$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: hmgeHS86htqlNDHRY4BO0RGpdDYsjxLxRpd/gVWr4W8= Subject key identifier: C7:DE:CB:B4:3E:85:1C:B6:5A:4D:39:60:9D:87:13:27:6A:B3:61:F3 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 01FF Signing time: Mon 11 Aug 2025 02:27:41 +0000 Manifest this update: Mon 11 Aug 2025 02:27:41 +0000 Manifest next update: Mon 18 Aug 2025 02:27:41 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: kKuABYO6mNab+Xng8Wfy+2BVPL58rZrNB4Sia9OWZUw=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: HjT8VM2XqnkqsOJWOxm5J3xWXDt5memxcVZ9AVhTnyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: Aug 11 02:27:41 2025 GMT Not After : Aug 18 02:27:41 2025 GMT Subject: CN=6899551d-aa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6c:fb:a0:65:fc:3c:9a:c9:4e:93:fb:70:1c: ba:a5:72:68:05:d2:55:8c:be:86:bc:51:cc:de:56: 3f:61:67:6f:75:95:cc:b0:cd:f4:eb:89:58:37:30: 71:12:d1:7f:05:ff:a3:03:92:1a:87:31:a2:a9:6d: 3e:68:b6:58:1b:8b:6d:a0:21:c5:15:c2:2a:4f:9b: a0:47:19:18:b9:d2:88:22:c1:ce:34:08:f2:0b:d2: 17:2e:27:72:74:44:a0:3e:2a:4b:18:80:5a:e9:06: 55:1f:36:e6:4e:a6:05:ba:45:52:fa:9b:25:a4:cf: a6:ad:25:34:3d:36:3c:06:0b:8d:b6:61:09:45:89: c7:51:02:cd:92:4b:3f:3f:0d:a3:ae:e6:fb:f9:90: fb:43:93:f2:d0:27:3e:f0:ba:9d:a9:12:66:51:b4: 2b:4e:58:f5:07:f5:c8:ff:be:96:69:9b:2e:ce:22: 11:bf:c2:79:1e:5f:34:56:5b:15:5c:62:33:37:f9: b7:a7:d8:5e:63:8b:a3:63:03:6d:c8:3a:67:61:38: df:90:a7:fb:31:97:2a:61:ee:cb:62:90:dc:0b:4e: 40:78:82:71:9e:06:05:87:d0:65:4e:a2:73:35:0d: d0:ea:40:67:6a:9b:50:1a:cd:c2:10:7b:c0:23:6a: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:CB:B4:3E:85:1C:B6:5A:4D:39:60:9D:87:13:27:6A:B3:61:F3 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:74:d0:a7:71:7e:6c:ea:a7:fe:a1:72:40:b3:16:28:28:e0: c7:1f:af:c0:9a:3c:50:cb:ba:05:cd:2e:45:5d:5c:75:90:9c: 4a:5f:30:12:0b:42:5d:1c:98:f2:45:23:cb:fc:b9:d5:7e:d7: cd:b8:ea:03:27:e4:19:81:86:b4:63:95:b3:8b:5b:70:ab:a5: ae:d2:69:fa:ad:c8:3e:c4:2d:76:1e:94:cb:5b:e6:7a:d9:d1: f0:a1:b8:8d:04:43:86:d1:e2:68:c4:fb:96:4e:57:ca:54:16: fa:fc:d7:82:01:ca:75:e5:85:5e:25:4b:97:0c:39:2a:08:ae: b6:88:0f:c2:27:b7:fa:54:22:50:63:36:e8:2a:bf:31:83:9a: dc:7e:d6:6a:88:47:4b:bf:e1:2c:66:b3:93:3e:9c:45:b2:04: 91:0e:b4:90:bd:14:58:a3:ce:f6:c4:32:7e:a6:01:a8:9a:bb: e2:66:61:a0:45:48:6f:50:f2:3a:3b:09:d0:f2:6a:14:7d:3c: c9:7e:5c:d1:45:50:66:e1:36:97:c2:59:ba:95:bc:3b:40:49: 01:b1:b8:4b:74:76:f2:aa:92:b9:23:08:77:b9:5a:3a:91:eb: 5e:69:4b:89:04:3a:1f:8a:a3:c7:93:05:24:52:ca:56:cf:7b: 85:08:cf:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUwODExMDIyNzQxWhcNMjUwODE4MDIyNzQxWjAYMRYwFAYD VQQDEw02ODk5NTUxZC1hYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Gz7oGX8PJrJTpP7cBy6pXJoBdJVjL6GvFHM3lY/YWdvdZXMsM3064lYNzBx EtF/Bf+jA5IahzGiqW0+aLZYG4ttoCHFFcIqT5ugRxkYudKIIsHONAjyC9IXLidy dESgPipLGIBa6QZVHzbmTqYFukVS+pslpM+mrSU0PTY8BguNtmEJRYnHUQLNkks/ Pw2jrub7+ZD7Q5Py0Cc+8LqdqRJmUbQrTlj1B/XI/76WaZsuziIRv8J5Hl80VlsV XGIzN/m3p9heY4ujYwNtyDpnYTjfkKf7MZcqYe7LYpDcC05AeIJxngYFh9BlTqJz NQ3Q6kBnaptQGs3CEHvAI2o6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfey7Q+ hRy2Wk05YJ2HEydqs2HzMB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIdNCncX5s6qf+oXJAsxYoKODHH6/AmjxQy7oFzS5FXVx1kJxKXzAS C0JdHJjyRSPL/LnVftfNuOoDJ+QZgYa0Y5Wzi1twq6Wu0mn6rcg+xC12HpTLW+Z6 2dHwobiNBEOG0eJoxPuWTlfKVBb6/NeCAcp15YVeJUuXDDkqCK62iA/CJ7f6VCJQ YzboKr8xg5rcftZqiEdLv+EsZrOTPpxFsgSRDrSQvRRYo872xDJ+pgGomrviZmGg RUhvUPI6OwnQ8moUfTzJflzRRVBm4TaXwlm6lbw7QEkBsbhLdHbyqpK5Iwh3uVo6 keteaUuJBDofiqPHkwUkUspWz3uFCM+o -----END CERTIFICATE-----Generated at Mon Aug 11 10:51:51 2025 by rpki-client