$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: LtXDt3j/pu0R1VT64KsXu/9hzmPbyqx28Daae7bqmOk= Subject key identifier: C0:0D:5D:B9:57:78:0D:40:39:C8:B5:83:80:EC:BF:1A:A1:31:83:41 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 048A Signing time: Tue 01 Jul 2025 00:33:15 +0000 Manifest this update: Tue 01 Jul 2025 00:33:15 +0000 Manifest next update: Tue 08 Jul 2025 00:33:15 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: tljBJrdc5Pq2IaXx7fAYktzphkTLTCoQ+uQ6ulNulLc=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: oit1Hcurqov7MCqWlGsRBKXsNTM2JCAP78/GFOI7Xmc=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: 4z+897eYmawfXH/tzTqewnh8oQ4d+YXJLaFQ5gY8Qbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1170 (0x492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Jul 1 00:33:15 2025 GMT Not After : Jul 8 00:33:15 2025 GMT Subject: CN=68632ccb-7dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:82:5f:87:e5:12:88:07:bc:2a:e0:b2:45: 6b:a5:95:78:53:f3:f4:ae:ad:ed:a1:08:aa:2b:40: 56:ac:18:a0:89:7a:4d:4d:59:e7:4e:f6:53:c0:bb: fe:3a:d7:f2:93:4c:74:5b:21:44:be:c4:8d:06:6c: 15:56:ac:e2:0f:c5:6b:6f:48:c3:0e:44:fe:15:f3: 1a:77:d9:a9:1e:9c:30:68:81:c8:f3:ae:74:0d:8e: 2d:bb:7a:da:10:bd:19:8a:9e:db:53:07:48:8c:c7: 1e:3e:35:7b:4c:b4:f2:54:de:5f:aa:e0:9a:ff:86: a4:63:e9:e4:c6:b4:4a:84:1a:f8:85:a9:33:3c:f3: 13:26:f8:2d:1e:a5:d5:98:12:35:0b:aa:a7:99:a0: 72:16:da:7e:06:f0:27:7e:a3:55:41:2a:33:06:a0: f8:ee:41:8d:30:b8:cb:6b:06:8f:e8:7f:7a:a2:c0: ef:8e:9f:75:06:5b:bf:bd:2a:59:70:40:25:78:76: 77:bd:d8:8d:33:a3:94:94:4b:82:a4:05:6e:9c:60: 61:8b:7e:6f:10:1f:6f:96:77:09:3b:f9:0d:f2:f1: ee:c2:17:2f:1f:7c:8a:37:b3:b5:93:46:c3:36:02: a5:ac:0d:85:0d:2a:d2:fb:7f:70:23:1f:84:1c:6c: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:5D:B9:57:78:0D:40:39:C8:B5:83:80:EC:BF:1A:A1:31:83:41 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:32:d5:de:eb:a9:9a:8f:d5:c5:f6:21:ff:32:87:95:4c:fa: 0a:9e:70:d4:06:02:c3:b8:0e:e8:76:2b:7b:4d:07:cc:8f:c1: 40:a6:cf:b9:b6:29:20:34:2f:07:21:55:8a:7d:29:98:65:88: e9:bb:3b:62:c5:29:31:3b:8c:ae:4c:eb:6f:91:d7:db:ea:89: f5:2d:74:d1:b6:dc:29:56:da:1d:3d:43:26:16:c1:d9:c1:d8: 91:61:f8:af:9a:8c:c1:2f:fb:50:7d:b4:48:e4:f1:6c:c7:8c: ae:cc:15:19:15:07:c6:b3:62:3b:53:34:cc:fc:e6:6b:00:4a: 97:3f:a7:25:c7:e8:94:4d:d0:86:f7:19:d2:48:ad:55:84:f0: e4:ff:e2:bb:cf:c2:f3:1d:de:6b:6a:6f:14:5b:76:22:c0:13: ea:ab:98:a5:53:67:41:09:40:a4:01:86:ef:a9:7b:2e:32:c1: 66:f9:e4:60:a3:ef:b1:58:64:4f:31:05:44:f9:74:56:68:3e: 6a:23:2a:8f:26:3f:b6:fc:c8:be:ac:9d:1e:56:92:db:b5:fe: 74:f5:df:15:19:fd:5e:6e:82:ff:8e:c1:fb:c8:51:98:39:b8: 2b:5d:aa:90:3a:60:16:cc:7f:73:a7:69:1b:16:05:fa:5c:3a: 51:10:c2:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUwNzAxMDAzMzE1WhcNMjUwNzA4MDAzMzE1WjAYMRYwFAYD VQQDEw02ODYzMmNjYi03ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNOCX4flEogHvCrgskVrpZV4U/P0rq3toQiqK0BWrBigiXpNTVnnTvZTwLv+ Otfyk0x0WyFEvsSNBmwVVqziD8Vrb0jDDkT+FfMad9mpHpwwaIHI8650DY4tu3ra EL0Zip7bUwdIjMcePjV7TLTyVN5fquCa/4akY+nkxrRKhBr4hakzPPMTJvgtHqXV mBI1C6qnmaByFtp+BvAnfqNVQSozBqD47kGNMLjLawaP6H96osDvjp91Blu/vSpZ cEAleHZ3vdiNM6OUlEuCpAVunGBhi35vEB9vlncJO/kN8vHuwhcvH3yKN7O1k0bD NgKlrA2FDSrS+39wIx+EHGy8GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMANXblX eA1AOci1g4DsvxqhMYNBMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvMtXe66maj9XF9iH/MoeVTPoKnnDUBgLDuA7odit7TQfMj8FAps+5 tikgNC8HIVWKfSmYZYjpuztixSkxO4yuTOtvkdfb6on1LXTRttwpVtodPUMmFsHZ wdiRYfivmozBL/tQfbRI5PFsx4yuzBUZFQfGs2I7UzTM/OZrAEqXP6clx+iUTdCG 9xnSSK1VhPDk/+K7z8LzHd5ram8UW3YiwBPqq5ilU2dBCUCkAYbvqXsuMsFm+eRg o++xWGRPMQVE+XRWaD5qIyqPJj+2/Mi+rJ0eVpLbtf509d8VGf1eboL/jsH7yFGY ObgrXaqQOmAWzH9zp2kbFgX6XDpREMJz -----END CERTIFICATE-----Generated at Wed Jul 2 15:05:52 2025 by rpki-client