$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: UjxNfZTYPfZrd3kIvYy0LwkBrYf2+XFPUJRR4LrJOnY= Subject key identifier: CC:3E:90:F7:68:A2:04:2A:4A:42:6E:67:E0:B9:F8:77:F7:57:2E:1F Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: CA Signing time: Mon 11 Aug 2025 05:56:08 +0000 Manifest this update: Mon 11 Aug 2025 05:56:08 +0000 Manifest next update: Mon 18 Aug 2025 05:56:08 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: /8N9xz6sztvOjmXf3mbO473r5Lvaf+UTqHOeWSNxY8c=) 2: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: piBG26jjxocqk1EfDzKmzUArtL5VT+oZB8alGAtK9pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Aug 11 05:56:08 2025 GMT Not After : Aug 18 05:56:08 2025 GMT Subject: CN=689985f8-31ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:23:4a:e3:26:14:c7:32:e5:ea:de:8f:67: 65:a2:b3:f3:ca:9f:02:ec:b1:1c:b4:ac:f0:9d:71: 00:2c:f2:53:8c:e0:e2:dc:fa:b2:68:56:c6:8c:52: 97:13:e0:1f:43:f4:e9:b5:46:72:2c:a9:d8:b1:40: 09:8c:12:49:e1:f4:65:bb:9c:25:7e:d6:11:5f:73: d2:3c:e5:dc:29:59:75:f8:d8:86:46:53:c0:53:f2: 0c:04:ef:a2:7b:b2:0a:48:11:7e:8d:b5:9b:55:a6: 97:ba:1f:84:a8:a8:5a:16:f3:c8:46:a9:c5:c2:30: 4c:28:30:9f:bb:a3:31:0a:37:af:7b:27:05:d9:fe: d9:2e:57:a4:98:04:47:04:48:1c:7f:e8:70:f5:72: f4:07:4d:ac:a1:cf:41:91:ad:ab:ea:2f:a4:20:9b: cc:39:a3:b3:4c:ee:9f:89:d9:ae:bc:17:39:7c:d9: 61:dd:70:22:0c:10:af:3d:42:2d:cc:7c:d8:44:b5: 4e:5b:e1:86:8e:57:db:1a:15:a8:36:e3:2a:47:85: 4d:76:65:14:3f:e2:2f:bb:a9:8f:2e:14:75:bd:cc: 67:94:fc:73:8d:be:bc:fb:dc:39:12:44:84:0e:cd: 95:ac:f9:52:e7:3d:fa:35:61:c8:c7:2a:77:5d:27: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:90:F7:68:A2:04:2A:4A:42:6E:67:E0:B9:F8:77:F7:57:2E:1F X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:63:49:3d:2a:58:4a:d3:7d:1b:12:57:f1:e1:6f:9d:0c:42: 16:20:47:23:8d:42:53:84:19:62:87:6f:43:d6:4a:d8:1e:0a: ce:52:c0:e6:e2:31:6a:bb:fb:e7:24:72:f4:69:97:ed:30:8f: 20:00:20:aa:6c:21:58:6e:5f:1f:7c:02:3f:84:43:64:46:49: d8:cb:2a:ed:75:b4:8c:b2:e1:ed:19:1a:27:8e:56:ed:49:da: 0c:d5:9c:7d:e1:62:40:fd:97:4c:a8:33:d5:3e:87:ac:f0:f1: 85:f0:f4:ef:47:78:e9:7c:4b:96:4c:f2:50:a0:2f:54:d2:d3: 0e:7d:04:b6:e7:ba:b5:0c:6e:4f:00:23:38:67:0c:24:c1:83: 8d:1c:78:a5:8b:49:c8:aa:fb:dd:8e:e0:74:c0:7b:b8:bf:4c: f2:c1:59:1e:78:c3:e9:2c:8e:61:63:ab:7c:fe:e8:8b:9a:6a: dc:c6:4c:c6:cd:aa:27:93:78:97:69:26:b4:fe:04:6d:35:5a: fd:97:20:54:8d:24:91:e7:46:d4:dc:af:76:46:e9:f5:4f:bd: bc:37:99:c5:bc:44:c2:5c:87:dc:c0:ec:c2:09:d0:e8:d7:11: de:6b:3b:0a:16:1c:4d:fb:bb:a0:ff:e6:c1:f6:7a:0b:c5:35: 6e:4e:3d:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjUwODExMDU1NjA4WhcNMjUwODE4MDU1NjA4WjAYMRYwFAYD VQQDEw02ODk5ODVmOC0zMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzsjSuMmFMcy5erej2dlorPzyp8C7LEctKzwnXEALPJTjODi3PqyaFbGjFKX E+AfQ/TptUZyLKnYsUAJjBJJ4fRlu5wlftYRX3PSPOXcKVl1+NiGRlPAU/IMBO+i e7IKSBF+jbWbVaaXuh+EqKhaFvPIRqnFwjBMKDCfu6MxCjeveycF2f7ZLlekmARH BEgcf+hw9XL0B02soc9Bka2r6i+kIJvMOaOzTO6fidmuvBc5fNlh3XAiDBCvPUIt zHzYRLVOW+GGjlfbGhWoNuMqR4VNdmUUP+Ivu6mPLhR1vcxnlPxzjb68+9w5EkSE Ds2VrPlS5z36NWHIxyp3XSfCRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMw+kPdo ogQqSkJuZ+C5+Hf3Vy4fMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbY0k9KlhK030bElfx4W+dDEIWIEcjjUJThBlih29D1krYHgrOUsDm 4jFqu/vnJHL0aZftMI8gACCqbCFYbl8ffAI/hENkRknYyyrtdbSMsuHtGRonjlbt SdoM1Zx94WJA/ZdMqDPVPoes8PGF8PTvR3jpfEuWTPJQoC9U0tMOfQS257q1DG5P ACM4ZwwkwYONHHili0nIqvvdjuB0wHu4v0zywVkeeMPpLI5hY6t8/uiLmmrcxkzG zaonk3iXaSa0/gRtNVr9lyBUjSSR50bU3K92Run1T728N5nFvETCXIfcwOzCCdDo 1xHeazsKFhxN+7ug/+bB9noLxTVuTj2W -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:15 2025 by rpki-client