$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft File: aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json) Hash identifier: cqhT3zNDnLIaiJcM89Lc8P+GC7fLf/lTp1pxwFTs2IY= Subject key identifier: 5F:ED:4C:4C:8E:B5:83:65:8D:99:3A:FE:51:6B:11:DA:C1:14:90:13 Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD Certificate issuer: /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft Manifest number: 20 Signing time: Sat 09 Aug 2025 08:23:20 +0000 Manifest this update: Sat 09 Aug 2025 08:23:19 +0000 Manifest next update: Sat 16 Aug 2025 08:23:19 +0000 Files and hashes: 1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: ACrieS1yJzDhDiXhK/RSdcuS/9gSn7Iagoz2zRuePF8=) 2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: WRJujiiFl5+2lSEzqzn6bhm3g2H9MHSY7ug8yl3Oc8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD Validity Not Before: Aug 9 08:23:19 2025 GMT Not After : Aug 16 08:23:19 2025 GMT Subject: CN=68970577-7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:f6:96:83:88:b8:ef:81:b6:78:cb:75:d9: 74:f3:f4:4b:d5:23:77:82:23:01:d8:2d:7d:81:c8: bd:3b:d8:6a:f2:52:00:2b:71:9a:48:f9:4a:29:23: c2:22:3c:f2:e6:60:21:eb:04:2d:a1:1d:d7:77:de: 84:32:06:0d:72:a0:af:1a:7b:9e:7d:19:5a:9c:ce: fd:b8:3d:bc:bb:8c:aa:55:bb:6c:c2:d8:3a:e8:d0: 8a:f9:6c:9f:30:64:c8:b0:61:82:49:bf:04:93:18: 7e:02:16:4e:e2:75:4e:58:a7:bf:e4:70:bc:42:cb: c2:0d:4b:6f:67:3d:19:a1:7f:3e:3f:15:54:33:49: fa:4e:99:bf:4a:3e:6e:17:fa:13:f4:e3:bb:d2:ec: 56:32:b3:01:e3:b0:99:6f:d3:26:d8:23:63:62:8d: 17:91:15:00:b7:19:12:2a:d7:5c:93:16:63:64:c1: 5a:26:a8:1d:6b:ce:0f:83:f7:91:80:d9:80:ff:22: 14:49:21:2d:76:95:6c:27:40:11:3f:fd:e9:05:af: b5:e4:26:6c:20:93:a4:51:14:7b:c0:e8:3f:9d:9d: 0d:75:1d:8c:4d:8b:f3:1e:25:38:74:9d:03:85:05: 59:e7:03:77:fc:87:39:eb:17:46:36:9d:f8:22:fb: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:ED:4C:4C:8E:B5:83:65:8D:99:3A:FE:51:6B:11:DA:C1:14:90:13 X509v3 Authority Key Identifier: keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:31:0d:a9:aa:a6:1f:5a:39:dd:fc:20:a9:7f:de:87:39:3c: d9:86:f2:96:f9:b8:a9:16:e6:de:17:43:d1:69:57:fc:d8:fc: 06:44:43:86:e0:b7:7d:59:c4:b9:bd:88:81:08:db:f6:5f:81: 4d:44:50:68:20:cb:af:5d:21:3a:4c:8f:e9:ad:4f:7a:2f:cd: 02:2b:c4:d1:4f:64:f7:4f:7b:2e:e0:89:46:4d:45:b2:14:d5: 2f:5c:5a:6f:aa:aa:b4:d3:f2:7b:d3:b1:03:d9:c1:3b:1f:ee: dd:e3:56:63:95:21:bd:13:20:e9:9f:ed:71:11:9b:2c:7b:d3: 11:02:38:3c:ff:01:03:20:af:20:7c:1b:06:f7:11:b6:f7:61: 4c:08:9b:f8:29:69:cb:88:4b:0d:ce:92:4b:d4:b7:11:25:35: dd:5f:40:b9:1b:dd:7c:c1:ff:56:1f:4a:2b:89:e7:51:d1:a0: 43:e8:9d:5a:1c:73:66:22:eb:2c:95:85:3c:81:6b:ce:71:7a: da:40:41:c4:da:df:87:45:f5:0d:84:e3:16:30:47:09:d6:8d: da:be:d2:f9:7c:c5:6d:4e:ec:bb:08:25:33:a9:80:d4:1a:f8: 84:68:62:ba:e8:00:85:c9:15:5d:02:76:1e:d2:11:bf:c9:22: 3f:0c:bf:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzUwQjExMC8GA1UEBRMoNjhDMjE4OEMwNEMyMEU0OTIzQUJCNjJEQjQ4NzI0OTgz NTRCNEFGRDAeFw0yNTA4MDkwODIzMTlaFw0yNTA4MTYwODIzMTlaMBgxFjAUBgNV BAMTDTY4OTcwNTc3LTdlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0oPaWg4i474G2eMt12XTz9EvVI3eCIwHYLX2ByL072GryUgArcZpI+UopI8Ii PPLmYCHrBC2hHdd33oQyBg1yoK8ae559GVqczv24Pby7jKpVu2zC2Dro0Ir5bJ8w ZMiwYYJJvwSTGH4CFk7idU5Yp7/kcLxCy8INS29nPRmhfz4/FVQzSfpOmb9KPm4X +hP047vS7FYyswHjsJlv0ybYI2NijReRFQC3GRIq11yTFmNkwVomqB1rzg+D95GA 2YD/IhRJIS12lWwnQBE//ekFr7XkJmwgk6RRFHvA6D+dnQ11HYxNi/MeJTh0nQOF BVnnA3f8hznrF0Y2nfgi++QlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX+1MTI61 g2WNmTr+UWsR2sEUkBMwHwYDVR0jBBgwFoAUaMIYjATCDkkjq7YttIckmDVLSv0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NTBCLzVCMUMxRkFFNDY4 QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYU1JWWpBVENEa2tqcTdZdHRJY2ttRFZMU3YwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 NTBCLzVCMUMxRkFFNDY4QzExRjA4NEI2QTUzOUM0RjlBRTAyL2FNSVlqQVRDRGtr anE3WXR0SWNrbURWTFN2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALMxDamqph9aOd38IKl/3oc5PNmG8pb5uKkW5t4XQ9FpV/zY/AZEQ4bg t31ZxLm9iIEI2/ZfgU1EUGggy69dITpMj+mtT3ovzQIrxNFPZPdPey7giUZNRbIU 1S9cWm+qqrTT8nvTsQPZwTsf7t3jVmOVIb0TIOmf7XERmyx70xECODz/AQMgryB8 Gwb3Ebb3YUwIm/gpacuISw3OkkvUtxElNd1fQLkb3XzB/1YfSiuJ51HRoEPonVoc c2Yi6yyVhTyBa85xetpAQcTa34dF9Q2E4xYwRwnWjdq+0vl8xW1O7LsIJTOpgNQa +IRoYrroAIXJFV0Cdh7SEb/JIj8Mv9M= -----END CERTIFICATE-----Generated at Sun Aug 10 16:01:12 2025 by rpki-client