$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft File: RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json) Hash identifier: UFV19TqcnsJnwJBsPgZrFa0rUxReq/V+d8oTtRHsZTk= Subject key identifier: 94:35:90:B8:F4:16:AC:12:C5:C0:87:BB:7D:EE:F5:FD:23:21:0A:A2 Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft Manifest number: 7A Signing time: Sat 19 Jul 2025 07:00:23 +0000 Manifest this update: Sat 19 Jul 2025 07:00:22 +0000 Manifest next update: Sat 26 Jul 2025 07:00:22 +0000 Files and hashes: 1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: 3rNMFVgeu6yXZ7sue///eZhMSQoAtZcL1o/klW2QcY0=) 2: D2D1A4B45BD711F089C6844AC4F9AE02.roa (hash: IwSpun4mR93liWUYd7J1ESsaB1Uz4atotyyWq8c/ozo=) 3: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Jul 19 07:00:22 2025 GMT Not After : Jul 26 07:00:22 2025 GMT Subject: CN=687b4286-35b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:5c:8e:0b:d2:0a:b2:d0:ea:d4:24:68:72: af:b2:33:a3:28:43:f7:35:c7:b8:8e:73:e1:10:c5: b2:79:38:5e:ef:ac:ae:77:ea:ec:bd:07:5b:54:9f: 27:b1:fa:01:76:9c:a2:b0:6a:69:10:48:1f:87:9c: e0:a3:f1:03:93:d6:f7:df:50:7b:a5:65:48:f9:80: d5:8c:f6:a3:4a:e9:79:9f:ad:73:e2:ed:57:b5:fc: 39:cf:d3:06:a5:82:c0:07:fb:58:a7:8e:23:e7:52: 4a:47:aa:fe:6f:75:30:65:1c:b1:5c:ee:25:de:7f: 9f:6a:d8:ea:c3:6a:d3:8c:61:36:93:36:8d:38:e3: ff:6b:c2:4e:e3:78:fa:b9:1b:15:68:4c:2d:a1:dd: f1:df:97:65:d7:41:d2:e4:ca:81:cb:25:9e:0d:56: 27:b0:f8:c6:2f:42:7d:84:dc:f8:d5:b3:a4:ec:3f: 2c:1e:19:df:51:79:25:27:54:b8:41:ad:e6:55:ad: 90:08:d8:23:20:91:ae:5b:71:d6:e8:ac:3a:51:89: 52:a3:ff:f3:80:21:78:d8:17:39:9e:d3:80:bb:56: ff:80:7a:79:07:fe:26:a9:5b:81:5c:2f:10:e0:49: 50:99:9c:31:cc:0a:86:73:15:56:91:5f:20:45:85: 80:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:35:90:B8:F4:16:AC:12:C5:C0:87:BB:7D:EE:F5:FD:23:21:0A:A2 X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:64:e0:d3:55:ea:d0:08:15:50:f7:94:86:5c:b2:6e:df: e0:46:34:07:59:84:64:cd:f3:29:c0:cf:78:0e:6d:d9:3f:55: c2:52:ad:cf:72:8f:79:09:6c:d7:a1:0f:24:48:a5:6b:07:19: 09:d3:40:d8:fd:3b:a1:7f:60:15:3a:f7:45:17:4c:f0:84:52: 7d:85:ab:72:e8:d4:7a:f3:84:f2:b6:5d:60:6f:59:b8:3d:37: 6e:77:ba:d6:79:0f:9f:15:03:fc:d0:c9:ad:77:ff:85:67:49: cf:c4:53:f3:ea:f3:fe:01:0b:c9:e7:36:b1:05:0c:78:74:d8: 8c:59:90:a6:aa:cf:91:b8:55:67:62:ee:6a:5a:d8:72:a0:5e: d7:6f:f8:de:e4:e5:ed:45:77:61:07:6e:d7:1d:44:62:80:ed: 70:bb:e9:c1:80:46:c3:81:9e:3b:9c:67:c8:96:2b:7f:a7:b5: f9:2c:c5:15:92:44:62:e4:6e:2a:df:01:3c:c8:da:97:50:91: de:af:21:5d:2a:4c:67:c2:8b:66:cd:16:28:5f:13:bb:7f:b5: 5f:71:c0:81:80:52:ea:10:00:6e:fb:3c:46:0e:de:dd:4a:47: fb:da:0b:18:24:68:96:8c:ab:79:fc:94:bc:d8:73:0c:b3:65: a7:27:87:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNTA3MTkwNzAwMjJaFw0yNTA3MjYwNzAwMjJaMBgxFjAUBgNV BAMTDTY4N2I0Mjg2LTM1YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcf1yOC9IKstDq1CRocq+yM6MoQ/c1x7iOc+EQxbJ5OF7vrK536uy9B1tUnyex +gF2nKKwamkQSB+HnOCj8QOT1vffUHulZUj5gNWM9qNK6XmfrXPi7Ve1/DnP0wal gsAH+1injiPnUkpHqv5vdTBlHLFc7iXef59q2OrDatOMYTaTNo044/9rwk7jePq5 GxVoTC2h3fHfl2XXQdLkyoHLJZ4NView+MYvQn2E3PjVs6TsPyweGd9ReSUnVLhB reZVrZAI2CMgka5bcdborDpRiVKj//OAIXjYFzme04C7Vv+AenkH/iapW4FcLxDg SVCZnDHMCoZzFVaRXyBFhYA3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlDWQuPQW rBLFwIe7fe71/SMhCqIwHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKABZODTVerQCBVQ95SGXLJu3+BGNAdZhGTN8ynAz3gObdk/VcJSrc9y j3kJbNehDyRIpWsHGQnTQNj9O6F/YBU690UXTPCEUn2Fq3Lo1HrzhPK2XWBvWbg9 N253utZ5D58VA/zQya13/4VnSc/EU/Pq8/4BC8nnNrEFDHh02IxZkKaqz5G4VWdi 7mpa2HKgXtdv+N7k5e1Fd2EHbtcdRGKA7XC76cGARsOBnjucZ8iWK3+ntfksxRWS RGLkbirfATzI2pdQkd6vIV0qTGfCi2bNFihfE7t/tV9xwIGAUuoQAG77PEYO3t1K R/vaCxgkaJaMq3n8lLzYcwyzZacnhwk= -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:16 2025 by rpki-client