$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: vu0ho/npKvBUllYPRCPEo3tYuR1WL5l4wPTmePbKdcc= Subject key identifier: 07:4C:80:44:25:BE:A6:20:BD:44:55:BE:F2:43:9A:EB:38:D5:7A:08 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 111F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 1117 Signing time: Wed 02 Jul 2025 17:28:53 +0000 Manifest this update: Wed 02 Jul 2025 17:28:52 +0000 Manifest next update: Wed 09 Jul 2025 17:28:52 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: GfCL8vmI7VCdBtmjts+p8dwRgA0kNjLyZq42Aa0ME5k=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4383 (0x111f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Jul 2 17:28:52 2025 GMT Not After : Jul 9 17:28:52 2025 GMT Subject: CN=68656c54-0701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:95:c3:c2:2f:b7:8c:f8:8a:ee:ad:7b:83: 12:3c:fd:5e:84:5d:dd:23:f5:12:fc:87:00:fb:91: 0c:4c:69:7a:e0:93:29:37:90:46:44:ce:e3:be:40: 63:94:1f:05:0f:1f:dd:fd:05:d5:5f:81:25:4d:46: 0f:78:fe:fd:e7:9e:fa:90:39:79:3e:d0:ed:e8:e1: 5e:82:bf:c5:71:61:5c:6e:dc:25:6f:79:cf:6d:47: 60:6b:f8:9e:f5:5d:e5:29:ba:cc:d3:6a:ed:b1:22: 39:37:c7:e1:43:77:3c:3e:d1:2d:3b:f1:fa:95:26: d7:df:07:ab:de:e9:74:15:cd:6a:93:22:43:ed:f6: 47:bd:a8:21:aa:4c:9a:9f:14:32:0d:f8:87:1b:dc: 0f:6d:10:44:53:49:3e:83:71:ef:a7:2a:0a:8c:2e: 79:4f:31:8b:3e:4b:3f:fc:d4:1d:c3:ac:31:49:cf: 40:6c:4d:6e:1b:8b:f3:08:cf:1d:48:3a:c4:15:c2: fa:bf:f5:64:47:e1:b1:d5:b8:13:28:ba:55:14:3c: 09:52:41:94:2a:59:59:9a:72:19:21:1a:5a:f5:b0: 4e:cf:8e:5e:31:ac:35:e3:d2:7e:59:92:4d:46:3d: 44:e1:10:04:2e:31:f5:de:73:f5:b0:b5:35:ee:95: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4C:80:44:25:BE:A6:20:BD:44:55:BE:F2:43:9A:EB:38:D5:7A:08 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:12:6a:3a:36:8f:60:02:a2:14:ce:ba:af:a5:be:1f:09: 36:30:1a:97:69:9e:49:36:52:30:74:a3:6d:4f:90:0b:61:ad: ea:7c:2f:96:85:6e:1d:65:82:6e:75:8c:1f:00:8a:4b:26:5a: 1e:2d:a4:0a:26:5e:ef:13:5d:f2:5b:3e:a2:f3:eb:c2:92:97: 80:60:92:fd:5b:8c:77:f3:cd:ae:2d:06:49:92:75:f4:61:1d: 78:d6:c7:c3:c1:97:5d:72:31:45:27:e5:8a:ce:32:27:18:7d: a4:5f:ad:ea:fd:cb:7d:aa:96:43:11:12:93:dd:51:a1:6e:f5: 3c:dd:1c:d8:ac:8d:7d:6d:14:83:68:94:2d:70:c4:40:0c:54: 6f:4e:37:c0:8b:96:b8:07:2b:fc:0f:23:3a:46:ea:83:42:20: 4e:e6:39:63:85:d3:e3:04:f8:c7:9d:3d:5d:55:1b:33:0c:a8: 73:cf:7e:36:4a:47:22:9c:d1:90:4f:95:80:d0:d4:ec:11:6c: 8e:99:2e:34:60:e7:0b:d5:9f:28:4d:38:5a:b2:e6:e8:c6:05: 2d:00:f9:0a:1b:db:11:b4:05:87:76:b7:29:e0:e7:ea:b4:48: 82:f2:0c:88:73:7d:1f:6b:61:83:c1:19:40:27:96:48:cd:23: b5:bb:bd:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICER8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjUwNzAyMTcyODUyWhcNMjUwNzA5MTcyODUyWjAYMRYwFAYD VQQDEw02ODY1NmM1NC0wNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFGVw8Ivt4z4iu6te4MSPP1ehF3dI/US/IcA+5EMTGl64JMpN5BGRM7jvkBj lB8FDx/d/QXVX4ElTUYPeP795576kDl5PtDt6OFegr/FcWFcbtwlb3nPbUdga/ie 9V3lKbrM02rtsSI5N8fhQ3c8PtEtO/H6lSbX3wer3ul0Fc1qkyJD7fZHvaghqkya nxQyDfiHG9wPbRBEU0k+g3HvpyoKjC55TzGLPks//NQdw6wxSc9AbE1uG4vzCM8d SDrEFcL6v/VkR+Gx1bgTKLpVFDwJUkGUKllZmnIZIRpa9bBOz45eMaw149J+WZJN Rj1E4RAELjH13nP1sLU17pW7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdMgEQl vqYgvURVvvJDmus41XoIMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU1xJqOjaPYAKiFM66r6W+Hwk2MBqXaZ5JNlIwdKNtT5ALYa3qfC+W hW4dZYJudYwfAIpLJloeLaQKJl7vE13yWz6i8+vCkpeAYJL9W4x3882uLQZJknX0 YR141sfDwZddcjFFJ+WKzjInGH2kX63q/ct9qpZDERKT3VGhbvU83RzYrI19bRSD aJQtcMRADFRvTjfAi5a4Byv8DyM6RuqDQiBO5jljhdPjBPjHnT1dVRszDKhzz342 SkcinNGQT5WA0NTsEWyOmS40YOcL1Z8oTThasuboxgUtAPkKG9sRtAWHdrcp4Ofq tEiC8gyIc30fa2GDwRlAJ5ZIzSO1u71H -----END CERTIFICATE-----Generated at Fri Jul 4 15:07:37 2025 by rpki-client