$ rpki-client -vvf rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft File: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft (raw, json) Hash identifier: z2B951LJnhN1rKT7z39YVP6CMCJ7boknho3WGVUlTaQ= Subject key identifier: AF:44:4F:C9:34:18:07:C9:3D:16:BE:0C:C7:5B:1A:7A:AE:F7:4F:B2 Authority key identifier: 95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 Certificate issuer: /CN=A9132457/serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft Manifest number: 01A4 Signing time: Thu 03 Jul 2025 03:24:13 +0000 Manifest this update: Thu 03 Jul 2025 03:24:13 +0000 Manifest next update: Thu 10 Jul 2025 03:24:13 +0000 Files and hashes: 1: lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl (hash: vspGHt1q3Cp63Ak7IV1K1S8XhXQtlh7hPEaC36ZAWI0=) 2: 8E10E282D81B11EDAB75C13EC4F9AE02.roa (hash: 8k36pvGImmVckUyl9Af0a0wGsrxQEwJI0duKzhrmqDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132457, serialNumber=9528160E4C304E1307DBF66F1901632ADF9F1A64 Validity Not Before: Jul 3 03:24:13 2025 GMT Not After : Jul 10 03:24:13 2025 GMT Subject: CN=6865f7dd-7856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:86:53:30:5b:35:4b:0f:7a:1c:16:ad:3a: 43:d8:18:8d:dc:b3:e7:48:eb:39:a6:ab:7c:4d:6a: f1:37:7f:9e:38:51:d5:b8:ca:f3:d5:8c:0a:63:a0: f0:ab:9a:35:31:c5:90:25:fe:78:10:48:41:5c:00: 14:25:17:eb:2d:fb:7d:b2:83:37:72:8e:1a:9b:1d: 7d:6d:a6:c9:d2:17:ea:a6:27:d1:50:9b:a4:8c:11: 56:c0:16:4b:83:19:16:49:ad:83:94:e3:e2:99:05: 8c:13:e9:70:05:d6:bf:3a:b7:b7:51:02:19:c2:25: 87:06:88:9c:08:7e:14:4c:d5:48:b7:a9:cd:1f:1f: f4:6a:71:94:8e:51:70:69:76:30:a9:26:24:a7:2e: 60:a9:31:0e:50:f0:87:9d:50:e5:01:b4:73:ca:4e: b4:07:31:86:db:d9:f3:9b:ff:95:69:d5:50:7c:5c: 0b:ee:75:38:be:ad:76:43:f7:09:11:9e:d9:eb:e8: e3:b8:d1:e2:98:b6:6c:df:3e:30:53:df:cd:35:0d: 00:ba:e3:1e:d2:89:88:81:75:3f:66:78:f1:50:b5: 31:e1:23:43:bb:c2:35:03:07:56:cb:19:57:ae:be: a9:6b:02:e4:52:be:03:4d:92:0e:70:fb:2c:05:f9: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:44:4F:C9:34:18:07:C9:3D:16:BE:0C:C7:5B:1A:7A:AE:F7:4F:B2 X509v3 Authority Key Identifier: keyid:95:28:16:0E:4C:30:4E:13:07:DB:F6:6F:19:01:63:2A:DF:9F:1A:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132457/8AE7392ED81811EDBD650F3DC4F9AE02/lSgWDkwwThMH2_ZvGQFjKt-fGmQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c2:17:bc:ca:49:c6:37:ca:35:0b:e3:29:d8:00:02:7f:23: 8f:2c:e2:c3:15:cc:77:41:4a:4b:5e:e1:ba:d8:01:df:c2:8c: 13:44:6e:88:32:23:b0:7a:31:e6:56:71:84:40:f6:f5:c1:55: 7e:5e:8d:78:f2:a8:89:ee:2e:e6:04:50:c6:10:0f:2d:ca:50: be:9d:f9:3a:7a:b4:4a:69:46:78:38:9e:3e:6b:9e:35:1c:59: a2:1f:1c:9a:03:87:76:09:10:53:4a:0e:74:6f:cd:91:1b:c3: 93:23:31:ef:37:b9:06:13:e1:ff:28:e0:82:ab:19:e8:14:47: 0c:72:a0:d6:ac:8c:f0:cf:23:8d:43:40:0f:5d:9b:d6:2d:d3: c9:de:7f:6b:68:b2:21:29:bd:ce:d6:73:6c:49:f6:dd:10:31: b6:0d:99:89:52:1c:47:2d:0f:4c:65:87:68:f6:55:8d:e9:e7: 76:12:e0:5b:84:91:c6:61:92:be:23:26:66:f5:aa:1f:bf:6a: 6e:4e:ec:a6:c3:19:a4:63:bd:11:15:9d:d8:c5:e5:f6:c0:f4: ff:d6:23:1d:2a:c4:6f:80:71:b7:c9:72:4c:b2:e6:b8:e1:52: 9f:be:cf:bc:f4:b6:e3:09:d7:9f:5d:27:80:e0:c4:a3:92:56: 39:c0:f2:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0NTcxMTAvBgNVBAUTKDk1MjgxNjBFNEMzMDRFMTMwN0RCRjY2RjE5MDE2MzJB REY5RjFBNjQwHhcNMjUwNzAzMDMyNDEzWhcNMjUwNzEwMDMyNDEzWjAYMRYwFAYD VQQDEw02ODY1ZjdkZC03ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy6GUzBbNUsPehwWrTpD2BiN3LPnSOs5pqt8TWrxN3+eOFHVuMrz1YwKY6Dw q5o1McWQJf54EEhBXAAUJRfrLft9soM3co4amx19babJ0hfqpifRUJukjBFWwBZL gxkWSa2DlOPimQWME+lwBda/Ore3UQIZwiWHBoicCH4UTNVIt6nNHx/0anGUjlFw aXYwqSYkpy5gqTEOUPCHnVDlAbRzyk60BzGG29nzm/+VadVQfFwL7nU4vq12Q/cJ EZ7Z6+jjuNHimLZs3z4wU9/NNQ0AuuMe0omIgXU/ZnjxULUx4SNDu8I1AwdWyxlX rr6pawLkUr4DTZIOcPssBfnRcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9ET8k0 GAfJPRa+DMdbGnqu90+yMB8GA1UdIwQYMBaAFJUoFg5MME4TB9v2bxkBYyrfnxpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjQ1Ny84QUU3MzkyRUQ4 MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1RoTUgyX1p2R1FGakt0LWZH bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTZ1dEa3d3VGhNSDJfWnZHUUZqS3QtZkdtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjQ1Ny84QUU3MzkyRUQ4MTgxMUVEQkQ2NTBGM0RDNEY5QUUwMi9sU2dXRGt3d1Ro TUgyX1p2R1FGakt0LWZHbVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTwhe8yknGN8o1C+Mp2AACfyOPLOLDFcx3QUpLXuG62AHfwowTRG6I MiOwejHmVnGEQPb1wVV+Xo148qiJ7i7mBFDGEA8tylC+nfk6erRKaUZ4OJ4+a541 HFmiHxyaA4d2CRBTSg50b82RG8OTIzHvN7kGE+H/KOCCqxnoFEcMcqDWrIzwzyON Q0APXZvWLdPJ3n9raLIhKb3O1nNsSfbdEDG2DZmJUhxHLQ9MZYdo9lWN6ed2EuBb hJHGYZK+IyZm9aofv2puTuymwxmkY70RFZ3YxeX2wPT/1iMdKsRvgHG3yXJMsua4 4VKfvs+89LbjCdefXSeA4MSjklY5wPIE -----END CERTIFICATE-----Generated at Thu Jul 3 10:33:46 2025 by rpki-client