$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json) Hash identifier: 5cqN+8nIv7nMagMPJd1SIuYYdhTXvg7RPtVaXZRCf6U= Subject key identifier: FB:9C:88:17:3B:E9:9C:F9:05:8A:98:24:85:F9:98:80:7E:DF:7A:5F Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft Manifest number: 06D5 Signing time: Fri 18 Jul 2025 22:22:53 +0000 Manifest this update: Fri 18 Jul 2025 22:22:53 +0000 Manifest next update: Fri 25 Jul 2025 22:22:53 +0000 Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: ZxdS5B+hkkdQ1RxLb2Yw3KD8xfGLqjL08iP9SofNk64=) 2: 05F05106586011EE9399A92EC4F9AE02.roa (hash: uE1Fce5x0iyRAmN0knxTtSotHjcQGH0Wea/3oUShZPs=) 3: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: u+3Kqlk1/ablMkybk1cn19GMLJzdy6UlNuONo3CbZ6Y=) 4: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU=) 5: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: 2hIQWvs5gCQjNeqkzYCi7IsHJw8uYq2a3BY4+uJn8rA=) 6: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: TnWWrKTfNekbVi6pIzTrH/qhvsHIadymtQxdXn+0jBk=) 7: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34=) 8: 34956990D75511EF80E68A39C4F9AE02.roa (hash: dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=) 9: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: hXI7auCZSPvAdHOfiV427I6HYIQHsMDxA6gjGw/HO3w=) 10: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: lRSKSHnJ9I173rhXzeEXncsQoFojPmJc5tNaNSnncqo=) 11: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: Jul 18 22:22:53 2025 GMT Not After : Jul 25 22:22:53 2025 GMT Subject: CN=687ac93d-6b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:33:2b:bc:1a:04:e1:ce:bc:76:69:e6:21: 65:27:9d:fa:2f:41:4c:aa:6a:0e:fa:96:cd:48:3a: c1:c5:28:46:e4:f0:fc:9c:9c:b4:eb:a3:68:55:1d: 7d:6c:d8:c7:0b:4c:fa:38:9d:0f:c6:03:40:57:26: ca:a5:8b:b6:da:4b:64:49:4c:e5:04:a8:09:dc:56: ca:f3:e8:39:90:6e:8a:2a:e2:59:4f:11:c5:7f:fc: de:77:e2:7f:51:e8:b4:41:c5:7c:29:f6:11:d2:39: b2:50:df:b3:f5:98:9c:e2:8d:70:c8:a9:87:d6:f4: b0:1b:80:ee:8a:e2:5b:8a:14:56:6c:8b:ef:31:d6: 9c:73:88:7c:52:63:e7:eb:a8:5a:f3:b7:7d:e0:ec: 02:67:8b:26:18:ed:59:d4:46:92:e7:4e:fe:92:16: ff:2e:dd:6c:b9:76:ea:fc:f4:1f:3c:86:bf:fb:3e: 5b:88:d8:7c:cc:1a:ba:7f:10:ec:a7:bf:48:ec:68: 45:bc:32:c1:4d:44:22:9d:6d:9c:a0:fb:c7:de:a2: a3:a4:ee:9f:70:8a:e0:14:97:84:8d:7f:bc:0a:fc: fa:c3:13:26:26:ee:b1:70:4f:4b:d9:e3:ee:cd:2b: 8b:f6:ca:2e:ce:1c:d3:53:63:7c:04:b2:fb:82:98: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:88:17:3B:E9:9C:F9:05:8A:98:24:85:F9:98:80:7E:DF:7A:5F X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:bd:9a:8a:6e:cf:e4:41:ab:66:e7:56:96:c6:42:08:69:40: 62:9a:67:0a:55:8c:8d:9d:26:30:aa:e0:08:2a:60:c6:7f:3d: 0a:15:6d:a0:a2:2e:77:86:49:f2:a5:12:7e:7e:dd:a9:39:80: db:a6:ec:26:9f:0f:0c:80:bd:23:a7:02:5f:73:2d:59:e6:a0: 76:10:e1:3a:e9:d6:2d:21:9a:bb:58:4d:0f:3e:e2:c6:1c:e4: 2c:bd:da:d5:56:5d:4c:9d:f9:44:2a:1a:f8:d8:ba:8e:67:dd: 6d:c7:36:08:a1:23:95:2c:d6:38:cf:e7:40:a7:9b:e7:d9:ba: 5b:2d:bc:c4:d7:8a:52:12:b0:8f:cd:c1:4c:4c:dd:37:91:c0: b8:40:f9:41:29:58:a5:db:62:29:f3:1e:81:e9:6d:94:38:eb: 1c:09:23:3a:e9:ee:81:a6:ba:21:b7:a4:55:ca:ef:a3:69:7c: 80:d0:11:b4:1b:91:3f:20:42:ae:ed:95:6e:76:44:9e:cd:c0: 55:06:da:33:59:88:f8:b3:4d:3e:99:32:39:79:f4:6b:fa:25: 92:c4:bb:40:59:a9:15:c7:4e:34:bf:a6:21:8d:18:be:7c:ff: 77:9e:f7:b7:3e:8d:3a:1e:78:de:ab:c6:d0:99:86:6f:d4:be: 7a:df:6d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwNzE4MjIyMjUzWhcNMjUwNzI1MjIyMjUzWjAYMRYwFAYD VQQDEw02ODdhYzkzZC02YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3gzK7waBOHOvHZp5iFlJ536L0FMqmoO+pbNSDrBxShG5PD8nJy066NoVR19 bNjHC0z6OJ0PxgNAVybKpYu22ktkSUzlBKgJ3FbK8+g5kG6KKuJZTxHFf/zed+J/ Uei0QcV8KfYR0jmyUN+z9Zic4o1wyKmH1vSwG4DuiuJbihRWbIvvMdacc4h8UmPn 66ha87d94OwCZ4smGO1Z1EaS507+khb/Lt1suXbq/PQfPIa/+z5biNh8zBq6fxDs p79I7GhFvDLBTUQinW2coPvH3qKjpO6fcIrgFJeEjX+8Cvz6wxMmJu6xcE9L2ePu zSuL9souzhzTU2N8BLL7gpiDXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuciBc7 6Zz5BYqYJIX5mIB+33pfMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkI0RC9DQTU2M0JFODY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlL NXRuV0l2bXVfWHBNa1ZUeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMvZqKbs/kQatm51aWxkIIaUBimmcKVYyNnSYwquAIKmDGfz0KFW2g oi53hknypRJ+ft2pOYDbpuwmnw8MgL0jpwJfcy1Z5qB2EOE66dYtIZq7WE0PPuLG HOQsvdrVVl1MnflEKhr42LqOZ91txzYIoSOVLNY4z+dAp5vn2bpbLbzE14pSErCP zcFMTN03kcC4QPlBKVil22Ip8x6B6W2UOOscCSM66e6Bproht6RVyu+jaXyA0BG0 G5E/IEKu7ZVudkSezcBVBtozWYj4s00+mTI5efRr+iWSxLtAWakVx040v6YhjRi+ fP93nve3Po06Hnjeq8bQmYZv1L56323R -----END CERTIFICATE-----Generated at Sun Jul 20 10:13:17 2025 by rpki-client