$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft File: lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json) Hash identifier: 5HRD7QGnQd6RVIv5boH18tEztIaZVzWu3xKaAl1Vq+A= Subject key identifier: 17:1C:59:63:59:0F:4A:EF:D2:02:FF:C5:9D:63:3F:71:80:28:B9:70 Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft Manifest number: 0594 Signing time: Fri 18 Jul 2025 23:35:41 +0000 Manifest this update: Fri 18 Jul 2025 23:35:40 +0000 Manifest next update: Fri 25 Jul 2025 23:35:40 +0000 Files and hashes: 1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: 3Y7DU3rQBxM/6kuvAxrcPWKVCr6A+LDlzGhLTbEZxO0=) 2: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: nZqxDtZBd3TKtOg41uHIOH+ht6vmrzVcqsB/4sKS7Lw=) 3: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: Ad+xO92l20yDnJAF1r+RTCORzADKmBcytCe/7+C9evg=) 4: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: Qq7xLdmh4FD2aD1wbY5We4EWUzMXM2X7Q61tiyGnpuI=) 5: 368F5308A27311EFA8731822C4F9AE02.roa (hash: nF3bhaPZagyNLULkvS1a5+uROKF0zNPyL/4XlBSqH9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Validity Not Before: Jul 18 23:35:40 2025 GMT Not After : Jul 25 23:35:40 2025 GMT Subject: CN=687ada4c-5396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:e6:9f:c9:39:e1:ce:ac:07:2e:de:82:28: 8d:52:d2:fa:ff:b2:c0:53:fa:c7:59:43:ae:a3:e0: ad:45:12:b8:d3:f6:bb:b5:52:2d:74:e6:51:2b:b7: 6d:7a:ca:58:a7:94:8b:6d:d8:07:81:e2:1b:c5:a3: 26:0f:78:0a:8a:95:1e:8e:45:f1:4b:d3:4e:97:e9: 9a:df:11:5c:24:d4:6b:b7:f4:db:02:44:5c:f8:ae: ed:8c:f9:fa:cc:05:1d:25:f3:64:66:31:77:e5:5c: 90:fe:f8:7b:c5:fe:c6:9e:58:81:04:7e:2e:d4:f1: f0:5d:9f:a7:ed:74:8b:3f:aa:38:b9:6d:a5:05:46: 47:33:83:ea:d5:3c:b6:16:7c:75:44:cd:b0:06:21: c8:08:13:76:0f:c7:0f:43:d1:cb:79:71:1c:1e:af: 04:05:61:e6:32:34:ee:42:8c:f5:7d:4e:42:d8:87: c6:6f:2b:5d:fb:0c:c7:fb:b8:95:ca:0a:82:8f:36: 5e:78:e7:d9:30:b3:78:f6:68:ca:34:ec:a8:36:02: c2:b7:10:de:74:11:ff:8b:0f:a2:5d:3a:ee:51:66: 4a:f5:db:5d:ff:8a:b2:e9:70:8c:bf:3a:53:60:2e: 12:d1:e9:71:d2:df:b5:56:3b:54:1f:fe:e6:bc:ed: aa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1C:59:63:59:0F:4A:EF:D2:02:FF:C5:9D:63:3F:71:80:28:B9:70 X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:27:8a:bc:a7:a8:f3:54:b6:2a:a9:51:66:21:ea:33:2d:45: 04:5b:99:08:ef:36:2c:65:60:f8:9e:1b:b9:0f:7f:2a:f6:c3: f2:c1:82:95:2d:9e:77:36:cc:84:a2:cb:d0:50:12:86:0e:ca: b9:e6:6d:4c:68:7b:5a:53:60:4e:57:b6:be:15:5b:87:0b:7b: c6:a6:4d:3e:de:f1:a0:22:16:be:c2:44:7d:b2:70:28:80:bc: 4c:08:30:83:b1:a0:e4:6c:10:86:cd:b1:39:5b:1f:b6:b3:52: b7:cb:5d:56:ad:f6:da:d6:e4:9a:69:9d:1e:74:6e:3c:4b:6d: f2:a8:b2:f0:49:46:23:0f:41:bb:7f:bf:27:09:48:e9:cd:15: e5:bb:d4:6a:42:f0:19:ec:35:06:e1:c9:a1:25:5b:bb:73:bf: a2:f0:49:67:d3:95:50:2b:58:39:de:1c:a5:b2:38:6c:a9:fb: 07:a3:79:c7:11:0d:bd:65:45:ea:8a:a1:19:72:dd:e3:27:e6: 1f:2b:5d:59:c1:e5:25:1e:64:84:84:ca:4e:d9:ff:f2:98:65: 76:11:92:f5:fb:11:d9:cb:e9:2b:87:19:fa:6f:26:d6:eb:a9: db:d3:aa:e2:e3:4a:a5:3e:6c:57:1f:9a:74:fd:d0:31:be:4d: 1c:38:e5:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjUwNzE4MjMzNTQwWhcNMjUwNzI1MjMzNTQwWjAYMRYwFAYD VQQDEw02ODdhZGE0Yy01Mzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7tHmn8k54c6sBy7egiiNUtL6/7LAU/rHWUOuo+CtRRK40/a7tVItdOZRK7dt espYp5SLbdgHgeIbxaMmD3gKipUejkXxS9NOl+ma3xFcJNRrt/TbAkRc+K7tjPn6 zAUdJfNkZjF35VyQ/vh7xf7GnliBBH4u1PHwXZ+n7XSLP6o4uW2lBUZHM4Pq1Ty2 Fnx1RM2wBiHICBN2D8cPQ9HLeXEcHq8EBWHmMjTuQoz1fU5C2IfGbytd+wzH+7iV ygqCjzZeeOfZMLN49mjKNOyoNgLCtxDedBH/iw+iXTruUWZK9dtd/4qy6XCMvzpT YC4S0elx0t+1VjtUH/7mvO2qFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBccWWNZ D0rv0gL/xZ1jP3GAKLlwMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ cDRranZtWm40VTlzVER0SDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABJ4q8p6jzVLYqqVFmIeozLUUEW5kI7zYsZWD4nhu5D38q9sPywYKV LZ53NsyEosvQUBKGDsq55m1MaHtaU2BOV7a+FVuHC3vGpk0+3vGgIha+wkR9snAo gLxMCDCDsaDkbBCGzbE5Wx+2s1K3y11Wrfba1uSaaZ0edG48S23yqLLwSUYjD0G7 f78nCUjpzRXlu9RqQvAZ7DUG4cmhJVu7c7+i8Eln05VQK1g53hylsjhsqfsHo3nH EQ29ZUXqiqEZct3jJ+YfK11ZweUlHmSEhMpO2f/ymGV2EZL1+xHZy+krhxn6bybW 66nb06ri40qlPmxXH5p0/dAxvk0cOOWW -----END CERTIFICATE-----Generated at Sun Jul 20 07:33:19 2025 by rpki-client