$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: qlk/Xb/iFqFLH4pj/mII6r8NSOjRNMvDZE1YqVcgdbU= Subject key identifier: 4F:EF:E0:25:15:B0:15:71:79:26:A8:DE:57:06:3F:DA:5A:3C:E7:20 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 0207 Signing time: Wed 23 Jul 2025 02:40:00 +0000 Manifest this update: Wed 23 Jul 2025 02:40:00 +0000 Manifest next update: Wed 30 Jul 2025 02:39:59 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: lePsQo9r0jIyIGUhWCcEtOnpcdO/HYi8gkOKAov3E0U=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Jul 23 02:40:00 2025 GMT Not After : Jul 30 02:39:59 2025 GMT Subject: CN=68804b80-7e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:85:73:08:1e:f7:72:ce:e3:20:f9:8c:cc: a2:f6:77:01:2c:e3:2d:de:3d:3b:69:db:7a:21:7c: b4:19:03:be:d4:ee:53:16:9b:53:f9:72:da:78:0d: 21:85:3c:eb:0d:5d:9e:4d:61:8c:c8:a8:fb:d3:16: 04:17:67:34:48:fe:0c:d7:62:a3:17:17:fa:61:4f: 4c:bf:b0:3e:b5:c6:44:d9:4b:47:74:ac:81:7a:34: 59:c5:61:8c:9e:e9:fd:c3:a6:de:65:69:00:d0:39: f4:06:77:f1:ff:94:08:55:d2:ee:53:b3:f1:30:4d: aa:4e:27:16:ab:76:d9:a5:88:a4:ae:59:7c:b5:40: 0b:28:e7:04:b7:f6:10:89:79:dd:4a:e9:df:09:d9: e9:6e:ef:d2:58:70:19:d0:72:c1:a9:db:c2:ba:41: b1:bd:84:75:5f:43:81:91:90:c8:87:ad:48:ba:f3: 5c:14:ec:d2:eb:d4:e9:c5:b7:8d:a4:d7:c0:f3:ec: 9d:78:db:ee:75:c0:22:56:ab:8e:d2:68:76:0f:0a: d9:32:ab:5f:7b:43:8a:52:42:48:bf:2c:09:2e:bb: d1:5b:85:fb:78:7c:cb:5c:b4:d2:5a:7c:fc:e0:ab: 50:6f:74:a2:89:42:e0:d7:c0:47:19:87:07:7e:77: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:E0:25:15:B0:15:71:79:26:A8:DE:57:06:3F:DA:5A:3C:E7:20 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:95:bd:78:9e:3d:54:53:7d:7e:a6:be:e8:6e:c9:f4:a9:3b: 1b:e5:4d:ca:40:84:a2:19:76:1e:a4:f7:ab:46:8c:6e:e4:01: 23:17:00:47:b6:95:d0:6d:71:9f:59:e2:7d:28:52:1a:e7:8a: 65:b6:42:4a:cb:b8:21:1c:69:f4:ab:a5:6f:d7:8b:a3:8c:34: 8c:ff:8d:cf:37:97:4c:1d:a8:05:9c:a7:37:c6:20:6b:1a:1f: f3:3c:52:3a:c8:d6:d4:42:7a:99:4c:ec:bc:7e:54:32:3d:32: 54:ae:16:aa:7a:52:4b:0e:5a:90:dc:06:4d:e8:f7:f5:a4:6b: f8:36:bc:da:a3:fa:7d:b2:d9:bc:ce:cb:25:06:f6:22:5a:16: a8:17:ed:af:5c:9e:a7:c3:4c:ec:63:fc:5b:e2:23:70:0f:68: 44:61:23:37:dd:c7:8d:ae:24:c4:5d:e3:cb:72:63:98:05:a9: 4d:d8:4a:1a:26:c5:37:05:c7:aa:5e:41:e9:e7:56:04:f4:c5: 8f:36:b7:89:02:3d:4f:cf:f1:72:28:93:01:63:a0:a8:f6:ba: a0:06:6c:fd:ca:b8:c2:fa:de:73:53:df:e5:e9:2d:ef:5d:50: d5:7c:00:a2:dc:de:dd:c7:c9:c0:70:7a:53:be:ef:e5:1e:da: 57:d3:d3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNzIzMDI0MDAwWhcNMjUwNzMwMDIzOTU5WjAYMRYwFAYD VQQDEw02ODgwNGI4MC03ZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI6Fcwge93LO4yD5jMyi9ncBLOMt3j07adt6IXy0GQO+1O5TFptT+XLaeA0h hTzrDV2eTWGMyKj70xYEF2c0SP4M12KjFxf6YU9Mv7A+tcZE2UtHdKyBejRZxWGM nun9w6beZWkA0Dn0Bnfx/5QIVdLuU7PxME2qTicWq3bZpYikrll8tUALKOcEt/YQ iXndSunfCdnpbu/SWHAZ0HLBqdvCukGxvYR1X0OBkZDIh61IuvNcFOzS69TpxbeN pNfA8+ydeNvudcAiVquO0mh2DwrZMqtfe0OKUkJIvywJLrvRW4X7eHzLXLTSWnz8 4KtQb3SiiULg18BHGYcHfncvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/v4CUV sBVxeSao3lcGP9paPOcgMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBElb14nj1UU31+pr7obsn0qTsb5U3KQISiGXYepPerRoxu5AEjFwBH tpXQbXGfWeJ9KFIa54pltkJKy7ghHGn0q6Vv14ujjDSM/43PN5dMHagFnKc3xiBr Gh/zPFI6yNbUQnqZTOy8flQyPTJUrhaqelJLDlqQ3AZN6Pf1pGv4Nrzao/p9stm8 zsslBvYiWhaoF+2vXJ6nw0zsY/xb4iNwD2hEYSM33ceNriTEXePLcmOYBalN2Eoa JsU3BceqXkHp51YE9MWPNreJAj1Pz/FyKJMBY6Co9rqgBmz9yrjC+t5zU9/l6S3v XVDVfACi3N7dx8nAcHpTvu/lHtpX09P7 -----END CERTIFICATE-----Generated at Wed Jul 23 06:27:54 2025 by rpki-client