$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: CgMJ3nDI8367ajuT35RPWH4rCGnG4ZEOVxkoOMUCBVg= Subject key identifier: 47:79:A6:B7:43:76:FE:FA:32:19:86:AB:33:C4:40:54:6F:5C:88:AD Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: 37 Signing time: Thu 03 Jul 2025 03:00:17 +0000 Manifest this update: Thu 03 Jul 2025 03:00:16 +0000 Manifest next update: Thu 10 Jul 2025 03:00:16 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: j3xvwf3bjGKI7QPS8NXKlFMsQ22JQsuOlEgkxSJASM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: Jul 3 03:00:16 2025 GMT Not After : Jul 10 03:00:16 2025 GMT Subject: CN=6865f240-0ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:a9:da:4e:7f:6a:0b:34:dc:a9:b5:ea:fd: fa:df:37:c3:c2:b3:e5:c8:6b:ad:98:88:8f:30:4d: 95:9e:f9:9c:67:5d:d6:aa:b9:23:19:fb:85:b1:4a: 31:99:ec:3d:ef:9e:49:c1:74:23:60:97:75:a5:89: a8:e3:07:17:1c:1e:3f:f6:29:40:96:80:7c:a4:80: 6c:57:e9:99:d7:e4:ad:ac:74:10:8b:f3:6d:a4:e3: 19:51:17:c3:bc:3b:48:06:8b:d6:5d:95:48:11:37: d3:88:48:ca:44:2d:fb:28:27:e6:9d:65:d6:1f:bb: e2:44:45:dc:dd:a0:7f:67:84:f0:d0:5b:0d:4b:cd: d3:46:81:c5:87:69:dd:bd:5e:c7:dc:a4:21:1e:2e: ce:b6:87:75:b2:c5:64:16:64:16:57:11:b5:a0:b1: 47:63:11:33:f5:21:67:fa:85:87:ea:a0:7c:72:46: 8d:f6:89:cd:e7:b0:fa:76:3b:80:67:37:8c:23:91: 84:f5:b8:3a:d3:94:18:1f:3e:11:51:1b:42:a9:62: 7a:f1:f8:28:bb:b3:11:81:ad:47:29:da:48:35:20: 2b:ef:18:80:ef:3e:8d:21:06:17:c1:00:80:68:06: 79:b9:f6:b8:49:3f:1f:46:b8:a3:a6:f2:75:56:55: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:79:A6:B7:43:76:FE:FA:32:19:86:AB:33:C4:40:54:6F:5C:88:AD X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:05:da:f3:ac:b9:c7:04:1f:44:c7:81:d9:ab:36:d2:27:81: e2:0e:f0:31:f7:48:ae:23:f5:93:6c:b2:13:d7:f8:2e:43:06: 84:14:f8:52:ed:17:02:4a:a1:57:d6:9e:f7:72:30:34:66:b7: 13:3b:fb:88:bb:73:70:12:61:e5:b7:77:35:dc:e3:f6:e3:77: ba:bd:b6:a8:b1:44:43:e3:f9:17:4d:65:6a:63:2b:32:07:cc: 57:14:2a:75:73:6c:8f:4a:f8:0f:1e:09:74:d2:f4:48:38:7f: eb:6e:d3:7f:36:00:be:e3:0c:ff:b4:ed:ef:72:39:33:b7:ff: f3:cb:35:4d:4e:c3:0a:c2:29:fa:4c:e3:0b:fa:79:bf:cd:f5: b7:89:c0:2e:eb:b2:b1:ff:fa:d8:26:08:fa:10:63:d0:63:29: 5b:3f:8d:ac:75:ce:af:09:54:0c:b1:56:6a:cb:57:ad:b1:a0: f1:15:bf:80:2e:82:c5:34:bf:4d:87:a8:2d:15:0c:ff:70:f5: 58:d3:7b:35:75:4c:d6:88:47:ce:17:cc:cf:ea:dd:ec:f4:27: 16:81:10:6b:da:73:ff:d4:2b:b0:00:e5:fc:0a:58:cc:9d:e2: af:ca:03:c2:59:b9:46:8c:a6:3b:af:c8:4a:5b:a7:30:cc:72: ab:9e:0e:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDM4MjExMC8GA1UEBRMoNzY4ODc0NjlENjQxMEJFNDY4MDc3NTg3ODQ3RUVBQTA4 MEI0MjI3MjAeFw0yNTA3MDMwMzAwMTZaFw0yNTA3MTAwMzAwMTZaMBgxFjAUBgNV BAMTDTY4NjVmMjQwLTBmZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/zqnaTn9qCzTcqbXq/frfN8PCs+XIa62YiI8wTZWe+ZxnXdaquSMZ+4WxSjGZ 7D3vnknBdCNgl3WliajjBxccHj/2KUCWgHykgGxX6ZnX5K2sdBCL822k4xlRF8O8 O0gGi9ZdlUgRN9OISMpELfsoJ+adZdYfu+JERdzdoH9nhPDQWw1LzdNGgcWHad29 XsfcpCEeLs62h3WyxWQWZBZXEbWgsUdjETP1IWf6hYfqoHxyRo32ic3nsPp2O4Bn N4wjkYT1uDrTlBgfPhFRG0KpYnrx+Ci7sxGBrUcp2kg1ICvvGIDvPo0hBhfBAIBo Bnm59rhJPx9GuKOm8nVWVZ5pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR3mmt0N2 /voyGYarM8RAVG9ciK0wHwYDVR0jBBgwFoAUdoh0adZBC+RoB3WHhH7qoIC0InIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0MzgyLzQ0QjVGQTFDMEFD MDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMElu SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZG9oMGFkWkJDLVJvQjNXSGhIN3FvSUMwSW5JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 MzgyLzQ0QjVGQTFDMEFDMDExRjBCNThGODI0N0M0RjlBRTAyL2RvaDBhZFpCQy1S b0IzV0hoSDdxb0lDMEluSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHgF2vOsuccEH0THgdmrNtIngeIO8DH3SK4j9ZNsshPX+C5DBoQU+FLt FwJKoVfWnvdyMDRmtxM7+4i7c3ASYeW3dzXc4/bjd7q9tqixREPj+RdNZWpjKzIH zFcUKnVzbI9K+A8eCXTS9Eg4f+tu0382AL7jDP+07e9yOTO3//PLNU1OwwrCKfpM 4wv6eb/N9beJwC7rsrH/+tgmCPoQY9BjKVs/jax1zq8JVAyxVmrLV62xoPEVv4Au gsU0v02HqC0VDP9w9VjTezV1TNaIR84XzM/q3ez0JxaBEGvac//UK7AA5fwKWMyd 4q/KA8JZuUaMpjuvyEpbpzDMcqueDvc= -----END CERTIFICATE-----Generated at Thu Jul 3 06:32:46 2025 by rpki-client