$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: IQCFQCIn4kr9FyPkLO7dqISvLiXnlRzLY7f0NjYSTbE= Subject key identifier: C7:0F:90:6E:DB:33:5E:81:91:C1:C1:30:6F:E5:E4:74:C2:F8:8A:FB Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01D2 Signing time: Thu 07 Aug 2025 03:16:58 +0000 Manifest this update: Thu 07 Aug 2025 03:16:58 +0000 Manifest next update: Thu 14 Aug 2025 03:16:58 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: Zs6AsJzS8+xxhUS/0ELIAbLvgZyNAx6nVURKHlLtNEA=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Aug 7 03:16:58 2025 GMT Not After : Aug 14 03:16:58 2025 GMT Subject: CN=68941aaa-b38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:7b:8e:ee:ab:1c:08:07:56:03:d7:f6:fa: c4:3c:cd:af:34:23:4b:ce:d0:68:e5:37:7a:00:95: d2:ad:1d:2f:0c:a2:ae:93:6e:43:bf:29:fe:55:65: 0b:f7:a3:96:c4:40:fb:8b:c1:a6:f2:d8:c6:b3:14: 24:ea:0e:82:35:65:e9:0d:ee:42:7d:0f:5b:67:b5: c4:19:ab:d6:8b:ac:d0:11:71:7a:f7:ac:ed:3e:60: 81:8e:eb:7a:72:7c:b3:6e:a9:88:9e:cf:b8:ef:51: 00:2a:51:74:b3:c0:7c:1a:48:84:35:df:b1:d6:41: 23:39:e9:1a:5a:2c:c5:9c:d2:68:88:16:aa:07:ad: 97:f0:5f:76:85:72:ec:bc:33:15:01:40:4e:09:b2: 87:a1:ab:9d:d8:97:e3:5a:ec:50:81:44:a8:c2:5e: e8:4a:6a:29:a2:0d:88:b0:92:76:5e:65:55:01:54: 8d:15:96:d8:92:bf:95:06:d1:de:48:69:b6:43:f7: 04:c8:74:6a:81:ae:3b:b5:71:76:52:6a:4b:c5:6c: 23:3a:93:e5:94:f7:3c:df:ca:b4:99:b3:df:42:a6: 8c:f1:41:af:70:77:81:b8:bf:38:39:65:c0:6d:9f: 42:96:3c:a9:45:a5:09:e6:f5:ca:da:11:f1:76:e3: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0F:90:6E:DB:33:5E:81:91:C1:C1:30:6F:E5:E4:74:C2:F8:8A:FB X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:52:f5:d8:f5:e7:3c:f4:60:5c:f8:49:ba:60:63:7f:d7: 0c:32:e0:a7:96:74:50:a1:45:0f:6e:e4:cc:fb:05:50:ec:e4: 30:e4:31:3f:c8:da:e9:93:32:46:3d:1e:9c:c9:74:2e:ce:86: 4e:f7:d2:32:a6:f3:1f:ee:68:fe:6c:36:99:1f:e3:15:58:1c: b6:15:38:89:48:bb:a6:7d:50:71:58:58:85:48:99:a8:8f:f8: 49:fd:86:cc:98:52:28:14:85:8c:ec:bc:30:58:6c:4c:3d:5e: b0:0b:c3:70:66:c9:82:09:8d:0b:fa:ac:21:01:a4:e4:d7:00: b9:05:bd:62:46:f0:e0:b8:6d:d4:fa:0b:35:11:e5:48:86:6d: 69:ed:1b:df:55:9d:a2:d3:61:04:e2:fb:a8:42:bc:3e:6e:17: ea:a9:9e:b5:0b:8e:8e:4c:a3:b3:61:4e:10:09:75:dd:4c:2f: b5:5c:b5:ef:d5:d6:cc:25:db:be:f4:a7:59:e9:44:9f:dc:74: a2:27:aa:9d:25:d9:ce:9b:18:4f:27:8f:5f:1e:f5:94:79:d3: ab:16:47:8a:9f:ed:bb:14:bd:e9:d4:18:1d:09:c5:2a:81:58: 26:d2:9b:58:36:0f:b8:55:ce:f7:6f:ef:72:6f:3e:c1:c7:cf: d6:d5:95:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwODA3MDMxNjU4WhcNMjUwODE0MDMxNjU4WjAYMRYwFAYD VQQDEw02ODk0MWFhYS1iMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpF7ju6rHAgHVgPX9vrEPM2vNCNLztBo5Td6AJXSrR0vDKKuk25Dvyn+VWUL 96OWxED7i8Gm8tjGsxQk6g6CNWXpDe5CfQ9bZ7XEGavWi6zQEXF696ztPmCBjut6 cnyzbqmIns+471EAKlF0s8B8GkiENd+x1kEjOekaWizFnNJoiBaqB62X8F92hXLs vDMVAUBOCbKHoaud2JfjWuxQgUSowl7oSmopog2IsJJ2XmVVAVSNFZbYkr+VBtHe SGm2Q/cEyHRqga47tXF2UmpLxWwjOpPllPc838q0mbPfQqaM8UGvcHeBuL84OWXA bZ9CljypRaUJ5vXK2hHxduPjzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcPkG7b M16BkcHBMG/l5HTC+Ir7MB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgwlL12PXnPPRgXPhJumBjf9cMMuCnlnRQoUUPbuTM+wVQ7OQw5DE/ yNrpkzJGPR6cyXQuzoZO99IypvMf7mj+bDaZH+MVWBy2FTiJSLumfVBxWFiFSJmo j/hJ/YbMmFIoFIWM7LwwWGxMPV6wC8NwZsmCCY0L+qwhAaTk1wC5Bb1iRvDguG3U +gs1EeVIhm1p7RvfVZ2i02EE4vuoQrw+bhfqqZ61C46OTKOzYU4QCXXdTC+1XLXv 1dbMJdu+9KdZ6USf3HSiJ6qdJdnOmxhPJ49fHvWUedOrFkeKn+27FL3p1BgdCcUq gVgm0ptYNg+4Vc73b+9ybz7Bx8/W1ZVo -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:55 2025 by rpki-client