$ rpki-client -vvf rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft File: 10rBuKMzUkP8svmQW8UdvcsOI20.mft (raw, json) Hash identifier: KdBl24L4h4oB9dBKOkRdOCg7YpNN7lWaIlfxv0YUu80= Subject key identifier: FE:A4:4E:72:CF:94:94:CC:07:87:90:6A:4E:B5:A7:19:02:DF:FD:6A Authority key identifier: D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D Certificate issuer: /CN=A917E726/serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Certificate serial: 0AE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft Manifest number: 0AD1 Signing time: Mon 30 Jun 2025 19:37:00 +0000 Manifest this update: Mon 30 Jun 2025 19:37:00 +0000 Manifest next update: Mon 07 Jul 2025 19:37:00 +0000 Files and hashes: 1: 10rBuKMzUkP8svmQW8UdvcsOI20.crl (hash: vW+mJfECsl3kOXSeytlthWBDdEMLfXmNNyDF2tn3hY8=) 2: 98DBD8B660D311EEA9C80344C4F9AE02.roa (hash: Iq6DjDAWYaikvNVka5L51lFXKJ+7UZRQJoPc5OKJvsI=) 3: AF3CEA305ADB11EEA96AE979C4F9AE02.roa (hash: O+Syjtqn23Qr9c/D9JPic1jy/KjI63RsKq7ObP7Z1Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E726, serialNumber=D74AC1B8A3335243FCB2F9905BC51DBDCB0E236D Validity Not Before: Jun 30 19:37:00 2025 GMT Not After : Jul 7 19:37:00 2025 GMT Subject: CN=6862e75c-36e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:1b:30:f4:cb:b1:ca:f8:d2:c7:c9:60:cc: 1e:11:f6:50:57:c0:74:53:71:10:dd:4e:ec:35:1f: 59:0a:0b:f6:bb:b8:31:12:db:66:88:2b:50:8d:29: 34:99:d8:0a:86:d0:23:b6:7d:de:b4:b0:15:fb:1e: 4b:4f:28:fe:7f:a6:ea:a0:30:70:81:36:32:5f:50: 39:aa:b3:64:69:06:a3:9b:6c:3e:7f:ee:76:a6:dd: d8:1e:d6:9d:36:ba:29:05:2a:3d:db:11:3b:1e:0b: 84:24:d7:0d:d3:9a:e8:88:0f:c7:0f:8e:ca:0d:82: e9:3e:16:71:82:c6:8c:20:87:0f:26:eb:6e:a5:fe: 1a:59:95:c6:eb:03:c9:e1:06:01:f0:00:58:66:92: f7:22:03:e9:49:ad:f5:4f:b3:ef:5d:2e:dd:4a:ba: 14:42:8d:c5:03:4a:23:76:85:3d:90:3b:31:f0:fb: e3:ee:08:18:09:29:82:40:2e:72:db:ea:3f:e2:66: 91:35:54:fa:dc:f8:56:8d:8e:46:5e:f8:58:0b:b9: db:21:de:87:ce:00:b6:ce:66:a6:e1:12:8c:84:23: 4f:e4:7d:80:2c:76:12:8a:49:16:dc:75:94:0b:93: f2:c3:1e:4d:d4:38:6a:1a:7e:3a:a8:4b:86:34:ce: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A4:4E:72:CF:94:94:CC:07:87:90:6A:4E:B5:A7:19:02:DF:FD:6A X509v3 Authority Key Identifier: keyid:D7:4A:C1:B8:A3:33:52:43:FC:B2:F9:90:5B:C5:1D:BD:CB:0E:23:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10rBuKMzUkP8svmQW8UdvcsOI20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E726/6DBFA38A52D911EA827DD082C4F9AE02/10rBuKMzUkP8svmQW8UdvcsOI20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:14:a3:17:be:ee:6a:83:f4:93:30:4b:ff:9a:72:fa:97:92: 37:e9:91:88:2a:92:25:4c:74:90:95:72:18:bb:de:78:e9:1c: 4c:a7:21:81:3f:65:7a:45:8e:65:68:69:f1:f4:f5:12:45:c5: f3:82:e9:f4:1a:88:64:a6:8f:79:1e:4a:af:64:e6:04:4a:ac: 80:93:34:db:f7:1a:4a:49:01:5b:20:66:b0:98:f0:cd:17:75: 2f:79:4e:d3:5a:84:3e:be:e1:62:8a:a9:79:44:42:7d:cc:44: 95:72:76:66:54:f7:c0:04:7d:bb:58:39:e5:e9:e5:60:b1:5c: 82:52:92:7e:03:73:9a:ca:46:b4:25:14:11:30:9f:48:85:9c: 04:56:b2:06:e5:07:26:60:7e:eb:12:b8:53:9a:a8:26:a5:e5: 59:fb:8b:6a:21:81:a8:ba:99:74:5d:35:e3:d9:70:10:1e:ad: 5a:a6:9e:72:72:43:b9:4e:6b:a7:54:b7:bc:15:76:14:09:07: 6d:b8:4e:36:fb:c2:21:5d:08:7f:00:ce:3d:e0:19:fe:da:03: 08:c2:9e:e1:97:d6:71:84:79:fa:47:62:69:48:6a:84:0a:9f: 03:87:63:86:5e:d1:4f:a3:6b:f7:c5:2c:83:5b:65:fd:21:a8: e4:67:62:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3MjYxMTAvBgNVBAUTKEQ3NEFDMUI4QTMzMzUyNDNGQ0IyRjk5MDVCQzUxREJE Q0IwRTIzNkQwHhcNMjUwNjMwMTkzNzAwWhcNMjUwNzA3MTkzNzAwWjAYMRYwFAYD VQQDEw02ODYyZTc1Yy0zNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHYbMPTLscr40sfJYMweEfZQV8B0U3EQ3U7sNR9ZCgv2u7gxEttmiCtQjSk0 mdgKhtAjtn3etLAV+x5LTyj+f6bqoDBwgTYyX1A5qrNkaQajm2w+f+52pt3YHtad NropBSo92xE7HguEJNcN05roiA/HD47KDYLpPhZxgsaMIIcPJutupf4aWZXG6wPJ 4QYB8ABYZpL3IgPpSa31T7PvXS7dSroUQo3FA0ojdoU9kDsx8Pvj7ggYCSmCQC5y 2+o/4maRNVT63PhWjY5GXvhYC7nbId6HzgC2zmam4RKMhCNP5H2ALHYSikkW3HWU C5Pywx5N1DhqGn46qEuGNM7HgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6kTnLP lJTMB4eQak61pxkC3/1qMB8GA1UdIwQYMBaAFNdKwbijM1JD/LL5kFvFHb3LDiNt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTcyNi82REJGQTM4QTUy RDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVrUDhzdm1RVzhVZHZjc09J MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEwckJ1S016VWtQOHN2bVFXOFVkdmNzT0kyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTcyNi82REJGQTM4QTUyRDkxMUVBODI3REQwODJDNEY5QUUwMi8xMHJCdUtNelVr UDhzdm1RVzhVZHZjc09JMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPFKMXvu5qg/STMEv/mnL6l5I36ZGIKpIlTHSQlXIYu9546RxMpyGB P2V6RY5laGnx9PUSRcXzgun0Gohkpo95HkqvZOYESqyAkzTb9xpKSQFbIGawmPDN F3UveU7TWoQ+vuFiiql5REJ9zESVcnZmVPfABH27WDnl6eVgsVyCUpJ+A3Oayka0 JRQRMJ9IhZwEVrIG5QcmYH7rErhTmqgmpeVZ+4tqIYGoupl0XTXj2XAQHq1app5y ckO5TmunVLe8FXYUCQdtuE42+8IhXQh/AM494Bn+2gMIwp7hl9ZxhHn6R2JpSGqE Cp8Dh2OGXtFPo2v3xSyDW2X9IajkZ2Kq -----END CERTIFICATE-----Generated at Tue Jul 1 09:13:17 2025 by rpki-client