$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: qIK/+tYywzbW06VtJ/C4kk4oTj/Q/k49kYo+oSYBnC0= Subject key identifier: 52:E0:41:76:8E:38:B2:FD:52:51:E4:C0:C8:5C:A3:9C:C3:0E:64:D1 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 0365 Signing time: Tue 09 Sep 2025 01:02:00 +0000 Manifest this update: Tue 09 Sep 2025 01:02:00 +0000 Manifest next update: Tue 16 Sep 2025 01:02:00 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: uNF0xJyRVS+7k9nSeidI1P8D3yf4xmYfZ1TPk3MREXc=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Sep 9 01:02:00 2025 GMT Not After : Sep 16 01:02:00 2025 GMT Subject: CN=68bf7c88-691f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:4b:1a:7e:77:76:ad:77:c6:15:93:3f:54: e2:06:2e:eb:be:c2:4d:bb:3a:b9:88:b2:55:64:e7: 86:6c:32:95:46:5d:cb:a2:bf:8d:fa:b8:37:b9:c6: 0f:f0:02:1d:24:e1:47:1b:35:03:b2:2d:f9:41:68: 8b:42:8a:6c:73:66:a9:5a:65:7a:e2:33:4f:4b:17: 92:97:a2:5e:90:f8:f3:a9:e5:50:9b:05:12:44:c7: 86:20:4d:e7:ff:6f:08:63:2a:22:c4:98:5d:11:31: 7c:a2:65:1a:c9:fb:18:0e:b8:4f:59:ae:09:f2:88: 34:1f:f7:7c:f5:3e:73:e0:f3:ba:f1:0d:e1:3d:47: 82:19:d8:82:2f:e8:20:35:38:e9:22:8c:6f:4e:a9: 48:4e:e4:a5:fc:fd:6e:8d:56:06:96:c9:ce:fd:60: 2f:67:b4:71:1a:d3:f2:af:85:e7:27:ab:f1:a2:3a: 0c:90:04:fc:a7:75:2e:0b:0a:fe:31:73:7d:f2:4f: 00:26:1a:d7:74:56:3a:2e:2c:16:c8:ff:d2:fe:4d: 5b:73:2b:44:21:54:ca:52:e1:ef:98:cd:69:f3:bd: a9:a0:ca:bf:1a:79:23:61:76:a7:5f:d3:b9:48:df: 52:0e:f7:bc:33:c5:1f:59:b9:85:b1:c9:7f:78:b5: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E0:41:76:8E:38:B2:FD:52:51:E4:C0:C8:5C:A3:9C:C3:0E:64:D1 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:16:a7:c3:9c:51:39:83:00:e5:7f:b5:ff:80:d0:e0:86:a7: ed:05:1e:f6:d0:52:45:04:8f:87:ba:6d:7c:95:19:8e:42:42: fa:ac:f7:10:f9:2b:13:6f:2d:bb:35:d3:ee:a3:ed:87:af:98: d1:3f:ea:07:47:34:97:bc:2b:aa:41:ce:a6:bb:0a:3a:1c:89: f1:56:6c:47:31:2b:62:52:c1:b1:1c:91:44:3d:c1:75:c6:11: d8:fb:81:d6:11:f1:6b:42:cf:07:9e:8f:d0:06:de:85:bf:b1: 72:10:6b:dd:4a:bd:fe:87:ee:4f:45:89:85:90:5a:74:50:76: 1f:f6:9a:d8:02:82:0c:1d:ec:a8:69:a6:2e:99:49:0d:56:51: a7:60:ac:85:d2:ab:96:11:00:bc:b6:a6:c7:93:2b:5e:d6:5e: ad:d7:60:e1:f3:5e:48:e3:63:fb:8c:13:43:2b:b1:2f:32:90: 99:f4:39:18:fa:47:ef:c6:8d:2b:0f:22:97:31:49:5f:33:46: d0:5a:7e:4c:83:b7:14:c6:b1:ba:b1:ed:40:16:6c:05:d0:6b: 0d:8b:e0:45:22:d8:76:86:13:ed:80:a2:10:7f:c0:58:00:d5: 96:4d:6b:cd:30:f2:13:94:87:1d:14:79:fc:d9:5c:d0:50:79: 0e:9c:6d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwOTA5MDEwMjAwWhcNMjUwOTE2MDEwMjAwWjAYMRYwFAYD VQQDEw02OGJmN2M4OC02OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQhLGn53dq13xhWTP1TiBi7rvsJNuzq5iLJVZOeGbDKVRl3Lor+N+rg3ucYP 8AIdJOFHGzUDsi35QWiLQopsc2apWmV64jNPSxeSl6JekPjzqeVQmwUSRMeGIE3n /28IYyoixJhdETF8omUayfsYDrhPWa4J8og0H/d89T5z4PO68Q3hPUeCGdiCL+gg NTjpIoxvTqlITuSl/P1ujVYGlsnO/WAvZ7RxGtPyr4XnJ6vxojoMkAT8p3UuCwr+ MXN98k8AJhrXdFY6LiwWyP/S/k1bcytEIVTKUuHvmM1p872poMq/GnkjYXanX9O5 SN9SDve8M8UfWbmFscl/eLUQXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLgQXaO OLL9UlHkwMhco5zDDmTRMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBFqfDnFE5gwDlf7X/gNDghqftBR720FJFBI+Hum18lRmOQkL6rPcQ +SsTby27NdPuo+2Hr5jRP+oHRzSXvCuqQc6muwo6HInxVmxHMStiUsGxHJFEPcF1 xhHY+4HWEfFrQs8Hno/QBt6Fv7FyEGvdSr3+h+5PRYmFkFp0UHYf9prYAoIMHeyo aaYumUkNVlGnYKyF0quWEQC8tqbHkyte1l6t12Dh815I42P7jBNDK7EvMpCZ9DkY +kfvxo0rDyKXMUlfM0bQWn5Mg7cUxrG6se1AFmwF0GsNi+BFIth2hhPtgKIQf8BY ANWWTWvNMPITlIcdFHn82VzQUHkOnG3/ -----END CERTIFICATE-----Generated at Tue Sep 9 18:24:39 2025 by rpki-client