$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: aDgMHIj8e9xgcL9ULCaXqG9LsklfgO+UySaBqbC6WJo= Subject key identifier: 1C:6E:B3:C0:B8:E7:48:C2:0D:82:C6:C5:FD:7D:17:CB:AF:C1:50:12 Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 8E Signing time: Thu 03 Jul 2025 06:39:50 +0000 Manifest this update: Thu 03 Jul 2025 06:39:49 +0000 Manifest next update: Thu 10 Jul 2025 06:39:49 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: ylutodu/2/aTegtz9HPKCtyOltMwpGmS4TJ+8B3F8E8=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Jul 3 06:39:49 2025 GMT Not After : Jul 10 06:39:49 2025 GMT Subject: CN=686625b5-194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5b:e9:62:4e:14:51:72:25:18:9a:cf:52:d9: b7:25:ab:1b:6e:96:b0:96:4d:47:6d:82:0a:fc:19: 79:d4:12:9a:4a:ce:30:25:d1:b4:bc:b3:56:57:66: 3c:ee:6f:64:e5:88:a1:16:60:90:07:98:68:35:7f: 04:07:46:af:9c:7b:44:18:99:07:1e:ee:14:9e:4b: 0e:db:27:06:88:ec:69:5c:3e:4b:69:61:da:04:3c: d1:2a:9c:34:41:94:5b:c8:1e:37:c5:d0:95:e8:6c: 37:14:11:79:59:f0:6a:dc:6f:0e:d3:53:b2:d1:8d: ce:2d:b9:67:77:c8:14:03:09:ac:ce:b5:12:cc:4f: 9c:a2:c4:e0:8c:48:1a:2b:a7:1e:b8:25:7f:f0:45: 53:dc:4a:ed:b4:55:1f:96:b3:d4:24:16:f1:8e:2a: 0e:8d:89:61:0a:96:f7:fb:cb:41:ff:ec:3d:79:1f: 1e:c3:ad:5f:85:33:0b:1d:25:6a:20:b0:df:5c:bd: 96:31:19:54:e8:8f:4f:02:61:62:36:34:67:01:ae: 81:cb:76:56:e8:7e:58:ce:91:ff:7b:17:66:fd:c4: 6f:83:f3:eb:b4:8b:21:27:10:72:1e:ef:2d:ac:b3: c6:97:86:af:b6:a4:79:8b:c4:9b:ca:c3:40:b6:d1: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:B3:C0:B8:E7:48:C2:0D:82:C6:C5:FD:7D:17:CB:AF:C1:50:12 X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b3:a3:39:93:05:bc:82:d2:ae:5c:35:36:e4:f8:59:a4:6e: ba:b0:09:2d:d5:a0:9b:3b:5f:df:ab:ce:7a:b0:0f:1c:c9:ac: ae:3c:e9:37:0e:dc:ad:0f:26:be:98:b1:3f:81:fa:40:c3:ca: 4a:a8:d8:23:36:13:75:a1:0d:41:bf:ed:9a:e1:56:87:68:97: 34:e9:da:6b:ee:6d:44:20:3b:62:09:3c:97:d5:2f:10:f4:8a: d3:f6:1c:e0:ee:b4:1d:1f:13:0a:a4:94:9a:d6:95:1b:da:37: f3:fb:ba:16:5b:b1:0d:22:4c:d0:03:1a:ca:c8:1e:d2:06:5a: 59:d0:e3:f3:69:df:b7:82:8c:e6:4b:f1:17:4d:e6:6b:fb:02: 38:43:e1:e4:51:1d:9d:49:ac:8a:58:d8:69:70:2a:07:11:47: 6f:7d:0e:fe:39:e5:dd:17:9d:98:bf:8e:15:dd:5c:08:76:f9: 8e:95:f8:73:8a:bc:14:11:e6:2b:53:8b:d4:76:d5:f6:d2:ba: f0:06:97:39:4a:4d:c5:1e:e8:c7:d1:cf:f3:95:4f:fb:0f:9b: 97:85:be:44:f3:3a:6a:d1:00:f8:7c:0d:c9:d8:42:18:99:b5: af:10:0d:7f:7b:fc:82:4d:96:6b:72:a1:ef:38:53:f5:ac:51: a1:ec:09:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENEUxMTAvBgNVBAUTKERDNkEyMzc0QzUxNEU4Q0Y0QUM3NjRBMEYzQzg0NkYw OUIzM0QyODIwHhcNMjUwNzAzMDYzOTQ5WhcNMjUwNzEwMDYzOTQ5WjAYMRYwFAYD VQQDEw02ODY2MjViNS0xOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFvpYk4UUXIlGJrPUtm3Jasbbpawlk1HbYIK/Bl51BKaSs4wJdG0vLNWV2Y8 7m9k5YihFmCQB5hoNX8EB0avnHtEGJkHHu4UnksO2ycGiOxpXD5LaWHaBDzRKpw0 QZRbyB43xdCV6Gw3FBF5WfBq3G8O01Oy0Y3OLblnd8gUAwmszrUSzE+cosTgjEga K6ceuCV/8EVT3ErttFUflrPUJBbxjioOjYlhCpb3+8tB/+w9eR8ew61fhTMLHSVq ILDfXL2WMRlU6I9PAmFiNjRnAa6By3ZW6H5YzpH/exdm/cRvg/PrtIshJxByHu8t rLPGl4avtqR5i8SbysNAttGGVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxus8C4 50jCDYLGxf19F8uvwVASMB8GA1UdIwQYMBaAFNxqI3TFFOjPSsdkoPPIRvCbM9KC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS82NDIzQkUwNjdG RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZNOUt4MlNnODhoRzhKc3ow b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUQ0RS82NDIzQkUwNjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi8zR29qZE1VVTZN OUt4MlNnODhoRzhKc3owb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBks6M5kwW8gtKuXDU25PhZpG66sAkt1aCbO1/fq856sA8cyayuPOk3 DtytDya+mLE/gfpAw8pKqNgjNhN1oQ1Bv+2a4VaHaJc06dpr7m1EIDtiCTyX1S8Q 9IrT9hzg7rQdHxMKpJSa1pUb2jfz+7oWW7ENIkzQAxrKyB7SBlpZ0OPzad+3gozm S/EXTeZr+wI4Q+HkUR2dSayKWNhpcCoHEUdvfQ7+OeXdF52Yv44V3VwIdvmOlfhz irwUEeYrU4vUdtX20rrwBpc5Sk3FHujH0c/zlU/7D5uXhb5E8zpq0QD4fA3J2EIY mbWvEA1/e/yCTZZrcqHvOFP1rFGh7Ank -----END CERTIFICATE-----Generated at Fri Jul 4 06:48:01 2025 by rpki-client