$ rpki-client -vvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft File: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json) Hash identifier: X56zh5CNXrjrzQw5H6DuAVrxbdrMeAfjFUq4IOdYapU= Subject key identifier: E0:0B:E4:C4:F6:64:D3:E7:4E:88:EF:6A:68:F6:5F:F6:F9:95:39:6D Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Certificate serial: 1E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft Manifest number: 1E50 Signing time: Fri 18 Jul 2025 16:11:07 +0000 Manifest this update: Fri 18 Jul 2025 16:11:06 +0000 Manifest next update: Fri 25 Jul 2025 16:11:06 +0000 Files and hashes: 1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: nBX/RklIsrNKB+ylcGz3JoAzkXV5NeU9/jP7pof4QrI=) 2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: b7pdRooRIYxeq417I4r+N7hToQ0VSgAm22j8JdCbQTY=) 3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: NSYgbjxaHQUqVX7cmhBmev0VQjPDBDIHp8wuQxin4zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7799 (0x1e77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A Validity Not Before: Jul 18 16:11:06 2025 GMT Not After : Jul 25 16:11:06 2025 GMT Subject: CN=687a721a-3722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:ad:d3:fb:23:81:c9:a8:2c:5b:61:55:d5: c7:8b:ea:e3:fb:ff:a8:d4:57:48:fe:f6:10:ae:a6: d1:b5:87:3c:05:53:06:7b:af:85:4b:16:31:e4:ce: 68:bb:63:55:15:a0:07:e9:7a:91:f2:ac:9c:a2:5e: e7:30:d3:4d:9f:bd:e6:a7:a2:84:2b:58:07:b8:62: e1:00:09:5c:bb:cf:d4:22:ef:76:d9:5b:9a:5b:50: b2:df:dc:2c:17:94:fd:22:1b:f1:4e:a3:1a:05:09: 4e:f2:51:ea:a4:cb:79:bd:b9:d9:28:af:ab:5b:29: a0:94:af:71:93:5c:b8:87:6d:13:37:9e:b1:2f:b1: 51:53:51:d4:4a:94:54:59:de:ac:a3:c5:a1:73:e5: 1d:9d:94:f9:93:5a:e2:6b:38:fa:da:d7:b6:a6:58: 34:3b:70:bf:50:f2:94:d1:c2:c2:c6:d0:a9:41:bd: c4:21:3c:c4:17:24:31:b0:b5:f1:53:eb:51:5a:b8: 99:d8:e3:fc:13:82:64:6d:df:cc:1b:32:56:1a:44: 20:50:6e:8c:d0:17:53:94:12:3e:e3:dd:47:d9:e7: 4b:79:b3:18:12:b2:22:c2:d1:94:c7:af:72:29:e3: f0:a6:c0:ec:2b:8f:d0:94:c3:6e:1c:fb:13:71:e2: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:E4:C4:F6:64:D3:E7:4E:88:EF:6A:68:F6:5F:F6:F9:95:39:6D X509v3 Authority Key Identifier: keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:9d:a5:b9:4b:36:b5:17:6b:3e:1d:4a:ee:2d:c5:85:30:32: 4b:40:b2:f1:8c:5c:cb:da:0d:01:89:c0:7c:71:7d:b1:cd:31: 5f:81:84:3e:65:07:1c:f6:86:d1:6c:a1:79:15:89:ed:3f:2d: df:45:3c:e6:30:d8:19:aa:fd:7f:6f:72:89:38:3e:48:47:f9: c1:51:16:03:05:52:d7:15:6e:3d:f1:b6:1e:10:9d:b8:a7:52: db:f2:51:54:0b:d9:5c:23:5b:66:f1:3c:71:8e:92:d3:ad:b6: cf:e1:b0:32:d2:69:56:a7:17:08:a3:36:15:21:fe:6d:b1:26: a8:0f:18:d9:5b:f9:93:94:f4:80:8c:02:9c:4d:86:fa:16:36: 8a:af:2c:24:1c:eb:20:55:72:24:44:8d:8e:00:e7:da:e6:01: 09:34:cf:1d:0a:91:2e:b3:44:1d:8f:a5:90:e6:f1:e5:38:40: 21:22:b8:a1:a4:ea:34:76:58:39:af:c3:7e:dc:54:78:51:eb: 19:6a:0b:0e:37:7c:9f:41:44:4f:c9:ed:c6:fb:13:f5:61:4f: 87:f0:95:4c:d2:c7:fe:a3:14:3c:4b:5d:ed:04:66:ab:35:e1: 2d:b2:dd:f7:c1:73:4e:f2:26:bb:72:a7:e1:4c:f5:83:38:d6: bb:4d:d9:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD MzIwRTRBMkEwHhcNMjUwNzE4MTYxMTA2WhcNMjUwNzI1MTYxMTA2WjAYMRYwFAYD VQQDEw02ODdhNzIxYS0zNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgut0/sjgcmoLFthVdXHi+rj+/+o1FdI/vYQrqbRtYc8BVMGe6+FSxYx5M5o u2NVFaAH6XqR8qycol7nMNNNn73mp6KEK1gHuGLhAAlcu8/UIu922VuaW1Cy39ws F5T9IhvxTqMaBQlO8lHqpMt5vbnZKK+rWymglK9xk1y4h20TN56xL7FRU1HUSpRU Wd6so8Whc+UdnZT5k1riazj62te2plg0O3C/UPKU0cLCxtCpQb3EITzEFyQxsLXx U+tRWriZ2OP8E4Jkbd/MGzJWGkQgUG6M0BdTlBI+491H2edLebMYErIiwtGUx69y KePwpsDsK4/QlMNuHPsTceIT+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAL5MT2 ZNPnTojvamj2X/b5lTltMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0 NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu VmwxRU5oUS00Q2JESU9TaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEnaW5Sza1F2s+HUruLcWFMDJLQLLxjFzL2g0BicB8cX2xzTFfgYQ+ ZQcc9obRbKF5FYntPy3fRTzmMNgZqv1/b3KJOD5IR/nBURYDBVLXFW498bYeEJ24 p1Lb8lFUC9lcI1tm8TxxjpLTrbbP4bAy0mlWpxcIozYVIf5tsSaoDxjZW/mTlPSA jAKcTYb6FjaKrywkHOsgVXIkRI2OAOfa5gEJNM8dCpEus0Qdj6WQ5vHlOEAhIrih pOo0dlg5r8N+3FR4UesZagsON3yfQURPye3G+xP1YU+H8JVM0sf+oxQ8S13tBGar NeEtst33wXNO8ia7cqfhTPWDONa7TdlB -----END CERTIFICATE-----Generated at Sun Jul 20 04:21:24 2025 by rpki-client