$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: uzvXN7rwzbrz80dFsy0vYGdW/mfiaf2/xPViZbKCr2o= Subject key identifier: 7D:A6:B3:D1:FE:AF:12:C8:25:71:69:FE:F7:C5:D6:3F:75:64:36:C0 Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 0217 Signing time: Sat 23 Aug 2025 02:22:07 +0000 Manifest this update: Sat 23 Aug 2025 02:22:07 +0000 Manifest next update: Sat 30 Aug 2025 02:22:07 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: JGfEaYc3PbZcisBJ/AB0QCpw3hJpVu6c6a5VAdsRMD4=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Aug 23 02:22:07 2025 GMT Not After : Aug 30 02:22:07 2025 GMT Subject: CN=68a925cf-4ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:5b:1c:92:e8:55:6d:82:bb:97:43:98:b8: ca:ca:61:09:46:aa:d5:29:fd:e1:a3:26:bf:5a:1a: 83:58:fd:22:3d:df:b8:b5:83:9d:4e:c5:b9:83:4a: b7:2b:6f:1e:70:11:f4:bc:1b:06:be:cc:3d:0f:81: f8:f4:0d:74:98:21:b1:1c:8b:d9:32:4d:80:ce:8c: 29:6d:0e:f4:71:1a:a5:f9:66:75:09:95:fa:5a:30: c2:5c:06:75:9d:3e:65:c8:c3:41:ee:55:78:c3:cf: f1:9a:d4:ce:fc:4a:f3:a1:ff:64:09:3d:d6:be:b3: b1:23:15:cf:62:b9:b7:1e:60:12:b7:e8:36:7d:b0: 14:8a:04:d0:08:39:b3:a0:32:b7:dc:ff:b3:2d:8e: d7:7b:0c:5f:dd:95:75:d9:c0:0c:7d:c7:c9:73:f4: d9:64:5a:28:99:d0:8f:24:e9:a4:4e:a9:db:05:10: 39:10:87:6c:17:3f:2a:73:bf:ad:90:07:be:3b:94: db:0f:32:c0:fc:ec:04:a9:85:ba:f5:47:0a:c6:0f: 0d:7e:84:be:ef:41:a9:9a:fd:67:36:89:d9:85:7a: 3e:9e:00:60:99:fc:a1:7d:67:41:84:9b:cd:9a:54: 4a:ab:d1:09:24:e4:8e:4d:4d:c4:27:94:ca:49:f8: 98:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A6:B3:D1:FE:AF:12:C8:25:71:69:FE:F7:C5:D6:3F:75:64:36:C0 X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:a8:b7:4b:11:a0:ca:bd:4f:88:69:4e:e1:eb:d5:9c:84:f4: 77:6f:9b:5b:51:de:01:59:b2:64:19:2e:88:41:c5:c8:d6:8d: f0:56:79:94:4d:2a:f5:c5:93:ff:bd:56:92:9d:f0:0b:42:7f: a8:2b:b8:b9:c5:98:cb:4e:4e:fd:05:78:a3:6a:6e:a7:6c:94: 04:d7:60:2e:29:71:e4:9e:54:aa:e4:69:4b:a3:4f:37:75:4a: 00:5d:05:8c:4f:38:ac:ae:9a:d3:38:83:8f:4b:95:c0:e5:68: 17:23:0d:bb:3c:04:7e:49:9d:64:22:9e:21:04:95:3e:88:a2: 96:6c:71:2f:9b:13:a4:e5:5e:f8:8c:96:8d:46:57:4c:b0:6f: ff:90:ff:ab:35:84:8b:f4:d3:db:7a:0d:32:3e:2e:fe:8d:62: 5a:c8:74:86:e7:55:9f:94:12:ad:e0:49:f4:12:e1:8d:c5:37: ae:ae:38:a6:ec:aa:fc:93:90:a7:1e:0c:f3:a1:90:1b:cb:26: 45:61:d3:84:31:94:09:71:d9:0c:89:c8:c4:5a:6c:15:1c:2d: d6:78:37:33:06:55:a2:9d:99:67:be:d5:d4:87:62:39:cd:a2: 49:04:e5:d2:12:65:66:fd:07:e0:90:a3:b7:6c:16:4c:d0:ff: eb:65:ad:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwODIzMDIyMjA3WhcNMjUwODMwMDIyMjA3WjAYMRYwFAYD VQQDEw02OGE5MjVjZi00YWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHZbHJLoVW2Cu5dDmLjKymEJRqrVKf3hoya/WhqDWP0iPd+4tYOdTsW5g0q3 K28ecBH0vBsGvsw9D4H49A10mCGxHIvZMk2AzowpbQ70cRql+WZ1CZX6WjDCXAZ1 nT5lyMNB7lV4w8/xmtTO/Erzof9kCT3WvrOxIxXPYrm3HmASt+g2fbAUigTQCDmz oDK33P+zLY7Xewxf3ZV12cAMfcfJc/TZZFoomdCPJOmkTqnbBRA5EIdsFz8qc7+t kAe+O5TbDzLA/OwEqYW69UcKxg8NfoS+70Gpmv1nNonZhXo+ngBgmfyhfWdBhJvN mlRKq9EJJOSOTU3EJ5TKSfiYqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2ms9H+ rxLIJXFp/vfF1j91ZDbAMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADqLdLEaDKvU+IaU7h69WchPR3b5tbUd4BWbJkGS6IQcXI1o3wVnmU TSr1xZP/vVaSnfALQn+oK7i5xZjLTk79BXijam6nbJQE12AuKXHknlSq5GlLo083 dUoAXQWMTzisrprTOIOPS5XA5WgXIw27PAR+SZ1kIp4hBJU+iKKWbHEvmxOk5V74 jJaNRldMsG//kP+rNYSL9NPbeg0yPi7+jWJayHSG51WflBKt4En0EuGNxTeurjim 7Kr8k5CnHgzzoZAbyyZFYdOEMZQJcdkMicjEWmwVHC3WeDczBlWinZlnvtXUh2I5 zaJJBOXSEmVm/QfgkKO3bBZM0P/rZa1Y -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:26 2025 by rpki-client