$ rpki-client -vvf rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft File: cXGYzRpGea2dRS7h2wLQASpDdOw.mft (raw, json) Hash identifier: WUUq1mQy79oMV39zLkfDSLjPpJRJzpBDqTuULHq7YZ0= Subject key identifier: 3A:CD:15:D9:F3:C3:E7:0C:58:EC:65:48:A5:CE:4D:92:96:0D:23:32 Authority key identifier: 71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC Certificate issuer: /CN=A9169F49/serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft Manifest number: 48 Signing time: Wed 23 Jul 2025 07:42:56 +0000 Manifest this update: Wed 23 Jul 2025 07:42:55 +0000 Manifest next update: Wed 30 Jul 2025 07:42:55 +0000 Files and hashes: 1: cXGYzRpGea2dRS7h2wLQASpDdOw.crl (hash: cztmw99aQlTVL1/ptvfD1nWwDymMLc5ZecDid7RqIiE=) 2: 2B42D1D8F9B611EFB3AB154BC4F9AE02.roa (hash: qRFt1VDcs2OHFjFWZc9CCxRhXeBrmwOFxAL6+b0Q2Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169F49, serialNumber=717198CD1A4679AD9D452EE1DB02D0012A4374EC Validity Not Before: Jul 23 07:42:55 2025 GMT Not After : Jul 30 07:42:55 2025 GMT Subject: CN=6880927f-eb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:39:89:fc:47:fb:62:62:d4:a5:64:d2:a9: e2:4d:fa:f7:f2:c1:3e:d2:34:fc:8a:04:cb:3e:b8: ae:c8:b9:df:4b:a3:28:ee:34:18:68:69:1f:83:9c: db:86:ba:4f:40:33:f0:fd:a4:c9:0f:1b:f4:50:66: b2:dc:20:a4:79:1f:d9:ac:3d:13:be:77:ef:33:d5: 29:1b:e4:d5:b0:89:90:b9:74:df:31:5f:29:fa:09: 59:0d:47:7c:48:e2:bd:d7:06:54:c0:3b:f0:b5:c4: c5:57:4b:92:7b:f3:5c:37:e4:51:15:7c:26:12:9f: ab:93:19:19:c3:4e:f0:9b:a6:30:fa:a4:92:33:4a: be:eb:5b:43:c8:05:e6:e0:43:06:2e:c4:a7:a9:a3: 6c:ab:dc:12:a6:8e:cc:d8:10:21:1a:c0:e7:b0:1d: ea:a1:56:da:20:8f:15:e5:00:64:22:75:50:07:43: 49:37:09:5d:62:1a:55:04:52:46:a1:2c:ba:90:c2: 17:1b:cc:21:6b:61:19:cf:43:53:fa:0a:b9:03:7b: 19:de:74:bd:3f:12:9b:3b:73:10:04:ea:f7:e6:c7: 9b:6c:fd:5b:e9:84:98:d9:72:3c:70:ea:0f:9d:43: 72:09:82:26:61:9c:51:1c:bb:91:b3:d3:f4:38:df: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CD:15:D9:F3:C3:E7:0C:58:EC:65:48:A5:CE:4D:92:96:0D:23:32 X509v3 Authority Key Identifier: keyid:71:71:98:CD:1A:46:79:AD:9D:45:2E:E1:DB:02:D0:01:2A:43:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXGYzRpGea2dRS7h2wLQASpDdOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169F49/B2C5FB9AF9B511EFA5D73C47C4F9AE02/cXGYzRpGea2dRS7h2wLQASpDdOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:96:60:80:db:11:5c:d6:63:ba:22:d3:04:aa:29:9f:68:95: 87:22:75:5f:2c:9a:9c:8b:6b:1d:97:0a:bd:4a:7b:1a:fe:a9: ad:ad:75:78:36:76:0d:21:db:d9:c8:07:cd:7f:9c:34:7e:5e: 9b:bd:01:1b:68:f9:a2:6c:42:bd:bf:d2:ff:3f:ff:9a:d6:ca: 04:e6:62:b4:de:11:d7:c3:4b:55:f4:d2:3e:b7:0f:ec:1b:df: fd:7e:cf:87:4e:66:1b:f8:72:5e:b7:6d:31:7d:14:ef:ec:f4: de:65:c9:3c:3e:54:fe:1c:a7:e5:18:12:8a:19:b2:4d:90:b6: d7:8c:50:da:ff:dc:dc:c1:e5:99:85:6e:d8:3e:b7:48:7a:98: aa:58:2f:99:33:7e:dd:05:24:75:1c:27:7a:9e:6f:37:2d:12: f0:6e:b8:31:a0:31:d2:ee:f7:58:15:ee:48:66:0b:74:e3:de: 9a:68:43:df:9f:09:0b:dd:cb:f2:e6:d3:b2:5c:93:a2:af:be: 08:25:33:ad:e9:66:6d:76:fc:94:78:57:39:cf:cb:6d:8e:8c: e6:17:f8:6e:a3:f0:e4:d1:1c:43:98:6c:b5:b4:38:3b:20:b4: 80:7f:92:bc:ca:a1:95:6b:65:7c:0d:a3:26:1b:4b:27:b0:2f: e6:6d:e7:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUY0OTExMC8GA1UEBRMoNzE3MTk4Q0QxQTQ2NzlBRDlENDUyRUUxREIwMkQwMDEy QTQzNzRFQzAeFw0yNTA3MjMwNzQyNTVaFw0yNTA3MzAwNzQyNTVaMBgxFjAUBgNV BAMTDTY4ODA5MjdmLWViOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+4DmJ/Ef7YmLUpWTSqeJN+vfywT7SNPyKBMs+uK7Iud9LoyjuNBhoaR+DnNuG uk9AM/D9pMkPG/RQZrLcIKR5H9msPRO+d+8z1Skb5NWwiZC5dN8xXyn6CVkNR3xI 4r3XBlTAO/C1xMVXS5J781w35FEVfCYSn6uTGRnDTvCbpjD6pJIzSr7rW0PIBebg QwYuxKepo2yr3BKmjszYECEawOewHeqhVtogjxXlAGQidVAHQ0k3CV1iGlUEUkah LLqQwhcbzCFrYRnPQ1P6CrkDexnedL0/Eps7cxAE6vfmx5ts/VvphJjZcjxw6g+d Q3IJgiZhnFEcu5Gz0/Q433hHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOs0V2fPD 5wxY7GVIpc5NkpYNIzIwHwYDVR0jBBgwFoAUcXGYzRpGea2dRS7h2wLQASpDdOww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RjQ5L0IyQzVGQjlBRjlC NTExRUZBNUQ3M0M0N0M0RjlBRTAyL2NYR1l6UnBHZWEyZFJTN2gyd0xRQVNwRGRP dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1hHWXpScEdlYTJkUlM3aDJ3TFFBU3BEZE93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RjQ5L0IyQzVGQjlBRjlCNTExRUZBNUQ3M0M0N0M0RjlBRTAyL2NYR1l6UnBHZWEy ZFJTN2gyd0xRQVNwRGRPdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGuWYIDbEVzWY7oi0wSqKZ9olYcidV8smpyLax2XCr1Kexr+qa2tdXg2 dg0h29nIB81/nDR+Xpu9ARto+aJsQr2/0v8//5rWygTmYrTeEdfDS1X00j63D+wb 3/1+z4dOZhv4cl63bTF9FO/s9N5lyTw+VP4cp+UYEooZsk2QtteMUNr/3NzB5ZmF btg+t0h6mKpYL5kzft0FJHUcJ3qebzctEvBuuDGgMdLu91gV7khmC3Tj3ppoQ9+f CQvdy/Lm07Jck6KvvgglM63pZm12/JR4VznPy22OjOYX+G6j8OTRHEOYbLW0ODsg tIB/krzKoZVrZXwNoyYbSyewL+Zt51s= -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:42 2025 by rpki-client