$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json) Hash identifier: 1cZwb2bAxS/feVVjY7IK1VVXVCE/ZUCziKMFF4kLk8c= Subject key identifier: 47:8C:75:77:C1:C4:08:32:60:95:A3:0A:25:49:54:C0:8E:1C:05:40 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 046F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft Manifest number: 0469 Signing time: Fri 18 Jul 2025 17:10:59 +0000 Manifest this update: Fri 18 Jul 2025 17:10:59 +0000 Manifest next update: Fri 25 Jul 2025 17:10:59 +0000 Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: RLkUH1OB7XnOUsdvyztLbeXKHS1Eqxr+RvsNc8fFPz0=) 2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1135 (0x46f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Jul 18 17:10:59 2025 GMT Not After : Jul 25 17:10:59 2025 GMT Subject: CN=687a8023-927c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:8a:a4:28:a9:d2:38:f2:ce:94:ba:44:34: 82:37:bc:90:1b:9e:8a:1a:58:4f:85:eb:73:8f:9d: b9:78:89:bc:4e:15:83:3f:09:06:69:93:d0:14:d0: 3b:93:e1:55:f9:fa:0e:26:51:8a:1a:a5:df:f8:98: 9b:24:54:6a:ce:cc:9a:97:24:c0:fc:27:8a:52:ac: 21:b4:53:8d:68:08:cf:29:7f:e7:e6:b5:3b:fb:23: da:c6:ad:ed:0f:45:64:cc:10:a6:87:84:c3:49:b0: 24:3e:f9:ad:54:f7:20:80:ec:74:90:69:99:36:a8: a1:e8:71:a9:2a:43:0d:6d:ad:ac:97:a1:88:90:ae: 61:90:4f:76:53:0c:72:fb:8e:7d:68:a5:4e:8a:94: 61:89:5f:d6:10:27:22:5a:b2:12:99:2d:80:3d:72: 77:67:ac:0c:30:92:ce:06:b5:3f:45:01:f0:f4:c5: 00:17:53:f9:41:ab:91:c9:a6:fd:53:50:0e:83:a0: 36:4b:ac:77:23:86:a8:b5:55:64:8c:9e:73:85:6d: 6f:e4:12:ef:bc:9e:8b:52:07:b8:61:4f:53:20:71: 0b:9f:1c:51:e0:a9:98:b1:80:83:62:d5:97:92:97: 43:34:71:9f:4f:a6:6f:61:70:30:97:b1:00:ef:9c: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8C:75:77:C1:C4:08:32:60:95:A3:0A:25:49:54:C0:8E:1C:05:40 X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b4:5f:0f:fa:8a:2e:5e:97:5c:3c:a7:41:a9:3f:78:ad:a6: af:33:f0:40:6d:39:ce:62:16:97:79:fb:73:27:f1:72:28:7f: eb:55:65:d9:56:f3:92:c5:91:f2:c3:ef:bc:d0:5b:ee:03:c8: c4:12:15:3c:7a:a8:18:c3:d8:06:10:04:66:00:48:da:95:49: 98:76:52:9b:07:4b:26:56:62:e9:db:bf:c6:44:ef:53:98:35: 04:0e:ff:ea:8d:14:0d:fe:64:47:e1:47:ed:6a:18:33:26:8f: 6a:01:49:92:f3:70:9f:60:45:37:39:81:6a:48:67:e7:e8:09: c6:a6:90:f8:7f:67:e3:78:41:9e:eb:ef:ec:be:2c:3c:ae:83: 0e:5e:5e:dd:4b:95:fa:3e:f1:49:74:8c:e5:6f:7f:0a:cd:4d: 55:a6:45:bf:d4:87:7b:b5:c9:97:4b:4d:e0:b9:f6:c0:d7:06: 65:b3:34:fb:6f:aa:ec:6c:ef:32:56:b7:94:38:c3:1d:6e:5d: 3a:b9:6d:8d:f4:e0:31:45:f6:f7:c7:b5:f1:ba:d3:2f:32:a8: bb:01:c9:a5:b2:e4:fc:9f:42:d2:32:eb:8a:e8:d8:b9:ff:16: df:c4:b4:eb:f1:b2:e4:e6:f3:a6:81:0e:f5:89:eb:cb:19:86: a9:22:be:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjUwNzE4MTcxMDU5WhcNMjUwNzI1MTcxMDU5WjAYMRYwFAYD VQQDEw02ODdhODAyMy05MjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskiKpCip0jjyzpS6RDSCN7yQG56KGlhPhetzj525eIm8ThWDPwkGaZPQFNA7 k+FV+foOJlGKGqXf+JibJFRqzsyalyTA/CeKUqwhtFONaAjPKX/n5rU7+yPaxq3t D0VkzBCmh4TDSbAkPvmtVPcggOx0kGmZNqih6HGpKkMNba2sl6GIkK5hkE92Uwxy +459aKVOipRhiV/WECciWrISmS2APXJ3Z6wMMJLOBrU/RQHw9MUAF1P5QauRyab9 U1AOg6A2S6x3I4aotVVkjJ5zhW1v5BLvvJ6LUge4YU9TIHELnxxR4KmYsYCDYtWX kpdDNHGfT6ZvYXAwl7EA75yPDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeMdXfB xAgyYJWjCiVJVMCOHAVAMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS8xRTc1MzY1MDU5NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZq UEtYY3RoZHBDYzRaWWh1bVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOtF8P+oouXpdcPKdBqT94raavM/BAbTnOYhaXeftzJ/FyKH/rVWXZ VvOSxZHyw++80FvuA8jEEhU8eqgYw9gGEARmAEjalUmYdlKbB0smVmLp27/GRO9T mDUEDv/qjRQN/mRH4UftahgzJo9qAUmS83CfYEU3OYFqSGfn6AnGppD4f2fjeEGe 6+/sviw8roMOXl7dS5X6PvFJdIzlb38KzU1VpkW/1Id7tcmXS03gufbA1wZlszT7 b6rsbO8yVreUOMMdbl06uW2N9OAxRfb3x7XxutMvMqi7AcmlsuT8n0LSMuuK6Ni5 /xbfxLTr8bLk5vOmgQ71ievLGYapIr4M -----END CERTIFICATE-----Generated at Sun Jul 20 12:19:41 2025 by rpki-client