$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft File: -T76pqbQVK6ZfIo8_yXxacNvigw.mft (raw, json) Hash identifier: 0uVHwcgbLyRIAuotNDV1q1o1DzoGjcalMASHGV0pOkI= Subject key identifier: 6C:04:BC:61:C3:FC:E6:46:04:09:6A:62:5B:86:9B:AD:D8:38:29:15 Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft Manifest number: 0110 Signing time: Sat 19 Jul 2025 05:09:46 +0000 Manifest this update: Sat 19 Jul 2025 05:09:45 +0000 Manifest next update: Sat 26 Jul 2025 05:09:45 +0000 Files and hashes: 1: -T76pqbQVK6ZfIo8_yXxacNvigw.crl (hash: OBoPrMxyH3oZ4mCwcN7nsgjzdyQvyOQOhAm8pDdMEaU=) 2: 395803C8CDD011EEB4E50681C4F9AE02.roa (hash: U+mu9E/7fBnjCJrDiP1cAMTZViiPy5KDtk1hEO7aXYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C Validity Not Before: Jul 19 05:09:45 2025 GMT Not After : Jul 26 05:09:45 2025 GMT Subject: CN=687b2899-b4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:69:bf:95:fb:05:75:4e:23:82:aa:77:cb: 6a:63:30:bd:a9:54:09:95:ec:04:3f:76:f2:4d:32: 43:b2:ac:c0:8b:58:bd:9b:b8:32:0e:43:11:2d:f0: 74:a2:04:f3:76:92:c8:35:8d:f4:4e:a6:60:28:a1: 22:5e:1e:a9:fd:60:76:e9:ff:23:19:d6:0e:53:46: b3:4c:37:99:74:33:a6:53:2b:3d:00:20:21:37:ec: 3b:ec:ca:18:f9:f5:02:7e:51:53:e7:b0:ce:84:83: 57:0e:ed:79:85:fc:9c:1f:d4:63:dd:5d:28:06:a0: 85:55:e6:be:ac:57:2d:63:36:2c:4c:c2:e0:47:9b: 0e:7e:90:b7:93:60:30:48:b5:f1:a0:b7:ac:56:4b: c9:c5:aa:4b:32:17:8a:8b:a4:93:51:27:32:bd:d9: 47:c7:28:e7:64:8d:7b:3f:bf:00:7b:45:a4:49:ae: ef:c6:9b:50:5e:9c:97:af:e4:1e:6d:71:7d:e0:30: 63:30:e4:bf:91:e8:b3:9d:37:a0:a8:2b:94:dc:9c: 99:3a:9b:04:c8:fc:f5:c3:a8:34:24:7c:88:bc:20: f4:e7:2f:42:02:da:ab:e0:00:c4:18:97:3f:2c:30: c2:80:8e:ec:35:d9:e4:b0:40:ea:de:36:6b:24:2e: 9b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:BC:61:C3:FC:E6:46:04:09:6A:62:5B:86:9B:AD:D8:38:29:15 X509v3 Authority Key Identifier: keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e7:ef:6c:d0:0f:64:7d:13:0f:af:8a:52:e0:99:db:9d:07: e3:70:2f:c1:8d:6f:00:d5:94:dc:34:a9:68:91:20:6c:73:1a: 95:2c:d7:64:7f:30:a4:07:2e:94:dd:eb:35:08:a8:ec:21:f1: 08:24:ef:67:f1:aa:0f:8b:24:dd:39:8a:7c:9e:db:1f:9d:9a: cb:2a:4f:98:03:96:5d:2d:ab:3c:d8:d7:3f:f2:dc:ef:19:63: f6:e2:0c:60:e1:77:07:81:59:3d:0e:6b:28:61:d7:8a:ae:30: 31:6a:25:c2:e5:13:09:4a:80:6d:58:88:6b:d5:2d:95:58:60: 9e:5d:ce:33:ff:9e:e1:93:5d:36:c0:9f:6f:41:7a:2e:ff:84: a3:6f:8a:8d:d3:f1:be:e1:3b:1d:a1:b4:6a:2e:24:38:5d:85: 80:39:f6:67:7e:23:13:e3:cd:33:dc:3d:1e:65:db:92:4e:b3: cc:c9:d2:79:b9:ac:a3:90:99:e2:3b:e1:14:9b:d0:ef:10:38: f5:9e:a1:d8:a0:4e:13:97:e1:1f:75:99:ad:8d:6f:76:fb:6d: 7a:e3:f1:d1:89:bf:f0:5a:fe:c8:d9:88:55:eb:81:43:d8:88: 6d:d3:bb:d5:3e:0e:e1:e9:b0:8b:72:90:c4:ea:97:f9:65:91: d0:b3:f5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5 QzM2RjhBMEMwHhcNMjUwNzE5MDUwOTQ1WhcNMjUwNzI2MDUwOTQ1WjAYMRYwFAYD VQQDEw02ODdiMjg5OS1iNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3Vpv5X7BXVOI4Kqd8tqYzC9qVQJlewEP3byTTJDsqzAi1i9m7gyDkMRLfB0 ogTzdpLINY30TqZgKKEiXh6p/WB26f8jGdYOU0azTDeZdDOmUys9ACAhN+w77MoY +fUCflFT57DOhINXDu15hfycH9Rj3V0oBqCFVea+rFctYzYsTMLgR5sOfpC3k2Aw SLXxoLesVkvJxapLMheKi6STUScyvdlHxyjnZI17P78Ae0WkSa7vxptQXpyXr+Qe bXF94DBjMOS/keiznTegqCuU3JyZOpsEyPz1w6g0JHyIvCD05y9CAtqr4ADEGJc/ LDDCgI7sNdnksEDq3jZrJC6bHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwEvGHD /OZGBAlqYluGm63YOCkVMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9COTg5RjhBMkM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZL NlpmSW84X3lYeGFjTnZpZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv5+9s0A9kfRMPr4pS4JnbnQfjcC/BjW8A1ZTcNKlokSBscxqVLNdk fzCkBy6U3es1CKjsIfEIJO9n8aoPiyTdOYp8ntsfnZrLKk+YA5ZdLas82Nc/8tzv GWP24gxg4XcHgVk9DmsoYdeKrjAxaiXC5RMJSoBtWIhr1S2VWGCeXc4z/57hk102 wJ9vQXou/4Sjb4qN0/G+4TsdobRqLiQ4XYWAOfZnfiMT480z3D0eZduSTrPMydJ5 uayjkJniO+EUm9DvEDj1nqHYoE4Tl+EfdZmtjW92+2164/HRib/wWv7I2YhV64FD 2Iht07vVPg7h6bCLcpDE6pf5ZZHQs/UM -----END CERTIFICATE-----Generated at Sun Jul 20 18:42:24 2025 by rpki-client