$ rpki-client -vvf rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft File: u4lwRaiPyB_M_jjl92FYT9y6zoU.mft (raw, json) Hash identifier: 7aZRrN91KlE6oJ5UAprfYiCqyeItv9QeXnG5H/VD3HU= Subject key identifier: 86:4D:55:98:86:14:D9:0A:CA:8A:6D:9D:EB:9D:6F:30:AD:66:E1:47 Authority key identifier: BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 Certificate issuer: /CN=A9128553/serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Certificate serial: 02E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft Manifest number: 02E4 Signing time: Thu 03 Jul 2025 01:41:43 +0000 Manifest this update: Thu 03 Jul 2025 01:41:43 +0000 Manifest next update: Thu 10 Jul 2025 01:41:43 +0000 Files and hashes: 1: u4lwRaiPyB_M_jjl92FYT9y6zoU.crl (hash: YeWqxjajBVhUiYtDlLF6593GH0KHSrfmg6WWFMVk+qU=) 2: 6C113EF8EB1211ECB34A394DC4F9AE02.roa (hash: V0UtMWuGfgSKuCGeFi3ruRU1wDK2vvS2zyP8f3YgcB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 745 (0x2e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128553, serialNumber=BB897045A88FC81FCCFE38E5F761584FDCBACE85 Validity Not Before: Jul 3 01:41:43 2025 GMT Not After : Jul 10 01:41:43 2025 GMT Subject: CN=6865dfd7-94c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:57:8c:4d:94:4f:99:1c:e3:ca:35:71:63: f8:3b:e2:8c:a0:91:e3:c2:ea:c9:67:7a:ed:95:45: e6:8d:f6:8f:41:10:25:a8:eb:45:cc:d8:7b:12:2a: 91:85:ec:23:4a:3e:1b:74:b5:12:51:c5:f6:cd:3f: 1c:17:43:da:99:50:d4:06:10:e6:18:f8:7c:b2:92: a1:97:f0:cc:a5:e4:e0:cb:c0:bb:01:e5:ec:9e:23: ac:1c:b1:a0:46:f7:d3:03:ae:69:95:a8:ae:88:5d: 33:34:26:07:68:69:43:79:5f:46:11:90:80:a2:ff: 37:84:7b:eb:8a:bd:58:cb:51:4b:93:96:33:a9:56: ef:60:04:85:ef:6b:5f:4d:9f:43:4d:6b:34:22:bf: d6:85:b4:3c:ec:34:84:6e:a2:53:66:ff:f3:39:c3: 15:0f:ef:06:3b:5b:7e:e3:cf:37:c4:57:7c:b9:bc: a3:6e:57:b6:33:7b:7c:df:cf:6d:d5:3c:cc:11:aa: fe:77:7f:fb:8f:a9:46:7f:0e:b6:07:96:8a:0a:17: 5b:ca:c8:17:e1:10:41:bd:6c:a4:9d:89:19:49:eb: 62:8a:df:4f:7b:ba:31:56:05:67:9d:a4:a1:f2:7c: 4e:1d:ec:56:e1:9a:1c:b9:b9:f7:7c:be:f8:34:0b: e1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:55:98:86:14:D9:0A:CA:8A:6D:9D:EB:9D:6F:30:AD:66:E1:47 X509v3 Authority Key Identifier: keyid:BB:89:70:45:A8:8F:C8:1F:CC:FE:38:E5:F7:61:58:4F:DC:BA:CE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4lwRaiPyB_M_jjl92FYT9y6zoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128553/164ABEC4EB0B11EC85E3DB2CC4F9AE02/u4lwRaiPyB_M_jjl92FYT9y6zoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6e:f7:97:a9:c3:50:b5:a7:a8:fd:b3:04:0b:c3:cd:db:b7: 73:48:1d:fb:78:4f:b4:31:e7:c3:1c:42:49:69:9c:17:46:50: 0c:40:75:44:b2:a7:01:9b:a7:e0:2f:96:1f:96:2a:3f:ca:8b: b8:b1:a3:2d:e8:0a:8d:83:8d:c0:fd:4a:b8:0a:38:3a:3b:66: 45:09:73:33:48:2f:87:63:35:27:c2:bd:6d:62:f2:e5:86:33: d6:89:1a:57:16:5f:92:e4:0f:2f:5b:13:cf:6d:01:59:13:e7: cb:c7:bb:f6:aa:6b:b4:71:89:ac:50:87:e1:62:fd:38:52:0f: c9:c9:40:12:99:8d:52:b8:0f:43:a2:04:80:f0:b4:7d:22:65: a4:00:6d:ff:68:4f:99:92:a6:9b:c1:25:10:ef:dc:0d:10:8d: fb:dd:04:a5:a8:7d:e0:cf:41:b3:a6:26:d6:28:fa:b6:c5:d4: f6:e9:35:07:b2:9c:78:90:50:8b:97:e1:53:2c:5c:32:a5:b3: fb:31:52:d3:1c:af:37:68:fa:2e:8b:48:03:3e:2c:5e:be:52: 7f:9f:ea:a7:f1:13:2d:81:ba:95:cd:a0:98:33:e2:27:22:50: 14:1e:74:f1:a0:09:1a:2c:cb:c9:53:91:f9:d7:37:67:9c:8d: 74:bf:15:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NTMxMTAvBgNVBAUTKEJCODk3MDQ1QTg4RkM4MUZDQ0ZFMzhFNUY3NjE1ODRG RENCQUNFODUwHhcNMjUwNzAzMDE0MTQzWhcNMjUwNzEwMDE0MTQzWjAYMRYwFAYD VQQDEw02ODY1ZGZkNy05NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vpXjE2UT5kc48o1cWP4O+KMoJHjwurJZ3rtlUXmjfaPQRAlqOtFzNh7EiqR hewjSj4bdLUSUcX2zT8cF0PamVDUBhDmGPh8spKhl/DMpeTgy8C7AeXsniOsHLGg RvfTA65plaiuiF0zNCYHaGlDeV9GEZCAov83hHvrir1Yy1FLk5YzqVbvYASF72tf TZ9DTWs0Ir/WhbQ87DSEbqJTZv/zOcMVD+8GO1t+4883xFd8ubyjble2M3t8389t 1TzMEar+d3/7j6lGfw62B5aKChdbysgX4RBBvWyknYkZSetiit9Pe7oxVgVnnaSh 8nxOHexW4Zocubn3fL74NAvhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZNVZiG FNkKyoptneudbzCtZuFHMB8GA1UdIwQYMBaAFLuJcEWoj8gfzP445fdhWE/cus6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU1My8xNjRBQkVDNEVC MEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlCX01fampsOTJGWVQ5eTZ6 b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0bHdSYWlQeUJfTV9qamw5MkZZVDl5NnpvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU1My8xNjRBQkVDNEVCMEIxMUVDODVFM0RCMkNDNEY5QUUwMi91NGx3UmFpUHlC X01fampsOTJGWVQ5eTZ6b1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMbveXqcNQtaeo/bMEC8PN27dzSB37eE+0MefDHEJJaZwXRlAMQHVE sqcBm6fgL5Yflio/you4saMt6AqNg43A/Uq4Cjg6O2ZFCXMzSC+HYzUnwr1tYvLl hjPWiRpXFl+S5A8vWxPPbQFZE+fLx7v2qmu0cYmsUIfhYv04Ug/JyUASmY1SuA9D ogSA8LR9ImWkAG3/aE+ZkqabwSUQ79wNEI373QSlqH3gz0GzpibWKPq2xdT26TUH spx4kFCLl+FTLFwypbP7MVLTHK83aPoui0gDPixevlJ/n+qn8RMtgbqVzaCYM+In IlAUHnTxoAkaLMvJU5H51zdnnI10vxWz -----END CERTIFICATE-----Generated at Fri Jul 4 22:04:49 2025 by rpki-client