$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: BUgiG9asJpTZ0xLYWLU2ym+p6qfx0sMatoRnya4ZhX4= Subject key identifier: 71:F7:71:20:F5:11:AA:13:A6:CF:09:B9:8A:CE:B1:E2:FE:E3:D9:5E Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0493 Signing time: Sat 19 Jul 2025 00:23:12 +0000 Manifest this update: Sat 19 Jul 2025 00:23:11 +0000 Manifest next update: Sat 26 Jul 2025 00:23:11 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 0Gdg6qDSE7TrwS1gkc1R+6NK5R5omSDvv7ru6yGlNJo=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Jul 19 00:23:11 2025 GMT Not After : Jul 26 00:23:11 2025 GMT Subject: CN=687ae570-2da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:fb:15:05:f3:f3:a4:80:5f:46:63:9b:d1: ae:37:ca:3f:7b:b7:99:e1:e6:d8:b1:81:c2:30:5d: ad:51:62:26:ca:77:bd:da:29:0f:80:90:cc:8e:3b: a6:29:b1:98:2c:12:c9:72:96:9a:67:03:9d:b7:2d: 2c:74:64:45:98:99:4a:89:24:95:62:93:d5:54:86: 65:3f:cc:80:f7:05:aa:a6:c8:e8:db:4c:a2:89:1f: 92:f7:ed:67:f9:cf:c8:c5:92:06:6f:18:b9:82:57: b0:2c:97:12:24:a8:a8:e4:7d:f0:bb:2c:55:f4:59: 00:89:2f:af:c2:46:30:29:0e:ca:13:92:c2:09:1b: 0d:1b:ba:ee:de:7d:7a:8a:49:8c:fe:a1:1e:62:0e: f0:4a:02:b3:dc:03:25:b1:b2:d8:67:a7:d1:8f:9f: da:44:01:b4:5a:74:84:8a:e5:5b:b6:a9:85:6b:e3: e0:07:4b:6c:e9:95:42:cc:e9:26:00:ae:b9:c8:b5: 75:b3:ce:51:36:02:8b:62:37:76:da:df:f0:67:cb: 0d:03:14:e2:32:37:81:04:8f:4e:4b:fa:8d:a2:ad: b9:42:29:51:31:48:a9:d1:a0:db:05:f1:6d:a2:16: 45:b4:24:46:54:ba:a7:cb:59:b5:08:c1:2f:44:ba: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F7:71:20:F5:11:AA:13:A6:CF:09:B9:8A:CE:B1:E2:FE:E3:D9:5E X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e0:2f:10:c6:bb:71:5e:5f:70:19:49:56:46:7a:28:05:f8: d4:44:63:f1:e3:b1:c2:92:96:68:ec:56:7e:a7:99:af:14:34: b6:dc:06:2b:f9:f1:6f:7c:1c:d8:3f:1f:de:01:d3:d7:48:b1: b3:63:09:2d:30:87:30:f9:57:bc:92:61:3f:ea:da:1c:75:40: 68:62:af:9a:2a:80:a7:0a:99:46:fa:b6:21:af:8b:17:41:e6: bf:12:17:88:b9:f9:6a:b1:e9:38:fd:f4:65:7c:ee:3c:45:34: 65:d7:1e:f8:ba:49:9b:ab:e7:4b:43:25:19:2a:a7:77:b9:54: 1b:5d:8c:e1:04:38:ee:98:d1:7f:d2:b7:84:6d:a5:6e:b8:5d: 9f:dd:7b:c3:88:67:a8:6e:bd:35:aa:48:d3:53:b3:4d:4f:0d: 3d:c0:07:65:93:e1:52:2f:b2:c8:c4:ef:46:50:59:8b:d9:7e: 66:11:24:c7:03:43:8a:84:13:b9:95:71:aa:41:37:76:1f:ee: 14:50:6f:1e:cc:46:78:0b:28:ab:ec:75:95:d5:54:3d:a8:b5: 13:d9:57:7e:00:55:d6:3a:b1:ad:32:bf:97:e9:23:fb:76:5c: 41:72:a0:16:fb:71:8c:74:dd:b2:3d:5e:99:00:c6:cc:d5:7a: 0b:02:a0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUwNzE5MDAyMzExWhcNMjUwNzI2MDAyMzExWjAYMRYwFAYD VQQDEw02ODdhZTU3MC0yZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoon7FQXz86SAX0Zjm9GuN8o/e7eZ4ebYsYHCMF2tUWImyne92ikPgJDMjjum KbGYLBLJcpaaZwOdty0sdGRFmJlKiSSVYpPVVIZlP8yA9wWqpsjo20yiiR+S9+1n +c/IxZIGbxi5glewLJcSJKio5H3wuyxV9FkAiS+vwkYwKQ7KE5LCCRsNG7ru3n16 ikmM/qEeYg7wSgKz3AMlsbLYZ6fRj5/aRAG0WnSEiuVbtqmFa+PgB0ts6ZVCzOkm AK65yLV1s85RNgKLYjd22t/wZ8sNAxTiMjeBBI9OS/qNoq25QilRMUip0aDbBfFt ohZFtCRGVLqny1m1CMEvRLrO+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH3cSD1 EaoTps8JuYrOseL+49leMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq4C8QxrtxXl9wGUlWRnooBfjURGPx47HCkpZo7FZ+p5mvFDS23AYr +fFvfBzYPx/eAdPXSLGzYwktMIcw+Ve8kmE/6tocdUBoYq+aKoCnCplG+rYhr4sX Qea/EheIuflqsek4/fRlfO48RTRl1x74ukmbq+dLQyUZKqd3uVQbXYzhBDjumNF/ 0reEbaVuuF2f3XvDiGeobr01qkjTU7NNTw09wAdlk+FSL7LIxO9GUFmL2X5mESTH A0OKhBO5lXGqQTd2H+4UUG8ezEZ4Cyir7HWV1VQ9qLUT2Vd+AFXWOrGtMr+X6SP7 dlxBcqAW+3GMdN2yPV6ZAMbM1XoLAqBw -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:13 2025 by rpki-client