$ rpki-client -vvf rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft File: RhpvMegu0A9M7nmnAkijjj-Sb34.mft (raw, json) Hash identifier: tIEXIE2loVDsSC5vKXH8s3ArR9DACbbkyY7+GmcByIY= Subject key identifier: 4A:F8:96:63:E5:0F:59:BB:4E:ED:C2:C1:B9:DB:11:0F:C0:39:11:EA Authority key identifier: 46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E Certificate issuer: /CN=A9132086/serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft Manifest number: 0760 Signing time: Fri 08 Aug 2025 22:03:43 +0000 Manifest this update: Fri 08 Aug 2025 22:03:42 +0000 Manifest next update: Fri 15 Aug 2025 22:03:42 +0000 Files and hashes: 1: RhpvMegu0A9M7nmnAkijjj-Sb34.crl (hash: woR+/GGdebUTb4CmL3u3jnEnGe3cA1es+zPyYPBuRjw=) 2: D0D950CC880C11ED9353737BC4F9AE02.roa (hash: p8Ywjcalp4llJZXyd3rfdyTwErPnhBsr/ho/EK1O++o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132086, serialNumber=461A6F31E82ED00F4CEE79A70248A38E3F926F7E Validity Not Before: Aug 8 22:03:42 2025 GMT Not After : Aug 15 22:03:42 2025 GMT Subject: CN=6896743e-6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:ba:a7:40:f3:15:90:91:9e:cc:6e:81:51: aa:83:51:75:29:3a:1e:ec:f7:b1:a1:61:58:bc:b0: a0:f0:b8:ef:7b:e2:23:be:4c:b8:c3:e7:0c:7b:f2: c1:5e:04:84:a2:77:af:89:78:b7:10:92:90:69:92: c5:4c:7b:c0:6a:fc:9d:8e:e9:6b:f7:31:0a:cd:d6: 08:ae:11:af:1a:c7:56:3a:fd:06:4b:51:d1:35:c5: d2:02:53:16:05:0b:09:31:d1:4a:c9:96:cb:59:00: 94:53:5f:68:63:18:a4:06:d5:17:d5:6e:2a:35:29: c7:49:8e:e0:c4:3e:e5:4f:1a:6d:80:e6:13:60:1a: 64:95:1e:44:54:f9:2e:80:e6:00:52:31:97:fc:73: c3:54:0a:66:1a:21:22:71:dc:3b:da:3a:2c:cf:82: c4:6e:25:f4:9b:fc:fb:55:94:a4:af:a6:bd:f9:39: eb:b1:ab:32:e6:a3:97:77:7f:4c:e1:09:33:ca:e5: 90:d7:fe:19:6d:82:d5:2e:54:5e:cf:16:ce:c9:cc: d8:2e:6a:8c:57:b8:64:93:9a:c6:2c:99:61:95:4c: e8:f3:15:25:46:8f:a8:19:86:2e:03:bb:24:64:b8: 83:99:82:2f:51:e9:cb:7b:7a:3c:83:19:a4:3d:99: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F8:96:63:E5:0F:59:BB:4E:ED:C2:C1:B9:DB:11:0F:C0:39:11:EA X509v3 Authority Key Identifier: keyid:46:1A:6F:31:E8:2E:D0:0F:4C:EE:79:A7:02:48:A3:8E:3F:92:6F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhpvMegu0A9M7nmnAkijjj-Sb34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132086/A0AE5BD42FCD11EBA5A6A32DC4F9AE02/RhpvMegu0A9M7nmnAkijjj-Sb34.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:65:e7:d4:4f:e6:6e:c3:29:0b:e0:19:cd:4e:bf:55:2c:a1: 0e:62:32:4f:8a:7e:21:c1:a5:3c:00:63:11:4d:66:01:68:02: 3d:1c:14:a6:69:38:55:39:0e:8a:bc:35:73:d4:0e:95:ab:13: 63:b9:b0:39:67:24:1e:be:b1:fc:a5:d0:fd:1a:ee:a1:7d:89: 5b:2e:4f:bf:15:7f:19:09:de:fb:75:e3:fc:1e:15:0f:06:a5: e8:82:d2:75:31:73:69:a3:21:bc:8e:83:8b:c8:3b:a8:c2:7e: 2f:26:a7:18:a6:3e:e8:de:d9:91:81:54:a5:d5:0f:e9:d2:42: 48:dc:89:d5:12:fc:34:65:ea:01:a1:28:70:ed:26:3b:fe:ba: 57:83:a6:de:9e:91:8c:45:98:9c:e5:71:b9:90:e0:48:9e:f4: b8:c5:1f:dd:fe:84:2d:af:7c:e3:dc:74:c6:15:08:7f:03:10: ad:0e:61:15:b1:34:80:60:95:86:e2:64:92:15:ee:a1:61:e0: 7a:59:29:d7:05:23:86:e8:71:10:dc:07:2a:e6:4e:41:64:c5: 0f:ab:43:03:12:eb:08:3d:92:a7:a7:f0:a2:d2:9a:54:84:9a: c9:87:d9:50:a8:1e:20:0e:1a:4b:77:46:ab:40:bb:8c:ad:99: d1:9a:5c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIwODYxMTAvBgNVBAUTKDQ2MUE2RjMxRTgyRUQwMEY0Q0VFNzlBNzAyNDhBMzhF M0Y5MjZGN0UwHhcNMjUwODA4MjIwMzQyWhcNMjUwODE1MjIwMzQyWjAYMRYwFAYD VQQDEw02ODk2NzQzZS02ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6B26p0DzFZCRnsxugVGqg1F1KToe7PexoWFYvLCg8Ljve+Ijvky4w+cMe/LB XgSEoneviXi3EJKQaZLFTHvAavydjulr9zEKzdYIrhGvGsdWOv0GS1HRNcXSAlMW BQsJMdFKyZbLWQCUU19oYxikBtUX1W4qNSnHSY7gxD7lTxptgOYTYBpklR5EVPku gOYAUjGX/HPDVApmGiEicdw72josz4LEbiX0m/z7VZSkr6a9+Tnrsasy5qOXd39M 4QkzyuWQ1/4ZbYLVLlRezxbOyczYLmqMV7hkk5rGLJlhlUzo8xUlRo+oGYYuA7sk ZLiDmYIvUenLe3o8gxmkPZkQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEr4lmPl D1m7Tu3CwbnbEQ/AORHqMB8GA1UdIwQYMBaAFEYabzHoLtAPTO55pwJIo44/km9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjA4Ni9BMEFFNUJENDJG Q0QxMUVCQTVBNkEzMkRDNEY5QUUwMi9SaHB2TWVndTBBOU03bm1uQWtpampqLVNi MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JocHZNZWd1MEE5TTdubW5Ba2lqamotU2IzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjA4Ni9BMEFFNUJENDJGQ0QxMUVCQTVBNkEzMkRDNEY5QUUwMi9SaHB2TWVndTBB OU03bm1uQWtpampqLVNiMzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ZefUT+ZuwykL4BnNTr9VLKEOYjJPin4hwaU8AGMRTWYBaAI9HBSm aThVOQ6KvDVz1A6VqxNjubA5ZyQevrH8pdD9Gu6hfYlbLk+/FX8ZCd77deP8HhUP BqXogtJ1MXNpoyG8joOLyDuown4vJqcYpj7o3tmRgVSl1Q/p0kJI3InVEvw0ZeoB oShw7SY7/rpXg6benpGMRZic5XG5kOBInvS4xR/d/oQtr3zj3HTGFQh/AxCtDmEV sTSAYJWG4mSSFe6hYeB6WSnXBSOG6HEQ3Acq5k5BZMUPq0MDEusIPZKnp/Ci0ppU hJrJh9lQqB4gDhpLd0arQLuMrZnRmlwM -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:25 2025 by rpki-client