$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: CMWQ8YFjVNOCK35hlHpJdwR6Be+t1W3IrqP/aOqMXiM= Subject key identifier: 97:EE:F9:92:54:75:8E:5C:A1:9F:8E:B5:89:F2:75:65:9B:A0:C3:4C Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 0958 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 094F Signing time: Wed 02 Jul 2025 20:27:13 +0000 Manifest this update: Wed 02 Jul 2025 20:27:13 +0000 Manifest next update: Wed 09 Jul 2025 20:27:13 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: 5kDRvjbsrINop0Qmqn91rrt2/ukJh55jL6X4FhldbKQ=) 2: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 4zTT34lM7O6gFPRhXB1r+qunYynBSeEm8n99il9hQxc=) 3: CB91083CA63511EA900DB923C4F9AE02.roa (hash: 1guI2gXzSQT5STi81CKAucU8Uim1y9wn0ld7tOI9/tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2392 (0x958) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Jul 2 20:27:13 2025 GMT Not After : Jul 9 20:27:13 2025 GMT Subject: CN=68659621-9812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:06:8d:b0:95:bc:f7:ae:3f:a7:eb:90:2e: 3b:e5:f4:0b:53:1a:8c:43:7f:26:1b:f8:bf:2c:4c: b4:8e:ed:04:4f:6e:b4:2b:8b:f6:af:64:62:ea:a0: 1f:2c:bc:d2:d1:f7:55:71:ce:40:71:e5:28:45:c9: 42:4c:e3:6c:aa:df:ea:62:90:bf:68:1d:19:1f:65: af:ec:31:10:59:08:4f:3f:03:35:de:df:1c:22:d2: 58:ca:b8:a5:6e:d9:54:81:82:16:a6:fe:55:53:14: 90:3a:7f:d5:46:7c:d7:71:b4:a6:05:55:11:dd:d3: 93:b7:cf:e0:78:5a:3e:0e:6b:7c:f7:63:5b:98:82: af:7e:3b:89:06:0f:ef:be:e1:61:58:62:4e:23:ff: 7e:a7:75:c5:a0:9e:9e:32:a1:bc:b1:49:7e:68:e6: 02:22:55:12:0b:1e:b7:d8:71:c6:15:68:08:7a:1e: 91:92:c9:24:5c:ca:38:ca:12:c3:16:6b:6c:12:68: 2d:f3:77:16:4e:6c:82:50:cb:37:91:8a:dc:e7:99: 67:cf:fd:de:db:cf:ad:a0:7f:00:f1:f0:34:0e:25: 33:5a:aa:50:3d:ae:c2:63:c9:44:17:aa:f0:cf:f9: f8:d2:4a:53:c2:ba:24:ee:0d:5a:cb:4a:e9:67:1e: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:F9:92:54:75:8E:5C:A1:9F:8E:B5:89:F2:75:65:9B:A0:C3:4C X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:df:d3:75:4f:5e:6a:03:e1:4f:2d:f4:99:0b:81:68:81:bc: f4:2d:79:74:7f:53:dc:50:95:f6:1b:ce:3d:e1:76:28:b4:c3: 47:26:3c:84:54:c9:88:94:45:c9:43:84:2e:9f:8e:a4:1d:ed: 0b:86:ff:f1:c8:a1:2d:90:d9:1c:cb:cd:c9:7e:b1:56:4b:af: 76:5a:ef:26:f3:7a:11:a1:f9:ee:6a:43:de:9a:98:a9:fd:81: 00:28:f7:4a:6b:6b:be:84:da:b2:80:6e:bf:ef:79:38:32:a9: 02:d4:c6:bf:46:17:3d:e8:77:a5:cc:63:e7:6e:2d:e7:9f:2e: af:29:d5:65:4f:b9:a0:87:e0:d2:4b:35:c9:04:76:fe:fe:e2: 99:98:c1:4e:77:4b:8e:ed:c2:e8:71:9c:e1:00:fe:bc:9b:78: 65:1d:6e:e2:c0:0c:44:5a:1b:db:56:42:bd:c8:d5:e2:43:82: da:07:74:a9:e4:d1:b2:1d:ec:c8:09:6e:63:d9:21:6c:b5:74: 4f:46:be:b8:75:73:01:cd:78:30:6c:a6:73:af:f5:90:dd:2c: 0d:c7:cf:8d:48:24:d7:a7:19:d0:cb:34:30:03:b1:f7:8b:9b: 2d:ee:d7:f7:fe:89:a0:91:fc:32:f2:f6:c1:73:21:03:d2:2e: cc:93:bf:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjUwNzAyMjAyNzEzWhcNMjUwNzA5MjAyNzEzWjAYMRYwFAYD VQQDEw02ODY1OTYyMS05ODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEEGjbCVvPeuP6frkC475fQLUxqMQ38mG/i/LEy0ju0ET260K4v2r2Ri6qAf LLzS0fdVcc5AceUoRclCTONsqt/qYpC/aB0ZH2Wv7DEQWQhPPwM13t8cItJYyril btlUgYIWpv5VUxSQOn/VRnzXcbSmBVUR3dOTt8/geFo+Dmt892NbmIKvfjuJBg/v vuFhWGJOI/9+p3XFoJ6eMqG8sUl+aOYCIlUSCx632HHGFWgIeh6RkskkXMo4yhLD FmtsEmgt83cWTmyCUMs3kYrc55lnz/3e28+toH8A8fA0DiUzWqpQPa7CY8lEF6rw z/n40kpTwrok7g1ay0rpZx7LdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfu+ZJU dY5coZ+OtYnydWWboMNMMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL39N1T15qA+FPLfSZC4Fogbz0LXl0f1PcUJX2G8494XYotMNHJjyE VMmIlEXJQ4Qun46kHe0Lhv/xyKEtkNkcy83JfrFWS692Wu8m83oRofnuakPempip /YEAKPdKa2u+hNqygG6/73k4MqkC1Ma/Rhc96HelzGPnbi3nny6vKdVlT7mgh+DS SzXJBHb+/uKZmMFOd0uO7cLocZzhAP68m3hlHW7iwAxEWhvbVkK9yNXiQ4LaB3Sp 5NGyHezICW5j2SFstXRPRr64dXMBzXgwbKZzr/WQ3SwNx8+NSCTXpxnQyzQwA7H3 i5st7tf3/omgkfwy8vbBcyED0i7Mk79T -----END CERTIFICATE-----Generated at Thu Jul 3 08:21:48 2025 by rpki-client