$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: EJWqg+sDhEWqB4cNU3QdFCefC65dPUWXvit8rnA0Y8w= Subject key identifier: 57:53:7C:1F:DD:C6:B2:14:34:B3:32:05:A8:C3:73:2E:70:B1:AD:62 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 028C Signing time: Thu 03 Jul 2025 02:02:07 +0000 Manifest this update: Thu 03 Jul 2025 02:02:06 +0000 Manifest next update: Thu 10 Jul 2025 02:02:06 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: 6uG9vooIdl90lc6QzmxHMX3cxVi/1Ek1EHNX3R0ScBA=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Jul 3 02:02:06 2025 GMT Not After : Jul 10 02:02:06 2025 GMT Subject: CN=6865e49f-7519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7b:40:03:14:dc:00:65:03:63:f0:64:ec:3d: d9:f5:b3:1b:d9:38:ae:85:e3:64:3d:fe:be:9c:a8: 15:b6:53:04:b5:50:e2:54:5b:47:04:d4:47:16:bc: 30:86:76:bd:05:45:8d:31:52:bc:dc:52:ab:66:d6: 9c:58:5e:7c:40:8f:b8:c3:9c:25:fa:0c:08:e4:d9: 9c:25:13:09:74:15:85:8b:99:36:15:dd:b2:b8:6e: c9:7d:80:db:05:aa:6a:b4:71:ec:20:5c:5d:b9:39: 54:a2:63:1b:af:23:55:2f:11:93:5b:75:5d:66:7b: 0d:48:12:07:f2:ca:11:2a:d1:6d:40:73:c2:8e:80: 05:de:fa:37:0d:3e:4c:6b:30:29:da:89:b0:9e:7c: af:55:ac:ce:34:c0:49:6a:d0:3b:3c:31:f3:5a:da: 34:de:cd:cb:81:f2:94:d8:f0:02:23:87:50:eb:0c: c4:af:19:0e:8c:a4:69:f1:91:9c:01:f3:ca:62:9e: df:27:09:15:c8:15:cf:55:0c:34:c9:29:f4:03:9b: 19:ea:4d:47:a0:cd:c0:ff:53:a9:8b:f2:24:f4:3f: 32:1f:03:56:b0:0b:97:c4:7a:04:a1:dc:f6:32:f5: 1a:ae:52:bc:e7:94:00:6b:60:11:5b:b6:b6:31:af: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:7C:1F:DD:C6:B2:14:34:B3:32:05:A8:C3:73:2E:70:B1:AD:62 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3c:87:62:8f:48:f7:80:62:69:86:b3:e1:2d:61:b0:b4:79: 22:d2:c4:f3:6b:57:af:a1:ef:6f:6e:0b:79:f1:2a:fc:7b:03: 62:05:1b:d1:3d:23:02:2d:0b:93:39:93:a4:b2:79:ec:49:db: aa:d9:70:29:ee:2f:77:ba:c6:b7:cf:42:10:f1:f4:e4:97:95: 4a:bf:4b:d5:82:c2:26:f6:0b:0c:2f:15:e4:aa:44:9b:0f:f7: 00:52:22:d8:2e:40:0a:79:25:0b:d5:a9:e3:f2:5b:c4:c1:e7: 00:ea:ee:0e:fa:f5:31:7d:28:df:1e:8d:6c:70:48:e5:7d:a7: ea:f2:94:2a:29:66:5a:f9:1a:09:3f:d7:3d:55:27:78:03:fc: c2:b8:8c:a4:00:14:c5:30:cc:75:37:fb:b4:0a:39:02:2f:92: 34:cb:09:3e:d0:de:57:95:a7:38:23:0d:15:4c:1c:99:63:ad: f4:52:f9:b8:ab:fc:a7:03:56:13:6d:89:6b:dc:8c:86:75:60: a6:61:fb:d0:63:5c:4c:c8:05:25:13:02:41:3a:09:73:04:d8: e1:2c:91:aa:42:a0:a2:be:b6:f3:c5:c2:82:10:0c:f6:f0:b6: ab:18:6d:14:cc:bc:00:fd:df:25:5a:38:42:f9:62:d1:ce:0c: ef:32:56:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUwNzAzMDIwMjA2WhcNMjUwNzEwMDIwMjA2WjAYMRYwFAYD VQQDEw02ODY1ZTQ5Zi03NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuntAAxTcAGUDY/Bk7D3Z9bMb2TiuheNkPf6+nKgVtlMEtVDiVFtHBNRHFrww hna9BUWNMVK83FKrZtacWF58QI+4w5wl+gwI5NmcJRMJdBWFi5k2Fd2yuG7JfYDb BapqtHHsIFxduTlUomMbryNVLxGTW3VdZnsNSBIH8soRKtFtQHPCjoAF3vo3DT5M azAp2omwnnyvVazONMBJatA7PDHzWto03s3LgfKU2PACI4dQ6wzErxkOjKRp8ZGc AfPKYp7fJwkVyBXPVQw0ySn0A5sZ6k1HoM3A/1Opi/Ik9D8yHwNWsAuXxHoEodz2 MvUarlK855QAa2ARW7a2Ma+rcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdTfB/d xrIUNLMyBajDcy5wsa1iMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYPIdij0j3gGJphrPhLWGwtHki0sTza1evoe9vbgt58Sr8ewNiBRvR PSMCLQuTOZOksnnsSduq2XAp7i93usa3z0IQ8fTkl5VKv0vVgsIm9gsMLxXkqkSb D/cAUiLYLkAKeSUL1anj8lvEwecA6u4O+vUxfSjfHo1scEjlfafq8pQqKWZa+RoJ P9c9VSd4A/zCuIykABTFMMx1N/u0CjkCL5I0ywk+0N5Xlac4Iw0VTByZY630Uvm4 q/ynA1YTbYlr3IyGdWCmYfvQY1xMyAUlEwJBOglzBNjhLJGqQqCivrbzxcKCEAz2 8LarGG0UzLwA/d8lWjhC+WLRzgzvMlYQ -----END CERTIFICATE-----Generated at Thu Jul 3 23:00:39 2025 by rpki-client