$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft File: X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json) Hash identifier: uDch26jyjeKK/IMrAkJ1TUXSZuNtkyJ2q74XCsYqFuk= Subject key identifier: C3:3A:25:D0:27:82:AE:69:C0:38:D5:09:C6:50:3B:13:83:1A:B0:E7 Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 Certificate issuer: /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft Manifest number: 0731 Signing time: Wed 02 Jul 2025 22:03:43 +0000 Manifest this update: Wed 02 Jul 2025 22:03:42 +0000 Manifest next update: Wed 09 Jul 2025 22:03:42 +0000 Files and hashes: 1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: YA8WE4xPcvaJNoMCqpRSKh480PypWhNzsc+WrdQfEmI=) 2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=) 3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851 Validity Not Before: Jul 2 22:03:42 2025 GMT Not After : Jul 9 22:03:42 2025 GMT Subject: CN=6865acbf-67cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:df:96:04:a0:b3:5f:34:f7:11:eb:92:d5: ec:fe:ee:4e:88:53:67:9b:64:b9:b1:72:23:fa:27: 8f:0c:ee:00:4a:14:bd:36:06:07:b5:4c:5b:cc:01: 2d:47:24:8d:7f:8f:68:79:11:11:e4:32:45:09:af: fc:48:aa:e2:bb:65:1b:03:15:ef:3f:85:d5:98:f7: 28:1a:ec:f2:2f:c3:e6:73:5c:fb:59:a2:73:24:f5: 92:0b:eb:cb:c9:aa:30:95:81:fb:35:bd:b4:5c:1d: 42:15:7a:b7:38:70:3d:14:36:27:98:5a:86:0e:46: e3:5f:44:4b:08:0f:7b:38:ba:31:2f:7e:38:5d:23: c6:9d:54:3a:b1:d7:aa:7e:55:de:ed:a5:6d:4e:aa: 2e:4f:14:0f:40:31:fd:39:86:69:74:a3:25:7d:30: 34:4b:08:4a:38:4b:11:d5:16:1e:eb:35:18:e1:1f: 87:ba:03:13:b1:06:5f:42:ed:1e:0f:8a:d4:0a:a3: f6:2c:9e:95:ae:60:b9:d7:61:05:9d:7e:38:d5:66: c6:9b:a2:8d:77:39:19:4f:b1:5a:d6:60:c0:32:37: 59:7b:54:e9:9b:5d:2c:77:87:b4:f2:b3:c4:6c:32: fd:45:e6:ac:00:0a:02:8a:c6:13:17:89:32:6a:00: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:25:D0:27:82:AE:69:C0:38:D5:09:C6:50:3B:13:83:1A:B0:E7 X509v3 Authority Key Identifier: keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:73:40:61:9a:b7:86:d4:3b:c2:f1:8e:73:9f:a9:a0:6c:ed: 02:ce:25:02:44:11:78:45:f9:40:76:df:70:a1:6c:ef:d6:ee: df:6b:bd:d9:8a:99:83:55:1d:59:93:e2:2f:74:1a:ab:ec:ad: 46:0d:82:18:f3:a7:da:c5:c2:71:93:97:99:20:52:df:f7:ce: 9a:af:83:25:d9:6c:d5:58:08:29:f7:d1:03:79:70:6e:ba:e2: 7e:5d:99:25:aa:45:21:85:19:ac:4b:3b:d6:54:41:e2:13:39: ed:de:9a:90:6d:c9:69:a0:a9:5e:23:ae:2d:1a:27:df:a2:0d: a2:58:3c:15:10:6f:df:15:f9:b3:8b:c8:30:e7:f7:e1:ee:04: e3:b8:7e:5a:ec:4e:5a:2a:2e:5b:3d:a4:b9:91:9f:a3:29:61: a2:71:71:3a:23:47:bb:c4:9c:2b:fb:8f:71:46:cf:71:4f:10: 4c:58:8f:e2:a7:91:96:f4:35:a8:a2:df:5c:f4:93:3d:ff:00: 7f:ac:b2:73:64:58:0b:75:91:26:64:4f:bf:f1:58:b3:7b:8a: ab:9d:39:76:25:05:55:c9:e8:9a:31:58:94:3d:32:c5:0f:ff: 92:b3:20:8e:08:1e:52:ee:5b:cb:62:d6:80:a6:e4:c8:33:41: b6:ef:55:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx MjA1RjA4NTEwHhcNMjUwNzAyMjIwMzQyWhcNMjUwNzA5MjIwMzQyWjAYMRYwFAYD VQQDEw02ODY1YWNiZi02N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UrflgSgs1809xHrktXs/u5OiFNnm2S5sXIj+iePDO4AShS9NgYHtUxbzAEt RySNf49oeRER5DJFCa/8SKriu2UbAxXvP4XVmPcoGuzyL8Pmc1z7WaJzJPWSC+vL yaowlYH7Nb20XB1CFXq3OHA9FDYnmFqGDkbjX0RLCA97OLoxL344XSPGnVQ6sdeq flXe7aVtTqouTxQPQDH9OYZpdKMlfTA0SwhKOEsR1RYe6zUY4R+HugMTsQZfQu0e D4rUCqP2LJ6VrmC512EFnX441WbGm6KNdzkZT7Fa1mDAMjdZe1Tpm10sd4e08rPE bDL9ReasAAoCisYTF4kyagCopQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM6JdAn gq5pwDjVCcZQOxODGrDnMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3 QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4 V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMc0BhmreG1DvC8Y5zn6mgbO0CziUCRBF4RflAdt9woWzv1u7fa73Z ipmDVR1Zk+IvdBqr7K1GDYIY86faxcJxk5eZIFLf986ar4Ml2WzVWAgp99EDeXBu uuJ+XZklqkUhhRmsSzvWVEHiEznt3pqQbclpoKleI64tGiffog2iWDwVEG/fFfmz i8gw5/fh7gTjuH5a7E5aKi5bPaS5kZ+jKWGicXE6I0e7xJwr+49xRs9xTxBMWI/i p5GW9DWoot9c9JM9/wB/rLJzZFgLdZEmZE+/8Vize4qrnTl2JQVVyeiaMViUPTLF D/+SsyCOCB5S7lvLYtaApuTIM0G271UZ -----END CERTIFICATE-----Generated at Thu Jul 3 02:00:05 2025 by rpki-client