$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: bkpIg8PSJizojumSHbbkN6WJ9VBzh+wccglv/LyguLs= Subject key identifier: 99:F7:FE:BC:80:EA:A3:9D:B0:32:92:9B:A7:6C:82:30:79:19:6F:64 Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: 4B Signing time: Mon 21 Jul 2025 07:31:51 +0000 Manifest this update: Mon 21 Jul 2025 07:31:51 +0000 Manifest next update: Mon 28 Jul 2025 07:31:51 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: F9H+bVrwdCMiTIGzdgiPk56sE1Xs+2woXicXsHrmjVI=) 2: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: g53LMcn3iRdJAKtGtiImyfZixGirZg93i3IYIo94JAU=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: XvWuI1YoEga2y2ypcrjG1/r0tc+yszPXr1W996sUaXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Validity Not Before: Jul 21 07:31:51 2025 GMT Not After : Jul 28 07:31:51 2025 GMT Subject: CN=687dece7-8beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:8f:b0:53:3e:b2:26:8a:45:0e:26:c4:c7: 8b:c2:89:2e:20:b8:e6:a7:3d:95:1f:df:26:d5:0c: ad:53:7b:3a:00:ee:8d:30:5a:a5:22:42:f4:e2:e0: 61:1a:e6:23:19:77:fe:05:3d:cc:1f:53:51:a7:66: 56:89:bf:f5:34:e9:f4:0a:24:57:e4:8e:21:cc:2f: f1:51:aa:52:a6:18:08:b2:2d:fb:48:8c:f9:bc:9e: 12:03:a4:d4:fd:8d:d4:1f:d5:f7:c7:f6:82:f8:2c: 1d:73:ed:75:20:0f:96:15:26:3a:ea:e4:b6:b8:aa: 55:2e:39:e4:79:82:5e:a2:bc:0f:77:18:3f:0a:34: 98:23:87:4d:05:96:20:f0:04:ab:a2:2b:68:47:b4: 1c:cd:85:d2:c6:df:e7:86:d5:5c:cf:a7:d7:84:fd: 0a:b1:ee:36:83:fc:9c:59:4d:be:a8:6f:63:bc:e3: 3e:cb:82:64:4b:cc:6f:46:49:99:5a:8c:9b:d3:a6: da:38:48:cc:13:75:a6:d2:7a:55:e8:43:81:56:a1: 30:a6:7c:ae:9a:71:22:7e:07:ff:86:48:03:7d:cb: 75:68:a4:27:42:44:1e:97:32:a7:8f:fd:8f:01:48: a4:b4:3f:28:3f:73:2c:f4:7f:48:45:ac:3f:18:59: d1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:FE:BC:80:EA:A3:9D:B0:32:92:9B:A7:6C:82:30:79:19:6F:64 X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3a:a1:0a:ef:87:35:13:fb:39:1f:86:17:95:61:44:1d:73: 5c:19:b6:3d:91:af:43:6a:d8:d7:60:35:65:92:39:21:7f:67: 6c:92:a5:d1:85:6c:d6:9f:20:fe:74:bd:3d:eb:8e:e9:8b:86: e7:e0:b7:69:93:b2:ed:2a:6a:3b:51:69:00:17:df:95:f8:5e: 89:99:c6:4a:5c:d5:0e:34:97:11:c9:09:2a:20:4e:8b:2b:0e: ca:a3:6d:c0:89:9d:7b:f4:1f:7d:04:60:4d:6e:ff:7b:8d:76: aa:b8:7a:cd:3b:b7:e0:52:27:2d:2a:ad:a1:aa:e6:60:96:46: b6:11:f7:ef:87:7c:20:6d:a5:96:36:0a:26:85:83:ec:73:c6: 73:9b:b0:8f:4c:55:71:cd:55:4e:4f:88:73:05:36:18:f3:6b: 04:ba:f7:d1:a9:28:e7:3f:23:a1:1f:42:d2:63:be:1d:ac:68: d3:ff:e5:c9:99:4b:ee:82:72:c1:a8:b4:a8:8b:ca:79:b5:4b: 76:68:2c:b3:54:16:d2:13:d9:a2:ac:7c:68:f7:9c:12:30:df: fd:b4:c3:67:a5:bc:3c:5d:89:e2:09:9e:39:7b:7d:eb:e6:c3: 50:30:8a:89:f4:78:f6:3f:79:98:31:35:c9:15:0d:76:2d:df: 19:2e:b8:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkE3NTExMC8GA1UEBRMoQkM3MEYzNzRCNzI4QzdCNzExQzI0QTY4MjdGNzQ3N0E0 MkIyMkE0RDAeFw0yNTA3MjEwNzMxNTFaFw0yNTA3MjgwNzMxNTFaMBgxFjAUBgNV BAMTDTY4N2RlY2U3LThiZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlYo+wUz6yJopFDibEx4vCiS4guOanPZUf3ybVDK1TezoA7o0wWqUiQvTi4GEa 5iMZd/4FPcwfU1GnZlaJv/U06fQKJFfkjiHML/FRqlKmGAiyLftIjPm8nhIDpNT9 jdQf1ffH9oL4LB1z7XUgD5YVJjrq5La4qlUuOeR5gl6ivA93GD8KNJgjh00FliDw BKuiK2hHtBzNhdLG3+eG1VzPp9eE/Qqx7jaD/JxZTb6ob2O84z7LgmRLzG9GSZla jJvTpto4SMwTdabSelXoQ4FWoTCmfK6acSJ+B/+GSAN9y3VopCdCRB6XMqeP/Y8B SKS0Pyg/cyz0f0hFrD8YWdE/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmff+vIDq o52wMpKbp2yCMHkZb2QwHwYDVR0jBBgwFoAUvHDzdLcox7cRwkpoJ/dHekKyKk0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQTc1L0VGNUNENkRBRjUz OTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtr MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkhEemRMY294N2NSd2twb0pfZEhla0t5S2swLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QTc1L0VGNUNENkRBRjUzOTExRUZCMDlGQzgzREM0RjlBRTAyL3ZIRHpkTGNveDdj UndrcG9KX2RIZWtLeUtrMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACs6oQrvhzUT+zkfhheVYUQdc1wZtj2Rr0Nq2NdgNWWSOSF/Z2ySpdGF bNafIP50vT3rjumLhufgt2mTsu0qajtRaQAX35X4XomZxkpc1Q40lxHJCSogTosr DsqjbcCJnXv0H30EYE1u/3uNdqq4es07t+BSJy0qraGq5mCWRrYR9++HfCBtpZY2 CiaFg+xzxnObsI9MVXHNVU5PiHMFNhjzawS699GpKOc/I6EfQtJjvh2saNP/5cmZ S+6CcsGotKiLynm1S3ZoLLNUFtIT2aKsfGj3nBIw3/20w2elvDxdieIJnjl7fevm w1Awion0ePY/eZgxNckVDXYt3xkuuOE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:34 2025 by rpki-client