$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: RjY7kwdIioj963r+m8n6YF1HSXgZPamoxkg4JAcu1NE= Subject key identifier: FC:C4:6A:1D:0D:5A:0E:E2:D5:32:CD:3B:D4:BC:24:C5:EB:90:CE:D8 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 0960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 0958 Signing time: Wed 02 Jul 2025 20:26:48 +0000 Manifest this update: Wed 02 Jul 2025 20:26:48 +0000 Manifest next update: Wed 09 Jul 2025 20:26:48 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: 2YjxWCbrY/BzANSU++qqVJgQsf8QcwHfzqF3NLBUQgw=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: X3WvsIakOYYYh6qQ/CNrPJ4rysF4m1jhkYS0mLUaZBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2400 (0x960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Jul 2 20:26:48 2025 GMT Not After : Jul 9 20:26:48 2025 GMT Subject: CN=68659608-1ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:bd:87:16:77:20:4c:a7:36:2f:59:3c:40: e9:59:7f:49:80:00:90:ce:e7:a5:2a:16:c8:0c:58: e9:a2:d7:45:86:8e:f0:76:bb:62:89:8f:d8:de:09: 51:09:97:e9:b6:09:ef:3f:4f:6c:b3:b8:98:35:96: c6:0d:3f:4c:ee:bd:92:0a:93:66:4f:fe:25:28:3f: 4a:8d:66:bd:4d:88:5d:c6:fc:3a:4c:91:97:cc:e4: 1f:47:83:b4:77:2e:cd:57:c6:34:22:90:58:33:ff: 09:cd:28:86:f8:3a:b1:2c:50:c6:44:02:62:6e:6f: a6:ae:73:e0:b2:17:c8:b0:82:7e:db:1d:c2:26:81: 88:29:65:bb:d8:3c:db:c6:39:94:86:69:99:5d:07: 62:f9:df:c4:1f:79:25:90:12:64:23:20:75:1a:7f: 75:fe:a1:03:4f:9e:59:e2:0b:d3:f7:a2:9f:d8:fa: 5e:73:83:51:f9:20:4a:10:db:fe:75:10:bb:17:d9: 35:0c:49:9d:48:e5:2b:da:d4:4a:82:40:76:4b:cd: 01:a3:83:90:0c:49:26:1e:64:76:d9:7a:58:d1:a9: 23:1b:40:80:af:2f:62:4a:d6:d0:7f:98:28:99:6b: 1b:f3:d2:8a:12:27:74:0a:30:62:e9:e8:cd:b1:d4: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C4:6A:1D:0D:5A:0E:E2:D5:32:CD:3B:D4:BC:24:C5:EB:90:CE:D8 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0f:03:9c:72:5a:5b:b3:08:e1:c8:dc:1a:2b:1f:b1:4e:a4: a8:4c:1f:6e:f9:92:c1:e2:bf:72:33:00:73:16:2c:6b:86:1c: 8a:2a:45:74:ec:ba:b2:06:b5:7d:af:0d:f9:62:75:82:d3:46: 61:52:2f:9b:94:32:f1:33:27:1f:84:c6:62:06:57:12:2f:51: 12:23:1e:92:84:70:ec:38:35:9b:4e:5e:86:d1:ec:d3:a8:68: 83:b0:c8:9b:46:0d:f3:ea:c3:0e:7c:cf:34:aa:a4:e4:61:1f: 5e:54:e3:e1:02:cd:c8:8f:9c:d4:08:e6:16:e6:0a:fa:47:ba: 6b:f7:0a:7e:4a:64:c1:5b:e8:3d:1d:b8:45:9d:c7:47:42:00: 0d:d0:b0:1e:83:25:8e:ce:35:56:3d:8c:e0:70:c5:ec:34:4d: 88:e8:9a:5a:4b:79:3e:55:a6:a5:e5:b1:1d:89:6f:44:49:8b: 79:72:ba:10:57:c6:fd:7e:e0:05:cf:0b:f3:d0:0a:b1:54:b4: a2:13:04:dc:90:a6:81:bc:75:eb:33:f7:61:e8:cb:0b:c7:f4: b1:c2:b0:be:40:57:42:33:bd:c0:66:d3:00:b2:1f:2e:89:3d: 14:6a:9c:54:d3:13:ea:e3:25:6c:de:6a:6e:d2:5f:27:b2:f5: 89:68:41:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjUwNzAyMjAyNjQ4WhcNMjUwNzA5MjAyNjQ4WjAYMRYwFAYD VQQDEw02ODY1OTYwOC0xZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVK9hxZ3IEynNi9ZPEDpWX9JgACQzuelKhbIDFjpotdFho7wdrtiiY/Y3glR CZfptgnvP09ss7iYNZbGDT9M7r2SCpNmT/4lKD9KjWa9TYhdxvw6TJGXzOQfR4O0 dy7NV8Y0IpBYM/8JzSiG+DqxLFDGRAJibm+mrnPgshfIsIJ+2x3CJoGIKWW72Dzb xjmUhmmZXQdi+d/EH3klkBJkIyB1Gn91/qEDT55Z4gvT96Kf2Ppec4NR+SBKENv+ dRC7F9k1DEmdSOUr2tRKgkB2S80Bo4OQDEkmHmR22XpY0akjG0CAry9iStbQf5go mWsb89KKEid0CjBi6ejNsdTsNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzEah0N Wg7i1TLNO9S8JMXrkM7YMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDwOcclpbswjhyNwaKx+xTqSoTB9u+ZLB4r9yMwBzFixrhhyKKkV0 7LqyBrV9rw35YnWC00ZhUi+blDLxMycfhMZiBlcSL1ESIx6ShHDsODWbTl6G0ezT qGiDsMibRg3z6sMOfM80qqTkYR9eVOPhAs3Ij5zUCOYW5gr6R7pr9wp+SmTBW+g9 HbhFncdHQgAN0LAegyWOzjVWPYzgcMXsNE2I6JpaS3k+Vaal5bEdiW9ESYt5croQ V8b9fuAFzwvz0AqxVLSiEwTckKaBvHXrM/dh6MsLx/SxwrC+QFdCM73AZtMAsh8u iT0UapxU0xPq4yVs3mpu0l8nsvWJaEF8 -----END CERTIFICATE-----Generated at Thu Jul 3 09:38:10 2025 by rpki-client