$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: aJnBOC9hgMr0TjZhErvvWo6YPF1Adeovw8QpGWkAxn4= Subject key identifier: 8C:3C:99:C7:39:F3:25:FE:82:90:EC:B3:29:19:A3:D5:EE:1A:DD:59 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 042A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0414 Signing time: Sat 19 Jul 2025 00:50:10 +0000 Manifest this update: Sat 19 Jul 2025 00:50:09 +0000 Manifest next update: Sat 26 Jul 2025 00:50:09 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: nc2WAtDHUwsY7o2fX2VqRaUwoFo/NI6WhNEtlmNipA8=) 2: 2940AFDCD84211EDBD609A4DC4F9AE02.roa (hash: 0k/cIYnPQXwy+zTSkxTlGjeXYEeYNzK6r8YzvtnE4aQ=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Jul 19 00:50:09 2025 GMT Not After : Jul 26 00:50:09 2025 GMT Subject: CN=687aebc1-d8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:45:c1:06:32:63:ef:85:31:7a:48:b4:aa:9e: 5c:a3:b0:b9:92:b7:da:ac:88:07:4b:e7:2c:d9:b1: fa:b5:cc:3f:fb:28:f6:bd:d6:0e:4a:73:5f:ea:c4: 93:08:e8:69:7d:84:6b:21:da:2f:3a:da:7b:a0:cf: 63:02:75:29:d9:44:7f:3a:db:69:1c:54:89:8e:ee: 28:c1:5f:37:ec:b3:a4:0a:1a:fb:04:8e:72:4c:bb: 89:fa:82:30:6f:e2:26:2d:36:43:f3:05:1d:3d:b4: 67:d3:d4:c1:bb:a6:79:24:40:03:1f:fd:bf:20:fe: 58:95:cc:0a:59:67:c3:b4:af:80:22:3d:48:68:39: f1:9e:74:fa:59:3c:48:27:d3:34:d4:08:21:04:79: 91:ba:85:85:11:a9:4e:85:a4:51:52:b2:10:c1:c4: 86:c5:4a:91:d1:ba:d9:fd:7b:de:79:4e:aa:62:7b: 4b:06:32:36:60:f1:ff:c7:64:33:81:fa:53:62:0e: 61:29:c8:83:9c:17:b9:0e:46:12:cb:0a:c5:be:85: 5a:72:56:a1:3b:bc:37:a7:4c:20:88:62:88:8c:07: f7:56:03:13:43:15:62:c7:79:29:f8:77:2d:84:37: 91:b9:cd:f8:c0:2a:e4:31:68:43:7c:3d:b9:7a:08: db:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3C:99:C7:39:F3:25:FE:82:90:EC:B3:29:19:A3:D5:EE:1A:DD:59 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e6:7b:8f:60:c0:ee:2e:97:01:c9:ef:d8:fa:e7:9f:5d:7c: 76:03:bd:31:4f:b0:35:af:ab:45:20:d7:94:39:9e:f9:2d:d2: 50:00:29:38:f5:b1:48:f4:1b:41:7b:ad:22:e7:60:fe:ae:f2: 33:df:df:16:85:4e:0a:45:17:ab:ec:d3:66:3a:92:08:d4:4c: 71:4a:cd:e3:ff:a5:14:6e:37:5b:35:95:5d:de:0f:ae:e3:2f: ed:aa:63:d6:cc:8f:58:90:02:77:6e:5a:e1:7d:70:62:15:3c: 47:02:58:27:e3:10:41:8c:f1:a5:f3:5a:8c:6d:02:66:7a:b4: 74:f4:49:40:90:3e:94:1a:9e:42:cc:f7:51:48:b1:69:51:f2: 25:91:22:98:6c:a5:fc:e8:e0:6d:9f:fe:6b:ee:1a:90:48:aa: e0:35:12:a1:73:ec:5b:c9:4d:9c:f9:6b:de:cb:7d:ca:93:63: 20:73:60:20:1e:77:4b:1b:64:63:b6:b2:cf:6a:49:52:49:fd: 4c:d9:4d:4c:39:07:cf:31:61:e4:3b:47:57:03:c1:59:88:da: ea:cb:e7:ce:04:d3:8f:6f:0e:bf:51:17:32:cc:a1:1d:24:08: ee:8f:e8:da:00:06:64:05:a2:83:3b:8b:72:0f:11:85:fb:86: d0:18:fe:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUwNzE5MDA1MDA5WhcNMjUwNzI2MDA1MDA5WjAYMRYwFAYD VQQDEw02ODdhZWJjMS1kOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UXBBjJj74Uxeki0qp5co7C5krfarIgHS+cs2bH6tcw/+yj2vdYOSnNf6sST COhpfYRrIdovOtp7oM9jAnUp2UR/OttpHFSJju4owV837LOkChr7BI5yTLuJ+oIw b+ImLTZD8wUdPbRn09TBu6Z5JEADH/2/IP5YlcwKWWfDtK+AIj1IaDnxnnT6WTxI J9M01AghBHmRuoWFEalOhaRRUrIQwcSGxUqR0brZ/XveeU6qYntLBjI2YPH/x2Qz gfpTYg5hKciDnBe5DkYSywrFvoVaclahO7w3p0wgiGKIjAf3VgMTQxVix3kp+Hct hDeRuc34wCrkMWhDfD25egjbvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw8mcc5 8yX+gpDssykZo9XuGt1ZMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk5nuPYMDuLpcBye/Y+uefXXx2A70xT7A1r6tFINeUOZ75LdJQACk4 9bFI9BtBe60i52D+rvIz398WhU4KRRer7NNmOpII1ExxSs3j/6UUbjdbNZVd3g+u 4y/tqmPWzI9YkAJ3blrhfXBiFTxHAlgn4xBBjPGl81qMbQJmerR09ElAkD6UGp5C zPdRSLFpUfIlkSKYbKX86OBtn/5r7hqQSKrgNRKhc+xbyU2c+Wvey33Kk2Mgc2Ag HndLG2RjtrLPaklSSf1M2U1MOQfPMWHkO0dXA8FZiNrqy+fOBNOPbw6/URcyzKEd JAjuj+jaAAZkBaKDO4tyDxGF+4bQGP59 -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:00 2025 by rpki-client