$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft File: ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json) Hash identifier: /Qr4/9Rc7qOYipbP5Ahz6zQUMnWUN5prYL3RqNR3SjE= Subject key identifier: 84:98:1F:1E:81:73:E6:DB:B2:4A:12:36:90:30:21:B0:A8:66:C2:99 Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft Manifest number: 038B Signing time: Sat 19 Jul 2025 03:13:34 +0000 Manifest this update: Sat 19 Jul 2025 03:13:33 +0000 Manifest next update: Sat 26 Jul 2025 03:13:33 +0000 Files and hashes: 1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: 4u82ru1KpQzjj8QxoyP+mWG4SiVqZZhtDCfErdwpYTU=) 2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU=) 3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: SIcxhOEIM41kk3geT6tTo6gosphamPrjvTMVkyrZL2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Validity Not Before: Jul 19 03:13:33 2025 GMT Not After : Jul 26 03:13:33 2025 GMT Subject: CN=687b0d5d-d639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:5f:08:1f:1c:e5:24:48:00:55:21:15:9c: c3:73:8a:f2:a1:17:8b:9d:3c:b3:a6:b4:17:f7:51: 4e:c5:d5:06:7c:30:16:28:89:e8:68:0a:11:1e:ac: d9:26:17:c4:80:86:1d:c2:43:c3:fc:4b:09:2a:ae: d8:59:3d:73:38:89:eb:b5:a1:72:60:bd:58:5c:51: bb:82:f5:86:bf:6d:d2:1b:3b:82:2e:5c:61:21:a2: 85:4e:56:72:50:b6:e4:c4:c5:31:37:3f:dd:e6:5d: ef:98:02:4b:9e:37:cd:20:69:07:3c:ec:c0:9e:5d: a8:5e:8b:84:1f:31:e7:d2:90:6a:a3:3a:c3:3d:45: 3d:26:d5:20:fd:bb:fc:ad:a6:b5:29:0f:aa:b7:a0: d0:ac:86:8a:d0:e1:06:83:64:f5:d4:fa:22:cb:0f: e7:90:c5:d1:a6:ba:1b:56:75:59:a6:0c:fb:9f:d8: 7e:7b:a1:bb:b4:81:a8:1f:c4:3b:86:db:9a:68:cd: ba:12:43:6b:dc:de:25:e0:3d:94:a3:6f:6c:d5:e3: 94:50:a1:85:d5:d1:0a:da:a0:53:dd:d8:8d:af:dd: e6:af:5c:d6:a6:cd:02:10:90:06:e4:4b:8b:48:51: 9d:ed:b8:83:ad:23:d9:42:8d:6c:a7:3f:44:7e:da: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:98:1F:1E:81:73:E6:DB:B2:4A:12:36:90:30:21:B0:A8:66:C2:99 X509v3 Authority Key Identifier: keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f1:0a:e9:88:a2:09:09:62:9c:85:b4:90:21:36:bb:e3:61: a4:54:6a:08:35:8b:e1:bd:45:50:dd:7b:81:16:de:7a:07:69: 3a:60:9a:a3:a3:2d:34:fe:ed:5b:84:58:01:fc:83:2f:49:f8: 96:36:b0:16:c9:f1:b4:7a:a4:d0:85:ee:0d:04:5f:27:79:94: 61:3c:e1:80:c2:80:ea:34:db:7f:92:32:11:86:e8:62:d4:45: 17:ae:e3:e0:b0:26:e1:42:09:50:2d:79:cb:67:fa:a9:17:37: 0f:65:67:ce:e9:09:02:3b:94:6d:d9:df:6b:83:40:59:5f:e0: fa:e7:18:c3:08:12:ce:41:37:22:8a:8a:cf:21:57:18:30:94: 2e:f6:08:9c:9b:4c:3f:b8:24:10:58:a0:02:cd:b6:2c:27:52: b6:74:68:e5:0d:29:97:72:5c:e7:00:27:73:52:10:60:ba:04: bf:90:51:f1:98:c6:49:1f:b2:2f:7b:c3:85:d3:5e:b7:7e:e1: 2f:f2:b4:c7:75:34:81:c0:df:37:67:25:e8:53:1b:0d:bb:c1: f3:b1:b6:03:80:0b:06:71:cf:9d:60:e5:f0:dd:d9:69:4e:17: 9e:e4:1e:ea:ac:35:05:45:a6:f6:04:39:a6:2f:a1:1d:81:40: e1:2e:6f:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDMwNEQ2NEUzRjEwNTEyOTdFNEI2MkFDN0RFMzQ4MEY0 N0EyOUFFMEYwHhcNMjUwNzE5MDMxMzMzWhcNMjUwNzI2MDMxMzMzWjAYMRYwFAYD VQQDEw02ODdiMGQ1ZC1kNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU5fCB8c5SRIAFUhFZzDc4ryoReLnTyzprQX91FOxdUGfDAWKInoaAoRHqzZ JhfEgIYdwkPD/EsJKq7YWT1zOInrtaFyYL1YXFG7gvWGv23SGzuCLlxhIaKFTlZy ULbkxMUxNz/d5l3vmAJLnjfNIGkHPOzAnl2oXouEHzHn0pBqozrDPUU9JtUg/bv8 raa1KQ+qt6DQrIaK0OEGg2T11Poiyw/nkMXRprobVnVZpgz7n9h+e6G7tIGoH8Q7 htuaaM26EkNr3N4l4D2Uo29s1eOUUKGF1dEK2qBT3diNr93mr1zWps0CEJAG5EuL SFGd7biDrSPZQo1spz9EftqGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISYHx6B c+bbskoSNpAwIbCoZsKZMB8GA1UdIwQYMBaAFDBNZOPxBRKX5LYqx940gPR6Ka4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9NRTFrNF9FRkVwZmt0aXJIM2pTQTlIb3By ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9NRTFrNF9FRkVw Zmt0aXJIM2pTQTlIb3ByZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA28QrpiKIJCWKchbSQITa742GkVGoINYvhvUVQ3XuBFt56B2k6YJqj oy00/u1bhFgB/IMvSfiWNrAWyfG0eqTQhe4NBF8neZRhPOGAwoDqNNt/kjIRhuhi 1EUXruPgsCbhQglQLXnLZ/qpFzcPZWfO6QkCO5Rt2d9rg0BZX+D65xjDCBLOQTci iorPIVcYMJQu9gicm0w/uCQQWKACzbYsJ1K2dGjlDSmXclznACdzUhBgugS/kFHx mMZJH7Ive8OF0163fuEv8rTHdTSBwN83ZyXoUxsNu8HzsbYDgAsGcc+dYOXw3dlp Thee5B7qrDUFRab2BDmmL6EdgUDhLm9j -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:37 2025 by rpki-client