$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json) Hash identifier: Hd5TGMBCke3ZPE0wMmn3hMopglsy1IjEmcN99jVnFNs= Subject key identifier: 19:43:0E:84:AB:C6:37:C4:3D:5F:81:FB:65:2F:4E:99:70:02:1A:41 Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft Manifest number: 0373 Signing time: Mon 21 Jul 2025 01:15:15 +0000 Manifest this update: Mon 21 Jul 2025 01:15:14 +0000 Manifest next update: Mon 28 Jul 2025 01:15:14 +0000 Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: GWIzbSODP8WaRm7jNzWbNrHPW8Eb9795mnc4z1+Ub0k=) 2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=) 3: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=) 4: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=) 5: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=) 6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=) 7: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5 Validity Not Before: Jul 21 01:15:14 2025 GMT Not After : Jul 28 01:15:14 2025 GMT Subject: CN=687d94a2-37ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:e6:ec:8c:1f:50:f6:35:27:90:74:b6:78: 00:1a:d8:de:55:00:3d:7a:52:97:e8:ed:58:4f:f4: 52:9c:b4:ea:67:a2:2e:95:8f:df:7f:7c:19:bc:3c: 48:77:d9:2a:d0:fc:df:47:73:b5:97:ec:02:5d:d6: df:81:0a:fd:ba:8f:80:a7:57:84:fb:80:98:46:f9: c3:aa:1d:c3:8e:41:5b:7a:fb:c4:e3:d2:1d:84:d9: ac:b4:a8:43:47:e3:3b:86:2f:50:3a:aa:c5:2f:cc: 63:80:1c:c3:d1:04:4d:02:65:09:cf:a7:e4:ed:c2: f3:d3:f9:89:51:4b:0a:07:cd:ff:7c:f5:6a:a7:84: ea:4d:98:dc:72:ac:0b:ea:0d:ff:de:a5:f6:3d:ef: 52:3c:43:73:b0:a7:e4:4b:67:62:66:39:e4:35:03: 82:3b:b9:8a:25:1d:df:70:a2:cb:c9:9e:dc:86:18: 23:fc:7b:91:a2:c4:71:c8:58:8c:24:20:4e:4b:fc: 1f:70:f8:cb:a7:d1:2c:4e:1e:b3:98:2b:dd:fd:65: 6b:6a:64:19:4e:82:b7:c0:ca:b9:ce:ce:8c:06:13: 37:9e:f5:7c:23:b2:1a:4b:08:50:30:0a:3d:c4:74: 91:9b:5c:cb:68:a7:95:15:89:16:28:73:69:c4:30: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:0E:84:AB:C6:37:C4:3D:5F:81:FB:65:2F:4E:99:70:02:1A:41 X509v3 Authority Key Identifier: keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2c:a2:b0:c7:6d:47:41:c0:b6:c5:db:76:c0:8e:67:c5:b3: 74:67:bc:6f:58:f5:2d:7b:a9:3f:8f:44:55:4c:b0:27:3c:5d: 06:9c:7c:93:1c:9c:17:6f:ec:90:35:61:69:0c:8b:7c:e1:55: ba:64:8e:2e:d7:0f:b2:50:d8:cd:95:86:ee:32:7c:f9:83:d6: 0b:66:f7:ff:9a:38:e1:d9:9d:33:30:6e:d3:94:1e:d9:6e:38: 1f:72:b3:21:cc:6f:a8:ed:a9:f8:e4:99:d0:ea:bc:2d:ec:3a: e7:04:f0:33:78:8d:93:f4:de:a6:ed:d2:06:a5:19:1c:8b:76: 05:b1:be:ed:81:93:05:76:46:43:0e:7a:c1:04:a2:13:e8:fb: 80:66:04:29:2c:30:42:d6:1e:a5:f9:c9:f2:b9:96:eb:f7:17: fd:b1:44:9c:4e:55:42:59:21:ab:de:2d:3c:0f:0f:2a:2c:c3: 20:b5:34:a8:cb:74:69:40:5f:f9:b0:4a:71:93:5e:2b:01:c8: a1:f8:09:89:de:cc:d7:31:c3:ee:82:4e:58:df:44:d6:7d:c6: 56:84:c2:0e:4d:25:63:dc:4c:b4:95:79:2d:a5:69:b0:3c:26: ef:6b:8b:66:03:2f:1e:ef:04:d0:c6:13:5a:06:04:dc:44:84: bf:ba:e6:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI4MzcxMTAvBgNVBAUTKEY1NTIyREUzMTM4NDRFOTZFM0VCRjM4MDM0RUNBMDlC RTJBQTBBRDUwHhcNMjUwNzIxMDExNTE0WhcNMjUwNzI4MDExNTE0WjAYMRYwFAYD VQQDEw02ODdkOTRhMi0zN2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zzm7IwfUPY1J5B0tngAGtjeVQA9elKX6O1YT/RSnLTqZ6IulY/ff3wZvDxI d9kq0PzfR3O1l+wCXdbfgQr9uo+Ap1eE+4CYRvnDqh3DjkFbevvE49IdhNmstKhD R+M7hi9QOqrFL8xjgBzD0QRNAmUJz6fk7cLz0/mJUUsKB83/fPVqp4TqTZjccqwL 6g3/3qX2Pe9SPENzsKfkS2diZjnkNQOCO7mKJR3fcKLLyZ7chhgj/HuRosRxyFiM JCBOS/wfcPjLp9EsTh6zmCvd/WVramQZToK3wMq5zs6MBhM3nvV8I7IaSwhQMAo9 xHSRm1zLaKeVFYkWKHNpxDDjPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlDDoSr xjfEPV+B+2UvTplwAhpBMB8GA1UdIwQYMBaAFPVSLeMThE6W4+vzgDTsoJviqgrV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjgzNy85RDkwQUI2MkMx NUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRwYmo2X09BTk95Z20tS3FD dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWSXQ0eE9FVHBiajZfT0FOT3lnbS1LcUN0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjgzNy85RDkwQUI2MkMxNUExMUVDQTQ0RjUzNjBDNEY5QUUwMi85Vkl0NHhPRVRw Ymo2X09BTk95Z20tS3FDdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwLKKwx21HQcC2xdt2wI5nxbN0Z7xvWPUte6k/j0RVTLAnPF0GnHyT HJwXb+yQNWFpDIt84VW6ZI4u1w+yUNjNlYbuMnz5g9YLZvf/mjjh2Z0zMG7TlB7Z bjgfcrMhzG+o7an45JnQ6rwt7DrnBPAzeI2T9N6m7dIGpRkci3YFsb7tgZMFdkZD DnrBBKIT6PuAZgQpLDBC1h6l+cnyuZbr9xf9sUScTlVCWSGr3i08Dw8qLMMgtTSo y3RpQF/5sEpxk14rAcih+AmJ3szXMcPugk5Y30TWfcZWhMIOTSVj3Ey0lXktpWmw PCbva4tmAy8e7wTQxhNaBgTcRIS/uubb -----END CERTIFICATE-----Generated at Mon Jul 21 08:10:21 2025 by rpki-client