$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft File: 4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json) Hash identifier: qMhn4YxZXHbewDtaUxCF9CB/taCOYTnJU6zl28RtobY= Subject key identifier: C2:22:1C:16:5D:18:CC:36:B1:C7:85:46:BB:D8:DB:E0:6A:CB:2D:96 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft Manifest number: 0489 Signing time: Fri 22 Aug 2025 20:52:40 +0000 Manifest this update: Fri 22 Aug 2025 20:52:39 +0000 Manifest next update: Fri 29 Aug 2025 20:52:39 +0000 Files and hashes: 1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: Z+xoYxT2FFEkqhOqHoh49G7PIapyvwh38QFVlydb4WQ=) 2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=) 3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Aug 22 20:52:39 2025 GMT Not After : Aug 29 20:52:39 2025 GMT Subject: CN=68a8d897-5f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:43:50:78:36:ba:65:23:bf:2c:95:d2:0e: f3:c2:ab:23:4e:90:37:ae:8d:d0:71:ab:34:0f:50: 51:93:64:ed:11:01:b1:6a:df:b9:e1:15:8b:14:0c: 47:06:1d:d2:63:cb:dc:52:c9:dd:2b:5e:cf:1f:03: 35:dc:d8:81:cc:33:27:0e:11:37:4a:8c:87:f9:9b: 32:e8:13:65:49:c1:51:94:e3:86:cb:cc:95:d9:f6: 39:97:1c:df:14:b9:04:08:37:3a:3a:a1:fb:e0:9e: 7c:22:cf:df:2b:49:40:12:c7:f1:cb:ee:76:85:9f: 1b:56:23:d6:9d:2c:7a:0c:17:26:8a:2e:1c:44:fc: c1:05:49:aa:4b:13:6b:10:e6:7d:a1:3c:30:fb:5d: 47:10:fa:2e:92:6f:f9:5f:97:de:f9:f6:7f:27:9d: 8b:46:4e:5f:6a:93:e8:47:df:6c:30:9c:ac:f9:fc: 33:67:5f:6c:17:13:86:fa:5c:52:23:59:66:db:b5: 46:6c:90:69:de:fe:5f:de:0c:a2:59:19:c7:99:0c: 39:f5:a8:a2:d7:0e:0f:23:43:a9:eb:4e:cc:a6:6a: 76:d2:84:a0:e9:c0:e2:f8:41:5d:15:74:ba:a7:b4: 31:2b:0f:e4:bf:ac:66:d4:0b:85:2c:72:6c:81:f3: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:22:1C:16:5D:18:CC:36:B1:C7:85:46:BB:D8:DB:E0:6A:CB:2D:96 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6f:d3:15:aa:ee:cb:18:86:b7:f2:09:29:87:ba:93:f5:f4: 0f:90:c8:10:1b:83:36:89:c4:9a:a1:2d:af:9d:7e:4b:95:03: 08:5b:b0:83:39:ca:8a:41:88:87:b8:c1:da:96:5c:fd:3c:b4: a6:d3:74:aa:47:1e:0d:b5:7a:b7:4b:c2:bf:9f:51:9c:6e:76: 81:7e:a9:05:d2:fc:57:f3:fc:2d:e0:f6:db:5a:8f:86:64:85: 27:b5:14:40:f4:c7:d0:38:c7:46:5c:f6:b0:44:ce:04:18:80: 1a:ad:d3:40:2f:f6:bf:b9:fd:c4:13:66:c8:25:c7:71:52:d5: a2:43:a5:ec:a1:b9:bc:e8:f9:35:5c:58:7e:39:d8:28:a9:85: c9:3b:a7:d3:a7:0b:e5:54:87:b4:f5:c8:4a:4d:da:ef:d0:a1: a0:ef:3c:47:52:6b:89:43:1d:f2:b3:ab:26:53:e0:f4:f8:74: c1:d4:e2:39:7c:9a:07:13:98:b9:3a:58:df:f5:69:7c:fa:fb: 47:ae:79:95:76:f2:05:b5:ac:10:90:36:de:a4:82:61:30:e5: 2b:5d:3f:4f:f9:c4:33:ef:0e:a0:d8:dd:6b:a1:0e:29:0c:96: a4:68:5f:fd:c9:4c:d8:1c:27:8a:e8:4e:a7:fd:cf:78:c7:3d: 3a:76:75:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjUwODIyMjA1MjM5WhcNMjUwODI5MjA1MjM5WjAYMRYwFAYD VQQDEw02OGE4ZDg5Ny01ZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvodDUHg2umUjvyyV0g7zwqsjTpA3ro3Qcas0D1BRk2TtEQGxat+54RWLFAxH Bh3SY8vcUsndK17PHwM13NiBzDMnDhE3SoyH+Zsy6BNlScFRlOOGy8yV2fY5lxzf FLkECDc6OqH74J58Is/fK0lAEsfxy+52hZ8bViPWnSx6DBcmii4cRPzBBUmqSxNr EOZ9oTww+11HEPoukm/5X5fe+fZ/J52LRk5fapPoR99sMJys+fwzZ19sFxOG+lxS I1lm27VGbJBp3v5f3gyiWRnHmQw59aii1w4PI0Op607Mpmp20oSg6cDi+EFdFXS6 p7QxKw/kv6xm1AuFLHJsgfNoIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIiHBZd GMw2sceFRrvY2+Bqyy2WMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVCMC9FMzJDODdDQzUwRDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERK OWxXVV9HNkppZnlWT3pibEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKb9MVqu7LGIa38gkph7qT9fQPkMgQG4M2icSaoS2vnX5LlQMIW7CD OcqKQYiHuMHallz9PLSm03SqRx4NtXq3S8K/n1GcbnaBfqkF0vxX8/wt4PbbWo+G ZIUntRRA9MfQOMdGXPawRM4EGIAardNAL/a/uf3EE2bIJcdxUtWiQ6Xsobm86Pk1 XFh+OdgoqYXJO6fTpwvlVIe09chKTdrv0KGg7zxHUmuJQx3ys6smU+D0+HTB1OI5 fJoHE5i5Oljf9Wl8+vtHrnmVdvIFtawQkDbepIJhMOUrXT9P+cQz7w6g2N1roQ4p DJakaF/9yUzYHCeK6E6n/c94xz06dnUP -----END CERTIFICATE-----Generated at Sat Aug 23 12:33:44 2025 by rpki-client