$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: YPtTgj0365+mOSltQfg78G9nVhgLhbnIkdSZqs8cjTU= Subject key identifier: F6:29:BD:30:B3:23:92:C5:2D:DC:2B:28:2E:B6:00:84:B4:60:DD:4E Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 01FD Signing time: Thu 03 Jul 2025 02:36:35 +0000 Manifest this update: Thu 03 Jul 2025 02:36:35 +0000 Manifest next update: Thu 10 Jul 2025 02:36:35 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: sxA+90RSz133uxnIzQo3WmyyLKcGj0aXspFE0N6H6yA=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: Jul 3 02:36:35 2025 GMT Not After : Jul 10 02:36:35 2025 GMT Subject: CN=6865ecb3-e8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:b9:c7:36:59:05:c5:22:2a:03:57:09:04: fa:c5:a8:ab:3c:e6:9f:4d:8b:8c:15:e8:c2:6d:05: ae:e6:3e:6f:40:cb:36:0b:a0:d2:bc:4e:0e:00:b7: 25:86:72:eb:00:56:89:b5:25:1a:c1:03:c7:48:62: 64:bf:41:61:31:9d:e3:fa:4a:66:92:84:58:48:b2: e8:cf:99:c1:4c:05:c3:54:f9:65:c5:3d:5a:c2:44: bd:5b:6e:f3:cc:8b:b6:cc:3b:38:50:8c:43:07:f1: b3:98:ce:1a:ab:4b:1c:88:3d:c2:67:0d:6e:2c:80: f0:41:c2:2d:2c:45:b5:11:16:3f:ec:7d:61:02:52: e5:c5:b1:2e:be:d3:01:73:b4:6b:67:a7:69:bb:6b: 15:c3:5b:b3:95:91:70:9a:fe:4c:91:a8:7d:6d:c2: 83:2c:c6:88:96:b4:29:b1:d6:f5:1f:de:ba:6d:cd: 80:e1:2a:bd:0e:3d:69:af:db:dc:49:8b:2e:f2:4d: 9e:8f:bb:b4:bb:e4:42:c9:52:66:1f:3d:88:ac:0c: f6:18:9e:73:c0:82:f0:a3:e4:8e:1f:e1:66:e9:e7: 27:99:f5:30:3b:de:49:f0:8f:56:38:99:6e:c8:5b: 1a:f5:9d:67:a3:16:b2:a2:f6:38:a9:2d:1e:b1:af: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:29:BD:30:B3:23:92:C5:2D:DC:2B:28:2E:B6:00:84:B4:60:DD:4E X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:bf:40:28:8c:80:f0:c9:0c:2d:93:42:67:a6:d6:a0:73:56: 4e:26:42:8d:86:89:ad:26:0a:46:5b:43:5e:9c:41:18:6c:93: ee:fe:70:9a:99:7e:6c:4d:6a:a0:a7:6f:bc:a0:78:94:99:60: 26:c4:0f:bd:99:83:66:97:19:41:19:b3:f2:5d:23:51:78:28: b2:e8:fd:b2:84:c4:ea:ca:ac:9b:8c:46:94:63:00:71:5f:38: 65:1b:ea:23:81:49:69:28:13:a8:e1:64:84:bf:78:ef:9b:9b: c4:61:7a:06:07:65:62:27:3f:1f:4a:77:2f:fc:79:31:d7:10: a1:b1:2b:c9:a4:16:f4:60:73:21:af:69:f4:4e:ae:5a:e1:e4: a5:ad:ae:06:a2:3e:eb:30:bf:e3:66:2c:e6:1e:30:e6:f5:87: e5:ee:6f:08:d7:be:98:d4:dc:8c:79:f6:a4:c7:ca:54:73:70: f7:58:0a:4d:f5:61:35:f1:47:a0:ef:02:47:3a:31:0e:95:ec: e0:6f:8a:3b:c2:cb:24:b2:d0:8c:58:65:ea:f2:63:bf:e4:8b: d6:2d:61:e3:31:f9:26:ac:ef:18:32:90:bc:75:a9:ec:18:9a: ce:c7:6a:e0:e1:ff:f6:ff:de:ab:44:96:ec:48:1f:46:ad:d9: 4c:09:ca:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNzAzMDIzNjM1WhcNMjUwNzEwMDIzNjM1WjAYMRYwFAYD VQQDEw02ODY1ZWNiMy1lOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIW5xzZZBcUiKgNXCQT6xairPOafTYuMFejCbQWu5j5vQMs2C6DSvE4OALcl hnLrAFaJtSUawQPHSGJkv0FhMZ3j+kpmkoRYSLLoz5nBTAXDVPllxT1awkS9W27z zIu2zDs4UIxDB/GzmM4aq0sciD3CZw1uLIDwQcItLEW1ERY/7H1hAlLlxbEuvtMB c7RrZ6dpu2sVw1uzlZFwmv5Mkah9bcKDLMaIlrQpsdb1H966bc2A4Sq9Dj1pr9vc SYsu8k2ej7u0u+RCyVJmHz2IrAz2GJ5zwILwo+SOH+Fm6ecnmfUwO95J8I9WOJlu yFsa9Z1noxayovY4qS0esa+4jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPYpvTCz I5LFLdwrKC62AIS0YN1OMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2v0AojIDwyQwtk0Jnptagc1ZOJkKNhomtJgpGW0NenEEYbJPu/nCa mX5sTWqgp2+8oHiUmWAmxA+9mYNmlxlBGbPyXSNReCiy6P2yhMTqyqybjEaUYwBx XzhlG+ojgUlpKBOo4WSEv3jvm5vEYXoGB2ViJz8fSncv/Hkx1xChsSvJpBb0YHMh r2n0Tq5a4eSlra4Goj7rML/jZizmHjDm9Yfl7m8I176Y1NyMefakx8pUc3D3WApN 9WE18Ueg7wJHOjEOlezgb4o7wsskstCMWGXq8mO/5IvWLWHjMfkmrO8YMpC8dans GJrOx2rg4f/2/96rRJbsSB9GrdlMCcpP -----END CERTIFICATE-----Generated at Thu Jul 3 08:48:57 2025 by rpki-client