$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: EretImxPHGrOuE6c646BDfQJ6duRV6w5tQqUcA7CCX0= Subject key identifier: E0:7E:B2:31:89:20:23:B2:47:73:5E:66:76:5D:98:3F:5A:5C:89:65 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 0557 Signing time: Wed 02 Jul 2025 23:41:56 +0000 Manifest this update: Wed 02 Jul 2025 23:41:56 +0000 Manifest next update: Wed 09 Jul 2025 23:41:56 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: WZPOtNyhzAnsRTaT33IdnZlqJg+nDNI6yDfea7xgWys=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: li3UtGYjrBf3C8NwlkMmtocNy8KFUcDjCj/BKLVAeWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Jul 2 23:41:56 2025 GMT Not After : Jul 9 23:41:56 2025 GMT Subject: CN=6865c3c4-bd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:8f:8b:fb:96:c3:ff:cf:fb:ed:a9:97:51: 53:75:0b:a9:81:2c:39:64:fc:f1:cf:f4:1d:aa:e9: ab:b3:af:08:ed:3c:8b:54:a1:45:01:ce:be:bc:8f: 9c:8f:cf:f9:0c:27:7f:a0:63:54:92:5b:99:ad:18: 32:b1:5f:ef:5e:ff:fc:be:cd:05:91:14:6f:27:51: 8b:70:48:27:95:60:1a:80:f5:b6:84:74:66:04:b9: 64:16:22:12:26:dd:57:54:12:8b:66:b3:5e:20:b6: e4:33:ad:3f:77:c2:91:ff:b7:9d:6f:d5:67:9e:46: 15:35:c2:4d:69:cf:ae:91:26:84:ad:01:e4:d5:46: f9:26:6e:de:6b:76:3f:96:70:d1:55:a4:a5:ed:f2: 4c:0f:5b:7c:29:2c:5a:a4:14:e0:ba:02:e1:16:48: f8:37:ed:ad:98:45:27:02:79:32:cb:1b:ef:10:e4: 51:2f:f5:5d:09:7e:be:40:e5:2b:79:92:03:6c:65: a1:45:e3:8e:62:a9:78:2d:57:70:92:82:8a:d1:c0: 5e:aa:a1:60:d0:9e:16:42:1c:07:60:9e:fa:1b:a8: 28:d1:23:e7:41:8f:ed:a0:87:0f:ef:7c:3b:ed:b8: ee:c6:4c:9c:81:08:ca:8e:6b:c5:7f:39:fc:71:f1: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:B2:31:89:20:23:B2:47:73:5E:66:76:5D:98:3F:5A:5C:89:65 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:0b:29:5d:11:c9:a5:ca:e0:e9:53:39:e2:28:12:e5:be: 5f:29:7c:a0:47:72:a3:3c:29:59:55:8e:9d:95:1f:74:ef:b6: 92:42:1b:08:7e:38:47:3b:97:d9:34:61:61:00:22:d9:95:b3: 21:8d:4a:16:5b:5d:d5:3f:91:a6:c0:fa:39:c4:72:82:f1:51: 11:da:2e:98:8b:c4:a3:05:36:7e:bd:75:8c:f8:f6:5b:7d:a0: 49:62:7d:b7:29:ef:de:08:31:05:44:49:c6:e0:0a:ee:84:a5: db:c1:6b:ed:ec:c3:5b:44:02:53:26:e3:c1:e2:11:0e:f7:fb: c7:a7:ef:fc:57:98:a8:0b:41:ad:f4:cc:5b:55:ef:72:ad:f9: d5:a8:05:ba:3b:89:7f:8f:fb:8c:98:5d:77:c3:77:a0:76:78: 44:ce:1f:4d:5a:5e:74:48:33:d9:06:b9:14:fd:ff:a2:66:7c: f5:38:70:0e:f0:cf:21:a3:51:0c:14:ee:07:36:81:57:9e:fa: 99:68:9d:f0:49:c5:96:0f:c5:d3:58:d7:62:32:b4:11:42:76: 93:57:a8:dc:5a:05:91:16:ec:89:66:01:c7:99:7d:92:9c:79: bc:64:b7:8b:17:59:ed:85:42:b2:cf:12:92:3c:7b:b2:8c:3e: 2b:a9:da:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjUwNzAyMjM0MTU2WhcNMjUwNzA5MjM0MTU2WjAYMRYwFAYD VQQDEw02ODY1YzNjNC1iZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4uPi/uWw//P++2pl1FTdQupgSw5ZPzxz/Qdqumrs68I7TyLVKFFAc6+vI+c j8/5DCd/oGNUkluZrRgysV/vXv/8vs0FkRRvJ1GLcEgnlWAagPW2hHRmBLlkFiIS Jt1XVBKLZrNeILbkM60/d8KR/7edb9VnnkYVNcJNac+ukSaErQHk1Ub5Jm7ea3Y/ lnDRVaSl7fJMD1t8KSxapBTgugLhFkj4N+2tmEUnAnkyyxvvEORRL/VdCX6+QOUr eZIDbGWhReOOYql4LVdwkoKK0cBeqqFg0J4WQhwHYJ76G6go0SPnQY/toIcP73w7 7bjuxkycgQjKjmvFfzn8cfGI0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB+sjGJ ICOyR3NeZnZdmD9aXIllMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPTQspXRHJpcrg6VM54igS5b5fKXygR3KjPClZVY6dlR9077aSQhsI fjhHO5fZNGFhACLZlbMhjUoWW13VP5GmwPo5xHKC8VER2i6Yi8SjBTZ+vXWM+PZb faBJYn23Ke/eCDEFREnG4AruhKXbwWvt7MNbRAJTJuPB4hEO9/vHp+/8V5ioC0Gt 9MxbVe9yrfnVqAW6O4l/j/uMmF13w3egdnhEzh9NWl50SDPZBrkU/f+iZnz1OHAO 8M8ho1EMFO4HNoFXnvqZaJ3wScWWD8XTWNdiMrQRQnaTV6jcWgWRFuyJZgHHmX2S nHm8ZLeLF1nthUKyzxKSPHuyjD4rqdq9 -----END CERTIFICATE-----Generated at Fri Jul 4 18:03:08 2025 by rpki-client