$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json) Hash identifier: 6y9ZHKhWfqc5zAnqeLXdbMS9qcdngb3ORJoUftEy4io= Subject key identifier: 45:00:C3:4F:E2:8B:B3:1D:8A:FF:F6:18:91:26:51:AA:C0:08:92:35 Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft Manifest number: 02E3 Signing time: Mon 21 Jul 2025 01:40:47 +0000 Manifest this update: Mon 21 Jul 2025 01:40:47 +0000 Manifest next update: Mon 28 Jul 2025 01:40:47 +0000 Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: QK4ybZxsANDGl7sc4JVJL7U+G0Uq1v4vfifzAJ9POII=) 2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: +6obkqNFt0tnKMRz6dRit6ArMoN+fxhvRElw6ROUx6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B Validity Not Before: Jul 21 01:40:47 2025 GMT Not After : Jul 28 01:40:47 2025 GMT Subject: CN=687d9a9f-d9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:df:1b:a1:64:bf:44:43:37:c7:a9:11:99:c1: d6:fb:01:8b:4c:01:bd:57:3e:87:6d:10:04:67:ff: ed:53:98:ae:3a:ca:92:78:5d:cd:15:76:9c:f1:07: 29:46:44:bc:c2:fd:7a:d9:3d:24:08:32:a6:dc:13: 08:1f:9b:30:4e:86:19:0a:3d:00:97:af:20:05:be: ab:c6:2b:f5:4a:32:8a:4a:cb:d3:99:1a:5e:da:e4: ce:3e:f2:78:b5:ec:63:de:15:b5:b1:71:1e:bc:7c: 93:03:4d:53:6b:49:99:72:d2:88:15:50:e7:71:47: b8:65:fb:f9:bf:11:da:8a:fb:66:43:53:8b:81:6c: b6:e4:c7:27:af:7e:95:3e:b1:26:92:db:7f:76:42: d0:cb:c5:f2:5d:b5:82:5d:6b:27:48:66:d8:52:f0: fb:4a:2d:ed:ca:5c:44:79:b3:ce:40:8e:58:32:90: 95:f1:b2:45:18:d3:07:ee:16:d9:d0:d9:80:1c:37: 03:23:ad:00:34:cd:7a:1f:ab:3b:d5:88:a9:37:d9: c2:87:76:75:b5:36:78:36:b7:7f:09:5a:eb:51:b1: d5:d7:5a:cf:93:a2:10:73:5e:b6:65:3e:2f:01:3a: cc:8c:33:cf:35:66:f0:f3:ea:55:18:d3:93:34:89: f4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:00:C3:4F:E2:8B:B3:1D:8A:FF:F6:18:91:26:51:AA:C0:08:92:35 X509v3 Authority Key Identifier: keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f0:69:ed:39:bd:8b:50:d1:2c:17:21:cc:87:13:33:ab:90: 0e:14:8a:55:bb:02:e0:dd:f5:5f:7f:41:5f:c4:d2:c8:af:3c: 7c:67:b0:f5:7d:ba:b1:83:06:56:d4:a6:8d:48:c9:fb:f8:05: 8c:98:de:82:ee:41:13:09:bc:cc:0f:48:b7:64:f9:2b:f7:9a: 2b:99:b5:fd:76:f5:33:09:27:a7:7b:34:13:fa:10:22:53:2d: 28:b3:b1:f1:5f:be:58:23:5e:1f:cd:70:55:b8:85:37:1a:58: 11:4d:ab:bb:9b:4a:2c:00:c8:1f:14:fd:36:09:af:88:ad:48: 85:75:bf:6d:53:e0:ac:bc:0a:27:83:d8:af:53:55:f6:89:26: 76:4f:e2:09:4e:35:c5:ec:4f:86:d1:95:2e:0f:64:0e:d1:0c: 00:5c:87:50:54:88:c8:34:88:f2:93:92:aa:28:12:aa:97:d3: 03:36:48:64:a3:76:23:93:83:8e:07:46:e3:ce:62:54:23:83: 37:88:3e:03:2e:c9:63:c3:d8:68:38:d4:23:4a:ca:3c:01:96: 9b:a2:1f:57:5a:09:3b:c9:15:06:10:c7:a2:8e:86:22:6b:ae: b7:4c:9a:50:29:a6:15:09:bf:64:7d:f4:ea:87:73:d6:ff:3b: d5:67:25:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyMDIxMTAvBgNVBAUTKEUzQ0Y0NUY4MDUxMDYzQkJEQjMxN0ZERDE1MTEzMkE5 NDAwNEZENUIwHhcNMjUwNzIxMDE0MDQ3WhcNMjUwNzI4MDE0MDQ3WjAYMRYwFAYD VQQDEw02ODdkOWE5Zi1kOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9d8boWS/REM3x6kRmcHW+wGLTAG9Vz6HbRAEZ//tU5iuOsqSeF3NFXac8Qcp RkS8wv162T0kCDKm3BMIH5swToYZCj0Al68gBb6rxiv1SjKKSsvTmRpe2uTOPvJ4 texj3hW1sXEevHyTA01Ta0mZctKIFVDncUe4Zfv5vxHaivtmQ1OLgWy25Mcnr36V PrEmktt/dkLQy8XyXbWCXWsnSGbYUvD7Si3tylxEebPOQI5YMpCV8bJFGNMH7hbZ 0NmAHDcDI60ANM16H6s71YipN9nCh3Z1tTZ4Nrd/CVrrUbHV11rPk6IQc162ZT4v ATrMjDPPNWbw8+pVGNOTNIn0WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUAw0/i i7Mdiv/2GJEmUarACJI1MB8GA1UdIwQYMBaAFOPPRfgFEGO72zF/3RURMqlABP1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzIwMi8wQUZFQ0E3MEY3 MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3dmJNWF9kRlJFeXFVQUVf VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi80ODlGLUFVUVk3 dmJNWF9kRlJFeXFVQUVfVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA28GntOb2LUNEsFyHMhxMzq5AOFIpVuwLg3fVff0FfxNLIrzx8Z7D1 fbqxgwZW1KaNSMn7+AWMmN6C7kETCbzMD0i3ZPkr95ormbX9dvUzCSenezQT+hAi Uy0os7HxX75YI14fzXBVuIU3GlgRTau7m0osAMgfFP02Ca+IrUiFdb9tU+CsvAon g9ivU1X2iSZ2T+IJTjXF7E+G0ZUuD2QO0QwAXIdQVIjINIjyk5KqKBKql9MDNkhk o3Yjk4OOB0bjzmJUI4M3iD4DLsljw9hoONQjSso8AZaboh9XWgk7yRUGEMeijoYi a663TJpQKaYVCb9kffTqh3PW/zvVZyXf -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:42 2025 by rpki-client