$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: ic9ydC7Ae1mCZ2GMnvJxp9J0xBLc6KnFqUG1BH11Cyk= Subject key identifier: B9:74:1D:8E:E2:35:69:EC:04:FA:DC:EE:A2:CA:F1:03:27:85:69:4F Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 06CD Signing time: Fri 22 Aug 2025 22:13:25 +0000 Manifest this update: Fri 22 Aug 2025 22:13:24 +0000 Manifest next update: Fri 29 Aug 2025 22:13:24 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: S7rbq1ep7QUwUUNymdW4d2YeHv718JOky0GDGUU/51o=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: Aug 22 22:13:24 2025 GMT Not After : Aug 29 22:13:24 2025 GMT Subject: CN=68a8eb84-b114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:20:d3:9e:1e:b7:0d:d6:6b:b7:d8:c7:43: d3:9f:54:ce:26:ab:56:94:74:fc:3c:5b:fa:89:1a: 40:09:7e:32:84:b2:40:b1:fd:f7:71:43:d0:28:dc: 79:c3:f4:50:11:0d:31:18:4a:57:a4:d8:fc:fd:3a: 04:bd:f2:66:95:71:c7:40:f1:c7:5c:35:36:6d:0f: a2:85:69:18:a9:b9:1d:13:90:a2:1b:bb:88:1c:61: 05:10:61:f8:31:34:49:12:ff:b4:3f:2d:e3:1f:66: db:d5:9c:8c:2c:11:e0:6e:a0:28:e7:b4:1b:29:83: 6a:32:25:64:56:9b:7d:6d:a2:56:ae:f3:06:84:be: e3:59:cb:ba:74:bd:b5:86:ec:4d:01:75:ba:dc:3b: 9f:d4:85:e4:43:b1:ed:dd:da:d8:c4:77:1b:2e:98: 81:a4:26:61:f7:79:07:99:db:61:d6:cc:95:b1:1e: 9f:16:d8:cd:a7:04:95:e0:c3:17:13:43:ab:47:5d: aa:fe:7b:df:5b:9d:3b:6b:62:aa:30:74:98:21:fd: ec:da:c7:c3:db:c4:a6:ff:66:4d:bb:cc:37:41:3f: aa:49:d9:67:d6:cb:2b:19:a1:f5:67:07:28:58:de: e5:89:62:22:75:8d:0d:c9:0e:09:82:11:ea:b9:73: 5c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:74:1D:8E:E2:35:69:EC:04:FA:DC:EE:A2:CA:F1:03:27:85:69:4F X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a4:f4:66:5c:b8:bc:81:1b:64:5f:0a:36:3c:9e:eb:6b:f4: 10:09:08:9e:d0:ad:63:d2:93:99:a9:57:d0:00:c3:3b:2a:32: 73:e8:b2:49:a5:77:d5:36:fa:8c:69:7d:4e:84:5d:8e:04:e6: 88:38:22:79:38:ce:c5:cc:4e:a8:97:13:9e:0e:3f:67:a4:22: f0:01:d1:f8:76:39:ea:15:65:21:0c:7f:b0:9b:b3:b8:3e:b2: 18:e3:c0:a6:8d:4b:53:38:a5:67:54:64:0d:1c:18:79:d2:1b: 57:9a:63:6b:52:d8:f2:75:14:d8:cb:8f:b1:d0:64:b5:14:7b: f2:ec:a7:c9:90:34:69:19:57:b4:6d:84:9c:0e:e0:89:b0:91: 7f:b7:0f:88:9d:72:7a:b8:c6:2f:8c:22:22:a0:eb:e9:93:d2: fc:da:22:2c:38:b8:5d:5f:33:f7:55:b7:77:25:1d:c4:07:fd: 08:4d:0c:ba:71:5a:70:31:9e:17:96:b2:57:88:2c:2e:66:15: 4f:40:5b:15:ff:08:2b:31:98:cc:e4:4c:db:1f:1f:ad:49:f3: d3:e5:72:e6:69:aa:0d:40:3c:39:7b:ea:55:f1:61:c3:c6:13: 27:3f:7b:e9:1f:56:b6:7f:a4:8d:08:0a:fc:23:a9:4a:92:94: 3b:ea:99:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjUwODIyMjIxMzI0WhcNMjUwODI5MjIxMzI0WjAYMRYwFAYD VQQDEw02OGE4ZWI4NC1iMTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+Ag054etw3Wa7fYx0PTn1TOJqtWlHT8PFv6iRpACX4yhLJAsf33cUPQKNx5 w/RQEQ0xGEpXpNj8/ToEvfJmlXHHQPHHXDU2bQ+ihWkYqbkdE5CiG7uIHGEFEGH4 MTRJEv+0Py3jH2bb1ZyMLBHgbqAo57QbKYNqMiVkVpt9baJWrvMGhL7jWcu6dL21 huxNAXW63Duf1IXkQ7Ht3drYxHcbLpiBpCZh93kHmdth1syVsR6fFtjNpwSV4MMX E0OrR12q/nvfW507a2KqMHSYIf3s2sfD28Sm/2ZNu8w3QT+qSdln1ssrGaH1Zwco WN7liWIidY0NyQ4JghHquXNcxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLl0HY7i NWnsBPrc7qLK8QMnhWlPMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBspPRmXLi8gRtkXwo2PJ7ra/QQCQie0K1j0pOZqVfQAMM7KjJz6LJJ pXfVNvqMaX1OhF2OBOaIOCJ5OM7FzE6olxOeDj9npCLwAdH4djnqFWUhDH+wm7O4 PrIY48CmjUtTOKVnVGQNHBh50htXmmNrUtjydRTYy4+x0GS1FHvy7KfJkDRpGVe0 bYScDuCJsJF/tw+InXJ6uMYvjCIioOvpk9L82iIsOLhdXzP3Vbd3JR3EB/0ITQy6 cVpwMZ4XlrJXiCwuZhVPQFsV/wgrMZjM5EzbHx+tSfPT5XLmaaoNQDw5e+pV8WHD xhMnP3vpH1a2f6SNCAr8I6lKkpQ76pnZ -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:06 2025 by rpki-client