$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: HrFf7vE5IfecC6uYoOjbQjAKFifswmE11yszOkv36O4= Subject key identifier: 3E:79:2C:D6:44:7A:B1:1D:8F:29:75:ED:70:71:B5:22:36:C4:BD:DB Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 02FF Signing time: Sat 09 Aug 2025 01:46:58 +0000 Manifest this update: Sat 09 Aug 2025 01:46:58 +0000 Manifest next update: Sat 16 Aug 2025 01:46:58 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: Opws7ewZcpM6IGm9NJY0Whf3AEwu1GkrnMDXawRqSks=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: ZM5rRUd00+nBfPasOFVmxXpUPYX0MShZkN1FXso/iDI=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: pjNUbtH7HoaOJ7Yp/zo9LBV9AiGXTeeEg0CufDMnsg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Aug 9 01:46:58 2025 GMT Not After : Aug 16 01:46:58 2025 GMT Subject: CN=6896a892-edb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:d5:04:0d:7d:60:10:c7:ad:93:04:19:45: 9f:76:f3:e3:50:65:eb:12:63:b3:ce:3a:bd:69:8a: c1:46:97:74:73:fd:8a:73:cc:f0:85:39:91:17:73: 2b:47:65:49:f0:c4:ba:8c:f5:9c:13:25:73:7c:17: b7:9c:96:97:df:da:c3:41:9c:fb:bc:83:da:f6:e3: 2e:97:2d:d7:eb:5f:57:5b:d0:84:67:45:4b:9d:ea: 14:06:1d:42:dc:84:6b:d1:ca:93:69:c2:62:68:32: 0c:d4:a0:ab:95:9a:aa:1b:85:a2:ac:ba:a6:65:19: 92:ed:09:cd:38:cc:c5:3c:4f:72:67:09:b7:18:3d: 80:9c:9f:91:c7:f1:5f:39:53:6e:45:85:79:f2:93: ca:02:01:8c:25:8b:2f:85:4e:79:62:3d:16:51:48: 4f:39:8a:44:02:30:3b:47:23:2b:2d:bb:13:77:2c: c3:f9:1a:d5:d9:96:d2:e1:74:cd:28:de:1c:05:7e: 8c:5a:a3:e9:0d:0b:57:1d:f8:cb:87:4c:89:52:04: 89:e8:4c:99:70:2b:3c:64:77:00:a3:14:76:51:21: cf:31:ba:38:a8:d0:60:15:e1:38:0a:4a:25:e8:45: b6:18:ec:6d:54:30:60:14:59:96:2d:22:52:3e:ac: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:79:2C:D6:44:7A:B1:1D:8F:29:75:ED:70:71:B5:22:36:C4:BD:DB X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7a:46:63:fe:19:5d:0c:ec:eb:34:02:0d:d1:22:98:a4:87: cf:8c:61:4a:6f:70:1f:e7:5e:08:20:22:86:e5:10:08:8c:2d: 1a:19:4d:3d:6b:86:81:62:53:b6:ef:20:ca:7a:55:23:4f:97: 1d:7a:d0:02:b5:94:da:8b:1e:fe:de:6e:7e:ee:a1:a0:4f:c0: ab:2e:49:bb:ef:71:a1:87:5b:2d:fd:81:ac:20:27:0d:33:e3: 82:71:6a:68:cb:ab:16:49:45:ce:17:ed:07:dd:39:7f:81:6b: 36:44:bc:76:4d:3b:bb:b2:74:a8:ba:ab:3a:03:19:fd:25:66: 52:da:da:42:84:51:1f:f8:78:8d:20:6d:77:97:bf:28:30:5c: fb:e4:e9:6a:60:52:9d:01:d3:2d:c5:0b:a8:ff:e2:38:97:51: a0:e5:20:46:ed:ea:72:52:7d:25:8a:ba:11:71:dc:a8:de:58: 3f:cc:79:ce:18:e4:e8:dc:13:8e:c7:ae:05:34:7f:23:78:12: e5:bb:be:21:74:f9:4b:72:b7:88:05:0e:a9:06:ac:08:60:03: 23:3c:ff:01:f7:88:6f:f7:d7:c8:6e:bc:84:97:c6:b7:1b:6f: cc:b2:8a:5d:d8:18:bd:01:f8:fc:fa:fa:2d:d2:9e:7d:17:b9: a1:cb:37:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjUwODA5MDE0NjU4WhcNMjUwODE2MDE0NjU4WjAYMRYwFAYD VQQDEw02ODk2YTg5Mi1lZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs3VBA19YBDHrZMEGUWfdvPjUGXrEmOzzjq9aYrBRpd0c/2Kc8zwhTmRF3Mr R2VJ8MS6jPWcEyVzfBe3nJaX39rDQZz7vIPa9uMuly3X619XW9CEZ0VLneoUBh1C 3IRr0cqTacJiaDIM1KCrlZqqG4WirLqmZRmS7QnNOMzFPE9yZwm3GD2AnJ+Rx/Ff OVNuRYV58pPKAgGMJYsvhU55Yj0WUUhPOYpEAjA7RyMrLbsTdyzD+RrV2ZbS4XTN KN4cBX6MWqPpDQtXHfjLh0yJUgSJ6EyZcCs8ZHcAoxR2USHPMbo4qNBgFeE4Ckol 6EW2GOxtVDBgFFmWLSJSPqxFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD55LNZE erEdjyl17XBxtSI2xL3bMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgekZj/hldDOzrNAIN0SKYpIfPjGFKb3Af514IICKG5RAIjC0aGU09 a4aBYlO27yDKelUjT5cdetACtZTaix7+3m5+7qGgT8CrLkm773Ghh1st/YGsICcN M+OCcWpoy6sWSUXOF+0H3Tl/gWs2RLx2TTu7snSouqs6Axn9JWZS2tpChFEf+HiN IG13l78oMFz75OlqYFKdAdMtxQuo/+I4l1Gg5SBG7epyUn0liroRcdyo3lg/zHnO GOTo3BOOx64FNH8jeBLlu74hdPlLcreIBQ6pBqwIYAMjPP8B94hv99fIbryEl8a3 G2/Msopd2Bi9Afj8+vot0p59F7mhyzet -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:03 2025 by rpki-client