$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: WYRE+ZqsyfCSFpDT+Z7rgPknv3Y1qKnKf/fhLGAVrrs= Subject key identifier: C2:35:73:17:21:A7:03:7A:87:E3:C5:85:2A:15:0B:B2:ED:AE:81:4B Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: E0 Signing time: Thu 03 Jul 2025 05:40:15 +0000 Manifest this update: Thu 03 Jul 2025 05:40:14 +0000 Manifest next update: Thu 10 Jul 2025 05:40:14 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: /CSBc/6+pTvLQGcXMTubrHYpDb4d5WCG3OMMvPRib00=) 2: 7E15FE0C27B711EF8867AA49C4F9AE02.roa (hash: xJBS1rE4hyaBoQRSLDqWi8kJZTi9bOV+WLs5Y+jjSRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Jul 3 05:40:14 2025 GMT Not After : Jul 10 05:40:14 2025 GMT Subject: CN=686617bf-2c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:43:68:17:38:42:b2:4b:e1:eb:e3:50:63:c9: c7:14:a8:85:b8:84:d4:f2:f3:7b:a0:39:84:31:6c: b3:b7:be:28:a4:4c:a7:47:98:76:69:f5:d8:b1:51: 3e:47:eb:fc:1c:6f:1f:0d:08:7d:a1:b0:5e:9a:81: 2a:ca:2c:d7:1f:a4:d5:6f:0a:96:74:ac:4f:c9:28: 0e:01:66:13:28:a6:b9:eb:14:7b:9f:d7:be:de:7f: 15:f1:04:39:5d:c7:58:b6:7f:ad:19:fe:b1:6b:da: 5d:17:72:2e:61:14:29:dd:b3:b0:5f:54:a7:8e:63: cf:09:2b:a9:5f:92:e5:94:a1:57:c9:42:63:fa:ff: b4:65:99:cc:58:6c:2a:f3:14:36:a0:a9:69:ff:44: f1:e4:5e:0b:4a:cb:51:c2:77:40:57:6e:05:39:2e: ec:b4:b5:1d:31:d5:16:86:34:77:da:02:b7:ec:b9: f4:dd:8c:2f:8a:a1:45:75:34:8a:e0:33:0c:37:60: 1b:d7:61:94:68:c7:69:94:c2:0e:b4:f2:d0:fc:bb: 51:65:82:37:1d:8a:40:0a:07:b4:da:4f:72:ac:ac: 8b:b6:06:0d:1d:77:be:87:27:c1:1e:95:5e:f4:95: 6f:6b:9a:77:a0:2e:8e:4a:e2:d7:cb:64:94:c8:93: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:73:17:21:A7:03:7A:87:E3:C5:85:2A:15:0B:B2:ED:AE:81:4B X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:74:91:27:eb:88:93:21:2c:9a:6d:ca:cc:f3:46:c7:35:aa: 79:31:b2:73:d4:e2:a8:30:3f:f2:0a:71:68:bf:6a:dd:0c:a3: 09:a2:ef:ba:70:86:07:c5:e4:17:db:5d:40:08:e3:ea:1f:e0: eb:a9:71:bd:d7:2e:bb:b1:03:cb:2a:17:d8:de:d0:c5:70:38: aa:f1:1f:63:f0:e6:e1:58:90:b6:4a:73:e4:cf:ea:6b:23:da: 11:90:9a:5e:c5:91:a6:47:8b:33:6d:a3:ab:b8:30:70:39:07: a7:11:5a:04:73:a4:56:89:78:06:01:a2:bb:3a:10:44:86:85: f6:c0:ea:49:14:77:15:eb:b4:b7:a3:93:56:51:44:a9:cb:7e: ab:61:d4:7b:13:1c:e7:c1:f8:2b:ae:ed:f6:57:8d:67:0a:99: 9e:36:4d:ae:35:d4:ea:e8:da:0c:d6:ad:fa:6a:af:28:bd:98: d0:b4:bc:d6:14:9f:d3:7b:67:78:37:c1:e0:b6:c4:a2:a0:f6: e6:01:ba:a7:38:64:a3:cf:18:a2:05:6f:6d:73:82:0b:28:fc: 19:57:15:34:bc:6c:67:76:a5:06:af:14:87:06:bb:af:a8:53: f1:75:52:95:67:14:d8:53:68:21:5e:00:92:da:36:24:54:94: 14:06:c5:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjUwNzAzMDU0MDE0WhcNMjUwNzEwMDU0MDE0WjAYMRYwFAYD VQQDEw02ODY2MTdiZi0yYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ENoFzhCskvh6+NQY8nHFKiFuITU8vN7oDmEMWyzt74opEynR5h2afXYsVE+ R+v8HG8fDQh9obBemoEqyizXH6TVbwqWdKxPySgOAWYTKKa56xR7n9e+3n8V8QQ5 XcdYtn+tGf6xa9pdF3IuYRQp3bOwX1SnjmPPCSupX5LllKFXyUJj+v+0ZZnMWGwq 8xQ2oKlp/0Tx5F4LSstRwndAV24FOS7stLUdMdUWhjR32gK37Ln03YwviqFFdTSK 4DMMN2Ab12GUaMdplMIOtPLQ/LtRZYI3HYpACge02k9yrKyLtgYNHXe+hyfBHpVe 9JVva5p3oC6OSuLXy2SUyJNbUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMI1cxch pwN6h+PFhSoVC7LtroFLMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdJEn64iTISyabcrM80bHNap5MbJz1OKoMD/yCnFov2rdDKMJou+6 cIYHxeQX211ACOPqH+DrqXG91y67sQPLKhfY3tDFcDiq8R9j8ObhWJC2SnPkz+pr I9oRkJpexZGmR4szbaOruDBwOQenEVoEc6RWiXgGAaK7OhBEhoX2wOpJFHcV67S3 o5NWUUSpy36rYdR7Exznwfgrru32V41nCpmeNk2uNdTq6NoM1q36aq8ovZjQtLzW FJ/Te2d4N8HgtsSioPbmAbqnOGSjzxiiBW9tc4ILKPwZVxU0vGxndqUGrxSHBruv qFPxdVKVZxTYU2ghXgCS2jYkVJQUBsVE -----END CERTIFICATE-----Generated at Fri Jul 4 07:33:07 2025 by rpki-client