$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft File: 480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json) Hash identifier: rJvqErT16vDLOueFjkPKvH0B9x8rKg6qupKy+rDwt6c= Subject key identifier: E4:F9:11:71:36:0D:10:9F:E6:6A:7B:D4:6E:46:55:60:43:01:24:0C Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft Manifest number: 0578 Signing time: Fri 18 Jul 2025 22:52:30 +0000 Manifest this update: Fri 18 Jul 2025 22:52:30 +0000 Manifest next update: Fri 25 Jul 2025 22:52:30 +0000 Files and hashes: 1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: gUkcNoCjRzyvbSN4RkfsCN1wExgxUT2cIWsDj+NXpkg=) 2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693 Validity Not Before: Jul 18 22:52:30 2025 GMT Not After : Jul 25 22:52:30 2025 GMT Subject: CN=687ad02e-4d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2e:72:fd:09:9b:a1:e6:5c:64:77:a8:64:46: 2e:15:c4:37:4d:c4:bc:7d:20:e8:62:83:f0:7b:a3: 92:25:af:cd:13:05:c5:81:a0:1e:c1:d1:cc:2a:01: d7:00:1b:81:f9:5c:34:1b:03:62:98:3c:d5:47:ff: e4:b5:07:5f:9c:d1:e5:a6:77:a8:fe:8f:ba:8b:35: 6c:fe:a4:b4:f3:27:f1:95:a5:5e:2d:e7:7a:c2:b5: a4:1e:27:1e:42:69:0c:d5:b9:18:14:91:16:22:06: 0f:fa:bc:0e:40:b4:38:2d:56:67:e5:b3:8f:3e:33: 67:21:1b:49:8c:14:40:f2:b5:41:bd:1c:5f:d3:45: 2b:d9:2d:d7:09:7e:ca:c5:62:f0:15:64:a1:37:8c: f7:24:27:f1:53:57:31:40:cd:de:1c:84:a7:e1:af: b1:62:c5:19:bd:38:b0:19:2d:e6:78:12:56:cc:5a: fd:62:e9:39:88:fe:23:df:b1:ac:38:34:09:6f:67: d8:ce:6e:9c:1f:58:37:d3:d7:ab:06:57:55:d9:26: 32:16:31:76:0d:13:ef:15:3e:28:e9:13:cf:08:74: e8:c7:ec:86:62:e5:46:b0:97:01:c0:ac:f1:03:31: 0f:9f:d7:a7:27:8f:11:d2:d4:c8:6e:e4:15:d0:25: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F9:11:71:36:0D:10:9F:E6:6A:7B:D4:6E:46:55:60:43:01:24:0C X509v3 Authority Key Identifier: keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:df:23:00:bc:91:4c:82:de:75:13:08:5b:be:3c:0c:ed:79: 36:50:2f:72:7f:e6:a4:c6:b8:f0:a5:fb:0a:d7:e8:a2:d8:56: 63:bd:1f:09:49:28:84:dc:97:12:6a:c2:fc:28:6b:db:ba:d4: 5f:d8:e1:a3:a7:b3:5a:19:d8:12:03:52:63:f7:ac:83:93:eb: c3:75:68:6b:b7:c7:bb:2a:af:ff:d4:b1:27:5a:7c:51:d1:4b: c5:cf:bf:f2:2a:a3:5b:c4:29:dc:e7:0a:78:7d:86:72:8b:7b: 75:e2:a1:6f:e5:29:0b:da:e0:59:7c:43:2c:ea:ea:f0:d1:bf: dc:c5:7e:fc:e9:83:ac:49:ff:79:60:99:68:ff:6a:18:47:ef: 2c:ac:c1:17:09:2c:99:77:89:de:e5:ad:b5:bd:3d:ca:d8:28: 5f:4e:fd:3b:95:84:f8:eb:93:91:bd:67:21:0f:ea:d5:61:ec: ea:90:61:6c:ea:9e:90:9d:67:cf:29:1b:a5:28:91:d1:2f:a3: 6a:1e:67:5f:b3:3a:b9:d4:eb:55:bf:e4:0f:22:0e:78:b8:57: e3:b9:ec:b7:8a:fb:4e:7e:99:a4:ec:68:a4:2a:07:1b:c1:87: fc:0a:90:7e:98:e8:e9:0f:60:aa:5c:7e:01:a1:8f:fb:ce:db: 37:87:b9:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCMzMxMTAvBgNVBAUTKEUzQ0QyNjI2MDdDQjc0MzRDOTg5OEY3QUVDRjZFN0Mz NkEzNEY2OTMwHhcNMjUwNzE4MjI1MjMwWhcNMjUwNzI1MjI1MjMwWjAYMRYwFAYD VQQDEw02ODdhZDAyZS00ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7S5y/QmboeZcZHeoZEYuFcQ3TcS8fSDoYoPwe6OSJa/NEwXFgaAewdHMKgHX ABuB+Vw0GwNimDzVR//ktQdfnNHlpneo/o+6izVs/qS08yfxlaVeLed6wrWkHice QmkM1bkYFJEWIgYP+rwOQLQ4LVZn5bOPPjNnIRtJjBRA8rVBvRxf00Ur2S3XCX7K xWLwFWShN4z3JCfxU1cxQM3eHISn4a+xYsUZvTiwGS3meBJWzFr9Yuk5iP4j37Gs ODQJb2fYzm6cH1g309erBldV2SYyFjF2DRPvFT4o6RPPCHTox+yGYuVGsJcBwKzx AzEPn9enJ48R0tTIbuQV0CXY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT5EXE2 DRCf5mp71G5GVWBDASQMMB8GA1UdIwQYMBaAFOPNJiYHy3Q0yYmPeuz258NqNPaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9CMkFCMzc1OEU5 QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGREVEppWTk2N1BibncybzA5 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ4MG1KZ2ZMZERUSmlZOTY3UGJudzJvMDlwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0IzMy9CMkFCMzc1OEU5QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGRE VEppWTk2N1BibncybzA5cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA83yMAvJFMgt51EwhbvjwM7Xk2UC9yf+akxrjwpfsK1+ii2FZjvR8J SSiE3JcSasL8KGvbutRf2OGjp7NaGdgSA1Jj96yDk+vDdWhrt8e7Kq//1LEnWnxR 0UvFz7/yKqNbxCnc5wp4fYZyi3t14qFv5SkL2uBZfEMs6urw0b/cxX786YOsSf95 YJlo/2oYR+8srMEXCSyZd4ne5a21vT3K2ChfTv07lYT465ORvWchD+rVYezqkGFs 6p6QnWfPKRulKJHRL6NqHmdfszq51OtVv+QPIg54uFfjuey3ivtOfpmk7GikKgcb wYf8CpB+mOjpD2CqXH4BoY/7zts3h7m1 -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:38 2025 by rpki-client