$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json) Hash identifier: lYUXF+YGUd2nqznOFql51sioDTA3DMi7kjT31/ThFCo= Subject key identifier: BA:A0:1F:AB:8E:51:BA:EE:4B:98:18:0A:52:7B:EB:CC:B1:A7:63:E1 Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Certificate serial: 0C72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft Manifest number: 0C5C Signing time: Fri 18 Jul 2025 18:39:57 +0000 Manifest this update: Fri 18 Jul 2025 18:39:56 +0000 Manifest next update: Fri 25 Jul 2025 18:39:56 +0000 Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: ohOBtKfzMSwmLOdq9XxHPrcoNowmVXEqUSsD5O4hIOY=) 2: 9591475A4F6011EFAF26AF63C4F9AE02.roa (hash: d4nANGkii06xzWV6dpPGz0VvWqxPgVRXdrnJY6WmtmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Validity Not Before: Jul 18 18:39:56 2025 GMT Not After : Jul 25 18:39:56 2025 GMT Subject: CN=687a94fc-0cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:8f:6a:69:f5:ee:7a:58:93:9b:c8:00:59: 2f:68:89:b3:55:1d:14:67:95:cd:eb:53:91:97:0d: 46:d9:67:d6:54:1c:2a:42:be:30:20:b0:57:e9:e1: 2c:27:cb:25:9a:0b:89:1c:12:6b:86:b0:78:1d:85: 1e:47:e5:29:ce:83:1a:d5:cc:d5:e1:ae:a4:e3:a0: 65:e7:8f:23:d4:2f:88:a2:f8:6d:3c:8b:43:a5:91: fb:8c:b6:e6:e6:1a:4f:c7:8d:97:6f:ac:19:28:a6: 85:6e:b1:47:86:3b:6b:df:45:c1:ef:9d:b6:43:9a: b3:f7:be:cb:bf:a7:7e:61:1f:81:a6:c9:4f:a8:97: 27:db:b2:5c:f0:47:9d:b0:86:f4:31:3d:68:3f:2a: ab:45:7c:69:5c:af:31:cb:2a:79:71:6d:17:67:34: cf:ae:e3:fe:6b:66:a5:c4:a6:3f:27:2c:db:b4:11: 05:03:17:56:12:93:d0:0b:ca:70:30:b5:10:dd:90: 98:01:36:90:55:4c:b9:22:66:a0:c7:25:f9:06:d5: 25:d1:f6:2f:39:e2:32:e0:0e:02:13:00:78:9f:4b: 34:08:bf:eb:01:d5:ae:fb:7c:0b:5f:d7:ef:f5:7e: a5:9d:55:26:cf:f7:7b:a4:65:71:f5:a4:9b:ea:44: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:1F:AB:8E:51:BA:EE:4B:98:18:0A:52:7B:EB:CC:B1:A7:63:E1 X509v3 Authority Key Identifier: keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7d:f7:00:75:ce:95:08:40:db:e7:b7:26:61:fc:ec:10:6c: f6:5c:3f:44:4b:8a:57:ed:97:df:cd:b4:29:b0:e3:f3:cb:17: 8a:02:19:77:a2:7c:d1:de:fa:e2:7c:26:51:ca:fe:e1:f4:42: b1:46:9a:2c:82:62:8e:fa:3c:b8:ec:2f:a7:0c:b0:10:ad:79: 6c:32:72:ab:89:09:42:38:1e:21:a7:0f:67:3a:15:e3:da:e3: 06:2e:9b:7e:47:c0:e9:a4:99:72:8e:8b:c9:1b:b8:d4:17:0f: 10:5d:7a:03:7f:17:65:fd:96:58:40:b2:db:23:e7:f0:17:00: 48:5f:fc:c2:22:41:84:3f:53:6a:d8:a3:cb:43:67:55:cb:f7: f4:f7:c5:0a:d8:96:28:c2:bf:dc:1d:0d:1f:a9:fb:05:5b:5c: cf:83:73:7e:e3:5c:bd:76:22:3d:cb:4d:2a:5d:9e:a4:c2:84: 0a:fb:80:f5:e7:67:62:cf:3a:00:cc:b2:d0:fd:95:fa:82:66: af:b5:2e:66:3d:05:f3:25:c2:2c:88:82:dd:a2:ac:d5:81:1d: 2b:34:c9:32:95:90:41:3c:75:06:a6:6f:8c:1f:21:35:77:fc: ab:6c:2c:00:f7:31:fb:30:7c:65:f3:dd:a6:15:66:d4:22:37: 0c:b9:af:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF MUZEQjg2RTYwHhcNMjUwNzE4MTgzOTU2WhcNMjUwNzI1MTgzOTU2WjAYMRYwFAYD VQQDEw02ODdhOTRmYy0wY2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2mPamn17npYk5vIAFkvaImzVR0UZ5XN61ORlw1G2WfWVBwqQr4wILBX6eEs J8slmguJHBJrhrB4HYUeR+UpzoMa1czV4a6k46Bl548j1C+IovhtPItDpZH7jLbm 5hpPx42Xb6wZKKaFbrFHhjtr30XB7522Q5qz977Lv6d+YR+BpslPqJcn27Jc8Eed sIb0MT1oPyqrRXxpXK8xyyp5cW0XZzTPruP+a2alxKY/JyzbtBEFAxdWEpPQC8pw MLUQ3ZCYATaQVUy5ImagxyX5BtUl0fYvOeIy4A4CEwB4n0s0CL/rAdWu+3wLX9fv 9X6lnVUmz/d7pGVx9aSb6kRhkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqgH6uO UbruS5gYClJ768yxp2PhMB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4 NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU2OS9GRTg5OUQ1RTA4NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnpp ajNzdm1aTkM5UnpoX2JodVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApffcAdc6VCEDb57cmYfzsEGz2XD9ES4pX7ZffzbQpsOPzyxeKAhl3 onzR3vrifCZRyv7h9EKxRposgmKO+jy47C+nDLAQrXlsMnKriQlCOB4hpw9nOhXj 2uMGLpt+R8DppJlyjovJG7jUFw8QXXoDfxdl/ZZYQLLbI+fwFwBIX/zCIkGEP1Nq 2KPLQ2dVy/f098UK2JYowr/cHQ0fqfsFW1zPg3N+41y9diI9y00qXZ6kwoQK+4D1 52dizzoAzLLQ/ZX6gmavtS5mPQXzJcIsiILdoqzVgR0rNMkylZBBPHUGpm+MHyE1 d/yrbCwA9zH7MHxl892mFWbUIjcMua8Q -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:07 2025 by rpki-client