$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft File: 0pm8o5yZPbgNETe5mbIhhGrPVWs.mft (raw, json) Hash identifier: 8h9D34RbrMxC9iOVp2W77blvw8s5dLm4I4U5no91OwU= Subject key identifier: C7:27:6E:8B:8A:AB:64:50:4A:74:C7:DF:8D:6C:A6:3E:21:51:76:9F Authority key identifier: D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B Certificate issuer: /CN=A9115C2E/serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Certificate serial: 04F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft Manifest number: 04ED Signing time: Sat 02 Aug 2025 20:12:27 +0000 Manifest this update: Sat 02 Aug 2025 20:12:27 +0000 Manifest next update: Sat 09 Aug 2025 20:12:27 +0000 Files and hashes: 1: 0pm8o5yZPbgNETe5mbIhhGrPVWs.crl (hash: poEFPcC5/ffAypxRle2u3vzHNR+RC1ql/hdUM6XpUxQ=) 2: F490AE2431D811ECA3C4CE3EC4F9AE02.roa (hash: /oifx1YqYxKOVaxnhM6Z6BMW1b5AcpZK0vDtcYNO6Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1267 (0x4f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=D299BCA39C993DB80D1137B999B221846ACF556B Validity Not Before: Aug 2 20:12:27 2025 GMT Not After : Aug 9 20:12:27 2025 GMT Subject: CN=688e712b-57f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:d6:be:9e:de:b6:a3:fd:76:81:84:b1:50: 53:e2:e3:8f:ac:fe:86:d6:2d:92:94:61:dd:26:8e: 91:cb:79:44:08:62:bd:e9:7a:fe:05:c0:f2:ed:13: cd:9a:b2:1a:23:47:90:d8:6b:d5:84:5d:ce:52:bd: 0a:6b:90:eb:d3:94:4c:b8:2d:07:5a:40:aa:c0:ee: 74:51:50:71:01:19:e5:38:34:68:6b:96:62:ea:e6: fd:f5:fa:38:28:e1:ac:9f:9b:08:e8:85:2e:ec:a6: ed:84:e1:cb:76:b9:83:62:26:72:32:6f:89:47:ab: fc:1c:31:ad:7f:83:ee:7e:db:a5:9b:1b:20:a1:1c: a8:f1:96:82:f9:fa:c9:14:2a:eb:68:fe:c2:e7:eb: 83:5d:b7:81:7b:06:06:2a:4a:22:ea:be:fa:4a:4c: d1:88:97:6c:e3:54:8b:10:1e:b7:11:b0:34:19:74: 6d:9a:4e:d0:ed:74:c0:12:f2:f4:8f:09:48:93:d3: 70:bd:d1:8e:69:ab:6f:52:13:6f:d5:59:2d:b7:f9: 26:44:cb:96:12:63:14:ca:d7:fe:45:77:dc:b9:a2: 40:c2:c5:93:e8:9d:15:c2:76:11:d6:42:18:76:e6: 86:c5:8d:c7:8d:db:9a:00:65:38:55:00:ea:59:ec: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:27:6E:8B:8A:AB:64:50:4A:74:C7:DF:8D:6C:A6:3E:21:51:76:9F X509v3 Authority Key Identifier: keyid:D2:99:BC:A3:9C:99:3D:B8:0D:11:37:B9:99:B2:21:84:6A:CF:55:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0pm8o5yZPbgNETe5mbIhhGrPVWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/9527E6B4268E11EC8ED0BA6EC4F9AE02/0pm8o5yZPbgNETe5mbIhhGrPVWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:bc:fc:e3:bd:d3:c4:00:7f:27:af:48:5e:d7:50:8e:7d:cc: 43:b5:85:3e:ad:bc:d7:c2:6d:db:1d:5b:17:6c:89:81:e1:73: 7e:00:f5:69:ab:bd:ee:ea:4c:eb:01:e2:7b:26:24:c2:cd:05: 7f:ad:5e:86:13:53:2b:4c:9a:a8:f1:d2:3b:d2:80:a4:a8:c6: e3:bd:b3:ef:fb:5b:ed:3f:0a:8f:78:59:79:3b:d8:6f:9c:5a: 31:49:34:25:14:6e:cf:c6:99:76:13:03:50:6e:1f:28:66:81: f2:0f:ae:e2:3e:ea:62:7f:4a:0c:6f:1a:9b:ff:e6:bc:3c:6f: 82:a0:52:7d:16:1c:63:63:7b:96:eb:a9:e9:e3:df:3b:2c:12: 0e:34:b4:4e:d6:07:bc:8d:02:18:63:8e:53:e2:10:1e:87:75: 05:ae:1b:5a:fe:4a:d9:92:7e:89:e1:7d:3e:c2:0b:d1:31:18: 48:9a:24:40:fe:37:6f:5c:b1:0d:5c:54:4e:59:bc:b0:8d:a3: 36:79:ad:a1:8a:d2:08:65:6a:e4:7c:5f:5c:49:cf:81:00:c3: 52:c0:66:be:08:3f:9c:c5:53:98:0b:a5:68:48:81:f3:79:18: 7b:5c:9c:0a:7e:67:9b:16:3f:cf:08:c0:74:e3:d8:6a:81:0c: 96:d2:0c:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKEQyOTlCQ0EzOUM5OTNEQjgwRDExMzdCOTk5QjIyMTg0 NkFDRjU1NkIwHhcNMjUwODAyMjAxMjI3WhcNMjUwODA5MjAxMjI3WjAYMRYwFAYD VQQDEw02ODhlNzEyYi01N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT/Wvp7etqP9doGEsVBT4uOPrP6G1i2SlGHdJo6Ry3lECGK96Xr+BcDy7RPN mrIaI0eQ2GvVhF3OUr0Ka5Dr05RMuC0HWkCqwO50UVBxARnlODRoa5Zi6ub99fo4 KOGsn5sI6IUu7KbthOHLdrmDYiZyMm+JR6v8HDGtf4PuftulmxsgoRyo8ZaC+frJ FCrraP7C5+uDXbeBewYGKkoi6r76SkzRiJds41SLEB63EbA0GXRtmk7Q7XTAEvL0 jwlIk9NwvdGOaatvUhNv1Vktt/kmRMuWEmMUytf+RXfcuaJAwsWT6J0VwnYR1kIY duaGxY3HjduaAGU4VQDqWezBmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcnbouK q2RQSnTH341spj4hUXafMB8GA1UdIwQYMBaAFNKZvKOcmT24DRE3uZmyIYRqz1Vr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS85NTI3RTZCNDI2 OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBiZ05FVGU1bWJJaGhHclBW V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBwbThvNXlaUGJnTkVUZTVtYkloaEdyUFZXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS85NTI3RTZCNDI2OEUxMUVDOEVEMEJBNkVDNEY5QUUwMi8wcG04bzV5WlBi Z05FVGU1bWJJaGhHclBWV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkvPzjvdPEAH8nr0he11COfcxDtYU+rbzXwm3bHVsXbImB4XN+APVp q73u6kzrAeJ7JiTCzQV/rV6GE1MrTJqo8dI70oCkqMbjvbPv+1vtPwqPeFl5O9hv nFoxSTQlFG7Pxpl2EwNQbh8oZoHyD67iPupif0oMbxqb/+a8PG+CoFJ9FhxjY3uW 66np4987LBIONLRO1ge8jQIYY45T4hAeh3UFrhta/krZkn6J4X0+wgvRMRhImiRA /jdvXLENXFROWbywjaM2ea2hitIIZWrkfF9cSc+BAMNSwGa+CD+cxVOYC6VoSIHz eRh7XJwKfmebFj/PCMB049hqgQyW0gxg -----END CERTIFICATE-----Generated at Mon Aug 4 15:34:36 2025 by rpki-client