$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: 7d06eqbtiZd6XjLNDXBBdF3upBiN0hZmmwyPmd4hgOQ= Subject key identifier: B8:B4:BF:A0:54:B4:D2:6F:0A:AF:5B:80:F2:20:3B:95:1A:10:9E:39 Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: B0 Signing time: Sat 19 Jul 2025 06:13:37 +0000 Manifest this update: Sat 19 Jul 2025 06:13:37 +0000 Manifest next update: Sat 26 Jul 2025 06:13:37 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: grSFj9JZPGDnY9r8f65ERv+nNTVlH81o60V0VyvNox0=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Jul 19 06:13:37 2025 GMT Not After : Jul 26 06:13:37 2025 GMT Subject: CN=687b3791-7fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:dd:a8:f2:b2:8b:6e:c9:60:a3:66:3b:71: 5e:44:2d:42:24:c6:37:9b:d5:aa:10:e1:59:62:0a: 6b:ca:b4:39:f1:02:1e:44:d1:48:4e:c3:cb:a4:34: 22:b9:07:e6:d7:5e:bf:7d:7b:9f:8f:61:45:45:6d: cb:77:e4:8c:44:a5:72:1e:80:dd:10:2b:af:68:ef: 76:c7:4a:16:f3:55:66:1a:39:64:29:c9:4f:3b:3c: b1:cf:45:a4:78:c3:b3:7a:e0:ab:85:53:d9:6d:8f: 54:bb:fc:92:98:08:bb:df:b3:95:75:8f:fc:8b:6e: ed:99:2e:04:c6:29:8f:01:9b:3d:85:5a:cb:e7:8e: b6:e3:a2:12:fd:3a:ac:48:2d:ff:c2:78:ad:18:06: 9f:9f:63:19:10:e7:e1:0b:b5:67:b4:f4:a9:38:5c: 0e:b0:3b:f9:45:12:b0:6d:73:d9:a3:6e:0c:9f:98: 12:16:16:74:96:8c:fc:2f:e6:d9:1f:dd:42:8a:62: 73:51:e5:05:38:f4:c3:b8:44:7f:f8:83:4a:3a:24: 87:cd:0b:aa:6b:e2:b8:30:ef:35:fc:b9:7f:34:dc: b7:37:9e:80:72:7d:eb:fb:53:16:a1:57:47:cf:45: 95:bd:25:8b:9f:f9:7c:21:24:19:85:b0:d1:23:e6: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B4:BF:A0:54:B4:D2:6F:0A:AF:5B:80:F2:20:3B:95:1A:10:9E:39 X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5a:c0:cc:39:06:24:ae:5c:61:9b:ae:1b:bd:12:12:17:3d: 61:ff:6a:2f:b7:fa:61:cf:5a:9a:1b:85:5c:ca:8d:ab:91:a4: d7:5a:66:04:b0:69:ff:76:4f:d6:17:fb:80:94:b0:97:a9:e2: c1:38:db:88:f2:09:e4:6a:f5:44:74:b0:c1:86:7b:d3:ca:a3: fa:da:4b:59:a4:b1:8d:89:e8:ba:3d:53:6a:61:3d:74:0e:0a: c2:5a:bf:bd:2f:ca:6d:96:da:34:0f:50:b7:fe:82:a9:a3:1d: c6:96:76:ff:d4:fe:2b:60:78:2a:11:81:f6:32:d8:b2:be:ad: b5:c6:37:34:f1:bb:61:ad:f1:85:d4:c6:8d:ad:15:25:88:fc: 87:cf:56:14:13:14:18:cf:30:c3:ae:bd:cc:99:fa:d3:a3:d3: a2:60:cc:73:d7:7d:e2:9d:6b:fe:b3:c5:29:0e:06:14:4d:dc: da:51:e6:fc:c8:f3:78:f5:07:92:6f:ea:9f:7a:75:c1:bd:ae: b2:f9:9c:78:9c:20:28:81:e2:d2:73:4c:2c:7b:09:f9:7c:cc: 8e:ba:8c:94:a4:fb:eb:c9:cd:14:9f:10:9a:45:08:79:b5:cd: d4:03:87:c1:8d:24:21:88:08:93:92:dd:21:84:30:10:14:d4: 7e:9f:17:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUwNzE5MDYxMzM3WhcNMjUwNzI2MDYxMzM3WjAYMRYwFAYD VQQDEw02ODdiMzc5MS03ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQ3dqPKyi27JYKNmO3FeRC1CJMY3m9WqEOFZYgpryrQ58QIeRNFITsPLpDQi uQfm116/fXufj2FFRW3Ld+SMRKVyHoDdECuvaO92x0oW81VmGjlkKclPOzyxz0Wk eMOzeuCrhVPZbY9Uu/ySmAi737OVdY/8i27tmS4EximPAZs9hVrL546246IS/Tqs SC3/wnitGAafn2MZEOfhC7VntPSpOFwOsDv5RRKwbXPZo24Mn5gSFhZ0loz8L+bZ H91CimJzUeUFOPTDuER/+INKOiSHzQuqa+K4MO81/Ll/NNy3N56Acn3r+1MWoVdH z0WVvSWLn/l8ISQZhbDRI+YTaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi0v6BU tNJvCq9bgPIgO5UaEJ45MB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcWsDMOQYkrlxhm64bvRISFz1h/2ovt/phz1qaG4Vcyo2rkaTXWmYE sGn/dk/WF/uAlLCXqeLBONuI8gnkavVEdLDBhnvTyqP62ktZpLGNiei6PVNqYT10 DgrCWr+9L8ptlto0D1C3/oKpox3Glnb/1P4rYHgqEYH2Mtiyvq21xjc08bthrfGF 1MaNrRUliPyHz1YUExQYzzDDrr3MmfrTo9OiYMxz133inWv+s8UpDgYUTdzaUeb8 yPN49QeSb+qfenXBva6y+Zx4nCAogeLSc0wsewn5fMyOuoyUpPvryc0UnxCaRQh5 tc3UA4fBjSQhiAiTkt0hhDAQFNR+nxdb -----END CERTIFICATE-----Generated at Sun Jul 20 15:15:49 2025 by rpki-client