$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: 9hO5RGBGfP6fhwUB4Ql4jVqKftDjoyN/GwEfO2qDDm0= Subject key identifier: 09:61:77:2B:02:2A:32:0F:0A:28:FC:67:8E:99:4D:F9:98:E8:AC:40 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 0677 Signing time: Wed 02 Jul 2025 22:38:58 +0000 Manifest this update: Wed 02 Jul 2025 22:38:57 +0000 Manifest next update: Wed 09 Jul 2025 22:38:57 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: paXg4dvaV9tyghQwa24HQXPrVPwjjHGi45HmyoCZf4M=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: Jul 2 22:38:57 2025 GMT Not After : Jul 9 22:38:57 2025 GMT Subject: CN=6865b501-0243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:45:ca:a4:b1:67:a8:c4:b7:a7:ca:05:f1: 17:e7:4b:18:79:7d:78:2d:80:17:91:45:b3:2d:03: ea:46:3d:10:64:ad:ae:5d:e7:45:86:bb:11:a8:7f: d2:06:62:e4:bb:b4:21:01:2d:ea:21:0d:17:db:8f: 97:32:d6:cf:9c:d3:2f:fc:d2:ec:91:da:8a:0a:df: b8:5f:c0:01:8a:a0:3c:a5:5d:7b:12:6b:86:9b:cf: 5d:50:e2:88:ad:2a:2f:04:05:e5:c0:de:e1:88:28: ce:cc:96:68:f6:d9:ff:8a:72:c8:85:5d:5e:46:61: c3:6a:c3:f1:25:51:2e:9d:ce:12:33:59:80:f2:2b: be:ec:89:c7:08:4b:d8:1d:cd:b4:3b:6d:62:51:6e: 4f:97:f9:79:bd:aa:0a:2d:fd:36:b7:1a:16:1b:99: 96:de:a3:3d:d1:7b:fd:7a:4c:a5:4e:94:21:3b:64: 28:a6:dc:d8:ff:6c:77:84:6d:40:39:0b:8c:54:58: 1b:d1:c9:22:ec:1b:1e:05:03:a2:e0:00:08:fc:18: dc:2a:6e:0b:e8:71:d2:f2:52:95:08:f1:cb:80:e5: 1a:2b:60:32:12:a3:a9:29:8f:69:22:a5:dd:01:59: a3:5d:95:8b:f9:7c:21:36:5c:46:ff:aa:75:89:c3: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:61:77:2B:02:2A:32:0F:0A:28:FC:67:8E:99:4D:F9:98:E8:AC:40 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:77:b8:41:b4:af:fc:80:d6:d6:73:fb:c1:ed:28:ae:81:f3: 1f:b6:4b:c1:79:50:27:de:c5:8b:ed:82:1a:0e:de:e5:3e:89: 3b:45:9f:1d:f9:58:ae:ce:18:93:8d:8d:dd:38:3e:0f:c8:98: be:2e:a2:fb:fb:48:e8:74:49:04:1f:19:cc:c3:db:cc:24:ac: d6:12:6d:cf:af:43:ec:54:66:6b:9c:d7:a8:eb:09:d0:ba:d3: b4:54:1c:d1:ee:c1:54:8d:8d:17:99:ca:fb:71:c3:83:fe:10: fb:51:d4:20:5f:2c:51:71:b5:9c:9c:d2:42:ee:a5:49:8a:61: 9f:a2:65:d4:e4:eb:6c:80:25:dd:53:ad:87:85:d5:b6:d8:d9: 6c:fa:ff:54:9d:8b:8e:91:4a:c4:9e:80:25:b9:0c:6b:73:b1: fd:56:4d:82:54:bf:bf:36:9f:94:81:95:76:f9:73:d0:01:99: aa:55:a4:e2:4a:1c:ff:a5:7b:7d:56:a9:df:ad:13:62:e5:95: 91:b0:d4:29:a8:af:64:bf:45:bc:55:c3:ca:59:95:85:0a:9d: 1e:16:a6:48:f9:84:ee:a8:ac:76:85:00:c3:4c:71:52:84:62: 19:56:15:05:c1:f3:fa:0d:bf:ff:30:e3:5e:ba:e7:98:13:72: a8:a7:29:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjUwNzAyMjIzODU3WhcNMjUwNzA5MjIzODU3WjAYMRYwFAYD VQQDEw02ODY1YjUwMS0wMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzhFyqSxZ6jEt6fKBfEX50sYeX14LYAXkUWzLQPqRj0QZK2uXedFhrsRqH/S BmLku7QhAS3qIQ0X24+XMtbPnNMv/NLskdqKCt+4X8ABiqA8pV17EmuGm89dUOKI rSovBAXlwN7hiCjOzJZo9tn/inLIhV1eRmHDasPxJVEunc4SM1mA8iu+7InHCEvY Hc20O21iUW5Pl/l5vaoKLf02txoWG5mW3qM90Xv9ekylTpQhO2QoptzY/2x3hG1A OQuMVFgb0cki7BseBQOi4AAI/BjcKm4L6HHS8lKVCPHLgOUaK2AyEqOpKY9pIqXd AVmjXZWL+XwhNlxG/6p1icPi/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlhdysC KjIPCij8Z46ZTfmY6KxAMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTd7hBtK/8gNbWc/vB7SiugfMftkvBeVAn3sWL7YIaDt7lPok7RZ8d +ViuzhiTjY3dOD4PyJi+LqL7+0jodEkEHxnMw9vMJKzWEm3Pr0PsVGZrnNeo6wnQ utO0VBzR7sFUjY0Xmcr7ccOD/hD7UdQgXyxRcbWcnNJC7qVJimGfomXU5OtsgCXd U62HhdW22Nls+v9UnYuOkUrEnoAluQxrc7H9Vk2CVL+/Np+UgZV2+XPQAZmqVaTi Shz/pXt9VqnfrRNi5ZWRsNQpqK9kv0W8VcPKWZWFCp0eFqZI+YTuqKx2hQDDTHFS hGIZVhUFwfP6Db//MONeuueYE3Kopym6 -----END CERTIFICATE-----Generated at Thu Jul 3 07:58:32 2025 by rpki-client