$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft File: r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json) Hash identifier: g/ibQMKXaUKMsR39QyLpOuuUjRO8bu98KiCKPz9fXxs= Subject key identifier: 3D:A8:2F:A1:83:96:1A:48:87:8C:16:A4:10:B8:E7:CF:08:9F:95:E4 Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 Certificate issuer: /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Certificate serial: 0748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft Manifest number: 0743 Signing time: Wed 02 Jul 2025 21:59:54 +0000 Manifest this update: Wed 02 Jul 2025 21:59:54 +0000 Manifest next update: Wed 09 Jul 2025 21:59:54 +0000 Files and hashes: 1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: /uQgs6Fl1PXlMI36gm26RKMEWQ8GnLnuPHLxhyZhsk8=) 2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1864 (0x748) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48 Validity Not Before: Jul 2 21:59:54 2025 GMT Not After : Jul 9 21:59:54 2025 GMT Subject: CN=6865abda-3bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:e1:90:13:67:0e:74:3a:eb:57:3c:fd:46: 87:95:8b:2e:a5:f2:4a:fa:dc:e3:09:c5:48:d0:ad: f5:a1:aa:21:79:47:b4:4e:61:2b:e1:4a:ab:b0:59: 98:6d:52:3b:7f:43:86:aa:27:86:8d:0f:a1:be:41: c5:c9:e6:85:9c:d5:fe:0c:12:84:dc:4e:76:88:1e: 1f:6d:14:a2:aa:ba:4d:8e:7e:8d:1c:de:f0:33:69: 2d:fa:8c:df:be:16:ad:7c:76:6c:24:9e:10:7e:a4: a7:ff:95:9e:79:87:59:a4:90:b0:b0:4d:e3:18:41: f4:64:17:87:c1:5d:11:88:dc:29:53:26:d1:10:b2: 81:0a:f0:7b:52:eb:8e:f7:e7:21:e6:f2:0a:48:bd: 54:a3:fc:8d:68:2e:9a:ef:4b:9d:bb:71:db:6f:8d: c0:21:66:90:23:84:72:eb:64:49:05:02:64:d0:9a: 6a:23:8e:8c:c4:eb:98:35:24:04:c1:92:81:b7:61: f9:55:61:dd:9d:35:68:f4:67:e7:dd:34:97:f9:c7: aa:58:8c:72:88:a4:e8:ff:0d:bf:f6:6a:ab:ba:8c: 01:ea:29:0e:ce:38:45:a1:fe:d5:3e:45:b8:d4:09: 32:a9:9d:7c:56:ed:43:39:b1:1c:38:00:d3:5e:60: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A8:2F:A1:83:96:1A:48:87:8C:16:A4:10:B8:E7:CF:08:9F:95:E4 X509v3 Authority Key Identifier: keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:0a:6d:57:bc:e4:a5:00:dc:a7:14:06:6f:9b:0b:54:f6:bd: 4c:85:90:00:77:3d:18:d1:71:92:37:d7:ea:09:93:0e:95:72: 92:f0:57:79:1a:bf:17:cf:34:7a:0f:af:53:d9:9a:ac:75:9d: 58:fd:29:1d:8a:b6:e7:ea:61:db:70:53:0c:34:1b:48:99:09: 4d:7e:8d:c2:de:e6:80:18:19:3c:9a:21:b6:93:ad:ae:ed:f1: cf:ca:51:a4:f4:4f:23:88:2a:d0:22:33:96:d2:c6:44:6a:3b: 38:cd:d0:de:ba:db:b1:a2:cf:0e:0c:ad:bc:36:db:51:8b:10: 4d:5c:c2:e5:74:8d:57:64:6d:2a:59:fb:ae:f4:7b:1c:81:b8: 64:1b:22:40:92:1c:2c:dd:af:f7:56:ab:ee:00:34:d8:f0:65: 50:99:a6:ab:df:d9:4e:05:8e:73:ce:87:06:ad:ed:b9:bc:12: c3:a5:f2:0e:3e:d6:7e:8f:97:50:76:05:41:9c:69:65:d1:76: b0:1a:33:d3:54:a4:7f:c5:54:0e:45:97:51:5a:81:61:de:1f: e4:3d:3b:ee:a3:38:e3:a1:db:95:00:f3:1d:0d:21:9d:43:46: f8:af:3d:98:ff:e1:49:4b:b2:f9:bc:36:e6:03:96:4b:26:f8: 15:cd:3e:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG MTE3NzlDNDgwHhcNMjUwNzAyMjE1OTU0WhcNMjUwNzA5MjE1OTU0WjAYMRYwFAYD VQQDEw02ODY1YWJkYS0zYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7/hkBNnDnQ661c8/UaHlYsupfJK+tzjCcVI0K31oaoheUe0TmEr4UqrsFmY bVI7f0OGqieGjQ+hvkHFyeaFnNX+DBKE3E52iB4fbRSiqrpNjn6NHN7wM2kt+ozf vhatfHZsJJ4QfqSn/5WeeYdZpJCwsE3jGEH0ZBeHwV0RiNwpUybRELKBCvB7UuuO 9+ch5vIKSL1Uo/yNaC6a70udu3Hbb43AIWaQI4Ry62RJBQJk0JpqI46MxOuYNSQE wZKBt2H5VWHdnTVo9Gfn3TSX+ceqWIxyiKTo/w2/9mqruowB6ikOzjhFof7VPkW4 1AkyqZ18Vu1DObEcOADTXmCQLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2oL6GD lhpIh4wWpBC4588In5XkMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNCm1XvOSlANynFAZvmwtU9r1MhZAAdz0Y0XGSN9fqCZMOlXKS8Fd5 Gr8XzzR6D69T2ZqsdZ1Y/Skdirbn6mHbcFMMNBtImQlNfo3C3uaAGBk8miG2k62u 7fHPylGk9E8jiCrQIjOW0sZEajs4zdDeutuxos8ODK28NttRixBNXMLldI1XZG0q Wfuu9HscgbhkGyJAkhws3a/3VqvuADTY8GVQmaar39lOBY5zzocGre25vBLDpfIO PtZ+j5dQdgVBnGll0XawGjPTVKR/xVQORZdRWoFh3h/kPTvuozjjoduVAPMdDSGd Q0b4rz2Y/+FJS7L5vDbmA5ZLJvgVzT7g -----END CERTIFICATE-----Generated at Thu Jul 3 01:08:07 2025 by rpki-client