$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft File: cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json) Hash identifier: 5pa2aFPluuU6/9ock0TF6zNT/KtSe4wW232BjCREHBI= Subject key identifier: 2A:49:2B:03:78:68:CB:58:C2:C6:04:B2:CE:33:56:A1:A9:7A:85:77 Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F Certificate issuer: /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft Manifest number: 0777 Signing time: Fri 18 Jul 2025 21:45:56 +0000 Manifest this update: Fri 18 Jul 2025 21:45:55 +0000 Manifest next update: Fri 25 Jul 2025 21:45:55 +0000 Files and hashes: 1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: OGPo5qEtjCZmuX0TQ1ubVlECzbUIlyr9RGXdYcPrM+c=) 2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F Validity Not Before: Jul 18 21:45:55 2025 GMT Not After : Jul 25 21:45:55 2025 GMT Subject: CN=687ac093-6889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9f:88:66:c0:79:41:3a:8d:b4:61:aa:c7:37: 8c:79:40:2b:ff:aa:7f:26:5f:6e:eb:4a:3f:b1:55: 8d:59:84:ab:ea:59:1c:58:ce:cc:c6:d3:62:b1:f1: 11:73:ab:24:9e:e2:94:a0:19:27:fc:f2:c4:2e:fa: b5:ca:ad:40:0a:82:7c:2b:f3:09:7e:84:bb:76:3a: 77:d2:3f:0e:0d:a7:4e:c2:7b:fc:15:f4:69:08:12: 93:97:d9:77:43:73:88:2e:db:85:6b:ba:26:fa:b7: 9a:44:d1:62:9c:b0:88:69:e9:c3:b2:4f:8e:af:5f: ed:34:fe:f1:5f:c9:f2:c8:85:25:be:6a:00:f8:a6: 84:e6:7a:a1:e0:0c:de:d1:78:07:d0:88:0f:68:d5: f9:76:00:27:f4:8a:be:56:13:0a:c3:ce:82:0e:5b: 8f:4c:97:67:45:ab:e8:be:c6:8a:2a:ab:16:ce:84: fe:c3:7f:14:52:91:e6:f4:de:4f:db:85:c5:32:52: 12:c7:37:b7:f5:f9:a3:60:ba:64:4a:bf:24:c4:72: d5:cd:e7:e2:f5:8b:71:36:0d:ef:de:96:14:63:67: 3f:d0:b6:9c:84:fe:d5:7d:b4:83:df:2c:e2:14:ac: 7a:98:9a:ab:af:6e:97:fd:e1:63:1b:41:1c:cb:bc: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:2B:03:78:68:CB:58:C2:C6:04:B2:CE:33:56:A1:A9:7A:85:77 X509v3 Authority Key Identifier: keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:82:5c:ff:00:87:a5:8a:bb:17:bd:51:e8:2e:bc:98:02:17: 4a:0e:3e:72:b9:b5:60:f7:02:2c:a5:b2:04:a3:b8:a2:d7:4a: f8:bf:93:44:69:eb:71:50:24:0f:50:d0:9c:a0:63:1f:24:11: ba:36:9c:cf:05:0e:46:1e:df:8b:2a:72:86:a9:11:87:69:a4: 09:db:57:bc:04:3e:3c:a9:52:f4:41:08:49:fb:6f:61:77:48: b0:11:6d:2e:e8:f6:b4:fc:c6:8f:01:d3:9a:6d:d2:65:c4:0b: 02:8a:21:91:db:0a:02:db:dd:24:08:1c:04:63:c8:9e:94:36: 35:19:91:81:2e:0e:6a:29:67:74:ee:80:96:d6:b8:a9:7a:22: 38:c9:d2:85:fe:e4:34:93:26:53:36:e4:f0:76:3b:6f:d6:45: 0a:12:86:65:e3:c4:c7:c5:0b:c4:00:9e:57:99:ed:bc:8a:ae: b0:b7:18:41:e6:a9:b1:b7:cb:ef:68:b2:fa:81:d3:7a:e0:5d: d5:85:80:2b:5d:f0:83:66:50:a6:9f:8f:67:bb:db:c9:2e:78: 5b:ad:c7:66:31:16:45:60:84:ae:6a:d5:24:3f:71:59:cc:61: b8:90:3e:60:a1:70:22:7a:11:bd:a6:73:33:42:df:bb:d8:b9: 22:29:e4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY5ODAxMTAvBgNVBAUTKDcwRDE2RDc3Mzc5ODlCMTVDNkM4REYxRENBMkE5ODBF MEJCRkJBMEYwHhcNMjUwNzE4MjE0NTU1WhcNMjUwNzI1MjE0NTU1WjAYMRYwFAYD VQQDEw02ODdhYzA5My02ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJ+IZsB5QTqNtGGqxzeMeUAr/6p/Jl9u60o/sVWNWYSr6lkcWM7MxtNisfER c6sknuKUoBkn/PLELvq1yq1ACoJ8K/MJfoS7djp30j8ODadOwnv8FfRpCBKTl9l3 Q3OILtuFa7om+reaRNFinLCIaenDsk+Or1/tNP7xX8nyyIUlvmoA+KaE5nqh4Aze 0XgH0IgPaNX5dgAn9Iq+VhMKw86CDluPTJdnRavovsaKKqsWzoT+w38UUpHm9N5P 24XFMlISxze39fmjYLpkSr8kxHLVzefi9YtxNg3v3pYUY2c/0LachP7VfbSD3yzi FKx6mJqrr26X/eFjG0Ecy7ztUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpJKwN4 aMtYwsYEss4zVqGpeoV3MB8GA1UdIwQYMBaAFHDRbXc3mJsVxsjfHcoqmA4Lv7oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njk4MC9DQjAwNkQ2MjFD RDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14WEd5TjhkeWlxWURndV91 ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NORnRkemVZbXhYR3lOOGR5aXFZRGd1X3VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njk4MC9DQjAwNkQ2MjFDRDgxMUVCOTZDNzk0NUFDNEY5QUUwMi9jTkZ0ZHplWW14 WEd5TjhkeWlxWURndV91ZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqglz/AIelirsXvVHoLryYAhdKDj5yubVg9wIspbIEo7ii10r4v5NE aetxUCQPUNCcoGMfJBG6NpzPBQ5GHt+LKnKGqRGHaaQJ21e8BD48qVL0QQhJ+29h d0iwEW0u6Pa0/MaPAdOabdJlxAsCiiGR2woC290kCBwEY8ielDY1GZGBLg5qKWd0 7oCW1ripeiI4ydKF/uQ0kyZTNuTwdjtv1kUKEoZl48THxQvEAJ5Xme28iq6wtxhB 5qmxt8vvaLL6gdN64F3VhYArXfCDZlCmn49nu9vJLnhbrcdmMRZFYISuatUkP3FZ zGG4kD5goXAiehG9pnMzQt+72LkiKeRG -----END CERTIFICATE-----Generated at Sun Jul 20 03:24:10 2025 by rpki-client