$ rpki-client -vvf rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft File: f32FZbsEGDw68czSI-nEYR8VCAY.mft (raw, json) Hash identifier: zdwU6x4XO2jyK9lTIHu37pK8rex1z5Ndj5eOY8x49gI= Subject key identifier: 61:B7:7E:C2:93:80:C3:C6:93:1E:F5:38:5F:4A:4E:0A:A3:5E:01:A1 Authority key identifier: 7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 Certificate issuer: /CN=A9194004/serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft Manifest number: 0171 Signing time: Mon 21 Jul 2025 03:51:36 +0000 Manifest this update: Mon 21 Jul 2025 03:51:36 +0000 Manifest next update: Mon 28 Jul 2025 03:51:36 +0000 Files and hashes: 1: f32FZbsEGDw68czSI-nEYR8VCAY.crl (hash: tCEU66v1Jbk2jLvW27qod654XgxLmbU7KL/bLAa1xUs=) 2: 4A6E97AC311E11EE85C30E3BC4F9AE02.roa (hash: qONN8LKBOCS/G8QK//DwNmNBl/nUXzBz7NrGBoGYHlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194004, serialNumber=7F7D8565BB04183C3AF1CCD223E9C4611F150806 Validity Not Before: Jul 21 03:51:36 2025 GMT Not After : Jul 28 03:51:36 2025 GMT Subject: CN=687db948-ff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:f1:fe:4e:29:7d:a5:1b:1f:3f:e8:11:a1: 17:a4:3d:50:0a:2c:f5:f1:a4:56:41:15:34:69:d2: 80:70:57:7f:c6:62:27:d0:43:84:73:d3:8d:87:8b: b4:b5:9f:67:7d:f9:47:0b:70:9a:8b:03:52:5b:08: 50:f7:31:64:ad:3a:97:ea:af:0e:19:c5:e9:63:23: 76:b4:f8:90:43:d8:f9:a8:70:9c:bb:81:b4:86:e7: b5:7d:ba:cf:7d:e6:4f:ec:cd:8f:0a:06:8a:28:cc: f3:fb:a3:36:cc:b7:e7:28:cd:82:e7:b1:0a:57:3e: 30:ff:cf:07:fc:b6:9b:0b:bf:94:40:f3:32:c4:fe: 45:2f:09:8a:51:9a:48:39:d5:f8:72:75:56:ce:a6: f6:dd:7c:f3:42:9d:de:97:11:2a:46:59:43:b1:66: 89:d7:f1:bd:00:c4:d7:91:1c:71:c0:03:97:7f:d5: 26:1a:1e:d7:fd:18:c6:46:45:53:e4:6b:ac:34:70: e7:26:df:1a:38:1d:84:e4:a7:a6:7f:a6:ec:d1:fe: 69:2f:f5:5f:67:8c:73:8e:9d:91:23:8c:16:8d:f6: ae:12:0a:cb:f7:ef:35:cf:63:fb:f4:b8:40:c2:69: a0:a1:5f:6c:dc:cb:92:2f:7e:ec:46:dc:d3:4d:3b: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:7E:C2:93:80:C3:C6:93:1E:F5:38:5F:4A:4E:0A:A3:5E:01:A1 X509v3 Authority Key Identifier: keyid:7F:7D:85:65:BB:04:18:3C:3A:F1:CC:D2:23:E9:C4:61:1F:15:08:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f32FZbsEGDw68czSI-nEYR8VCAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194004/049546CE302C11EEBA3EA013C4F9AE02/f32FZbsEGDw68czSI-nEYR8VCAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:44:e6:9e:4c:04:be:e0:ab:22:8c:45:9d:d2:65:2b:44:57: 56:e2:c0:c6:45:25:f1:7e:3d:e0:6b:ae:c4:98:e3:b6:e8:89: 4d:08:50:c1:78:3f:46:1d:be:6a:c0:91:05:ab:e0:b0:d5:5f: 5d:3e:fd:7a:df:96:7e:7f:63:06:04:fe:d5:6c:5a:2b:8f:c3: 71:8f:62:82:5b:7d:3b:20:66:f7:d7:81:b3:7e:94:24:c5:e3: 23:f6:b5:40:78:80:83:31:c0:28:55:0d:80:a5:a9:4e:6c:2a: c9:eb:c5:dc:e4:18:83:46:70:21:b0:f5:98:b6:15:06:6c:55: 73:ab:a9:8e:45:8f:3c:f9:64:01:20:32:ec:ba:e5:bb:8c:25: c6:c2:55:83:12:bb:28:53:72:26:cf:6f:71:4b:72:5a:4b:11: 5a:bd:23:a0:ff:6a:1f:5d:9e:28:f1:d0:04:b7:a1:78:74:19: 79:79:01:31:3d:22:d7:8c:c9:1d:cc:c8:42:52:c9:79:99:a9: 98:1e:61:71:ea:49:c4:fb:ea:47:51:b5:ff:39:28:cf:11:3a: fd:51:4c:34:70:12:52:67:f6:04:aa:96:1b:ee:2f:6b:3d:d0: 03:4d:c0:64:be:e9:c3:49:5c:4c:cb:9f:fa:af:f4:8d:70:a8: 20:4b:75:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQwMDQxMTAvBgNVBAUTKDdGN0Q4NTY1QkIwNDE4M0MzQUYxQ0NEMjIzRTlDNDYx MUYxNTA4MDYwHhcNMjUwNzIxMDM1MTM2WhcNMjUwNzI4MDM1MTM2WjAYMRYwFAYD VQQDEw02ODdkYjk0OC1mZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe/x/k4pfaUbHz/oEaEXpD1QCiz18aRWQRU0adKAcFd/xmIn0EOEc9ONh4u0 tZ9nfflHC3CaiwNSWwhQ9zFkrTqX6q8OGcXpYyN2tPiQQ9j5qHCcu4G0hue1fbrP feZP7M2PCgaKKMzz+6M2zLfnKM2C57EKVz4w/88H/LabC7+UQPMyxP5FLwmKUZpI OdX4cnVWzqb23XzzQp3elxEqRllDsWaJ1/G9AMTXkRxxwAOXf9UmGh7X/RjGRkVT 5GusNHDnJt8aOB2E5Kemf6bs0f5pL/VfZ4xzjp2RI4wWjfauEgrL9+81z2P79LhA wmmgoV9s3MuSL37sRtzTTTuEhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG3fsKT gMPGkx71OF9KTgqjXgGhMB8GA1UdIwQYMBaAFH99hWW7BBg8OvHM0iPpxGEfFQgG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwNC8wNDk1NDZDRTMw MkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdEdzY4Y3pTSS1uRVlSOFZD QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YzMkZaYnNFR0R3NjhjelNJLW5FWVI4VkNBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDAwNC8wNDk1NDZDRTMwMkMxMUVFQkEzRUEwMTNDNEY5QUUwMi9mMzJGWmJzRUdE dzY4Y3pTSS1uRVlSOFZDQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjROaeTAS+4KsijEWd0mUrRFdW4sDGRSXxfj3ga67EmOO26IlNCFDB eD9GHb5qwJEFq+Cw1V9dPv1635Z+f2MGBP7VbForj8Nxj2KCW307IGb314GzfpQk xeMj9rVAeICDMcAoVQ2ApalObCrJ68Xc5BiDRnAhsPWYthUGbFVzq6mORY88+WQB IDLsuuW7jCXGwlWDErsoU3Imz29xS3JaSxFavSOg/2ofXZ4o8dAEt6F4dBl5eQEx PSLXjMkdzMhCUsl5mamYHmFx6knE++pHUbX/OSjPETr9UUw0cBJSZ/YEqpYb7i9r PdADTcBkvunDSVxMy5/6r/SNcKggS3XB -----END CERTIFICATE-----Generated at Tue Jul 22 11:57:19 2025 by rpki-client