$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: z3G0M9RjZPwNWXxwltF7DXbmbQMKuW4ZgsEPZNd9sTk= Subject key identifier: 2C:C7:18:A8:96:8C:17:14:DA:1E:A7:43:D5:5D:C6:C9:49:71:93:5B Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 067F Signing time: Fri 18 Jul 2025 22:37:50 +0000 Manifest this update: Fri 18 Jul 2025 22:37:50 +0000 Manifest next update: Fri 25 Jul 2025 22:37:50 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: jnJ8zN+azo+fsYx3B6xKKzlk4PWxAH3o+BuoUPVKkPk=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Jul 18 22:37:50 2025 GMT Not After : Jul 25 22:37:50 2025 GMT Subject: CN=687accbe-3fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:da:45:af:81:fc:4b:45:47:7c:4b:e7:3b:47: 82:c0:55:9d:e3:3b:cc:30:95:ba:77:1d:48:42:48: 10:b4:e0:e3:75:a3:20:cd:0d:44:16:79:71:67:b5: 7a:3f:55:12:29:e0:6f:a5:17:e5:34:ca:cf:8c:14: 58:45:2d:c4:54:f6:83:7b:da:90:7d:54:b4:d4:63: 5c:b2:b4:f2:67:51:1b:1a:4f:1a:fd:59:04:95:c7: 51:ab:d6:20:67:8d:fc:0c:3b:f8:9c:5c:55:f8:00: 4e:da:cb:64:84:a2:e3:a3:45:ba:3a:a8:bf:98:bd: d3:de:a1:66:0b:e3:72:e7:5b:ff:2e:09:80:fd:25: a8:4a:94:6a:76:70:db:8f:7c:f0:53:27:6e:9d:57: 4e:52:01:91:e0:c5:71:f8:44:6d:56:8b:15:d4:b1: f6:31:98:40:5d:98:8f:62:94:5a:6e:81:31:7a:d4: 7d:09:43:2a:04:1b:89:f2:0e:12:79:9a:fa:19:af: c1:9d:30:81:b3:00:e7:47:38:42:8f:ad:83:9c:b9: 35:fd:44:bb:e8:c0:d7:a3:c2:79:42:5f:b6:48:9c: 94:86:4b:bc:30:80:1c:82:ce:d9:8d:b0:ba:40:b7: d4:5f:26:1f:18:d0:63:2c:99:68:15:00:c4:53:79: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C7:18:A8:96:8C:17:14:DA:1E:A7:43:D5:5D:C6:C9:49:71:93:5B X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:a1:13:2b:5f:a3:bd:36:a9:e4:e7:2b:88:8f:4f:54:31:23: 51:cd:cf:74:ba:47:8d:a6:6a:7f:ca:0f:d1:65:ad:bb:3d:83: 47:d2:e2:7d:4a:7f:be:e2:76:67:b7:82:8b:08:b2:47:19:b9: 5f:05:bb:40:47:8f:15:30:e6:7b:a4:dc:d6:8a:3c:59:31:9d: bd:64:0e:46:0f:56:3f:9b:fc:78:16:8b:71:3e:bf:11:97:90: 8b:0e:5e:9c:44:67:db:71:54:e8:50:17:23:c7:51:5d:b0:5a: 83:ad:cd:33:d1:22:d2:45:2e:de:04:9f:2f:d6:8e:52:a0:38: 1a:4f:ea:0c:a9:2f:40:74:94:38:a3:42:af:54:87:6a:4d:30: f4:bf:7a:3a:f6:14:ac:2d:ba:45:8b:33:16:14:8e:a9:ac:15: 1d:9f:5a:a9:dd:a6:98:ba:e4:2f:8b:e4:1f:ad:18:25:71:20: 63:6f:df:91:cb:2d:e2:3c:91:6e:a6:80:c1:3f:d2:18:2c:39: 7c:69:3b:3b:e5:91:42:bd:34:8c:95:e5:76:04:21:62:f1:86: 9b:3d:8e:e9:56:90:78:bb:be:71:8d:f7:92:ab:80:61:08:89: b5:7e:47:e6:3d:e2:33:05:25:dd:bd:17:66:f2:27:89:ff:4c: 1d:b4:c6:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjUwNzE4MjIzNzUwWhcNMjUwNzI1MjIzNzUwWjAYMRYwFAYD VQQDEw02ODdhY2NiZS0zZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NpFr4H8S0VHfEvnO0eCwFWd4zvMMJW6dx1IQkgQtODjdaMgzQ1EFnlxZ7V6 P1USKeBvpRflNMrPjBRYRS3EVPaDe9qQfVS01GNcsrTyZ1EbGk8a/VkElcdRq9Yg Z438DDv4nFxV+ABO2stkhKLjo0W6Oqi/mL3T3qFmC+Ny51v/LgmA/SWoSpRqdnDb j3zwUydunVdOUgGR4MVx+ERtVosV1LH2MZhAXZiPYpRaboExetR9CUMqBBuJ8g4S eZr6Ga/BnTCBswDnRzhCj62DnLk1/US76MDXo8J5Ql+2SJyUhku8MIAcgs7ZjbC6 QLfUXyYfGNBjLJloFQDEU3lptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzHGKiW jBcU2h6nQ9VdxslJcZNbMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEoRMrX6O9Nqnk5yuIj09UMSNRzc90ukeNpmp/yg/RZa27PYNH0uJ9 Sn++4nZnt4KLCLJHGblfBbtAR48VMOZ7pNzWijxZMZ29ZA5GD1Y/m/x4FotxPr8R l5CLDl6cRGfbcVToUBcjx1FdsFqDrc0z0SLSRS7eBJ8v1o5SoDgaT+oMqS9AdJQ4 o0KvVIdqTTD0v3o69hSsLbpFizMWFI6prBUdn1qp3aaYuuQvi+QfrRglcSBjb9+R yy3iPJFupoDBP9IYLDl8aTs75ZFCvTSMleV2BCFi8YabPY7pVpB4u75xjfeSq4Bh CIm1fkfmPeIzBSXdvRdm8ieJ/0wdtMZv -----END CERTIFICATE-----Generated at Sun Jul 20 07:40:41 2025 by rpki-client