$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: wQFCtSyCU5/oiD7yveuyUbtz4WZq2PtWbx/EBkUtcC0= Subject key identifier: 8C:09:98:35:3A:62:A5:9D:B1:7D:C7:C1:EB:1F:E1:6B:87:B0:FA:17 Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0DDD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0DC9 Signing time: Wed 02 Jul 2025 14:43:46 +0000 Manifest this update: Wed 02 Jul 2025 14:43:46 +0000 Manifest next update: Wed 09 Jul 2025 14:43:46 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: kzCDq2RCHEtde8RRwi2nsHx72d0VhSA59VeDd2WIBQw=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: BIq27Hxj0ymd/MyK4xyxLJopPOW9viNW0+I2cxj8GdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3549 (0xddd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Jul 2 14:43:46 2025 GMT Not After : Jul 9 14:43:46 2025 GMT Subject: CN=686545a2-8596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cc:00:44:91:5c:28:30:8e:50:1a:41:58:a0: 58:6f:42:2f:35:40:fd:f9:db:15:7e:c8:18:8d:55: ec:af:39:b0:15:d6:91:3d:6b:a6:79:79:db:4e:c9: 07:fc:6e:68:66:a3:3c:e0:39:69:c3:e1:f3:db:26: 75:c3:b6:c3:b6:a4:f0:a6:29:6d:e8:20:2b:7f:a6: ba:a0:f0:d7:2a:48:84:2a:2a:69:df:4b:e1:25:a3: f7:f9:b1:c3:52:95:32:ba:8e:84:26:03:26:d9:15: 72:aa:dc:75:c5:c1:06:67:f0:80:bf:a8:3d:97:6a: b9:3f:6d:bf:65:6d:85:8f:a4:c9:5d:00:8a:16:59: 05:f5:83:78:32:48:23:e3:6f:46:65:a2:db:dd:85: 23:a1:ef:4e:f3:ba:55:aa:7e:11:d2:8e:c7:d4:52: eb:6c:37:63:99:b3:21:1d:89:02:d5:83:17:e6:8e: ec:d8:17:70:9e:d2:10:6f:9d:fc:dd:6a:86:11:ca: 88:2c:d6:1a:1a:80:27:32:e7:0d:52:4d:e2:49:c4: 25:be:28:ca:83:8e:a2:f2:f8:78:43:b3:00:47:46: ec:98:3f:aa:91:7e:a9:7b:da:d9:13:5c:32:6f:de: ac:99:3b:0e:56:6f:7c:49:fb:ae:e9:43:62:46:dd: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:98:35:3A:62:A5:9D:B1:7D:C7:C1:EB:1F:E1:6B:87:B0:FA:17 X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:33:d3:81:56:48:07:ba:c2:51:78:e2:ff:97:f7:4a:b9:37: e5:81:d5:b8:45:82:71:6b:42:e9:81:aa:d1:dd:ad:fc:da:d2: 75:59:d1:dd:ce:08:4f:c7:4d:b3:b4:c3:f1:e0:2e:e4:51:a4: 0b:4f:02:e9:35:1f:fb:d5:aa:03:cf:be:a3:0b:35:b8:69:5c: 7b:ff:e4:7f:ad:ce:55:ce:c8:81:3c:e9:c4:5c:57:c6:19:69: 14:2c:0d:1b:f7:72:93:af:4d:62:73:ae:41:92:c4:96:77:4c: a1:91:a9:73:f0:3d:a0:e4:12:8a:67:4e:df:86:24:07:bc:ff: f4:bc:f5:a4:79:08:68:ff:e2:7a:93:c1:d9:1f:13:9a:fe:1a: ed:87:a8:50:5f:57:a7:41:31:2f:f2:25:6f:6c:8d:df:f8:64: db:ff:01:05:6c:a6:1b:d9:98:de:4a:4d:e2:12:ac:b8:11:bb: 43:db:94:04:0f:34:fe:5e:9e:27:eb:2c:9a:58:9a:50:6b:34: 72:b2:74:45:c8:b6:8c:7e:5b:12:80:97:ea:f7:ca:ba:f2:b9: af:9a:98:ad:f6:4c:98:1c:38:69:70:63:b5:9f:fb:97:1d:aa: 03:0d:14:f0:b6:9b:49:4b:e5:40:dd:12:fc:27:44:02:41:eb: e7:23:b7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjUwNzAyMTQ0MzQ2WhcNMjUwNzA5MTQ0MzQ2WjAYMRYwFAYD VQQDEw02ODY1NDVhMi04NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6swARJFcKDCOUBpBWKBYb0IvNUD9+dsVfsgYjVXsrzmwFdaRPWumeXnbTskH /G5oZqM84Dlpw+Hz2yZ1w7bDtqTwpilt6CArf6a6oPDXKkiEKipp30vhJaP3+bHD UpUyuo6EJgMm2RVyqtx1xcEGZ/CAv6g9l2q5P22/ZW2Fj6TJXQCKFlkF9YN4Mkgj 429GZaLb3YUjoe9O87pVqn4R0o7H1FLrbDdjmbMhHYkC1YMX5o7s2BdwntIQb538 3WqGEcqILNYaGoAnMucNUk3iScQlvijKg46i8vh4Q7MAR0bsmD+qkX6pe9rZE1wy b96smTsOVm98Sfuu6UNiRt2AsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwJmDU6 YqWdsX3Hwesf4WuHsPoXMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUM9OBVkgHusJReOL/l/dKuTflgdW4RYJxa0LpgarR3a382tJ1WdHd zghPx02ztMPx4C7kUaQLTwLpNR/71aoDz76jCzW4aVx7/+R/rc5VzsiBPOnEXFfG GWkULA0b93KTr01ic65BksSWd0yhkalz8D2g5BKKZ07fhiQHvP/0vPWkeQho/+J6 k8HZHxOa/hrth6hQX1enQTEv8iVvbI3f+GTb/wEFbKYb2ZjeSk3iEqy4EbtD25QE DzT+Xp4n6yyaWJpQazRysnRFyLaMflsSgJfq98q68rmvmpit9kyYHDhpcGO1n/uX HaoDDRTwtptJS+VA3RL8J0QCQevnI7e8 -----END CERTIFICATE-----Generated at Thu Jul 3 23:07:07 2025 by rpki-client