$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: WWf9LU55dle3QMyOGichx+YAwFa79LXrMR6IciPywS8= Subject key identifier: 5A:11:32:D7:DD:68:D2:F5:CA:69:85:D5:58:C3:5C:84:69:79:D3:5A Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: C3 Signing time: Sat 19 Jul 2025 06:02:01 +0000 Manifest this update: Sat 19 Jul 2025 06:02:00 +0000 Manifest next update: Sat 26 Jul 2025 06:02:00 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: EIy6p8PlOKo36CW19zRoQd2Po77cBdW5kS2bGJmFMNg=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: RTDmiAUTa+6e7BNeD1q7cr5hG3t1MJJWblXaDUXHJew=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: ZlBqKGquKmDZSHNnRJSZITSYuAIz8r1LwmFTYmRFcj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Jul 19 06:02:00 2025 GMT Not After : Jul 26 06:02:00 2025 GMT Subject: CN=687b34d8-0fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:06:ce:fc:c2:25:20:56:4b:d0:5e:64:a1: ad:58:46:e2:26:d6:dd:8f:fe:a8:d0:f9:85:30:ac: 5f:67:f3:02:8c:1b:ba:ee:2b:6c:af:62:df:e3:b4: 59:dd:98:51:9c:49:1e:c2:7e:2e:fd:6c:e1:0f:e8: c9:db:3f:c8:02:24:74:0e:72:0f:fb:cd:51:bc:5b: d0:3b:79:09:f8:dd:e5:5b:3a:2f:83:07:68:ba:a3: 20:3b:39:1e:1d:98:b6:b0:54:9f:db:07:68:4c:73: 71:40:2a:7d:93:73:57:ec:d1:e7:4d:06:d7:7d:a1: 32:e0:d6:51:55:83:52:6a:2e:e7:63:0d:df:33:f5: 87:c5:53:15:a5:99:c2:0d:91:72:f6:6a:15:6c:d1: 06:3e:b3:33:37:20:32:07:5b:1b:3d:99:0a:06:3f: b9:54:50:2a:5c:0b:74:00:54:01:52:eb:af:9c:99: be:36:4d:44:f8:e4:48:59:cc:bd:51:a8:6d:dc:5a: ef:98:cb:35:c5:83:d5:11:d7:a5:b3:96:0b:b4:33: 5f:82:7f:26:09:0e:55:d6:06:ac:df:7c:14:0a:2f: c6:45:96:b5:fd:a5:2d:51:c4:23:05:2f:04:77:ef: 2b:d2:fd:b9:d6:48:00:a0:71:47:26:d9:f0:43:d8: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:11:32:D7:DD:68:D2:F5:CA:69:85:D5:58:C3:5C:84:69:79:D3:5A X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:93:cc:01:a3:b5:97:7f:74:46:5e:11:3d:8a:68:e7:54:42: c1:6e:6b:c6:13:9c:3d:23:81:19:4a:68:31:be:72:04:be:a5: f2:9b:1f:cd:64:04:b1:99:5a:32:f0:6d:95:af:36:ed:fa:bc: 36:3b:9c:4e:b1:f2:a1:11:01:b1:34:4a:12:d0:e2:19:b0:43: fc:73:67:8f:c0:fb:69:20:ef:73:ab:61:24:06:dd:ab:17:b5: 03:c3:63:6e:ec:9c:6f:23:09:49:74:56:2d:99:9e:04:85:23: d0:c7:8d:87:d5:69:36:ae:3e:d3:74:cf:a0:ea:e7:94:f4:17: 50:1f:f6:32:44:7d:24:83:57:f5:97:b5:08:be:9b:e4:fc:46: d0:70:dc:78:dd:54:eb:35:3f:d6:3c:26:3e:f9:33:d5:49:0c: b1:8d:50:78:6a:50:ee:ff:1d:a6:2b:48:e4:bb:72:e0:80:d3: 5c:2d:6c:14:62:3f:fa:ed:da:c2:22:48:29:6d:16:45:f0:c9: f7:75:77:f0:fd:81:fd:07:ad:62:42:15:da:bc:a1:4c:5f:25: dd:c8:75:e6:a6:09:7f:33:87:b9:52:19:dc:ff:7d:a1:c3:7c: ad:79:eb:5f:54:07:85:e9:b2:e4:43:2b:18:da:2b:ee:58:6f: e3:88:c8:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjUwNzE5MDYwMjAwWhcNMjUwNzI2MDYwMjAwWjAYMRYwFAYD VQQDEw02ODdiMzRkOC0wZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfsGzvzCJSBWS9BeZKGtWEbiJtbdj/6o0PmFMKxfZ/MCjBu67itsr2Lf47RZ 3ZhRnEkewn4u/WzhD+jJ2z/IAiR0DnIP+81RvFvQO3kJ+N3lWzovgwdouqMgOzke HZi2sFSf2wdoTHNxQCp9k3NX7NHnTQbXfaEy4NZRVYNSai7nYw3fM/WHxVMVpZnC DZFy9moVbNEGPrMzNyAyB1sbPZkKBj+5VFAqXAt0AFQBUuuvnJm+Nk1E+ORIWcy9 Uaht3FrvmMs1xYPVEdels5YLtDNfgn8mCQ5V1gas33wUCi/GRZa1/aUtUcQjBS8E d+8r0v251kgAoHFHJtnwQ9g2EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoRMtfd aNL1ymmF1VjDXIRpedNaMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOk8wBo7WXf3RGXhE9imjnVELBbmvGE5w9I4EZSmgxvnIEvqXymx/N ZASxmVoy8G2Vrzbt+rw2O5xOsfKhEQGxNEoS0OIZsEP8c2ePwPtpIO9zq2EkBt2r F7UDw2Nu7JxvIwlJdFYtmZ4EhSPQx42H1Wk2rj7TdM+g6ueU9BdQH/YyRH0kg1f1 l7UIvpvk/EbQcNx43VTrNT/WPCY++TPVSQyxjVB4alDu/x2mK0jku3LggNNcLWwU Yj/67drCIkgpbRZF8Mn3dXfw/YH9B61iQhXavKFMXyXdyHXmpgl/M4e5Uhnc/32h w3yteetfVAeF6bLkQysY2ivuWG/jiMhe -----END CERTIFICATE-----Generated at Sun Jul 20 07:09:42 2025 by rpki-client