$ rpki-client -vvf rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft File: vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft (raw, json) Hash identifier: vgCxQ7vlNnoyjvuiqq5xVT1HE/sYci1+uG5YDcps56o= Subject key identifier: 7A:4A:A6:22:A1:B5:A0:3D:2F:3B:A3:FC:4C:A7:08:5F:C6:AC:8B:CF Authority key identifier: BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 Certificate issuer: /CN=A9184569/serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Certificate serial: 0C7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft Manifest number: 0C65 Signing time: Mon 04 Aug 2025 18:42:32 +0000 Manifest this update: Mon 04 Aug 2025 18:42:31 +0000 Manifest next update: Mon 11 Aug 2025 18:42:31 +0000 Files and hashes: 1: vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl (hash: 2tLzGVE8SbksC2NYhxfqmf0/ovmzf2ha1TPG6BqWf7A=) 2: 9591475A4F6011EFAF26AF63C4F9AE02.roa (hash: d4nANGkii06xzWV6dpPGz0VvWqxPgVRXdrnJY6WmtmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3195 (0xc7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184569, serialNumber=BC30B8A4BDD1CE28F7B2F999342F51CE1FDB86E6 Validity Not Before: Aug 4 18:42:31 2025 GMT Not After : Aug 11 18:42:31 2025 GMT Subject: CN=6890ff17-397f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:33:d2:fa:67:69:86:8b:24:76:7f:99:62: c8:65:0a:b0:e0:3a:77:53:cf:33:9d:24:86:59:17: 85:4f:a8:90:76:4d:c4:e6:95:89:06:16:c5:87:46: 74:17:9a:78:36:14:e5:9c:fc:43:41:23:7f:4d:fd: 3e:55:e6:b6:01:be:51:8f:d6:84:d3:4c:10:0f:49: 98:98:c7:f6:c3:cc:a8:4d:fd:58:1b:3a:5a:fd:91: b9:0a:6a:a3:02:e9:17:c1:8e:7f:53:a1:95:6f:d0: 69:0f:0f:7d:4c:18:52:60:df:a0:77:d7:e0:42:04: d3:36:07:51:e5:a9:b2:29:c4:74:df:dd:e0:85:2e: 9c:d2:35:65:72:00:ae:46:30:1b:31:fb:09:a1:98: 17:dc:21:85:22:8f:6d:0e:12:bb:67:78:b8:6c:af: ed:b0:8e:59:a6:27:bb:0e:1d:4c:12:cf:c8:db:cc: 66:18:c4:8d:61:04:90:18:a2:6c:73:7b:84:1b:97: 49:62:5d:8e:be:bc:b5:13:a1:2f:75:d3:e5:42:85: 66:a9:95:73:83:0c:b9:a4:95:ba:8c:8c:db:02:29: 14:e7:ea:9a:15:e8:4f:32:57:00:ae:79:9f:cc:93: 18:94:09:5e:9c:04:56:40:c1:ae:65:aa:97:34:39: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4A:A6:22:A1:B5:A0:3D:2F:3B:A3:FC:4C:A7:08:5F:C6:AC:8B:CF X509v3 Authority Key Identifier: keyid:BC:30:B8:A4:BD:D1:CE:28:F7:B2:F9:99:34:2F:51:CE:1F:DB:86:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDC4pL3Rzij3svmZNC9Rzh_bhuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184569/FE899D5E086411EAB7D4EC82C4F9AE02/vDC4pL3Rzij3svmZNC9Rzh_bhuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9b:c0:99:c2:55:79:d7:bc:18:37:b2:9f:ed:2d:93:fa:f8: 3b:b5:af:22:17:3b:96:e8:d4:4e:46:55:67:28:1b:a2:8a:2d: 89:3c:66:35:36:1f:72:13:5b:cf:09:8b:78:d8:35:37:d9:ab: bf:59:1f:f0:91:b0:be:06:bd:36:eb:b1:78:35:3f:78:7c:05: 07:0f:11:b6:ff:fe:ca:aa:f8:74:f9:e8:21:9c:d1:e2:99:55: 69:c8:52:e7:10:f0:ba:23:fa:c0:c4:8c:9a:9a:06:e7:61:f9: 62:56:55:1f:e0:03:33:a4:6e:29:ff:f6:ce:88:9f:8d:97:91: dc:c8:c5:9a:e6:00:ec:05:98:9f:dc:74:5e:8a:7d:2b:0b:32: 7b:74:e4:dd:49:df:fd:f2:9c:16:81:89:b3:ca:a9:5f:15:ad: cf:9e:bf:96:9c:83:04:b1:57:2a:a6:26:3c:f6:b2:c4:3e:0a: 0d:d3:52:3a:0e:35:7d:bf:05:c1:dc:07:9e:53:c7:55:11:de: ac:b0:6b:2c:17:99:fa:8a:6a:f3:ae:ed:c3:aa:79:6f:ba:37: d3:09:b1:41:d3:23:d4:c1:3c:a8:91:df:8b:b4:24:28:6c:11: 51:a1:73:b5:c1:f7:19:69:a4:5c:bd:a5:a2:39:3d:b8:83:33: f2:1e:e7:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ1NjkxMTAvBgNVBAUTKEJDMzBCOEE0QkREMUNFMjhGN0IyRjk5OTM0MkY1MUNF MUZEQjg2RTYwHhcNMjUwODA0MTg0MjMxWhcNMjUwODExMTg0MjMxWjAYMRYwFAYD VQQDEw02ODkwZmYxNy0zOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxoz0vpnaYaLJHZ/mWLIZQqw4Dp3U88znSSGWReFT6iQdk3E5pWJBhbFh0Z0 F5p4NhTlnPxDQSN/Tf0+Vea2Ab5Rj9aE00wQD0mYmMf2w8yoTf1YGzpa/ZG5Cmqj AukXwY5/U6GVb9BpDw99TBhSYN+gd9fgQgTTNgdR5amyKcR0393ghS6c0jVlcgCu RjAbMfsJoZgX3CGFIo9tDhK7Z3i4bK/tsI5Zpie7Dh1MEs/I28xmGMSNYQSQGKJs c3uEG5dJYl2Ovry1E6EvddPlQoVmqZVzgwy5pJW6jIzbAikU5+qaFehPMlcArnmf zJMYlAlenARWQMGuZaqXNDmFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpKpiKh taA9Lzuj/EynCF/GrIvPMB8GA1UdIwQYMBaAFLwwuKS90c4o97L5mTQvUc4f24bm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDU2OS9GRTg5OUQ1RTA4 NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnppajNzdm1aTkM5UnpoX2Jo dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZEQzRwTDNSemlqM3N2bVpOQzlSemhfYmh1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDU2OS9GRTg5OUQ1RTA4NjQxMUVBQjdENEVDODJDNEY5QUUwMi92REM0cEwzUnpp ajNzdm1aTkM5UnpoX2JodVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLm8CZwlV517wYN7Kf7S2T+vg7ta8iFzuW6NRORlVnKBuiii2JPGY1 Nh9yE1vPCYt42DU32au/WR/wkbC+Br0267F4NT94fAUHDxG2//7Kqvh0+eghnNHi mVVpyFLnEPC6I/rAxIyamgbnYfliVlUf4AMzpG4p//bOiJ+Nl5HcyMWa5gDsBZif 3HRein0rCzJ7dOTdSd/98pwWgYmzyqlfFa3Pnr+WnIMEsVcqpiY89rLEPgoN01I6 DjV9vwXB3AeeU8dVEd6ssGssF5n6imrzru3DqnlvujfTCbFB0yPUwTyokd+LtCQo bBFRoXO1wfcZaaRcvaWiOT24gzPyHucU -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:55 2025 by rpki-client