$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft File: -r3gfSxVjb3PPDIAdre1X9-gR0A.mft (raw, json) Hash identifier: m/lnOm9gPt2fPFs6gIPWFBrus+4ZU+8gj9M8gKezNpc= Subject key identifier: B4:3C:7A:54:1D:B4:6C:DD:20:CB:70:9B:C6:40:3F:B2:A2:BF:12:82 Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 Certificate issuer: /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft Manifest number: 0A09 Signing time: Sun 20 Jul 2025 19:56:33 +0000 Manifest this update: Sun 20 Jul 2025 19:56:33 +0000 Manifest next update: Sun 27 Jul 2025 19:56:33 +0000 Files and hashes: 1: -r3gfSxVjb3PPDIAdre1X9-gR0A.crl (hash: YrJpkHQJJW/ve45NwdloTKeH0PAM5kCRUeWnjoCrwvQ=) 2: 7E4ED0E4798B11EA90252969C4F9AE02.roa (hash: zi/2a7j2lYedIWZB1ZQVEfFe/URKlsQ3C6l5x+UUMmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918143E, serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740 Validity Not Before: Jul 20 19:56:33 2025 GMT Not After : Jul 27 19:56:33 2025 GMT Subject: CN=687d49f1-a8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:70:f1:f6:70:6d:89:91:9e:4d:06:2a:fd: f4:b7:df:24:3c:8f:f3:85:51:92:51:6b:dd:54:7c: d1:25:b6:aa:df:19:19:a4:ea:33:21:8e:3d:7c:dc: c1:12:7d:80:d4:3d:72:27:a3:da:37:9f:33:4c:96: 52:9b:6c:1d:2a:5c:94:2f:71:28:fe:1a:06:c4:91: 7c:b8:83:d4:a7:18:ac:49:35:ed:e9:be:48:23:66: dc:9a:f7:35:3c:80:05:ac:75:ff:5f:15:81:59:80: 2b:a8:12:03:dc:f6:fb:ab:1f:62:84:26:b2:8b:5f: d5:a6:a2:e8:fd:4b:d9:58:b7:c6:f3:67:49:14:b7: 28:09:b8:cc:ae:7b:34:9c:7f:a5:fd:ae:43:1b:81: c8:8a:42:2d:fc:87:11:b6:5f:a3:c5:d9:0d:1b:6d: 4d:70:64:81:95:b7:5e:0e:ac:3a:99:d4:b9:76:7a: 62:2d:0d:d0:74:74:a0:2f:00:c7:a2:7f:3c:94:8b: b2:bc:b2:38:be:f2:94:45:9e:03:62:f8:b3:3c:60: aa:6f:42:ea:e7:85:b0:c4:57:9c:98:f4:d4:d6:e8: 84:b1:0f:a0:76:2c:a9:fd:3c:20:27:89:a6:6f:59: 07:5f:bc:3b:67:49:d9:4c:d9:dc:b1:e6:9e:0f:e6: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:7A:54:1D:B4:6C:DD:20:CB:70:9B:C6:40:3F:B2:A2:BF:12:82 X509v3 Authority Key Identifier: keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0d:e3:4a:d6:d0:ad:79:c5:d2:9f:eb:4c:cb:c1:70:95:1e: 30:81:d2:52:7f:b3:0e:6c:85:66:90:ad:cc:17:10:51:6e:78: 42:cc:08:02:ab:cb:b3:49:ab:ee:d6:f5:47:87:ba:df:65:74: 77:53:42:5d:cd:5e:be:dd:61:8e:c7:af:5f:1c:13:c9:7a:b5: 7a:be:04:08:64:18:41:8a:0b:af:18:d4:5a:e0:bd:f7:89:76: 44:95:2b:d3:8a:fd:1b:80:6f:e5:41:34:e6:e9:7c:b8:54:9f: d8:b2:4d:11:ab:6a:11:9d:2a:ad:2c:17:5f:a2:7f:c4:f5:0b: 31:b8:cf:96:91:ff:38:8d:de:f6:a0:9d:a2:50:bf:ac:e5:62: 13:e5:af:b4:dc:61:db:c4:3d:1d:c6:12:7f:f6:f0:8b:4d:cb: 04:24:28:36:3f:fc:87:0b:e9:cc:4f:e3:1f:2e:55:6f:a9:80: 0e:a8:13:28:f4:e4:0e:cb:d9:9d:86:33:75:b0:c0:d6:5a:09: 9f:64:7c:d9:9b:7f:3a:83:ab:09:eb:25:b3:12:74:d1:22:a1: e1:04:b6:53:2a:f1:41:09:07:67:a8:55:cc:f7:2a:e4:9b:5d: cc:f8:63:69:a2:b1:c4:83:1b:f5:49:fd:d6:d4:ee:13:3a:6e: db:16:1c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0M0UxMTAvBgNVBAUTKEZBQkRFMDdEMkM1NThEQkRDRjNDMzIwMDc2QjdCNTVG REZBMDQ3NDAwHhcNMjUwNzIwMTk1NjMzWhcNMjUwNzI3MTk1NjMzWjAYMRYwFAYD VQQDEw02ODdkNDlmMS1hOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArW9w8fZwbYmRnk0GKv30t98kPI/zhVGSUWvdVHzRJbaq3xkZpOozIY49fNzB En2A1D1yJ6PaN58zTJZSm2wdKlyUL3Eo/hoGxJF8uIPUpxisSTXt6b5II2bcmvc1 PIAFrHX/XxWBWYArqBID3Pb7qx9ihCayi1/VpqLo/UvZWLfG82dJFLcoCbjMrns0 nH+l/a5DG4HIikIt/IcRtl+jxdkNG21NcGSBlbdeDqw6mdS5dnpiLQ3QdHSgLwDH on88lIuyvLI4vvKURZ4DYvizPGCqb0Lq54WwxFecmPTU1uiEsQ+gdiyp/TwgJ4mm b1kHX7w7Z0nZTNncseaeD+bH5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQ8elQd tGzdIMtwm8ZAP7KivxKCMB8GA1UdIwQYMBaAFPq94H0sVY29zzwyAHa3tV/foEdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzRS9BM0MwN0I4Njc5 ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4VmpiM1BQRElBZHJlMVg5LWdS MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yM2dmU3hWamIzUFBESUFkcmUxWDktZ1IwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTQzRS9BM0MwN0I4Njc5ODkxMUVBQkNCQTIxNjZDNEY5QUUwMi8tcjNnZlN4Vmpi M1BQRElBZHJlMVg5LWdSMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDeNK1tCtecXSn+tMy8FwlR4wgdJSf7MObIVmkK3MFxBRbnhCzAgC q8uzSavu1vVHh7rfZXR3U0JdzV6+3WGOx69fHBPJerV6vgQIZBhBiguvGNRa4L33 iXZElSvTiv0bgG/lQTTm6Xy4VJ/Ysk0Rq2oRnSqtLBdfon/E9QsxuM+Wkf84jd72 oJ2iUL+s5WIT5a+03GHbxD0dxhJ/9vCLTcsEJCg2P/yHC+nMT+MfLlVvqYAOqBMo 9OQOy9mdhjN1sMDWWgmfZHzZm386g6sJ6yWzEnTRIqHhBLZTKvFBCQdnqFXM9yrk m13M+GNporHEgxv1Sf3W1O4TOm7bFhzN -----END CERTIFICATE-----Generated at Mon Jul 21 07:15:00 2025 by rpki-client