$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: Wos2Jgrl/QLMnvYi2rBI1a+2PoxXc5nY04zZOGjerdM= Subject key identifier: D8:4B:DB:36:7F:CF:75:77:CA:FE:C5:12:3C:69:E4:B2:00:0B:37:0E Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 01BC Signing time: Sat 19 Jul 2025 03:23:01 +0000 Manifest this update: Sat 19 Jul 2025 03:23:01 +0000 Manifest next update: Sat 26 Jul 2025 03:23:01 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: QHe8MjlirRMl0991Q46MbIe/tdsYGwBlf3/xALJvrJ0=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: BWLI/lFMOk0gs1uM9uMc8V3aTl6ezInYU2HutDGOR1Y=) 3: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: WszDeDtt2pA1qPuCttmdMd6CqUvx9wc+SucMvuhAFvE=) 4: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: KfEf5+IVw2cc5iVIvA+8UOcszxul9bOLbJUOX0WGbIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Jul 19 03:23:01 2025 GMT Not After : Jul 26 03:23:01 2025 GMT Subject: CN=687b0f95-4f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:91:e7:94:37:4c:2c:8c:2c:e7:87:a1:6e: 98:d3:49:a7:69:c4:ea:df:b8:96:aa:49:75:4b:c3: 78:aa:ff:7e:00:70:a9:85:8b:ac:6b:94:7d:cd:af: 9f:6f:ad:3f:f6:50:d8:ce:e6:d1:2d:46:bb:9f:88: 49:8b:28:07:2a:8b:82:6b:cc:97:cf:d1:6e:bb:29: 01:38:12:cd:23:d0:e3:be:92:dd:10:38:9f:7f:7b: 5d:b2:8e:36:3d:fb:5f:c6:fb:60:7a:0e:60:c6:31: f9:70:e9:93:c3:44:a5:bf:89:7b:8c:eb:f6:55:e5: 1d:4e:2e:f7:bf:cf:d5:fe:c9:cf:a7:8e:e6:a3:41: 05:19:82:0e:f7:91:29:0b:29:2d:5c:ad:4a:b7:f7: 5e:68:bb:e3:f6:b5:11:69:df:28:d6:9f:65:9f:95: 1c:5c:5e:a8:dd:71:59:d7:70:62:a5:f7:c3:99:65: 4f:68:71:8d:d2:85:7b:ca:5c:c4:c3:30:d8:70:bc: c1:a4:55:7c:00:3c:e4:1a:1e:db:7d:77:a8:74:43: f8:f3:80:54:ed:51:e8:ad:cd:07:00:4c:aa:cb:fe: 61:68:2f:5e:8e:ab:7d:a1:06:0c:dc:4f:e0:4e:88: 81:2a:33:38:5d:f0:03:36:b3:c5:13:e6:53:84:c1: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4B:DB:36:7F:CF:75:77:CA:FE:C5:12:3C:69:E4:B2:00:0B:37:0E X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:5a:f5:d6:1a:25:86:bf:cb:51:5b:58:03:80:9a:a8:61:8b: 48:99:67:1b:03:87:0c:b1:99:70:a2:8d:e4:e2:53:07:98:fa: d5:d6:7a:f2:f3:98:2b:db:7e:2e:24:80:b5:4d:d7:1e:4a:80: b9:13:0f:c3:ac:96:7b:e8:d1:03:01:9a:ee:ff:0c:3a:15:de: 83:89:2f:34:43:1f:96:91:39:ae:f3:05:51:93:0b:25:c7:50: 00:55:fe:eb:f7:23:34:e0:a0:e5:27:3a:45:0a:3f:53:ff:6a: 2e:35:30:60:4f:0e:f9:8a:69:45:3f:73:e9:db:19:c2:b8:4d: 0f:9e:29:12:2d:36:a4:2a:a1:15:27:ba:8e:8b:f5:50:37:78: 92:84:b6:52:93:e5:0b:ae:23:e5:ba:c2:bc:7a:be:7a:56:88: a1:24:3b:0e:1e:c1:9a:c7:e3:7d:a4:e4:d6:9f:be:57:b9:ed: a8:d3:8f:e4:63:5c:4f:39:db:04:c4:33:d5:d1:05:de:79:40: 09:6a:cf:7d:68:e6:14:12:4e:c5:36:43:63:2a:26:e4:df:ef: c8:a9:d7:fa:d1:e1:43:b1:78:7c:7c:3c:0c:ae:6f:78:8f:90: ee:89:eb:0b:18:8e:ba:82:bc:72:03:bb:3b:d1:64:f8:af:e0: 5d:7a:08:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUwNzE5MDMyMzAxWhcNMjUwNzI2MDMyMzAxWjAYMRYwFAYD VQQDEw02ODdiMGY5NS00ZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywqR55Q3TCyMLOeHoW6Y00mnacTq37iWqkl1S8N4qv9+AHCphYusa5R9za+f b60/9lDYzubRLUa7n4hJiygHKouCa8yXz9FuuykBOBLNI9DjvpLdEDiff3tdso42 Pftfxvtgeg5gxjH5cOmTw0Slv4l7jOv2VeUdTi73v8/V/snPp47mo0EFGYIO95Ep CyktXK1Kt/deaLvj9rURad8o1p9ln5UcXF6o3XFZ13BipffDmWVPaHGN0oV7ylzE wzDYcLzBpFV8ADzkGh7bfXeodEP484BU7VHorc0HAEyqy/5haC9ejqt9oQYM3E/g ToiBKjM4XfADNrPFE+ZThMGIAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhL2zZ/ z3V3yv7FEjxp5LIACzcOMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSWvXWGiWGv8tRW1gDgJqoYYtImWcbA4cMsZlwoo3k4lMHmPrV1nry 85gr234uJIC1TdceSoC5Ew/DrJZ76NEDAZru/ww6Fd6DiS80Qx+WkTmu8wVRkwsl x1AAVf7r9yM04KDlJzpFCj9T/2ouNTBgTw75imlFP3Pp2xnCuE0PnikSLTakKqEV J7qOi/VQN3iShLZSk+ULriPlusK8er56VoihJDsOHsGax+N9pOTWn75Xue2o04/k Y1xPOdsExDPV0QXeeUAJas99aOYUEk7FNkNjKibk3+/Iqdf60eFDsXh8fDwMrm94 j5DuiesLGI66grxyA7s70WT4r+BdeghV -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:47 2025 by rpki-client