$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: PFyBeAWvRtQw5pRsg0Z9f1ZyZChBDHVpN5OGNXG0ndo= Subject key identifier: 66:8C:13:2B:F2:33:26:48:D3:A6:31:FA:97:1A:B7:AA:17:FC:49:EE Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0DAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0D77 Signing time: Wed 02 Jul 2025 18:13:37 +0000 Manifest this update: Wed 02 Jul 2025 18:13:36 +0000 Manifest next update: Wed 09 Jul 2025 18:13:36 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: xLdi4SHV1wF9i4p9TsjY43m13hjEPjttEEAW4ttHozg=) 2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=) 3: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=) 4: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: e7UzY1XC0eLBl2c9zPdawS11TdFN1eY25CHBco5Agic=) 5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: WZVD3OFnLCd+Z+EztJUmZvetknrgOnaCpDqtEU+1mk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3500 (0xdac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Jul 2 18:13:36 2025 GMT Not After : Jul 9 18:13:36 2025 GMT Subject: CN=686576d1-d863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:4b:08:ea:da:ff:a3:cc:ed:9b:56:4f:75: 4a:9a:8d:aa:a8:be:1b:21:49:25:92:9c:a0:16:78: c7:98:23:14:89:91:8f:12:37:88:3a:f4:60:13:66: 8d:6a:23:58:b2:1a:f4:93:53:f2:c3:99:13:87:a7: d6:88:be:a2:55:0a:68:d1:6b:dd:1f:aa:4d:3d:5f: 92:ae:2c:9b:99:7b:a6:df:e7:56:35:5f:93:7b:4d: 6d:d8:92:54:bb:d3:4f:35:59:c3:9d:ea:79:4f:a5: 6f:40:5f:d2:85:77:ca:4e:a7:71:3a:96:67:34:5a: 15:10:2b:37:4b:c4:db:fa:e2:33:f8:d0:a2:8c:71: 51:2a:51:92:9e:55:c5:78:a8:ef:01:9e:38:b7:34: 59:12:b6:09:4a:c6:c2:b3:ed:70:65:0b:4b:2d:f1: a1:50:11:7a:78:32:9c:cf:30:be:33:2f:99:4e:cc: eb:b0:85:0c:07:9a:aa:7f:b2:b8:64:21:c4:40:12: 80:5e:2e:72:6b:36:8d:99:5d:ce:e7:9a:b1:1e:de: dd:1f:34:c6:4c:58:f5:0b:80:c3:ec:6a:b3:85:c0: 02:32:0d:10:7e:53:c3:1b:6e:51:7e:6d:b3:ed:f0: 49:b2:2c:c8:0d:13:28:cb:f7:aa:b5:67:b2:8d:09: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8C:13:2B:F2:33:26:48:D3:A6:31:FA:97:1A:B7:AA:17:FC:49:EE X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e8:19:bf:66:aa:55:7d:3a:75:14:de:86:ec:54:9a:68:98: 2d:97:e5:0f:10:6d:91:ad:ec:cc:39:ea:37:31:c3:cc:63:2b: ff:38:f0:c5:69:0d:d5:cf:88:d3:9e:fd:c9:65:c8:dd:fc:6e: 73:b5:47:b3:7b:97:67:d8:9d:6a:70:a8:58:07:c4:8a:d2:2b: 47:23:f5:ec:19:51:67:3f:56:38:00:0c:13:c7:eb:fa:74:e7: eb:e2:f1:72:71:d1:9d:a9:e4:19:54:92:f3:76:0d:6e:08:29: 35:17:ef:03:86:c6:26:c9:fb:56:35:4a:c6:f0:7d:de:b8:5d: 8a:79:76:14:31:2c:4a:50:00:a8:08:e5:1f:48:42:9c:21:52: e0:8f:89:08:42:ff:f9:fd:d2:5f:f7:23:dd:5d:c3:4b:af:a3: db:0a:42:d0:17:d1:4f:b6:45:62:2f:5b:e7:b5:0d:ee:16:53: 8f:e8:51:67:c9:6d:53:b0:11:33:46:c2:d5:ae:a0:94:42:1d: c9:23:59:4c:6d:c1:96:32:b3:94:cb:03:82:c0:c4:7d:8a:d5: 41:d9:e2:08:6d:4a:71:7d:0b:07:07:14:4b:ca:22:e6:65:08: 03:6e:5b:cb:95:f9:73:b3:90:9f:3a:04:7e:e3:a6:10:a2:53: 8d:53:dd:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjUwNzAyMTgxMzM2WhcNMjUwNzA5MTgxMzM2WjAYMRYwFAYD VQQDEw02ODY1NzZkMS1kODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01RLCOra/6PM7ZtWT3VKmo2qqL4bIUklkpygFnjHmCMUiZGPEjeIOvRgE2aN aiNYshr0k1Pyw5kTh6fWiL6iVQpo0WvdH6pNPV+SriybmXum3+dWNV+Te01t2JJU u9NPNVnDnep5T6VvQF/ShXfKTqdxOpZnNFoVECs3S8Tb+uIz+NCijHFRKlGSnlXF eKjvAZ44tzRZErYJSsbCs+1wZQtLLfGhUBF6eDKczzC+My+ZTszrsIUMB5qqf7K4 ZCHEQBKAXi5yazaNmV3O55qxHt7dHzTGTFj1C4DD7GqzhcACMg0QflPDG25Rfm2z 7fBJsizIDRMoy/eqtWeyjQlJjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaMEyvy MyZI06Yx+pcat6oX/EnuMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs6Bm/ZqpVfTp1FN6G7FSaaJgtl+UPEG2RrezMOeo3McPMYyv/OPDF aQ3Vz4jTnv3JZcjd/G5ztUeze5dn2J1qcKhYB8SK0itHI/XsGVFnP1Y4AAwTx+v6 dOfr4vFycdGdqeQZVJLzdg1uCCk1F+8DhsYmyftWNUrG8H3euF2KeXYUMSxKUACo COUfSEKcIVLgj4kIQv/5/dJf9yPdXcNLr6PbCkLQF9FPtkViL1vntQ3uFlOP6FFn yW1TsBEzRsLVrqCUQh3JI1lMbcGWMrOUywOCwMR9itVB2eIIbUpxfQsHBxRLyiLm ZQgDblvLlflzs5CfOgR+46YQolONU931 -----END CERTIFICATE-----Generated at Fri Jul 4 01:15:23 2025 by rpki-client