$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: nC184/nD84Ek+/SsdgX5RjMGr7VYqP7t0kM8wIe6HII= Subject key identifier: 2E:3F:2A:DC:3A:4A:09:AF:D3:C7:25:8C:E2:9B:7F:59:51:EF:90:17 Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: 0148 Signing time: Mon 21 Jul 2025 04:20:27 +0000 Manifest this update: Mon 21 Jul 2025 04:20:27 +0000 Manifest next update: Mon 28 Jul 2025 04:20:27 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: nnAsw1I9rrLvz7ZmksrGA1pAek4Ig6a6qeX3SyKJE2s=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Jul 21 04:20:27 2025 GMT Not After : Jul 28 04:20:27 2025 GMT Subject: CN=687dc00b-6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:28:93:c0:54:4e:fa:cd:e0:e8:49:0b:2a: 87:c5:8e:2b:53:e6:18:b2:80:da:a0:b3:6d:88:89: 55:9c:8e:0c:a0:70:50:6c:68:4b:16:72:a8:f3:fb: 6f:12:76:6d:85:8a:bc:44:d6:11:02:09:29:98:c2: 52:81:db:04:8d:8a:8a:40:0e:e4:cc:f1:9b:94:06: 19:8f:77:54:d0:ec:40:65:cf:c4:1a:3f:79:ec:f3: 53:19:0b:51:ac:2b:02:03:bd:b5:4b:e1:10:16:5a: 72:2b:52:55:b7:97:e9:f4:80:c4:b8:fd:3a:e9:d6: a3:b9:97:36:54:d9:45:61:50:f0:97:5c:16:57:c1: f0:25:83:85:70:68:9d:cb:1a:81:5e:c2:51:05:c6: ea:95:61:37:94:8d:59:03:2a:fc:d3:ad:17:65:18: e8:4d:21:6f:a6:96:9e:ec:61:89:f8:13:d5:ae:2d: ae:ee:0e:8a:ba:7e:98:9d:77:15:ba:4a:fa:01:73: 70:c6:1a:f9:0b:bb:29:b6:a8:74:df:04:dd:dd:98: a5:4e:92:52:6f:95:d5:9a:04:20:b3:7c:39:84:f1: 83:fd:3a:82:9a:4f:4a:7a:34:01:4c:c2:e3:ff:92: 9d:1a:d6:d9:44:ba:9c:cc:4d:68:9a:a8:fe:d4:c5: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3F:2A:DC:3A:4A:09:AF:D3:C7:25:8C:E2:9B:7F:59:51:EF:90:17 X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:e1:a5:67:66:5d:60:5e:18:e1:a4:da:b0:79:ee:84:4a:a4: 14:49:81:fd:e8:fc:5e:8a:8b:50:1f:42:fb:c0:e3:40:32:60: bd:8f:d0:f3:e7:f1:8e:08:d3:37:1e:a4:dd:a4:6d:86:d4:ac: fc:56:9b:ab:d4:d2:59:e2:d2:6d:f0:01:e9:97:73:13:fc:c5: c2:99:5d:f9:3e:90:9d:ab:de:3d:47:c7:3c:1b:b8:68:82:cf: 49:99:66:29:41:86:5a:d7:b4:30:af:14:ac:bf:e1:80:02:1b: ad:bf:34:91:aa:f1:53:02:61:d0:a8:fe:f4:04:97:6e:0e:b5: b1:12:e4:7d:c5:03:83:68:c8:00:28:58:e1:54:4a:d7:44:1f: 62:5c:55:0e:7f:6f:37:6a:71:62:8e:7d:43:1a:b3:aa:32:b0: b3:30:a9:9f:70:46:be:a7:32:da:98:c2:ba:25:04:8e:26:25: fa:1c:53:bf:cd:85:d2:94:bd:04:04:bf:ed:c2:1c:71:0c:29: 4b:dc:c7:84:2f:10:f4:ab:ed:42:89:a4:8c:d3:a7:b5:2f:2d: d1:0a:71:22:3c:40:15:4b:fa:94:c6:eb:92:61:9b:cf:c7:d9: 21:f7:ae:b3:63:61:87:48:f3:cb:30:81:0a:bc:1e:3c:2f:f4: 87:3a:cc:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjUwNzIxMDQyMDI3WhcNMjUwNzI4MDQyMDI3WjAYMRYwFAYD VQQDEw02ODdkYzAwYi02YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oIok8BUTvrN4OhJCyqHxY4rU+YYsoDaoLNtiIlVnI4MoHBQbGhLFnKo8/tv EnZthYq8RNYRAgkpmMJSgdsEjYqKQA7kzPGblAYZj3dU0OxAZc/EGj957PNTGQtR rCsCA721S+EQFlpyK1JVt5fp9IDEuP066dajuZc2VNlFYVDwl1wWV8HwJYOFcGid yxqBXsJRBcbqlWE3lI1ZAyr8060XZRjoTSFvppae7GGJ+BPVri2u7g6Kun6YnXcV ukr6AXNwxhr5C7sptqh03wTd3ZilTpJSb5XVmgQgs3w5hPGD/TqCmk9KejQBTMLj /5KdGtbZRLqczE1omqj+1MWPAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4/Ktw6 Sgmv08cljOKbf1lR75AXMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX4aVnZl1gXhjhpNqwee6ESqQUSYH96PxeiotQH0L7wONAMmC9j9Dz 5/GOCNM3HqTdpG2G1Kz8Vpur1NJZ4tJt8AHpl3MT/MXCmV35PpCdq949R8c8G7ho gs9JmWYpQYZa17QwrxSsv+GAAhutvzSRqvFTAmHQqP70BJduDrWxEuR9xQODaMgA KFjhVErXRB9iXFUOf283anFijn1DGrOqMrCzMKmfcEa+pzLamMK6JQSOJiX6HFO/ zYXSlL0EBL/twhxxDClL3MeELxD0q+1CiaSM06e1Ly3RCnEiPEAVS/qUxuuSYZvP x9kh966zY2GHSPPLMIEKvB48L/SHOsz3 -----END CERTIFICATE-----Generated at Mon Jul 21 08:09:13 2025 by rpki-client