$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft File: MtNTdDyP4vCOl7IuW2CavBTM_js.mft (raw, json) Hash identifier: 6YV28qJ8pKZr26+8ghA4NiwMXkQLfwqyuYm6KhYGs50= Subject key identifier: E3:7F:C1:D9:FE:B0:1D:DA:5B:D6:5A:05:62:64:9E:00:62:26:CD:3B Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B Certificate issuer: /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft Manifest number: BD Signing time: Sat 19 Jul 2025 06:21:50 +0000 Manifest this update: Sat 19 Jul 2025 06:21:49 +0000 Manifest next update: Sat 26 Jul 2025 06:21:49 +0000 Files and hashes: 1: MtNTdDyP4vCOl7IuW2CavBTM_js.crl (hash: kz52AlTKFWolCdw9QmC9Nq1m3f8ojaRz02DYOlTJPnQ=) 2: 144D9AA823F011F0B0D6F263C4F9AE02.roa (hash: 8/Hd/HSfsJzaFCQ02un66M2YDgdginFixcaFn5JQidY=) 3: DB9E3242C8E811EF86365B2AC4F9AE02.roa (hash: v6pTRro113en+h2WsmtXqk2rxE6NwkgghVA0fGJU70E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B Validity Not Before: Jul 19 06:21:49 2025 GMT Not After : Jul 26 06:21:49 2025 GMT Subject: CN=687b397d-4c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:b1:4d:bf:73:f9:f6:1f:36:58:19:e2:d7: b4:4b:42:a3:20:ec:2a:d6:a7:f9:3a:84:b3:e8:94: 80:30:8d:8b:6e:c3:24:e7:3f:0b:9d:e2:d0:48:a9: a1:51:ee:06:09:72:4d:07:7f:ea:4a:6a:90:a8:a5: 76:3d:cc:d2:1f:54:87:34:b7:4a:ba:f5:80:92:0e: 7d:33:28:61:d7:b7:69:8f:ae:5f:5b:87:f6:79:c8: 39:f4:fe:16:34:d7:52:d5:53:d6:c9:33:6e:70:d9: a8:5f:df:d9:2a:31:41:5c:d2:e4:c3:1e:aa:44:b2: 86:80:52:ae:77:75:e7:7d:b1:ff:e7:50:86:bc:9e: 3d:aa:d0:a3:35:d5:37:3f:8c:68:55:9d:59:5d:04: 5e:3f:d3:fd:b5:6d:c9:3b:59:1d:55:3e:60:e3:6e: cf:c1:20:15:e3:08:f8:c7:36:a4:0b:f8:33:8c:b1: 24:9a:aa:18:0d:d5:48:68:22:01:b9:1a:b5:3d:ab: ed:d0:81:9e:37:73:00:80:53:a4:27:33:66:6c:74: 0e:cb:d0:e9:79:5c:af:d6:ae:40:c0:2f:43:0e:bb: f9:69:80:46:4e:44:83:b8:1f:38:91:99:fa:dd:42: 3e:e2:5a:c0:9b:27:e5:e0:3d:22:b3:3a:b0:ea:02: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7F:C1:D9:FE:B0:1D:DA:5B:D6:5A:05:62:64:9E:00:62:26:CD:3B X509v3 Authority Key Identifier: keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c8:63:4f:4c:79:2f:2d:8d:4c:4d:3f:84:5a:90:67:e9:d7: b5:94:15:01:ab:82:ac:3f:73:13:f2:9c:58:b1:f0:43:b3:bc: 38:41:3a:37:2d:73:bc:4c:1c:dd:0b:38:02:1d:42:ce:37:e6: c9:99:5f:77:6c:c2:e7:56:05:5c:ff:3d:a8:1e:f1:29:f9:39: 41:54:fa:e2:49:9c:10:5a:37:81:9a:01:d5:06:d2:52:11:88: 2f:c2:59:db:a7:0a:8d:c1:41:0e:9c:c7:95:4f:c4:ca:8c:b1: dc:83:af:1d:37:15:05:32:89:2b:c2:0c:80:6a:0b:ac:47:9e: 09:d1:e7:13:01:f8:db:3b:63:79:24:dd:88:40:c5:97:35:6e: 53:f5:8b:80:8a:a4:d5:f2:77:87:91:f0:01:80:94:61:49:10: aa:80:40:c8:88:07:90:0c:35:19:be:8f:28:f3:f3:33:1b:35: 63:bd:6d:14:15:3f:70:cb:04:04:48:bf:b0:47:a2:a4:a9:8e: e2:d1:98:80:85:15:3e:18:98:4d:1c:b7:c2:fa:63:5a:95:53: e5:f3:8b:59:78:c9:e8:10:25:50:1a:6f:79:c2:11:bf:f8:88: 71:d1:11:56:8d:93:d2:d2:8f:c1:c2:54:1a:89:4e:59:bb:46: 09:d2:73:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNjQxMTAvBgNVBAUTKDMyRDM1Mzc0M0M4RkUyRjA4RTk3QjIyRTVCNjA5QUJD MTRDQ0ZFM0IwHhcNMjUwNzE5MDYyMTQ5WhcNMjUwNzI2MDYyMTQ5WjAYMRYwFAYD VQQDEw02ODdiMzk3ZC00YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5e6xTb9z+fYfNlgZ4te0S0KjIOwq1qf5OoSz6JSAMI2LbsMk5z8LneLQSKmh Ue4GCXJNB3/qSmqQqKV2PczSH1SHNLdKuvWAkg59Myhh17dpj65fW4f2ecg59P4W NNdS1VPWyTNucNmoX9/ZKjFBXNLkwx6qRLKGgFKud3XnfbH/51CGvJ49qtCjNdU3 P4xoVZ1ZXQReP9P9tW3JO1kdVT5g427PwSAV4wj4xzakC/gzjLEkmqoYDdVIaCIB uRq1Pavt0IGeN3MAgFOkJzNmbHQOy9DpeVyv1q5AwC9DDrv5aYBGTkSDuB84kZn6 3UI+4lrAmyfl4D0iszqw6gLXmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFON/wdn+ sB3aW9ZaBWJkngBiJs07MB8GA1UdIwQYMBaAFDLTU3Q8j+LwjpeyLltgmrwUzP47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2NC83N0JGMDE5MjYy NEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2Q09sN0l1VzJDYXZCVE1f anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL010TlRkRHlQNHZDT2w3SXVXMkNhdkJUTV9qcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2NC83N0JGMDE5MjYyNEIxMUVGQUIxMjBGNEZDNEY5QUUwMi9NdE5UZER5UDR2 Q09sN0l1VzJDYXZCVE1fanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuyGNPTHkvLY1MTT+EWpBn6de1lBUBq4KsP3MT8pxYsfBDs7w4QTo3 LXO8TBzdCzgCHULON+bJmV93bMLnVgVc/z2oHvEp+TlBVPriSZwQWjeBmgHVBtJS EYgvwlnbpwqNwUEOnMeVT8TKjLHcg68dNxUFMokrwgyAagusR54J0ecTAfjbO2N5 JN2IQMWXNW5T9YuAiqTV8neHkfABgJRhSRCqgEDIiAeQDDUZvo8o8/MzGzVjvW0U FT9wywQESL+wR6KkqY7i0ZiAhRU+GJhNHLfC+mNalVPl84tZeMnoECVQGm95whG/ +Ihx0RFWjZPS0o/BwlQaiU5Zu0YJ0nOX -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:17 2025 by rpki-client