$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft File: D9l6GEHJl08fSQQu2j5yhCGq5f4.mft (raw, json) Hash identifier: ABsshIq4t2dz/GoNP1zUMHPdpjFUYytCN134OiPjBZY= Subject key identifier: 06:7D:EB:07:31:12:7E:2F:4F:9A:F2:44:DD:8C:05:57:D8:E8:2E:2C Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft Manifest number: 07E6 Signing time: Fri 18 Jul 2025 21:16:46 +0000 Manifest this update: Fri 18 Jul 2025 21:16:45 +0000 Manifest next update: Fri 25 Jul 2025 21:16:45 +0000 Files and hashes: 1: D9l6GEHJl08fSQQu2j5yhCGq5f4.crl (hash: VMn99e3pvCTBUkrZTIOTCzrEKy1zavRltxrg6ruC//M=) 2: D31B3092F40911EA8A5C9E70C4F9AE02.roa (hash: Es/KgzPMe1zYauziZBRZHyjZJ35reOpMCOBV6MckhCs=) 3: D25A6970F40911EA8A5C9E70C4F9AE02.roa (hash: Ka3pUjVhAjV8Jw2bqRS1fw1Jl4NqlRDOjR/Fjs/H0+M=) 4: CD0710DA3F3511ED84AFEA5BC4F9AE02.roa (hash: OhYJKozvfID8ylqYGKB5GjbLkxxbmKyR5Jo0rIME+Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Jul 18 21:16:45 2025 GMT Not After : Jul 25 21:16:45 2025 GMT Subject: CN=687ab9bd-7267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:5d:da:27:e7:d3:a7:e2:dc:9c:47:7d:c2: b2:e4:53:d1:4e:00:97:3e:71:f4:77:8f:81:1c:ff: 54:ca:12:df:c3:68:db:97:76:bb:87:1f:00:c4:3c: 0b:10:0b:80:ad:86:be:3d:75:2f:73:aa:c6:9a:33: 9f:9c:1d:83:5e:6d:e2:1d:bb:de:5d:aa:a6:37:8f: 0d:a3:bc:97:14:c0:9f:ab:c0:87:1c:01:af:42:84: 0b:bf:ac:2f:37:e1:b5:cf:97:2b:fb:e9:70:ab:6c: 2b:98:15:9b:2c:24:5d:f4:76:f3:68:e2:d6:fd:db: 56:4b:e4:fc:62:19:86:4a:91:e5:5c:24:a7:1f:35: 97:9b:b6:11:83:46:99:91:f6:b5:b9:74:83:2e:fd: 38:04:c2:ee:28:a6:4e:f5:dc:ca:eb:e0:cb:b2:6b: 71:00:4e:ba:7f:d0:80:eb:a7:a3:ca:ba:16:f3:00: e2:15:2b:3d:dc:b1:d6:8e:57:76:d0:bf:e7:21:ec: bd:16:b1:f5:1a:ce:bc:5b:98:c7:76:ab:5c:69:b2: eb:bf:35:7c:2b:b2:80:2b:eb:45:c9:0d:97:3d:63: 5a:eb:6c:ea:02:a0:37:c9:71:0c:a5:35:63:ad:f2: 60:4b:c4:39:f3:83:65:94:0a:e3:4a:fc:25:17:be: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7D:EB:07:31:12:7E:2F:4F:9A:F2:44:DD:8C:05:57:D8:E8:2E:2C X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:42:45:ab:65:43:c7:23:1a:1a:70:d1:08:6b:c3:84:c8:49: 6c:39:9f:eb:dd:46:ba:9a:48:46:f6:13:6d:75:02:9c:7b:39: 4a:4b:7a:d7:4a:18:12:18:92:17:fc:bf:2c:2b:99:f2:cf:c7: 98:ca:52:2b:fc:93:44:70:d2:82:77:e7:3d:04:a6:e8:37:26: 11:79:01:2f:70:7f:cf:ab:be:4b:ca:8d:02:57:1f:96:e8:45: 97:fc:29:13:33:d4:f4:d5:1e:45:90:44:fc:8e:e5:0d:58:0e: 8f:af:0b:44:e4:e6:83:eb:e8:30:99:25:f7:94:6c:52:01:1f: 8a:64:ce:1f:48:08:6f:60:bc:e9:dd:61:1f:cf:d3:4d:d3:94: 6a:6f:36:ca:09:bc:2d:71:df:45:38:7c:68:1e:1e:8f:7c:bc: b8:c7:01:79:e8:b5:34:60:2f:27:81:5d:6c:a5:54:46:0f:76: 04:e8:59:e2:eb:c3:fc:a0:c4:02:f9:c9:b8:bb:5f:92:cc:b6: c9:6e:89:81:a5:47:c6:95:55:53:0b:ad:6d:fb:cd:f9:d3:e4: 03:85:80:27:9c:a9:f4:d9:e4:f9:76:42:a6:a7:54:a9:00:0a: 36:87:1b:07:dc:2d:d0:19:e8:69:d9:bc:74:c0:fc:bf:74:d6: 53:84:cc:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjUwNzE4MjExNjQ1WhcNMjUwNzI1MjExNjQ1WjAYMRYwFAYD VQQDEw02ODdhYjliZC03MjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01Fd2ifn06fi3JxHfcKy5FPRTgCXPnH0d4+BHP9UyhLfw2jbl3a7hx8AxDwL EAuArYa+PXUvc6rGmjOfnB2DXm3iHbveXaqmN48No7yXFMCfq8CHHAGvQoQLv6wv N+G1z5cr++lwq2wrmBWbLCRd9HbzaOLW/dtWS+T8YhmGSpHlXCSnHzWXm7YRg0aZ kfa1uXSDLv04BMLuKKZO9dzK6+DLsmtxAE66f9CA66ejyroW8wDiFSs93LHWjld2 0L/nIey9FrH1Gs68W5jHdqtcabLrvzV8K7KAK+tFyQ2XPWNa62zqAqA3yXEMpTVj rfJgS8Q584NllArjSvwlF76IHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ96wcx En4vT5ryRN2MBVfY6C4sMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUQyQi84QjY3MDBBNkY0MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmww OGZTUVF1Mmo1eWhDR3E1ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5QkWrZUPHIxoacNEIa8OEyElsOZ/r3Ua6mkhG9hNtdQKcezlKS3rX ShgSGJIX/L8sK5nyz8eYylIr/JNEcNKCd+c9BKboNyYReQEvcH/Pq75Lyo0CVx+W 6EWX/CkTM9T01R5FkET8juUNWA6PrwtE5OaD6+gwmSX3lGxSAR+KZM4fSAhvYLzp 3WEfz9NN05RqbzbKCbwtcd9FOHxoHh6PfLy4xwF56LU0YC8ngV1spVRGD3YE6Fni 68P8oMQC+cm4u1+SzLbJbomBpUfGlVVTC61t+8350+QDhYAnnKn02eT5dkKmp1Sp AAo2hxsH3C3QGehp2bx0wPy/dNZThMzX -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:17 2025 by rpki-client