20:28:5d:13:e7:2b:a1:39:3f:c8:a6:81:15:1d:11:30:c3:41: 69:c6:74:b8:d5:1d:d2:98:bc:7a:75:97:13:23:0b:ec:5f:0a: cf:ab:d6:f3:0c:21:df:e1:dd:eb:f4:c9:68:28:b6:0e:f2:a1: 1f:ef:94:94:4c:49:d7:6b:94:6e:57:aa:7c:04:62:28:02:d6: df:a1:e0:25:62:06:bb:dd:f7:05:98:00:47:49:d6:04:ba:53: ba:f6:8e:1d:96:e8:21:cd:6c:0e:b5:61:eb:ce:68:80:65:6f: 9a:c3:d4:73:e5:58:8e:36:30:22:40:d3:d9:a9:68:96:34:4d: 8e:ea:cd:e9:67:93:70:da:46:b5:5e:05:9d:d7:62:c4:b3:9d: 89:82:70:6e:f0:be:1d:ec:11:7f:30:44:87:2f:d2:d0:e8:d4: 14:8e:ef:51:ea:06:3a:fd:60:9a:b4:10:cd:43:06:27:ec:3a: c7:d7:bd:ff:5a:76:51:ed:67:d0:18:05:6f:5f:7f:c2:35:41: c5:e8:37:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwNzE4MjEwMjU2WhcNMjUwNzI1MjEwMjU2WjAYMRYwFAYD VQQDEw02ODdhYjY4MC00OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRudTPaoDp/J/LeD6mcVno3Ezd18sJfiQYY5UUXCezvnidn1y57QFrhnGw+9 /X94DLBR0rF7Gr09tP0OtgJ6Otkre1tcWN3s4IclMdViHwW1sejOg5lCVqvblIQC BLhR23bGdkktiJtlGjDs/cbl1Ln1RzRxGufHGcP3MLJtfUODmzPLSKrONBH2QliV sO2+kKEzwBxvuq3vH1MwzlmBXnP/bFD7cVhbgXCIwAGhq+5fpJWZluVZz3gjKnIN kmZq9qpn9InbqIBQXKVRKY9zs+Z0z2u0jJq+7r03G6dp6sDwQZKhSwl09i11Jafb /lnvJZSzhATd/dQ9S59EMW0TmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGNfzSr b4kjRKSMAfrbSTZj6U8WMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi1n/+0iFCvM7Y5ubdoTV+o6VLcXm8lPpUNQL5SLmmC7CHc4j/P5Gn 8+GdIIttkuLK9vI9gncgKF0T5yuhOT/IpoEVHREww0FpxnS41R3SmLx6dZcTIwvs XwrPq9bzDCHf4d3r9MloKLYO8qEf75SUTEnXa5RuV6p8BGIoAtbfoeAlYga73fcF mABHSdYEulO69o4dlughzWwOtWHrzmiAZW+aw9Rz5ViONjAiQNPZqWiWNE2O6s3p Z5Nw2ka1XgWd12LEs52JgnBu8L4d7BF/MESHL9LQ6NQUju9R6gY6/WCatBDNQwYn 7DrH173/WnZR7WfQGAVvX3/CNUHF6Dfx -----END CERTIFICATE-----Generated at Sun Jul 20 06:44:27 2025 by rpki-client