$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: a+rdiYo6jq8qJcvxVlUGiWfz4exYrjDi4V2AoLB1BRk= Subject key identifier: 29:5B:EF:A5:00:4D:E0:8C:E6:DB:AB:24:86:12:D3:84:20:B4:2E:2A Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 0346 Signing time: Sun 20 Jul 2025 16:23:47 +0000 Manifest this update: Sun 20 Jul 2025 16:23:46 +0000 Manifest next update: Sun 27 Jul 2025 16:23:46 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: ZFHWIENJprrkRHsG5jsUzPBEMtiUyCyZ28CVCl7klxU=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: BL08vovoDowTntRWd/Vw95cPa6IEzlJ82ZeGlQ75IkU=) 3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 53/ko4R0Tl6w2M1mgFXgRnuR8hXl1eg+ARaBcHCekgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: Jul 20 16:23:46 2025 GMT Not After : Jul 27 16:23:46 2025 GMT Subject: CN=687d1813-0d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:7c:cd:8f:59:3c:64:5c:d1:51:9c:0c:8c: b0:6b:19:61:82:e8:4a:1d:c7:ea:91:13:06:71:09: 96:37:57:b4:b8:91:94:c0:55:4d:83:d0:3d:6c:3e: 83:51:71:e6:a8:8c:15:90:54:40:c1:ff:97:62:aa: 71:a8:e8:13:28:fd:9e:12:82:42:9a:fc:df:9f:a7: 70:df:70:92:7f:c3:78:4a:18:11:6d:df:db:9f:86: 3a:a6:ca:14:95:1a:92:ac:d7:f5:f0:cf:2f:82:a7: d1:8d:ef:b6:8c:77:b4:15:6b:c1:9e:95:bc:3a:40: f0:cf:21:93:f8:b2:e6:ce:ae:fd:c6:d5:b7:0d:f0: 0c:02:5c:92:66:44:0c:72:07:46:46:69:b0:5e:18: 90:2e:ec:c4:1d:ea:8e:94:da:5e:9e:3a:2b:b8:54: db:28:47:a3:f2:fb:ea:45:ad:4a:3f:fa:eb:6d:cb: 12:8c:b0:a4:c7:e5:de:15:99:f8:23:b3:bf:9f:cc: 20:93:a2:16:d7:5e:7a:28:d5:29:19:5f:1e:1b:54: cd:ef:5f:c9:2d:5d:48:fb:dc:77:2c:90:73:30:45: a2:79:26:ed:65:8d:d4:89:0a:38:12:ff:79:7a:b2: 2a:c8:6c:93:ac:ab:0b:48:80:34:f4:1f:f5:3e:80: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:EF:A5:00:4D:E0:8C:E6:DB:AB:24:86:12:D3:84:20:B4:2E:2A X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9f:6c:23:53:39:4e:f0:05:c7:2f:ce:ac:a9:82:7a:9e:55: e4:e3:59:0a:32:50:54:82:f8:82:48:cf:27:89:8c:80:b9:a1: 64:5f:11:87:0a:af:54:26:a2:95:54:b3:00:83:a1:a0:28:ee: a5:db:b7:96:21:28:6b:3a:64:cb:92:c5:b9:83:e5:ae:f8:00: 37:ca:0a:e5:27:e5:7d:51:68:ed:1b:fe:ee:9e:84:18:f8:96: 99:d1:f8:8b:b9:3e:20:20:ba:ac:1c:fa:97:75:99:e2:a0:1a: 41:86:72:e4:cb:c4:89:92:6b:4f:e0:ce:82:b3:47:67:fd:c4: 7f:2a:50:f5:f1:6f:49:88:3f:aa:a5:83:ff:0a:80:36:5a:f3: 5a:60:ba:7d:9a:c0:51:a3:bd:06:28:8e:e6:d1:ff:ce:98:f5: 18:2c:67:2d:fe:93:02:80:42:57:e4:90:08:86:4d:4f:c9:30: 1b:8d:49:6b:4a:2c:28:16:7d:fa:ea:a2:04:ce:24:0f:79:2f: 95:a0:ed:99:8a:09:1c:f0:66:8c:b5:14:f4:1b:7a:13:5a:4d: 73:27:0d:79:1f:fa:41:3a:70:21:b6:17:e9:d3:ab:ac:af:ca: 35:29:0d:f8:04:30:4a:90:c5:1d:9b:ce:97:b2:b8:5c:63:42: 54:98:64:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjUwNzIwMTYyMzQ2WhcNMjUwNzI3MTYyMzQ2WjAYMRYwFAYD VQQDEw02ODdkMTgxMy0wZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39p8zY9ZPGRc0VGcDIywaxlhguhKHcfqkRMGcQmWN1e0uJGUwFVNg9A9bD6D UXHmqIwVkFRAwf+XYqpxqOgTKP2eEoJCmvzfn6dw33CSf8N4ShgRbd/bn4Y6psoU lRqSrNf18M8vgqfRje+2jHe0FWvBnpW8OkDwzyGT+LLmzq79xtW3DfAMAlySZkQM cgdGRmmwXhiQLuzEHeqOlNpenjoruFTbKEej8vvqRa1KP/rrbcsSjLCkx+XeFZn4 I7O/n8wgk6IW1156KNUpGV8eG1TN71/JLV1I+9x3LJBzMEWieSbtZY3UiQo4Ev95 erIqyGyTrKsLSIA09B/1PoCVHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClb76UA TeCM5turJIYS04QgtC4qMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApn2wjUzlO8AXHL86sqYJ6nlXk41kKMlBUgviCSM8niYyAuaFkXxGH Cq9UJqKVVLMAg6GgKO6l27eWIShrOmTLksW5g+Wu+AA3ygrlJ+V9UWjtG/7unoQY +JaZ0fiLuT4gILqsHPqXdZnioBpBhnLky8SJkmtP4M6Cs0dn/cR/KlD18W9JiD+q pYP/CoA2WvNaYLp9msBRo70GKI7m0f/OmPUYLGct/pMCgEJX5JAIhk1PyTAbjUlr SiwoFn366qIEziQPeS+VoO2Zigkc8GaMtRT0G3oTWk1zJw15H/pBOnAhthfp06us r8o1KQ34BDBKkMUdm86XsrhcY0JUmGR4 -----END CERTIFICATE-----Generated at Mon Jul 21 00:32:16 2025 by rpki-client