$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: LJnymUqDHnxKigtQ0zo1UOrEre7DLk8NRv9Ma2bWr+g= Subject key identifier: 05:39:92:3E:CB:09:FA:9C:A3:42:A6:54:C9:B1:1C:4C:55:3E:71:46 Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 0878 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 0874 Signing time: Mon 04 Aug 2025 20:54:19 +0000 Manifest this update: Mon 04 Aug 2025 20:54:18 +0000 Manifest next update: Mon 11 Aug 2025 20:54:18 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: Zr5JPYOGFADICoxZNz8OTDJJUq6hcpDaOL2eAknvDkk=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: /M2P6qLYLe5I9DwmD7wnKMTRki3A6i4WYlxxpdISB7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2168 (0x878) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: Aug 4 20:54:18 2025 GMT Not After : Aug 11 20:54:18 2025 GMT Subject: CN=68911dfa-f01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:10:a0:28:eb:a2:19:1f:ce:af:7b:31:ae: 7a:d0:66:c5:3e:9f:0c:4d:ab:5b:55:da:af:d8:fb: 8b:ab:07:ac:00:15:d1:2c:3b:bc:83:cd:7b:1d:29: ac:98:d6:8d:04:af:9b:53:5b:3c:aa:39:8c:af:4a: 49:d6:c1:00:25:88:c8:a3:39:e0:4a:d4:4b:62:e4: 14:d9:fa:d5:bb:b3:33:8d:62:fc:6c:cb:5f:90:a0: 42:da:13:e9:4c:a5:e0:5e:8d:14:cb:4a:7e:aa:97: fa:65:97:11:98:88:99:8a:4f:18:94:b6:68:ea:1e: 7e:cd:a0:a2:18:48:5e:4a:1a:e7:f3:0a:91:7b:08: 6a:18:d9:3d:13:9e:49:03:56:c6:21:83:af:51:a4: 72:7e:ba:58:18:ff:be:b5:1e:54:19:02:21:03:6f: c9:cc:1d:ec:0c:e0:1d:f1:08:6e:fc:50:e4:e6:73: 1c:17:a3:27:1f:f3:3c:62:54:ae:b5:ce:85:51:c6: 24:80:73:f5:95:80:ac:0f:6f:49:2d:4a:3a:87:24: 60:e9:21:53:19:49:f3:aa:97:c5:3f:71:29:22:8c: 87:07:29:64:c4:d5:ba:9a:c1:f2:ab:30:a4:82:5e: 58:bf:72:53:e7:8b:13:bc:b4:0c:a8:d7:41:4a:16: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:39:92:3E:CB:09:FA:9C:A3:42:A6:54:C9:B1:1C:4C:55:3E:71:46 X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:74:0f:e8:f3:79:65:8e:8f:64:8a:d1:42:a3:43:19:77:27: b9:be:3a:5d:41:2e:6b:b8:12:58:42:dd:4d:8a:95:1d:2d:a1: da:7e:c2:49:dd:c5:94:ae:51:e2:34:13:ff:aa:89:e7:28:12: 55:67:76:c5:e9:90:bc:17:cd:7a:16:2c:bc:14:fd:c0:82:b7: 63:79:a4:e3:2a:0a:49:22:99:9d:0e:18:1d:b7:83:f2:e2:c8: 29:26:7f:84:44:00:e4:11:3d:15:a3:d9:bd:f3:9b:ee:09:db: cc:e9:f9:7d:2e:ca:96:4a:e4:d0:48:1e:d3:3f:10:2d:6c:22: 46:ff:16:8f:da:ce:cd:66:8c:ba:1b:17:59:ab:f8:a3:18:4c: 4e:0d:ce:a5:69:bf:45:f2:93:a8:ee:60:e6:52:42:7f:cf:02: 53:32:b4:cb:bd:90:a2:77:69:d7:46:e8:8a:b9:70:74:0f:ee: c4:69:e5:ac:a0:83:aa:7a:da:60:dd:73:af:a7:af:cf:dd:b2: da:0a:c4:1d:06:17:cd:dc:f9:ce:3f:71:0a:db:02:ea:83:3d: dc:a7:3e:cf:69:1a:8d:73:c6:ee:94:f0:7e:35:c6:55:18:49: 74:83:9c:ff:3b:71:17:5d:12:7c:27:bd:2a:22:28:7f:6d:bc: 54:23:c9:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUwODA0MjA1NDE4WhcNMjUwODExMjA1NDE4WjAYMRYwFAYD VQQDEw02ODkxMWRmYS1mMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCcQoCjrohkfzq97Ma560GbFPp8MTatbVdqv2PuLqwesABXRLDu8g817HSms mNaNBK+bU1s8qjmMr0pJ1sEAJYjIozngStRLYuQU2frVu7MzjWL8bMtfkKBC2hPp TKXgXo0Uy0p+qpf6ZZcRmIiZik8YlLZo6h5+zaCiGEheShrn8wqRewhqGNk9E55J A1bGIYOvUaRyfrpYGP++tR5UGQIhA2/JzB3sDOAd8Qhu/FDk5nMcF6MnH/M8YlSu tc6FUcYkgHP1lYCsD29JLUo6hyRg6SFTGUnzqpfFP3EpIoyHBylkxNW6msHyqzCk gl5Yv3JT54sTvLQMqNdBShb8zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU5kj7L Cfqco0KmVMmxHExVPnFGMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYdA/o83lljo9kitFCo0MZdye5vjpdQS5ruBJYQt1NipUdLaHafsJJ 3cWUrlHiNBP/qonnKBJVZ3bF6ZC8F816Fiy8FP3AgrdjeaTjKgpJIpmdDhgdt4Py 4sgpJn+ERADkET0Vo9m985vuCdvM6fl9LsqWSuTQSB7TPxAtbCJG/xaP2s7NZoy6 GxdZq/ijGExODc6lab9F8pOo7mDmUkJ/zwJTMrTLvZCid2nXRuiKuXB0D+7EaeWs oIOqetpg3XOvp6/P3bLaCsQdBhfN3PnOP3EK2wLqgz3cpz7PaRqNc8bulPB+NcZV GEl0g5z/O3EXXRJ8J70qIih/bbxUI8mP -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:28 2025 by rpki-client