$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: 1JKVDbCHlpFyd+jMf9BmJ9ryiOlG2Rb4xdTKXgkZ5RI= Subject key identifier: BC:6E:07:73:CE:82:09:BD:E9:CF:1A:79:95:AA:DB:D8:FC:C0:88:BC Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 0301 Signing time: Sat 19 Jul 2025 01:46:59 +0000 Manifest this update: Sat 19 Jul 2025 01:46:58 +0000 Manifest next update: Sat 26 Jul 2025 01:46:58 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: mXde9rZZCg6LK3sQZ/Pkv9ltYvvwAqYjZJzoJ0XhFCE=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Jul 19 01:46:58 2025 GMT Not After : Jul 26 01:46:58 2025 GMT Subject: CN=687af912-ea82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3e:d1:8f:ec:13:57:88:02:f7:20:37:d5:f2: 78:04:42:74:12:4b:1b:66:0e:63:ee:b7:02:b9:db: d6:2f:f2:26:31:14:23:40:9b:ff:e7:66:12:7d:86: 62:69:e9:8a:42:50:b2:15:f4:55:93:e1:49:28:98: f2:b5:cd:28:75:f9:02:62:b3:16:07:2a:89:39:7f: 8f:85:55:66:c4:62:23:52:1d:3d:e3:4b:42:96:b1: 9a:42:55:12:29:22:23:b1:32:55:85:ce:45:29:e6: cf:41:18:31:e3:eb:fd:48:bc:2d:10:bd:6b:2e:eb: 3a:57:ff:80:12:74:e9:fa:d6:22:72:dc:bd:c6:3d: 94:0b:11:01:38:7c:72:27:4c:5d:1d:09:70:9a:c2: 5d:b2:0c:ca:15:e8:78:dd:2e:c6:47:65:f5:a4:fb: 6f:ea:ea:db:e3:d5:a1:4b:34:70:3d:cd:24:65:f5: 52:1c:f9:da:da:b5:c7:2b:e7:26:61:d0:96:f8:96: 54:88:4f:cf:f8:6a:fe:0c:43:27:dd:d7:1b:5d:14: c0:79:f3:41:24:2b:f5:43:01:3f:b9:2f:aa:1c:eb: 5d:c7:15:af:eb:94:05:52:6c:01:12:04:24:7e:30: b1:25:8f:87:90:10:1c:2f:b6:d6:05:1f:81:71:89: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:07:73:CE:82:09:BD:E9:CF:1A:79:95:AA:DB:D8:FC:C0:88:BC X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:82:21:37:d2:12:0b:79:1f:ad:18:87:e4:4d:07:85:6f: 24:53:82:54:c5:5c:71:31:19:42:d4:9d:56:5e:5c:f4:d1:e3: 15:4a:23:99:91:60:66:28:de:1a:a2:97:b0:81:c8:80:ea:ee: d2:c5:a2:4f:31:69:03:a2:e7:57:81:24:9f:70:eb:6d:a8:8e: 2b:f4:fb:bb:1e:5e:8a:b5:99:45:8b:c2:7a:0b:66:16:12:e1: 69:79:4e:51:7c:ab:98:9a:bd:61:08:7a:8e:83:bc:04:0f:8b: 2c:39:11:b2:ba:2a:36:00:ea:5c:1c:21:15:8b:b8:db:27:38: be:41:62:be:80:4e:a9:f4:db:ce:9d:a9:ab:b8:a6:e6:93:ba: 8e:af:37:14:0a:a5:79:26:3d:b6:93:05:2d:60:7d:15:25:80: e5:29:39:eb:36:21:5b:7d:d7:00:4b:e6:5b:5a:a9:3f:67:e2: b6:8f:1d:18:de:d5:c1:37:bc:f0:6c:ea:12:08:82:69:48:a5: 2f:cd:87:ad:50:9e:53:1f:c5:85:fc:3d:ac:c5:a1:ee:c7:15: 29:2e:4c:ad:ff:5b:92:14:c6:1d:f2:03:89:29:9d:4b:5c:ad: ec:1c:ce:2f:92:2e:4e:a2:f0:ab:fb:dc:04:82:0c:29:38:47: 95:ba:2f:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjUwNzE5MDE0NjU4WhcNMjUwNzI2MDE0NjU4WjAYMRYwFAYD VQQDEw02ODdhZjkxMi1lYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0T7Rj+wTV4gC9yA31fJ4BEJ0EksbZg5j7rcCudvWL/ImMRQjQJv/52YSfYZi aemKQlCyFfRVk+FJKJjytc0odfkCYrMWByqJOX+PhVVmxGIjUh0940tClrGaQlUS KSIjsTJVhc5FKebPQRgx4+v9SLwtEL1rLus6V/+AEnTp+tYicty9xj2UCxEBOHxy J0xdHQlwmsJdsgzKFeh43S7GR2X1pPtv6urb49WhSzRwPc0kZfVSHPna2rXHK+cm YdCW+JZUiE/P+Gr+DEMn3dcbXRTAefNBJCv1QwE/uS+qHOtdxxWv65QFUmwBEgQk fjCxJY+HkBAcL7bWBR+BcYkunQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxuB3PO ggm96c8aeZWq29j8wIi8MB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBr4IhN9ISC3kfrRiH5E0HhW8kU4JUxVxxMRlC1J1WXlz00eMVSiOZ kWBmKN4aopewgciA6u7SxaJPMWkDoudXgSSfcOttqI4r9Pu7Hl6KtZlFi8J6C2YW EuFpeU5RfKuYmr1hCHqOg7wED4ssORGyuio2AOpcHCEVi7jbJzi+QWK+gE6p9NvO namruKbmk7qOrzcUCqV5Jj22kwUtYH0VJYDlKTnrNiFbfdcAS+ZbWqk/Z+K2jx0Y 3tXBN7zwbOoSCIJpSKUvzYetUJ5TH8WF/D2sxaHuxxUpLkyt/1uSFMYd8gOJKZ1L XK3sHM4vki5OovCr+9wEggwpOEeVui9K -----END CERTIFICATE-----Generated at Sun Jul 20 07:59:16 2025 by rpki-client