$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: 3486XJB3F/fsPUi5Z5offq5aJx4S0+B/KbfvFODob/A= Subject key identifier: A1:27:98:63:68:A7:D6:9C:16:7F:23:14:5A:9C:2A:ED:00:DC:E1:59 Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 144B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 142B Signing time: Fri 18 Jul 2025 17:04:37 +0000 Manifest this update: Fri 18 Jul 2025 17:04:37 +0000 Manifest next update: Fri 25 Jul 2025 17:04:37 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: rgte9Tg6FuAgPcEcPNpdbpoG3UCeHh2m9guuD9OIGm8=) 2: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: iaZ3s82xkjY2XfRTWiPnjnqnF2ySFKKm+AeAW0yRT+E=) 3: 983A5536450611F093EC3A65C4F9AE02.roa (hash: jXDJFKBYyl2AMr2aBeeaX3dJKta1vZTtNnECUVWIxl8=) 4: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: Z27ILnU+TOqVLLhIyXtiXXV0PlnGYmkYaaio5+3e2ug=) 5: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: U8BSX2DX6JtfXzvuoqYA9Tm3bqF1pxPrmS12/E0gdmw=) 6: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: 8uWfW9Bx2UJleM0TwlNLkikjSTgRwN2eIHzYdV+mzGQ=) 7: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: mH5FkT85wXX1fDkYIcXzDeEU3PHEwchgtocWPplcMrs=) 8: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: 3SvNLk7hW+Uo3wG2xJFv1wsrHQt1APNp92391QdFtgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5195 (0x144b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Jul 18 17:04:37 2025 GMT Not After : Jul 25 17:04:37 2025 GMT Subject: CN=687a7ea5-5886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:b4:8b:43:63:25:39:b4:6b:e5:48:a8:4b: 06:39:a5:6e:f8:8c:30:9e:bf:d1:b0:ee:68:ef:e9: 5c:03:dc:90:b3:9a:9e:94:0b:9e:0c:ea:30:68:35: c9:24:dc:51:4b:3a:2d:a6:5d:ee:f2:b2:5e:e7:c3: 17:61:38:49:ac:38:60:e1:3b:94:11:bb:29:fe:cc: 06:a9:cf:79:16:ff:a0:bc:b3:4f:81:58:d2:43:37: c9:78:ce:48:7c:54:30:51:7c:60:59:66:5c:f9:a9: 9b:3a:ba:7f:52:15:29:3c:18:3a:a0:f2:a2:4a:bd: a9:5c:ab:09:d0:e4:78:8c:b9:3e:60:7e:8a:67:87: 51:78:5d:8a:75:4f:a7:ce:1d:10:61:6e:6c:10:27: 81:e6:41:06:35:c5:b9:4e:ea:c5:1d:51:ec:5d:f5: f8:5f:87:0d:7b:e2:61:f5:92:c5:c2:93:e6:f4:fa: af:6d:d2:89:31:62:52:e0:40:08:0a:ef:d8:34:40: 7a:90:2a:d8:d3:fc:d9:0e:87:32:3e:93:07:30:3c: b1:dc:7c:ae:5f:46:c5:db:19:e6:df:16:98:99:58: 4e:79:33:77:46:6c:12:6f:4b:44:79:3c:90:6b:11: 2c:aa:e1:0c:74:44:ae:91:53:66:1f:05:5f:67:e3: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:27:98:63:68:A7:D6:9C:16:7F:23:14:5A:9C:2A:ED:00:DC:E1:59 X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e3:d5:20:fe:a5:68:ec:1f:c5:5d:39:24:cd:60:40:3c:09: df:3e:82:51:ed:3c:c0:cf:48:7f:3f:54:6a:76:49:e7:da:45: 81:ca:6d:aa:09:c1:ca:de:d3:b5:76:d3:37:1a:b9:db:1d:7e: 4a:d9:81:d9:03:2f:4e:2f:e5:a4:2e:06:8d:52:15:13:a8:53: d6:03:96:8a:01:bc:de:25:fc:b2:83:66:45:f8:92:5e:7c:6c: 77:b9:02:d3:01:e8:12:f6:eb:5c:b4:4f:f6:97:79:24:b6:f3: 6f:61:b2:dd:ac:49:8e:40:e0:1f:2f:4b:90:5b:87:29:cf:6a: 6d:8d:65:e7:fd:27:34:60:07:af:22:9a:41:5f:1e:ba:2b:65: d2:b1:2f:cf:c7:9a:1d:87:e9:fb:21:da:e2:97:15:34:7a:76: 60:17:be:5a:6f:05:0a:16:0a:91:90:fa:79:56:40:aa:69:70: 53:5e:27:32:5f:dd:71:41:c5:8e:ae:2f:1d:7e:dd:94:4d:2c: 1b:fc:e9:92:39:5d:03:c5:22:74:ce:d9:e1:08:ec:7a:b3:40: 2f:dc:6c:46:d3:7d:d9:f7:27:45:50:5a:a3:d2:e0:69:42:c9: b2:c2:c9:37:af:4a:f6:ac:3b:ab:d7:2c:c5:ba:ec:14:2b:78: 65:97:dd:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjUwNzE4MTcwNDM3WhcNMjUwNzI1MTcwNDM3WjAYMRYwFAYD VQQDEw02ODdhN2VhNS01ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApua0i0NjJTm0a+VIqEsGOaVu+Iwwnr/RsO5o7+lcA9yQs5qelAueDOowaDXJ JNxRSzotpl3u8rJe58MXYThJrDhg4TuUEbsp/swGqc95Fv+gvLNPgVjSQzfJeM5I fFQwUXxgWWZc+ambOrp/UhUpPBg6oPKiSr2pXKsJ0OR4jLk+YH6KZ4dReF2KdU+n zh0QYW5sECeB5kEGNcW5TurFHVHsXfX4X4cNe+Jh9ZLFwpPm9PqvbdKJMWJS4EAI Cu/YNEB6kCrY0/zZDocyPpMHMDyx3HyuX0bF2xnm3xaYmVhOeTN3RmwSb0tEeTyQ axEsquEMdESukVNmHwVfZ+MZ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEnmGNo p9acFn8jFFqcKu0A3OFZMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh49Ug/qVo7B/FXTkkzWBAPAnfPoJR7TzAz0h/P1Rqdknn2kWBym2q CcHK3tO1dtM3GrnbHX5K2YHZAy9OL+WkLgaNUhUTqFPWA5aKAbzeJfyyg2ZF+JJe fGx3uQLTAegS9utctE/2l3kktvNvYbLdrEmOQOAfL0uQW4cpz2ptjWXn/Sc0YAev IppBXx66K2XSsS/Px5odh+n7IdrilxU0enZgF75abwUKFgqRkPp5VkCqaXBTXicy X91xQcWOri8dft2UTSwb/OmSOV0DxSJ0ztnhCOx6s0Av3GxG033Z9ydFUFqj0uBp Qsmywsk3r0r2rDur1yzFuuwUK3hll93F -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:19 2025 by rpki-client