$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: s4JEFbfK3oXDhG9GTR5gmeeI8nZaqWIF2zJ/zFIYsQc= Subject key identifier: 3B:70:75:7C:03:7F:D6:7B:FE:B7:5B:E4:FA:A1:BB:C0:EC:73:59:B3 Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 06BB Signing time: Fri 18 Jul 2025 22:25:48 +0000 Manifest this update: Fri 18 Jul 2025 22:25:48 +0000 Manifest next update: Fri 25 Jul 2025 22:25:48 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: /MlE3hwSiZwBAweACbA9mCpuW4kHyn1PUXi7VW5pB6U=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: ZX1QzTNwDgtR4R7k4FRyRV5Z8jQyiy5Ky4ynHhk2quU=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: hdIhzh8K12opQ1D1WK4zXsMffrmcGa0gdrGINvycqaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Jul 18 22:25:48 2025 GMT Not After : Jul 25 22:25:48 2025 GMT Subject: CN=687ac9ec-62b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:86:5c:b1:ca:ab:d3:1b:50:e0:75:ac:ee: 9e:d7:00:90:29:82:a3:7d:8d:6e:bc:8c:d5:74:8b: 71:ee:a6:62:c5:2c:3e:68:0b:98:c3:a1:76:94:9d: 28:90:e9:e8:19:2b:6b:6b:3c:d1:56:ec:95:5b:8f: 54:25:b6:27:c8:57:ef:f7:90:2e:be:2d:53:80:26: 35:2c:e7:08:86:6a:04:fe:45:6b:5a:a6:db:9e:89: 8a:d0:21:5d:09:22:b9:5e:f4:5d:f4:0c:a5:8a:33: 75:65:1a:07:c9:4f:56:00:29:0d:ed:88:88:38:c6: 99:0a:f2:3d:dd:86:7e:3f:d7:d9:61:91:d9:47:15: ec:07:e6:6e:ad:71:56:72:6e:df:f0:a0:45:cb:eb: 33:0d:a8:23:3f:d9:c5:58:89:49:9e:9e:6a:09:b5: cd:e9:53:29:04:68:40:3e:c2:25:d1:10:a9:ca:2b: 4a:ac:ea:a8:4a:42:19:23:46:63:11:40:bd:57:17: 16:b7:df:ae:38:ec:0f:97:a2:c3:d7:93:58:3d:3b: 80:08:49:5b:f2:0c:13:48:f2:00:1f:1a:d0:58:93: d8:33:ad:f6:ee:38:e7:9c:eb:b5:86:3e:be:70:64: 76:59:3c:be:66:0a:00:a4:da:91:43:1c:f2:cf:58: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:70:75:7C:03:7F:D6:7B:FE:B7:5B:E4:FA:A1:BB:C0:EC:73:59:B3 X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:58:c3:a3:d9:03:05:1b:80:33:47:c0:fc:e3:12:12:36:de: 5d:41:b2:83:db:50:85:aa:f7:0f:67:72:2c:1d:a9:7b:41:f1: 6f:9c:95:b7:9c:c5:c9:bc:e8:ac:ca:d0:9b:0a:73:73:42:79: de:7c:ad:97:e8:3e:2d:e3:97:d0:4b:63:5f:ac:27:20:b0:9e: 6b:dd:7d:82:57:24:27:5c:03:0d:1c:ec:97:a5:bc:d4:18:b0: 25:6c:30:9a:32:6c:55:33:25:dd:2d:49:24:14:40:70:6a:f4: 0e:0d:04:75:78:e6:78:b4:a6:8b:58:aa:78:89:90:cd:e4:14: c7:d4:84:71:e8:84:b8:a1:25:87:62:93:6b:22:76:3e:a7:d0: d3:5f:ea:b8:44:a4:97:0b:d7:eb:38:99:74:3e:76:d3:ad:f6: 72:41:31:8d:d2:94:31:6e:dd:6c:dc:c2:bd:09:b6:eb:ce:70: 0a:7a:c5:44:5c:05:b0:e1:2a:cb:a3:cf:69:33:49:69:c5:57: 6c:ff:f0:dc:6c:4f:14:95:3b:5d:16:38:c6:31:71:a2:d8:0b: 30:67:fd:ba:89:d1:ff:6b:bc:e8:0f:da:72:cb:77:3f:73:72: 16:d9:2f:38:88:a4:9a:5c:04:8a:1e:9e:a3:45:5e:55:72:9a: 96:c4:be:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjUwNzE4MjIyNTQ4WhcNMjUwNzI1MjIyNTQ4WjAYMRYwFAYD VQQDEw02ODdhYzllYy02MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxa2GXLHKq9MbUOB1rO6e1wCQKYKjfY1uvIzVdItx7qZixSw+aAuYw6F2lJ0o kOnoGStrazzRVuyVW49UJbYnyFfv95Auvi1TgCY1LOcIhmoE/kVrWqbbnomK0CFd CSK5XvRd9AylijN1ZRoHyU9WACkN7YiIOMaZCvI93YZ+P9fZYZHZRxXsB+ZurXFW cm7f8KBFy+szDagjP9nFWIlJnp5qCbXN6VMpBGhAPsIl0RCpyitKrOqoSkIZI0Zj EUC9VxcWt9+uOOwPl6LD15NYPTuACElb8gwTSPIAHxrQWJPYM6327jjnnOu1hj6+ cGR2WTy+ZgoApNqRQxzyz1jYZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtwdXwD f9Z7/rdb5Pqhu8Dsc1mzMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4WMOj2QMFG4AzR8D84xISNt5dQbKD21CFqvcPZ3IsHal7QfFvnJW3 nMXJvOisytCbCnNzQnnefK2X6D4t45fQS2NfrCcgsJ5r3X2CVyQnXAMNHOyXpbzU GLAlbDCaMmxVMyXdLUkkFEBwavQODQR1eOZ4tKaLWKp4iZDN5BTH1IRx6IS4oSWH YpNrInY+p9DTX+q4RKSXC9frOJl0PnbTrfZyQTGN0pQxbt1s3MK9CbbrznAKesVE XAWw4SrLo89pM0lpxVds//DcbE8UlTtdFjjGMXGi2AswZ/26idH/a7zoD9pyy3c/ c3IW2S84iKSaXASKHp6jRV5VcpqWxL6Z -----END CERTIFICATE-----Generated at Sun Jul 20 15:08:54 2025 by rpki-client