$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: eZQJdGafEhHqU+8AaxyF4Q/kVF8+PQijxHY1pLrQ8Jo= Subject key identifier: E5:C2:66:13:0F:47:F3:FF:4B:30:81:C4:79:47:36:52:B7:92:F1:2F Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 350C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 34DB Signing time: Sun 20 Jul 2025 14:22:09 +0000 Manifest this update: Sun 20 Jul 2025 14:22:08 +0000 Manifest next update: Sun 27 Jul 2025 14:22:08 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: BID1WcmeU6vIvb0uslcp5y585q+7HEhdb+h8QGSEu4k=) 2: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: yQ9Zz2wr8tjKdfaxVczUpLIfv3iNt/pg9a1JKFuCtos=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: C0b11kHxUkGRgJNkSLgXVrGvFc4MAtKBux3nfA6wsg8=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=) 6: A82F26B0466911F0ACD64867C4F9AE02.roa (hash: 2ZVWAkjDpndv3LhT9XdZy2paoKqw+nEDo6qJplPnRnM=) 7: 30941278EF2011EF9264077FC4F9AE02.roa (hash: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13580 (0x350c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Jul 20 14:22:08 2025 GMT Not After : Jul 27 14:22:08 2025 GMT Subject: CN=687cfb91-0eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:e4:0b:6d:5b:dd:e0:5a:cf:dd:8a:9f:c4: 5d:69:56:e3:8f:3b:be:6b:a3:8a:94:8b:f3:8e:6d: 2a:de:a8:9d:46:8f:51:2d:b8:e6:84:35:96:0e:27: 82:2c:d0:a2:80:da:fa:f6:c9:36:02:4e:8e:a2:cf: f3:a6:a5:7c:79:32:d7:b7:04:0d:a2:2e:d5:81:e7: 16:06:01:ca:c1:a3:9d:20:a0:01:df:ee:f7:e3:eb: 61:d9:d2:d4:b5:78:86:1d:7d:d6:be:29:93:c1:ab: 3e:29:43:94:ec:22:9b:70:36:57:b1:b8:7f:75:01: 2d:8e:f3:17:24:fa:8b:59:9a:1d:52:77:0d:56:8a: d4:f6:f7:7b:f3:9e:30:10:27:15:70:21:00:76:fc: d1:3d:65:3c:17:e0:21:b7:ae:79:3a:35:21:82:29: 1c:34:c5:ab:0d:e4:a5:57:0e:0b:84:05:c1:ab:92: 81:27:65:64:ec:bc:31:e2:ca:15:dc:be:c3:2b:88: 7f:03:dd:47:25:98:3d:2d:3e:3d:49:fc:a1:1f:ba: 54:d7:8b:53:c9:78:50:dc:aa:0d:63:0f:bd:80:90: b6:cb:74:8d:5b:01:97:0f:9e:bc:16:25:14:d3:5b: 1b:ca:0a:34:7d:5f:9a:37:46:7d:47:df:7c:d4:70: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C2:66:13:0F:47:F3:FF:4B:30:81:C4:79:47:36:52:B7:92:F1:2F X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:45:05:34:ba:43:29:a2:b2:5f:01:1d:8d:d1:6f:e9:4a:79: 30:44:3e:b1:53:ac:82:1b:be:d0:f5:48:80:b8:ca:84:c0:7c: 6a:f4:f0:c3:09:7f:da:98:83:13:e3:76:6c:3c:d8:eb:43:c8: 1f:f0:00:4c:db:21:fe:8a:d1:25:b6:01:d8:7f:27:7d:2b:de: a0:6d:4f:aa:48:ee:da:de:f1:f5:38:e9:6f:87:c6:0c:29:02: f8:a7:f6:16:3a:ae:a0:78:bf:01:49:dd:7d:d5:17:a3:7d:43: 98:ef:38:5a:1a:42:1b:6f:b4:ff:d7:62:e8:d8:4c:1f:08:3c: b3:61:92:25:f7:9f:2b:2e:8d:51:34:5c:b1:f4:78:54:41:f3: f9:70:47:67:80:c1:2f:f4:52:31:fc:c6:29:2f:3c:1e:a9:f6: d2:83:b3:04:6e:17:01:1b:1d:bc:44:05:39:63:a6:24:e1:cd: 8e:05:0e:18:a2:af:31:60:ef:ca:50:21:1b:94:31:93:dd:af: cd:8a:18:22:d1:5e:13:4f:9c:54:80:57:ea:5f:07:46:9f:0e: d7:d6:e0:ca:c1:d5:5e:7e:3b:02:a2:16:4c:89:9c:76:28:cc: fd:00:99:83:19:b1:b0:ea:ed:99:9e:a4:64:b8:7c:16:75:65: 06:d6:36:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjUwNzIwMTQyMjA4WhcNMjUwNzI3MTQyMjA4WjAYMRYwFAYD VQQDEw02ODdjZmI5MS0wZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9zkC21b3eBaz92Kn8RdaVbjjzu+a6OKlIvzjm0q3qidRo9RLbjmhDWWDieC LNCigNr69sk2Ak6Oos/zpqV8eTLXtwQNoi7VgecWBgHKwaOdIKAB3+734+th2dLU tXiGHX3WvimTwas+KUOU7CKbcDZXsbh/dQEtjvMXJPqLWZodUncNVorU9vd7854w ECcVcCEAdvzRPWU8F+Aht655OjUhgikcNMWrDeSlVw4LhAXBq5KBJ2Vk7Lwx4soV 3L7DK4h/A91HJZg9LT49SfyhH7pU14tTyXhQ3KoNYw+9gJC2y3SNWwGXD568FiUU 01sbygo0fV+aN0Z9R9981HBF5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXCZhMP R/P/SzCBxHlHNlK3kvEvMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJRQU0ukMporJfAR2N0W/pSnkwRD6xU6yCG77Q9UiAuMqEwHxq9PDD CX/amIMT43ZsPNjrQ8gf8ABM2yH+itEltgHYfyd9K96gbU+qSO7a3vH1OOlvh8YM KQL4p/YWOq6geL8BSd191RejfUOY7zhaGkIbb7T/12Lo2EwfCDyzYZIl958rLo1R NFyx9HhUQfP5cEdngMEv9FIx/MYpLzweqfbSg7MEbhcBGx28RAU5Y6Yk4c2OBQ4Y oq8xYO/KUCEblDGT3a/Nihgi0V4TT5xUgFfqXwdGnw7X1uDKwdVefjsCohZMiZx2 KMz9AJmDGbGw6u2ZnqRkuHwWdWUG1jYY -----END CERTIFICATE-----Generated at Sun Jul 20 18:49:36 2025 by rpki-client