$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: UsbZqkCLWEv2as+8qfiu2C35XfzhjVyKBMq2ptl8SqI= Subject key identifier: 82:51:BD:30:46:FF:21:87:79:4A:47:A9:A2:7E:DE:BC:6C:DB:AF:23 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01D5 Signing time: Thu 03 Jul 2025 03:00:47 +0000 Manifest this update: Thu 03 Jul 2025 03:00:47 +0000 Manifest next update: Thu 10 Jul 2025 03:00:47 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: IqChHWC2V6BqRfRfiqtTQu9SMaWHP0VT4x7ngOcLBYU=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Jul 3 03:00:47 2025 GMT Not After : Jul 10 03:00:47 2025 GMT Subject: CN=6865f25f-67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:35:97:08:e3:c3:55:d0:0d:f1:fb:9e:c0: 4b:e5:a8:7c:5e:56:1a:64:22:04:69:3c:71:44:ab: 1d:24:85:1e:b8:d9:df:90:b2:30:2f:9a:00:08:d5: 04:22:a2:2f:4a:4a:c9:0f:fa:9c:65:70:8d:0d:5d: 02:48:f2:2e:bd:de:9c:30:5a:c4:32:c6:11:81:b5: 3b:ef:09:76:d4:28:84:4e:de:0b:22:9a:7c:26:ef: cb:a6:db:40:d9:55:b2:3f:83:ae:83:2a:ee:46:65: 75:c2:01:56:ba:46:64:64:dd:bd:83:b1:d5:02:97: 1c:8b:b9:fe:57:ac:76:1b:7c:81:76:b6:7a:a2:7d: 84:c8:af:c0:a7:a1:23:6a:ea:41:4e:2f:9c:39:9b: 14:82:c0:66:c7:e3:f0:53:d6:7f:0e:53:d2:20:77: fa:b5:6b:35:ec:b9:17:bc:da:fe:0a:eb:ab:56:64: 5f:15:9a:7d:c8:f4:f0:ed:19:6a:30:51:92:16:0d: 9d:b6:84:80:41:84:4c:12:03:b7:a5:9e:ee:c9:26: b8:28:5a:34:98:e6:c0:1b:fd:ad:54:1c:8d:57:9e: 1d:3f:c5:e7:1d:49:40:e9:e3:4c:54:92:f7:ea:56: 47:f2:73:5d:31:37:27:38:dd:73:25:d9:1e:a7:4c: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:BD:30:46:FF:21:87:79:4A:47:A9:A2:7E:DE:BC:6C:DB:AF:23 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e6:93:93:de:29:ac:ee:f2:a9:0f:73:b7:22:c6:8f:1e:93: d3:eb:b8:5b:ea:ad:69:81:a3:e5:7e:4d:fd:c8:b6:68:8e:a3: 12:53:14:5c:70:45:41:3c:1b:ef:50:8d:95:4e:d2:a6:8d:f7: 14:8f:4f:42:a1:df:3a:f4:dd:4b:69:3c:4b:7f:1c:89:78:22: 0f:d7:f7:3e:85:17:2a:ef:df:71:a6:da:0c:8b:a7:93:40:7e: d6:06:84:00:20:40:39:98:5f:2a:ba:62:a1:f0:74:00:72:12: 26:f8:89:2d:95:f0:8d:91:5a:23:8a:b5:a3:fa:4c:9b:23:f6: d1:b5:84:af:dc:44:81:ea:1d:11:3d:ab:18:9c:26:e0:68:ca: 11:a7:44:9e:1e:a2:3e:2a:61:8f:c6:7a:96:3d:35:c1:fb:41: fb:90:ce:c1:a1:61:0a:ba:a0:6a:80:77:15:be:31:48:b5:b0: 6a:20:09:5d:db:b8:0c:d4:ff:08:2f:b5:3f:77:6b:af:b3:80: 5d:ca:70:55:f2:8e:c6:a2:bf:7d:8d:03:6d:5e:f2:5a:ae:5e: 1f:e3:c6:6a:b6:7f:12:87:f7:03:4b:be:67:d6:15:1b:9f:12: 0f:8d:8d:91:bc:fc:29:fb:4f:0f:88:ea:d9:4c:7b:eb:ac:93: 75:3e:0d:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNzAzMDMwMDQ3WhcNMjUwNzEwMDMwMDQ3WjAYMRYwFAYD VQQDEw02ODY1ZjI1Zi02N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oA1lwjjw1XQDfH7nsBL5ah8XlYaZCIEaTxxRKsdJIUeuNnfkLIwL5oACNUE IqIvSkrJD/qcZXCNDV0CSPIuvd6cMFrEMsYRgbU77wl21CiETt4LIpp8Ju/LpttA 2VWyP4OugyruRmV1wgFWukZkZN29g7HVApcci7n+V6x2G3yBdrZ6on2EyK/Ap6Ej aupBTi+cOZsUgsBmx+PwU9Z/DlPSIHf6tWs17LkXvNr+CuurVmRfFZp9yPTw7Rlq MFGSFg2dtoSAQYRMEgO3pZ7uySa4KFo0mObAG/2tVByNV54dP8XnHUlA6eNMVJL3 6lZH8nNdMTcnON1zJdkep0xoQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJRvTBG /yGHeUpHqaJ+3rxs268jMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw5pOT3ims7vKpD3O3IsaPHpPT67hb6q1pgaPlfk39yLZojqMSUxRc cEVBPBvvUI2VTtKmjfcUj09Cod869N1LaTxLfxyJeCIP1/c+hRcq799xptoMi6eT QH7WBoQAIEA5mF8qumKh8HQAchIm+IktlfCNkVojirWj+kybI/bRtYSv3ESB6h0R PasYnCbgaMoRp0SeHqI+KmGPxnqWPTXB+0H7kM7BoWEKuqBqgHcVvjFItbBqIAld 27gM1P8IL7U/d2uvs4BdynBV8o7Gor99jQNtXvJarl4f48Zqtn8Sh/cDS75n1hUb nxIPjY2RvPwp+08PiOrZTHvrrJN1Pg2K -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:42 2025 by rpki-client