$ rpki-client -vvf rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft File: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft (raw, json) Hash identifier: QW6xDExPuvACB4Iqc40VEPw/ufj2yXFmYpWZfBlsnx4= Subject key identifier: 52:6B:69:47:7D:A5:B0:7B:8E:61:4B:01:0D:C1:8A:A6:75:DB:BA:18 Authority key identifier: F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B Certificate issuer: /CN=A911073A/serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft Manifest number: E7 Signing time: Tue 01 Jul 2025 05:57:09 +0000 Manifest this update: Tue 01 Jul 2025 05:57:08 +0000 Manifest next update: Tue 08 Jul 2025 05:57:08 +0000 Files and hashes: 1: 9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl (hash: ZtAH3P8pmzNXpUxmP6BlX35GkHjzU0MKglDbC0YnG5I=) 2: 9D50BCA4F64211EE9114A555C4F9AE02.roa (hash: L/NVWM+Df+GwuQqnyYWtlVp/5U+iQmr8G8cxiRiESFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911073A, serialNumber=F5502A4D7D14A6AA63E5FFABF936E152A8DF803B Validity Not Before: Jul 1 05:57:08 2025 GMT Not After : Jul 8 05:57:08 2025 GMT Subject: CN=686378b5-b52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:5e:7b:db:cb:53:8b:86:b4:e4:51:ce:c1: 88:cb:b0:ae:52:15:71:0d:d3:d3:93:de:0a:2a:cb: 91:42:41:c2:e5:6e:d7:d0:29:11:30:db:02:71:28: b5:1c:8b:e0:88:db:6c:6e:c9:39:d9:60:f9:31:7e: 89:8a:2f:ee:30:18:df:59:ad:c4:85:ed:c4:2c:51: 05:47:d8:9f:bd:0c:34:eb:53:99:12:ac:ef:cc:56: 09:68:dc:5d:5f:98:c1:64:13:5f:b0:df:1a:c9:19: 55:3b:9a:fa:c4:df:ba:23:3e:fc:7b:49:81:f3:b5: a2:9a:88:71:cb:06:cb:6b:e0:34:be:8a:c7:fe:d2: 96:7a:e6:88:7e:76:d1:e8:bf:1f:51:cd:bd:22:18: bb:3d:4c:e7:a3:f3:d7:20:b7:df:74:00:dd:e2:f1: 5b:a7:07:08:54:99:19:9d:a4:5d:fe:7b:58:a9:18: f2:93:9c:aa:bc:18:d1:c6:cc:5a:69:ee:ee:d0:2b: 56:06:2b:6a:14:d2:24:64:f3:da:05:a7:dc:3a:f1: a5:eb:2d:0a:b7:18:0f:16:0e:01:81:81:46:36:5e: 30:7b:5e:30:c4:7f:50:9b:00:ab:d7:5e:67:9c:fd: 72:d6:07:fb:29:d1:4b:4a:37:ae:8b:80:74:73:79: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:69:47:7D:A5:B0:7B:8E:61:4B:01:0D:C1:8A:A6:75:DB:BA:18 X509v3 Authority Key Identifier: keyid:F5:50:2A:4D:7D:14:A6:AA:63:E5:FF:AB:F9:36:E1:52:A8:DF:80:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VAqTX0Upqpj5f-r-TbhUqjfgDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911073A/EB4A3ADAF64111EEBB11EF53C4F9AE02/9VAqTX0Upqpj5f-r-TbhUqjfgDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9a:90:3e:8e:ff:06:87:58:4b:49:c9:e9:5e:93:95:c6:85: f9:87:9a:5b:65:6e:af:57:d1:1d:76:24:c0:dd:b1:e6:0c:1d: 0b:f5:8d:d7:7e:13:ee:4c:4b:97:7f:ec:6b:88:1e:cd:67:c9: a9:6e:4e:70:28:b0:2c:b2:f4:40:c6:c4:4f:fd:15:ec:d4:f4: d1:1b:5a:35:f2:df:4f:fb:fc:60:1a:30:7b:e5:d6:87:c8:be: 9e:4f:66:4c:52:fe:f9:40:c7:78:38:05:d5:8b:e5:3b:9c:85: a4:1c:e9:17:0f:30:52:c9:a5:ac:ff:9c:db:7a:94:c3:33:d0: e3:f7:25:d2:b0:43:fa:04:95:d7:f4:70:84:ad:dd:26:2f:2d: fd:9a:64:3f:a4:87:ad:5b:93:e5:bf:4d:08:5f:f9:8c:6e:2a: 4b:28:5e:b6:45:62:96:0b:6a:35:5b:4e:47:72:33:0b:fa:28: 65:85:02:35:63:9d:32:7b:df:e4:ba:64:df:d6:a4:6a:26:aa: 24:2f:2e:fc:b7:71:5c:7e:d3:65:03:c9:9b:01:1d:aa:34:6d: cb:b9:9e:d9:d1:0c:02:c8:ac:2a:70:e2:d1:27:d9:64:98:c7: 5e:fb:7c:67:ab:bb:f0:37:35:ec:9e:19:81:ab:61:49:f9:55: e2:bb:16:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3M0ExMTAvBgNVBAUTKEY1NTAyQTREN0QxNEE2QUE2M0U1RkZBQkY5MzZFMTUy QThERjgwM0IwHhcNMjUwNzAxMDU1NzA4WhcNMjUwNzA4MDU1NzA4WjAYMRYwFAYD VQQDEw02ODYzNzhiNS1iNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mlee9vLU4uGtORRzsGIy7CuUhVxDdPTk94KKsuRQkHC5W7X0CkRMNsCcSi1 HIvgiNtsbsk52WD5MX6Jii/uMBjfWa3Ehe3ELFEFR9ifvQw061OZEqzvzFYJaNxd X5jBZBNfsN8ayRlVO5r6xN+6Iz78e0mB87WimohxywbLa+A0vorH/tKWeuaIfnbR 6L8fUc29Ihi7PUzno/PXILffdADd4vFbpwcIVJkZnaRd/ntYqRjyk5yqvBjRxsxa ae7u0CtWBitqFNIkZPPaBafcOvGl6y0KtxgPFg4BgYFGNl4we14wxH9QmwCr115n nP1y1gf7KdFLSjeui4B0c3n4QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJraUd9 pbB7jmFLAQ3BiqZ127oYMB8GA1UdIwQYMBaAFPVQKk19FKaqY+X/q/k24VKo34A7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDczQS9FQjRBM0FEQUY2 NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBxcGo1Zi1yLVRiaFVxamZn RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlWQXFUWDBVcHFwajVmLXItVGJoVXFqZmdEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDczQS9FQjRBM0FEQUY2NDExMUVFQkIxMUVGNTNDNEY5QUUwMi85VkFxVFgwVXBx cGo1Zi1yLVRiaFVxamZnRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrmpA+jv8Gh1hLScnpXpOVxoX5h5pbZW6vV9EddiTA3bHmDB0L9Y3X fhPuTEuXf+xriB7NZ8mpbk5wKLAssvRAxsRP/RXs1PTRG1o18t9P+/xgGjB75daH yL6eT2ZMUv75QMd4OAXVi+U7nIWkHOkXDzBSyaWs/5zbepTDM9Dj9yXSsEP6BJXX 9HCErd0mLy39mmQ/pIetW5Plv00IX/mMbipLKF62RWKWC2o1W05HcjML+ihlhQI1 Y50ye9/kumTf1qRqJqokLy78t3FcftNlA8mbAR2qNG3LuZ7Z0QwCyKwqcOLRJ9lk mMde+3xnq7vwNzXsnhmBq2FJ+VXiuxZz -----END CERTIFICATE-----Generated at Thu Jul 3 03:46:32 2025 by rpki-client