$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft File: 4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json) Hash identifier: U/yKiHI99Uq+G85sIIWWZylCbKwmYxulahJSsGRH4yA= Subject key identifier: 71:54:88:51:69:0E:C1:AA:17:3E:33:E4:AE:7B:49:E9:C6:24:68:50 Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft Manifest number: 056C Signing time: Fri 18 Jul 2025 23:43:34 +0000 Manifest this update: Fri 18 Jul 2025 23:43:33 +0000 Manifest next update: Fri 25 Jul 2025 23:43:33 +0000 Files and hashes: 1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: 8BKmollWu7koaoTASnUAV82EW1qH2PwaFmgpLAB8S48=) 2: BA758AE2212711F0A7DCCB5BC4F9AE02.roa (hash: m8lEVsnh3DvG0KEPCp4MW7Ow9L5MLhKDggw4WLNqc68=) 3: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: Am8OlNfTP5V8Kx5g/Dv+15S2O7P9HWujy6NfIY4x9VA=) 4: 04E8D402F01111ED9C345840C4F9AE02.roa (hash: aw0GsE7/msiXwaZd5f0HibklFhBHtqZY6llDRI4HTZY=) 5: F650791EF01411ED9210D060C4F9AE02.roa (hash: 4IZfBEYxdxWId8yUiHx63z7AlPcjMCqr2gmuQDYBUpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72 Validity Not Before: Jul 18 23:43:33 2025 GMT Not After : Jul 25 23:43:33 2025 GMT Subject: CN=687adc26-4203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:c7:da:c3:98:ff:e2:4c:78:8f:63:e9:df: 97:dd:48:ee:e7:30:73:71:a4:48:1d:e6:89:b5:5b: 69:f4:b3:03:19:72:44:67:72:dd:f7:1d:4f:d8:77: ea:eb:e3:1b:cd:5c:7c:e8:84:32:70:c0:af:c4:5a: 8f:f3:bc:e4:73:09:f6:3a:e7:5b:4a:a1:f5:82:32: 40:06:2d:f0:43:d2:c1:a5:69:9b:b9:09:ac:ed:68: 8e:19:58:0b:03:36:a2:e7:df:6a:04:0f:95:d1:7f: 6c:f6:b5:4c:bb:5e:20:25:c5:aa:86:ee:da:83:92: 24:68:39:76:37:8d:a0:98:43:85:32:ce:b2:48:da: 5b:1b:f5:bd:cb:37:58:12:e3:e7:a8:f8:04:66:12: a1:ca:9f:b8:33:e2:28:a7:ee:10:00:91:51:72:ba: 1a:a7:91:70:d7:2d:69:8b:4d:ef:1c:bf:bf:b5:d2: 0c:e1:bc:c1:9a:ec:be:81:2d:06:6e:37:71:b4:f2: 51:85:21:9d:f0:e1:ac:e1:41:b5:c2:71:9d:98:dd: f7:86:74:f3:e2:32:cb:02:a2:ac:b9:06:22:af:77: 38:3f:2e:b9:57:fe:e5:40:b1:a9:91:b1:96:68:39: d0:11:ed:c9:3e:99:7e:b1:67:bc:4b:c4:31:01:2a: 0d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:88:51:69:0E:C1:AA:17:3E:33:E4:AE:7B:49:E9:C6:24:68:50 X509v3 Authority Key Identifier: keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:36:c2:08:ac:6d:74:43:b3:20:47:37:44:4d:6a:0e:e0:06: a7:e2:15:cb:5e:9b:b6:5a:b6:cd:90:84:6b:74:ae:21:b0:29: 4e:4a:14:5c:a9:39:98:1e:24:7e:c3:fb:5c:bb:9f:f6:9f:5a: 64:8e:6b:fd:9a:c5:c6:7a:9f:98:3c:6f:f8:66:2f:2c:b9:71: b3:9e:00:3e:aa:0c:64:2c:a2:a9:17:0d:6f:e1:3d:43:e7:cb: ce:01:9e:a4:87:05:3e:63:be:d8:e5:3e:f3:65:41:6c:6a:57: 14:83:ca:be:64:c5:0a:3f:29:26:43:a7:ac:9e:c1:cb:bb:da: d4:e8:85:22:bc:27:c5:64:6d:0a:8a:b3:75:ad:b3:fa:a6:b7: ac:17:3a:88:9b:5e:36:88:19:a9:33:38:d5:5c:c0:a1:94:84: 73:be:b6:ce:b6:34:a7:08:64:08:f2:2a:3e:dd:d2:11:09:fb: 27:4d:46:7e:5d:5e:8c:8c:60:ff:75:9f:37:36:fb:6a:4b:ee: 4e:ce:7e:dc:92:8b:cc:54:70:52:7e:cc:c9:5d:ca:4b:4c:bd: 84:a4:18:43:28:b8:51:32:6c:27:a7:0d:22:26:6d:4e:15:98: 1b:ab:73:97:46:94:2a:f7:0e:f7:02:89:9d:a2:6d:21:19:1e: 7b:d5:64:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNDRTkxMTAvBgNVBAUTKEUwOTk2MTE1NTA4QTNBRDU5OTE1REJBQkNDQjY5NkRC QTBCNENDNzIwHhcNMjUwNzE4MjM0MzMzWhcNMjUwNzI1MjM0MzMzWjAYMRYwFAYD VQQDEw02ODdhZGMyNi00MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulHH2sOY/+JMeI9j6d+X3Uju5zBzcaRIHeaJtVtp9LMDGXJEZ3Ld9x1P2Hfq 6+MbzVx86IQycMCvxFqP87zkcwn2OudbSqH1gjJABi3wQ9LBpWmbuQms7WiOGVgL Azai599qBA+V0X9s9rVMu14gJcWqhu7ag5IkaDl2N42gmEOFMs6ySNpbG/W9yzdY EuPnqPgEZhKhyp+4M+Iop+4QAJFRcroap5Fw1y1pi03vHL+/tdIM4bzBmuy+gS0G bjdxtPJRhSGd8OGs4UG1wnGdmN33hnTz4jLLAqKsuQYir3c4Py65V/7lQLGpkbGW aDnQEe3JPpl+sWe8S8QxASoNjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFUiFFp DsGqFz4z5K57SenGJGhQMB8GA1UdIwQYMBaAFOCZYRVQijrVmRXbq8y2ltugtMxy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0NFOS8wQUIxRDM5NkY1 MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090V1pGZHVyekxhVzI2QzB6 SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKbGhGVkNLT3RXWkZkdXJ6TGFXMjZDMHpISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0NFOS8wQUIxRDM5NkY1MTUxMUVCOUVGRTA3NTBDNEY5QUUwMi80SmxoRlZDS090 V1pGZHVyekxhVzI2QzB6SEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeNsIIrG10Q7MgRzdETWoO4Aan4hXLXpu2WrbNkIRrdK4hsClOShRc qTmYHiR+w/tcu5/2n1pkjmv9msXGep+YPG/4Zi8suXGzngA+qgxkLKKpFw1v4T1D 58vOAZ6khwU+Y77Y5T7zZUFsalcUg8q+ZMUKPykmQ6esnsHLu9rU6IUivCfFZG0K irN1rbP6presFzqIm142iBmpMzjVXMChlIRzvrbOtjSnCGQI8io+3dIRCfsnTUZ+ XV6MjGD/dZ83NvtqS+5Ozn7ckovMVHBSfszJXcpLTL2EpBhDKLhRMmwnpw0iJm1O FZgbq3OXRpQq9w73Aomdom0hGR571WSD -----END CERTIFICATE-----Generated at Sun Jul 20 10:51:57 2025 by rpki-client