$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft File: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft (raw, json) Hash identifier: msOB/tdr06PvJmE8s8x6h38ahu/YMEhgGAOWg/arwaQ= Subject key identifier: E7:2F:5D:85:23:BF:83:20:0E:46:4A:42:E2:E8:65:3F:CF:A1:75:74 Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 Certificate issuer: /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Certificate serial: 04E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft Manifest number: 04E4 Signing time: Sun 03 Aug 2025 00:13:44 +0000 Manifest this update: Sun 03 Aug 2025 00:13:43 +0000 Manifest next update: Sun 10 Aug 2025 00:13:43 +0000 Files and hashes: 1: k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl (hash: R+n/SSA2cGoAztRJULZKk+0CCO7UrjX8M5xnM+Ajals=) 2: 1443F7BA200411EE84DAD06BC4F9AE02.roa (hash: zLQo77q+5IMP6DcnXVEpDBCRchvfQ2yuvBtuKyjQHYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1257 (0x4e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064 Validity Not Before: Aug 3 00:13:43 2025 GMT Not After : Aug 10 00:13:43 2025 GMT Subject: CN=688ea9b7-e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:c2:6c:8b:62:bc:ce:f4:06:2e:6c:f7:23: 5f:7f:70:62:de:f7:29:5c:2b:ae:ef:c0:91:84:e8: 1e:9e:4b:27:99:2d:d2:cc:07:19:c3:69:d7:4c:13: 64:70:36:6c:f7:35:88:c8:7b:bc:f6:77:8d:ae:67: a3:5a:51:ae:8c:1d:44:92:c3:2e:65:c1:f7:bf:0e: db:44:9d:f2:8e:fe:ea:d3:70:a6:49:59:7c:59:4a: 58:95:bc:82:67:f6:8e:13:9e:d0:7b:6c:2e:78:56: e5:f8:39:42:dc:85:80:02:c5:40:0e:47:d4:46:c4: 70:08:be:ad:8f:5a:c9:0c:82:c6:ab:57:2f:43:b2: 80:04:b9:e8:2f:4d:24:30:bd:3e:9a:dc:bf:5e:fc: 3c:15:ac:62:90:a1:4a:81:b1:5e:27:d4:c4:f5:e5: 51:8b:2a:42:36:98:0e:8f:82:36:0e:68:f5:8a:d0: 95:8e:2f:07:6e:7e:da:f1:ad:c4:5c:32:7d:bb:4f: 0e:03:cb:8e:d2:40:8f:df:18:3d:20:6f:a1:3e:da: 0c:97:85:7e:e3:11:90:f9:41:5f:26:9d:1e:99:fa: ec:9d:3d:d6:f9:b6:c0:9b:17:09:64:21:ff:02:9a: 67:fc:b6:c3:a2:e4:42:b0:23:ed:97:58:f7:0e:4c: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2F:5D:85:23:BF:83:20:0E:46:4A:42:E2:E8:65:3F:CF:A1:75:74 X509v3 Authority Key Identifier: keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:eb:3d:83:58:ed:73:3c:bf:7c:77:85:03:15:6b:85:18:ce: 87:73:a4:4b:7f:0b:d0:63:c0:51:d1:2a:60:f1:ff:20:a1:d7: 43:c6:d1:0d:23:07:3a:fa:ec:cf:3c:5f:e0:e0:e0:aa:cd:0c: 89:71:f9:74:e2:48:ff:a4:bf:80:7c:fd:2a:1a:6d:09:0d:c6: 29:09:a8:84:73:67:23:a7:8e:9d:87:1f:4a:c2:ba:f1:e9:4f: 44:32:eb:0e:e4:d7:59:cd:30:85:02:c3:83:8b:a7:52:fc:e9: 06:20:58:97:c5:5f:c9:e6:ef:78:89:eb:ce:c2:52:43:d6:35: bf:64:01:0b:84:10:7e:25:26:72:6d:26:87:5d:11:ec:14:98: 45:58:20:1c:3b:d2:00:a1:86:bc:e7:20:1b:c5:da:cf:dc:fe: 40:3f:f3:24:8e:b0:cd:29:ec:8a:1e:73:74:ad:3d:d7:e8:76: 0f:db:86:7b:97:b7:b6:a9:68:43:01:48:d1:91:75:9f:78:47: d8:5c:d9:09:ff:32:1f:f5:3c:ee:29:2c:ea:f0:75:37:f1:75: d8:56:37:5e:42:76:b3:03:0d:3c:6e:27:82:2d:26:d3:91:21: 3d:d8:27:54:4b:ba:75:ed:d1:ec:c8:56:04:f7:fd:e6:98:78: ba:c5:03:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFNkYxMTAvBgNVBAUTKDkzRjQ5REQzRURDOUQ1OTI3MUFGRTEzMTNDOTIxREU2 NkMyMjIwNjQwHhcNMjUwODAzMDAxMzQzWhcNMjUwODEwMDAxMzQzWjAYMRYwFAYD VQQDEw02ODhlYTliNy1lNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnd/CbItivM70Bi5s9yNff3Bi3vcpXCuu78CRhOgenksnmS3SzAcZw2nXTBNk cDZs9zWIyHu89neNrmejWlGujB1EksMuZcH3vw7bRJ3yjv7q03CmSVl8WUpYlbyC Z/aOE57Qe2wueFbl+DlC3IWAAsVADkfURsRwCL6tj1rJDILGq1cvQ7KABLnoL00k ML0+mty/Xvw8FaxikKFKgbFeJ9TE9eVRiypCNpgOj4I2Dmj1itCVji8Hbn7a8a3E XDJ9u08OA8uO0kCP3xg9IG+hPtoMl4V+4xGQ+UFfJp0emfrsnT3W+bbAmxcJZCH/ Appn/LbDouRCsCPtl1j3DkwkXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcvXYUj v4MgDkZKQuLoZT/PoXV0MB8GA1UdIwQYMBaAFJP0ndPtydWSca/hMTySHeZsIiBk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkU2Ri82MkVCMURGRTI2 QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFaSnhyLUV4UEpJZDVtd2lJ R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tfU2QwLTNKMVpKeHItRXhQSklkNW13aUlHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkU2Ri82MkVCMURGRTI2QjgxMUVDOUYyMDVCMUVDNEY5QUUwMi9rX1NkMC0zSjFa SnhyLUV4UEpJZDVtd2lJR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB6z2DWO1zPL98d4UDFWuFGM6Hc6RLfwvQY8BR0Spg8f8goddDxtEN Iwc6+uzPPF/g4OCqzQyJcfl04kj/pL+AfP0qGm0JDcYpCaiEc2cjp46dhx9Kwrrx 6U9EMusO5NdZzTCFAsODi6dS/OkGIFiXxV/J5u94ievOwlJD1jW/ZAELhBB+JSZy bSaHXRHsFJhFWCAcO9IAoYa85yAbxdrP3P5AP/MkjrDNKeyKHnN0rT3X6HYP24Z7 l7e2qWhDAUjRkXWfeEfYXNkJ/zIf9TzuKSzq8HU38XXYVjdeQnazAw08bieCLSbT kSE92CdUS7p17dHsyFYE9/3mmHi6xQPP -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:40 2025 by rpki-client