$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json) Hash identifier: VjSqLe4eXMPc3xZYmkrNrByhsbqHsZTQ9DwOfyUG0pE= Subject key identifier: 50:11:0E:C2:ED:8E:20:C7:5E:04:D9:9D:37:97:C7:A9:E8:AA:4C:85 Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft Manifest number: 07B4 Signing time: Thu 24 Jul 2025 21:29:21 +0000 Manifest this update: Thu 24 Jul 2025 21:29:21 +0000 Manifest next update: Thu 31 Jul 2025 21:29:21 +0000 Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: rrpi605b3S8Nd82aO3wNsCi5X6MwunpY75K7jISFR3w=) 2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=) 3: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=) 4: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21 Validity Not Before: Jul 24 21:29:21 2025 GMT Not After : Jul 31 21:29:21 2025 GMT Subject: CN=6882a5b1-067b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:5b:d5:ca:0e:c1:15:28:ee:5f:f8:f7:b5: 6e:cd:a3:60:c5:92:1b:f4:85:b8:6e:23:98:89:ee: e5:7b:82:16:50:84:88:6d:9f:18:4a:53:67:b4:b7: 36:ea:90:1c:37:79:7f:a1:cd:50:2a:8c:5c:51:b0: 21:be:1c:d6:f6:bc:ec:e6:66:b1:fe:0f:4d:6f:be: 5e:24:01:d1:45:27:f1:48:d0:9a:b0:01:12:34:eb: a5:aa:79:45:2a:a4:e2:86:c4:1d:31:61:11:0c:05: 2f:79:f6:f1:34:3a:74:63:60:72:50:c6:fd:f2:80: ab:f0:a7:4f:87:29:40:f7:98:8e:63:65:72:4b:bd: 8b:a2:09:22:5f:a7:f8:54:74:40:13:91:03:af:98: de:61:1f:b7:f8:9a:b5:8c:55:9d:14:52:10:2b:ea: 8e:c5:02:42:fa:ae:a5:c5:3d:41:0f:d2:b9:ca:5c: bc:9d:1e:4b:25:1b:e3:87:e6:95:9d:d6:18:79:1c: 06:7b:95:f4:b9:bd:cf:22:e3:13:d6:5b:51:9a:89: d2:4b:9a:af:07:a4:8a:f7:ea:b7:94:6c:52:f4:e0: be:d7:0f:3d:c6:8a:82:16:03:51:dc:c3:da:31:f3: 5c:00:6e:39:c3:6b:77:fd:12:a5:7b:a3:ec:f9:2e: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:0E:C2:ED:8E:20:C7:5E:04:D9:9D:37:97:C7:A9:E8:AA:4C:85 X509v3 Authority Key Identifier: keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ed:92:6b:3c:92:fd:ed:95:da:46:c2:fd:d6:48:53:08:6f: 94:42:1a:e6:4f:ce:8b:31:dc:e9:83:61:cf:31:20:ff:20:55: 1a:c1:0b:d7:4b:76:e0:7f:11:e3:76:f1:99:33:98:e6:11:82: 47:b1:21:32:d2:b8:ba:ca:3e:33:95:df:6a:0b:3b:ac:f8:4e: 08:0f:cb:a0:11:92:9c:fb:b2:a6:f4:27:bb:6f:a9:7d:7b:9f: 68:fe:fc:07:c3:8b:e0:87:87:c1:35:09:c2:b4:21:87:83:db: 4e:bb:ba:42:f7:13:5d:d6:d9:64:6d:e7:b4:7f:4f:8e:00:7e: fe:3c:f9:13:98:84:83:b1:03:09:e7:72:e5:f6:8a:4e:dd:20: 96:f2:12:38:47:2e:1c:2e:b9:e4:9a:c9:c7:7b:1b:ce:58:14: 61:3d:3c:4b:61:b9:16:32:e1:85:93:ec:3a:9f:2f:dd:eb:a7: da:f7:64:fd:bb:f3:16:c4:ee:0f:ee:8e:cc:3a:96:46:c5:ef: 30:90:50:ea:bf:a3:7b:0f:07:d0:2b:9f:a9:f5:97:5c:07:d6: 8d:ab:d1:aa:b5:20:80:fa:d0:f8:37:45:0e:75:43:ce:6e:b5: 85:0f:cb:d9:ed:74:8a:17:f7:06:db:be:ab:1d:76:2f:f0:fe: ac:c7:14:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB RjE3OTFGMjEwHhcNMjUwNzI0MjEyOTIxWhcNMjUwNzMxMjEyOTIxWjAYMRYwFAYD VQQDEw02ODgyYTViMS0wNjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCpb1coOwRUo7l/497VuzaNgxZIb9IW4biOYie7le4IWUISIbZ8YSlNntLc2 6pAcN3l/oc1QKoxcUbAhvhzW9rzs5max/g9Nb75eJAHRRSfxSNCasAESNOulqnlF KqTihsQdMWERDAUvefbxNDp0Y2ByUMb98oCr8KdPhylA95iOY2VyS72LogkiX6f4 VHRAE5EDr5jeYR+3+Jq1jFWdFFIQK+qOxQJC+q6lxT1BD9K5yly8nR5LJRvjh+aV ndYYeRwGe5X0ub3PIuMT1ltRmonSS5qvB6SK9+q3lGxS9OC+1w89xoqCFgNR3MPa MfNcAG45w2t3/RKle6Ps+S4l9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFARDsLt jiDHXgTZnTeXx6noqkyFMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL aXdNTjQtcUotay12RjVIeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk7ZJrPJL97ZXaRsL91khTCG+UQhrmT86LMdzpg2HPMSD/IFUawQvX S3bgfxHjdvGZM5jmEYJHsSEy0ri6yj4zld9qCzus+E4ID8ugEZKc+7Km9Ce7b6l9 e59o/vwHw4vgh4fBNQnCtCGHg9tOu7pC9xNd1tlkbee0f0+OAH7+PPkTmISDsQMJ 53Ll9opO3SCW8hI4Ry4cLrnkmsnHexvOWBRhPTxLYbkWMuGFk+w6ny/d66fa92T9 u/MWxO4P7o7MOpZGxe8wkFDqv6N7DwfQK5+p9ZdcB9aNq9GqtSCA+tD4N0UOdUPO brWFD8vZ7XSKF/cG276rHXYv8P6sxxQ4 -----END CERTIFICATE-----Generated at Fri Jul 25 07:05:31 2025 by rpki-client