$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: a6wBSZPEaraydv1HQie9VPkP2Nkhp6VtKJZ43neU1ew= Subject key identifier: 34:E1:1D:83:7B:B3:E7:E5:5E:61:44:B7:82:92:33:2C:2E:46:7C:28 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 0101 Signing time: Thu 03 Jul 2025 05:30:13 +0000 Manifest this update: Thu 03 Jul 2025 05:30:12 +0000 Manifest next update: Thu 10 Jul 2025 05:30:12 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: KbuPSaahYrwSX58/knRdFPzwsz1Vojhj8g+qhfe4PDk=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: hlb2SfBxJYheUKrpN9mM5swhopWBRQyixAQ28JRvUzI=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: 3XDa5Qvq48RtoRjAw8eS6iGbVpjU9ftFentU+xzbXfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Jul 3 05:30:12 2025 GMT Not After : Jul 10 05:30:12 2025 GMT Subject: CN=68661564-490c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:c4:07:ad:4b:12:89:e8:12:09:56:eb:4e: 0d:e0:43:33:03:b9:f1:73:57:b8:01:83:33:81:48: f6:7f:14:34:4d:8f:85:66:ca:59:ed:d0:0b:f5:9c: be:45:46:89:fe:95:17:53:25:0d:61:4d:5a:8b:f8: 20:ab:c6:33:96:db:81:0a:02:be:f9:87:25:43:0c: ad:6a:0c:bd:9a:99:29:a7:c9:b8:10:01:44:31:d5: f5:91:d9:98:f3:2d:05:17:8a:05:73:42:85:94:de: f7:5a:4c:61:f8:37:3c:22:cc:61:6b:a6:c9:dc:2b: 1b:60:08:57:41:e7:d0:83:33:e3:50:82:dd:8e:4b: 6e:9f:1b:4a:07:4b:ce:8e:7a:7d:b7:fd:18:4a:49: 0d:78:46:a8:5f:43:a1:ee:99:b3:d7:32:98:93:12: 5f:9b:11:ac:8d:1f:68:37:97:86:e2:24:db:89:18: d7:1a:68:f1:7e:84:91:5d:ff:17:01:2d:68:58:10: 2e:21:7e:d3:a5:12:79:4f:40:42:00:44:53:27:d1: f5:ea:6a:59:b3:31:5f:54:bf:80:9d:4c:f3:45:03: ba:64:d2:9a:12:55:71:11:96:f2:fb:16:88:d1:ab: fb:ec:41:b9:f5:4e:4f:f8:78:83:80:f8:23:f4:9b: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E1:1D:83:7B:B3:E7:E5:5E:61:44:B7:82:92:33:2C:2E:46:7C:28 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:16:bf:2d:1b:a8:56:c9:58:7e:82:ec:a2:90:0d:2e:bb:34: 44:81:e9:2a:18:3d:54:00:a1:6b:65:55:9e:40:13:4d:4d:93: e8:1c:f1:91:d0:1e:25:77:b1:76:72:a6:80:d6:09:45:01:52: 1f:8a:a8:a2:05:88:3e:29:f8:42:e1:cc:c4:f9:04:0f:b0:f5: f9:1b:4b:6d:f8:4a:1c:12:21:e0:67:29:09:68:81:e6:d2:6a: 05:e4:07:51:2d:28:05:86:08:52:cb:9b:f5:0a:6c:ce:c5:8c: 0c:08:11:0c:94:23:6d:ae:fa:59:20:7d:b1:19:75:4e:c4:2b: 3c:42:7f:15:43:20:b8:d2:17:60:42:19:31:32:f1:3c:64:fe: e8:85:54:8c:e0:29:fe:94:0d:db:d1:e2:a2:7e:bf:7b:74:0c: 47:61:62:7f:e7:7a:c0:f4:02:5b:ad:da:6d:37:11:61:de:4a: 47:30:a6:bf:07:d4:7d:a3:3d:39:e3:23:86:c0:a1:ac:81:ce: 0d:91:4c:45:64:62:05:27:75:a3:d6:53:11:48:70:00:23:be: b6:56:a5:9a:02:3d:a7:a7:7e:b7:af:8f:fa:f6:64:50:4b:8f: 51:49:14:f6:41:64:ff:0d:fb:af:54:e1:0b:12:dc:f2:f7:ee: 6b:a8:a5:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUwNzAzMDUzMDEyWhcNMjUwNzEwMDUzMDEyWjAYMRYwFAYD VQQDEw02ODY2MTU2NC00OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsPEB61LEonoEglW604N4EMzA7nxc1e4AYMzgUj2fxQ0TY+FZspZ7dAL9Zy+ RUaJ/pUXUyUNYU1ai/ggq8YzltuBCgK++YclQwytagy9mpkpp8m4EAFEMdX1kdmY 8y0FF4oFc0KFlN73Wkxh+Dc8Isxha6bJ3CsbYAhXQefQgzPjUILdjktunxtKB0vO jnp9t/0YSkkNeEaoX0Oh7pmz1zKYkxJfmxGsjR9oN5eG4iTbiRjXGmjxfoSRXf8X AS1oWBAuIX7TpRJ5T0BCAERTJ9H16mpZszFfVL+AnUzzRQO6ZNKaElVxEZby+xaI 0av77EG59U5P+HiDgPgj9JuFfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDThHYN7 s+flXmFEt4KSMywuRnwoMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQFr8tG6hWyVh+guyikA0uuzREgekqGD1UAKFrZVWeQBNNTZPoHPGR 0B4ld7F2cqaA1glFAVIfiqiiBYg+KfhC4czE+QQPsPX5G0tt+EocEiHgZykJaIHm 0moF5AdRLSgFhghSy5v1CmzOxYwMCBEMlCNtrvpZIH2xGXVOxCs8Qn8VQyC40hdg QhkxMvE8ZP7ohVSM4Cn+lA3b0eKifr97dAxHYWJ/53rA9AJbrdptNxFh3kpHMKa/ B9R9oz054yOGwKGsgc4NkUxFZGIFJ3Wj1lMRSHAAI762VqWaAj2np363r4/69mRQ S49RSRT2QWT/DfuvVOELEtzy9+5rqKWu -----END CERTIFICATE-----Generated at Fri Jul 4 02:42:54 2025 by rpki-client