$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: TuUtZ2C0YvBWHycmDWtPamT3++BkBLa56N2jrDog9JU= Subject key identifier: 7F:0C:42:E3:E8:8F:83:B6:68:42:EF:F9:50:E8:FB:80:A5:D3:A5:ED Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 05AB Signing time: Thu 24 Jul 2025 23:37:43 +0000 Manifest this update: Thu 24 Jul 2025 23:37:42 +0000 Manifest next update: Thu 31 Jul 2025 23:37:42 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: QccyhKvmfSMZgZMPyshrLeySSQz6JFTNkRBThPTn9ag=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: PVnENrYeIS4iiFtrLcFEnNW4yBRsfLOD9D/GbgEuWKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04, serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Jul 24 23:37:42 2025 GMT Not After : Jul 31 23:37:42 2025 GMT Subject: CN=6882c3c7-c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:3d:24:8b:c8:72:1c:f6:46:68:52:b7:68: 53:3e:b9:2c:cf:cc:06:ce:e4:d6:b8:0a:08:35:4c: ce:d4:c6:c9:1f:ab:19:b3:7f:a1:5f:43:87:5b:80: 49:49:aa:af:a4:81:b0:73:88:0d:7f:bb:74:b6:cf: ef:3b:17:f9:3d:c0:60:f2:26:eb:43:05:69:bc:42: 19:d6:1f:85:c2:b4:a7:87:21:87:9f:09:8f:0b:cc: f4:c5:65:e1:6f:4e:8a:31:3d:1e:40:bb:e0:c9:87: db:f8:0a:15:37:4d:9f:bf:4f:c6:08:18:e1:9b:83: 46:e1:06:4f:d8:53:16:e7:58:25:2d:16:43:fd:e0: 91:f6:09:ec:ef:d7:0d:82:c1:97:c4:78:3d:a9:70: 76:85:0e:58:67:ce:20:88:56:dc:64:be:e5:34:41: 70:db:cd:45:a6:44:2b:81:43:c4:3f:82:46:89:6e: b6:e3:0f:df:5e:88:0b:40:f1:b8:0a:e9:cd:a1:e0: 29:4b:8e:b9:24:b1:e6:b8:82:5c:85:69:7e:e7:ec: 3d:a1:14:b8:37:77:4c:5e:93:d3:36:b4:79:37:2a: 80:b8:2d:9a:c4:9c:d4:e8:55:a6:1a:68:bd:45:d3: 60:60:29:1a:d0:bc:a3:6b:04:48:56:b5:55:7e:50: 23:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0C:42:E3:E8:8F:83:B6:68:42:EF:F9:50:E8:FB:80:A5:D3:A5:ED X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c0:aa:97:c5:5c:85:af:90:19:20:d4:41:eb:95:90:38:68: 7d:eb:2c:57:5b:ee:4f:c8:2c:58:1e:61:df:5e:ec:68:51:b9: 58:60:11:b7:a5:b5:44:77:20:d8:1c:72:d6:84:0b:51:5f:8d: e2:07:78:81:59:75:9d:61:b1:bd:46:31:7d:47:65:4d:46:f9: 4f:75:95:1b:bf:5b:f0:7c:ca:4a:e3:6e:0c:a3:9f:7a:6e:0d: 1c:7b:cb:63:8f:46:3a:9b:b4:b3:cb:aa:9c:ed:53:c3:7e:7e: 75:96:52:12:16:3f:66:11:ed:4c:8f:70:11:83:c2:1c:f6:c5: 29:dd:5e:ef:2f:dd:45:53:b5:57:8b:af:3d:69:c6:2d:39:ef: 2d:45:d9:e0:59:6c:45:9c:42:58:66:6e:3f:08:ca:28:3f:d0: a5:88:b2:9b:bd:5f:3c:b3:d8:a8:66:f0:a0:35:2a:d5:e5:7e: 7a:44:2a:9b:2b:db:6b:16:69:d7:83:e0:93:04:3b:f8:d1:1b: b5:ef:fd:e8:f1:de:f9:04:b0:6d:2d:55:17:ff:ff:01:a4:10: 20:6a:41:00:eb:ab:03:aa:ef:37:e6:fa:64:68:1a:b8:ac:ef: eb:6a:90:f8:f1:ce:5e:c2:e3:f3:0f:97:4d:fe:e6:cd:d6:d7: 61:ca:6b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjUwNzI0MjMzNzQyWhcNMjUwNzMxMjMzNzQyWjAYMRYwFAYD VQQDEw02ODgyYzNjNy1jMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RE9JIvIchz2RmhSt2hTPrksz8wGzuTWuAoINUzO1MbJH6sZs3+hX0OHW4BJ SaqvpIGwc4gNf7t0ts/vOxf5PcBg8ibrQwVpvEIZ1h+FwrSnhyGHnwmPC8z0xWXh b06KMT0eQLvgyYfb+AoVN02fv0/GCBjhm4NG4QZP2FMW51glLRZD/eCR9gns79cN gsGXxHg9qXB2hQ5YZ84giFbcZL7lNEFw281FpkQrgUPEP4JGiW624w/fXogLQPG4 CunNoeApS465JLHmuIJchWl+5+w9oRS4N3dMXpPTNrR5NyqAuC2axJzU6FWmGmi9 RdNgYCka0LyjawRIVrVVflAjVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8MQuPo j4O2aELv+VDo+4Cl06XtMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6wKqXxVyFr5AZINRB65WQOGh96yxXW+5PyCxYHmHfXuxoUblYYBG3 pbVEdyDYHHLWhAtRX43iB3iBWXWdYbG9RjF9R2VNRvlPdZUbv1vwfMpK424Mo596 bg0ce8tjj0Y6m7Szy6qc7VPDfn51llISFj9mEe1Mj3ARg8Ic9sUp3V7vL91FU7VX i689acYtOe8tRdngWWxFnEJYZm4/CMooP9CliLKbvV88s9ioZvCgNSrV5X56RCqb K9trFmnXg+CTBDv40Ru17/3o8d75BLBtLVUX//8BpBAgakEA66sDqu835vpkaBq4 rO/rapD48c5ewuPzD5dN/ubN1tdhymvN -----END CERTIFICATE-----Generated at Fri Jul 25 14:08:56 2025 by rpki-client