$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json) Hash identifier: ETTs/yDIQdUs7Lci3xYhJXLUsNaa9op07QDz4UqHj7Q= Subject key identifier: 26:C7:8B:DC:B7:CB:B9:4A:B9:78:A7:9D:3F:FE:73:1D:56:51:EA:32 Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft Manifest number: 7A Signing time: Tue 05 Aug 2025 17:45:39 +0000 Manifest this update: Tue 05 Aug 2025 17:45:39 +0000 Manifest next update: Tue 12 Aug 2025 17:45:39 +0000 Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: 8ULinw9L08DYrkLEaW7Itk0fbTDEfnKYFX5NuB0GWcE=) 2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=) 3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=) 4: 4777E5245CAC11F0AEA97F4CC4F9AE02.roa (hash: rBs6jKsXb4pJx+SYnA3vFhpQEUoRgu8wgVzo1RO1me8=) 5: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=) 6: 9A3B7A6C5C8111F09B95A34AC4F9AE02.roa (hash: 7D5PJVZwcB8TD96OC04PT62QGoRafof25RhAPo9RTRk=) 7: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 17:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA Validity Not Before: Aug 5 17:45:39 2025 GMT Not After : Aug 12 17:45:39 2025 GMT Subject: CN=68924343-f27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:43:3b:8e:3a:ee:a0:77:25:d1:85:52:06:d8: 70:02:34:15:48:8c:6f:7b:7d:dc:7c:d0:69:d4:82: 62:9e:ea:77:70:97:0b:f5:a2:44:77:a4:24:96:08: 7e:77:73:95:cd:0b:35:ce:df:0d:f3:ac:2c:cd:28: c7:26:30:24:e9:a6:eb:5d:53:54:1b:4b:18:52:9b: f4:c3:27:21:b1:24:cc:e0:60:d8:3e:4b:88:82:4c: 72:57:2e:90:cf:63:88:26:7b:23:05:aa:ae:5a:9c: 19:0f:a8:1b:82:44:dd:66:90:25:47:f0:75:b6:99: 81:75:fc:7e:c0:ca:74:d2:34:f7:1b:10:8d:ee:32: 4a:e2:5a:e7:07:da:83:f4:d3:fb:95:df:9a:f6:22: 25:a3:dc:ad:ea:3b:72:22:57:44:91:b6:9b:9b:59: bc:b9:8e:19:1b:ea:f4:e1:4f:f2:94:48:0a:fb:3e: 8b:36:99:3e:06:55:d9:21:54:fc:b8:32:39:f8:03: 7f:6d:73:b0:f0:6a:7d:3c:1f:13:2d:60:37:64:67: 5c:58:a3:0a:0f:9e:c9:21:1c:de:f0:63:6e:8c:f4: 0b:d0:83:bd:84:e3:3f:3e:61:14:a5:f5:b9:9c:6a: f0:f1:4d:72:13:45:df:af:cd:9d:ad:17:09:89:de: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C7:8B:DC:B7:CB:B9:4A:B9:78:A7:9D:3F:FE:73:1D:56:51:EA:32 X509v3 Authority Key Identifier: keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:d2:b5:77:4e:57:2c:cb:35:b1:73:8d:d4:b6:be:48:0e:24: b4:19:2d:cb:e1:43:ec:b2:52:c5:93:dd:57:f8:d3:c3:57:6e: 00:5c:0f:41:6a:54:c7:1b:11:b5:08:bc:09:2f:bb:ae:54:09: b8:b7:b8:00:b9:02:73:81:f2:ff:c9:3e:8a:2e:b1:1b:95:ea: 81:17:c3:b3:ac:bb:fd:5d:c7:1e:ee:1f:bf:76:3c:17:59:cf: 85:90:74:1d:01:ed:b6:b2:db:de:92:0f:e2:cc:a6:6b:9a:09: ea:79:3b:f4:4a:50:22:d9:a5:e4:29:39:fd:a8:c9:15:7e:0e: 8c:36:87:2e:0a:0a:cd:b4:f2:48:3e:ae:08:ff:78:74:d5:e2: 12:7d:f2:d2:10:f2:25:dc:a4:49:ab:8a:32:dd:cf:25:36:51: 3f:93:27:3e:10:fa:70:7f:a1:08:03:23:0d:45:f7:cc:e7:26: 94:5c:1e:41:8e:3c:00:38:01:b1:a8:0e:88:77:29:43:73:30: 5c:37:6a:cb:b8:d1:b0:d0:21:93:62:3d:63:24:76:a1:2d:7c: c8:fe:10:0f:1a:35:80:31:68:5e:0a:67:77:6b:ff:61:63:03: bb:d9:de:f4:73:df:22:30:a3:f9:63:fc:37:f9:f5:c1:06:15: de:7e:ab:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF REI4Rjg1QkEwHhcNMjUwODA1MTc0NTM5WhcNMjUwODEyMTc0NTM5WjAYMRYwFAYD VQQDEw02ODkyNDM0My1mMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0M7jjruoHcl0YVSBthwAjQVSIxve33cfNBp1IJinup3cJcL9aJEd6Qklgh+ d3OVzQs1zt8N86wszSjHJjAk6abrXVNUG0sYUpv0wychsSTM4GDYPkuIgkxyVy6Q z2OIJnsjBaquWpwZD6gbgkTdZpAlR/B1tpmBdfx+wMp00jT3GxCN7jJK4lrnB9qD 9NP7ld+a9iIlo9yt6jtyIldEkbabm1m8uY4ZG+r04U/ylEgK+z6LNpk+BlXZIVT8 uDI5+AN/bXOw8Gp9PB8TLWA3ZGdcWKMKD57JIRze8GNujPQL0IO9hOM/PmEUpfW5 nGrw8U1yE0Xfr82drRcJid7bywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbHi9y3 y7lKuXinnT/+cx1WUeoyMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2 MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkM5OC9BQkFGRjVFQTA2MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdo OVJtYjBNZ25ZT2p0dVBoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDl0rV3TlcsyzWxc43Utr5IDiS0GS3L4UPsslLFk91X+NPDV24AXA9B alTHGxG1CLwJL7uuVAm4t7gAuQJzgfL/yT6KLrEbleqBF8OzrLv9Xcce7h+/djwX Wc+FkHQdAe22stvekg/izKZrmgnqeTv0SlAi2aXkKTn9qMkVfg6MNocuCgrNtPJI Pq4I/3h01eISffLSEPIl3KRJq4oy3c8lNlE/kyc+EPpwf6EIAyMNRffM5yaUXB5B jjwAOAGxqA6IdylDczBcN2rLuNGw0CGTYj1jJHahLXzI/hAPGjWAMWheCmd3a/9h YwO72d70c98iMKP5Y/w3+fXBBhXefqvb -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:57 2025 by rpki-client