$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft File: eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json) Hash identifier: aBv2YG4x+xwRJ4G6l+Yr6upyrmoQKALzSdwpCT4vhac= Subject key identifier: 52:74:B2:45:85:82:6D:01:DF:B4:12:4F:9D:BF:55:6D:15:28:B5:D3 Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 Certificate issuer: /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft Manifest number: 0468 Signing time: Mon 11 Aug 2025 00:18:41 +0000 Manifest this update: Mon 11 Aug 2025 00:18:41 +0000 Manifest next update: Mon 18 Aug 2025 00:18:41 +0000 Files and hashes: 1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: 2+P2IQ5S6ub2pMdXFbZhde7JO0CZtVpxYI5XdxqQJPk=) 2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382 Validity Not Before: Aug 11 00:18:41 2025 GMT Not After : Aug 18 00:18:41 2025 GMT Subject: CN=689936e1-f95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:6d:a5:33:01:6f:d9:26:e1:ae:5f:ab:af: 59:4f:cc:99:4f:d0:30:8e:4f:61:06:6b:2f:40:ad: ad:88:1d:02:d6:f6:20:2f:a0:c7:e5:08:c6:fa:fa: 0d:56:ef:24:3a:20:3a:45:fc:8d:84:3b:29:d6:44: 46:66:1f:57:1a:86:78:2c:39:6e:05:35:1c:be:69: ab:ed:0c:1e:b0:08:b1:b8:43:0b:d0:e3:67:ee:ea: 2d:f5:66:9c:98:00:31:d9:c5:6d:2f:be:7b:b1:db: 84:56:79:ff:97:d8:2e:94:e4:91:d8:2f:06:7e:1b: 76:a8:f9:79:65:0a:6b:27:e9:c0:c8:63:ee:dd:7d: 9f:86:31:d2:90:98:c8:88:00:a8:91:c7:4a:35:9b: 4b:69:53:36:60:1f:43:b8:43:fa:70:25:8a:f6:23: 32:9a:27:8f:35:03:11:e2:96:9e:26:aa:f0:5c:5f: 86:43:a5:39:78:52:0c:2f:0a:a7:73:16:1f:c7:d8: f9:d6:77:1f:06:09:03:f1:47:7f:94:35:d1:aa:22: 1b:c1:5f:bd:81:ff:b5:c7:9f:b5:cb:4e:fa:d8:51: 4e:26:bc:b9:40:34:c9:5c:a9:64:a9:9a:6e:29:ef: a1:e5:cc:b3:be:b4:c8:07:86:0b:df:ee:e0:bf:55: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:B2:45:85:82:6D:01:DF:B4:12:4F:9D:BF:55:6D:15:28:B5:D3 X509v3 Authority Key Identifier: keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:70:cf:ce:b9:c1:af:a9:86:5a:38:12:6c:2b:f7:d3:2d:f5: 44:9c:3a:61:02:2f:9a:70:4b:ab:a7:ca:7d:7f:16:00:c7:19: 1d:93:53:44:48:9a:d4:4a:45:92:46:5a:05:3d:cd:c2:fd:9e: 0b:75:4a:14:86:f6:92:9e:47:05:0d:a2:11:bf:41:40:34:db: 60:5d:b1:8b:c0:90:16:62:e1:24:18:e6:1e:ae:dc:67:57:98: 89:d8:61:0b:61:32:bc:e6:e2:b3:2b:97:05:02:2f:c4:a7:1f: 01:cc:64:04:0b:df:ce:f2:6c:1d:24:37:53:fc:14:d0:55:e2: 23:ab:9f:f7:b5:b2:94:44:f1:0c:b5:50:2c:90:94:d3:87:ef: 3b:7f:56:ba:36:d3:13:21:16:b9:87:b3:9a:1b:1c:98:80:69: 1d:b0:ed:df:95:0c:2a:d2:21:91:13:0c:76:eb:12:46:13:dc: da:d6:3c:57:9d:50:d6:d7:b0:70:03:f0:39:43:69:6c:64:c8: fc:21:f6:73:51:8e:21:b4:72:4a:f7:94:08:a3:05:fe:2d:56: 2d:b3:22:56:16:8c:65:96:3a:c9:f3:23:7e:09:52:7b:75:8e: 57:e8:74:c3:f8:0b:f1:1b:8a:78:27:ed:02:bb:9e:2d:4d:d8: 1b:8f:02:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3MEQxMTAvBgNVBAUTKDc4NzY2RDYwMkE0MEVGNTcwMTQyNjg0QTcyM0U4QTM0 MEM2RkYzODIwHhcNMjUwODExMDAxODQxWhcNMjUwODE4MDAxODQxWjAYMRYwFAYD VQQDEw02ODk5MzZlMS1mOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAltpTMBb9km4a5fq69ZT8yZT9Awjk9hBmsvQK2tiB0C1vYgL6DH5QjG+voN Vu8kOiA6RfyNhDsp1kRGZh9XGoZ4LDluBTUcvmmr7QwesAixuEML0ONn7uot9Wac mAAx2cVtL757sduEVnn/l9gulOSR2C8Gfht2qPl5ZQprJ+nAyGPu3X2fhjHSkJjI iACokcdKNZtLaVM2YB9DuEP6cCWK9iMymiePNQMR4paeJqrwXF+GQ6U5eFIMLwqn cxYfx9j51ncfBgkD8Ud/lDXRqiIbwV+9gf+1x5+1y0762FFOJry5QDTJXKlkqZpu Ke+h5cyzvrTIB4YL3+7gv1UxvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJ0skWF gm0B37QST52/VW0VKLXTMB8GA1UdIwQYMBaAFHh2bWAqQO9XAUJoSnI+ijQMb/OC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTcwRC8xMTE0QzlCQTU5 NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcxY0JRbWhLY2o2S05BeHY4 NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIWnRZQ3BBNzFjQlFtaEtjajZLTkF4djg0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTcwRC8xMTE0QzlCQTU5NTAxMUVDQUUwOTMyODJDNEY5QUUwMi9lSFp0WUNwQTcx Y0JRbWhLY2o2S05BeHY4NEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDcM/OucGvqYZaOBJsK/fTLfVEnDphAi+acEurp8p9fxYAxxkdk1NE SJrUSkWSRloFPc3C/Z4LdUoUhvaSnkcFDaIRv0FANNtgXbGLwJAWYuEkGOYertxn V5iJ2GELYTK85uKzK5cFAi/Epx8BzGQEC9/O8mwdJDdT/BTQVeIjq5/3tbKURPEM tVAskJTTh+87f1a6NtMTIRa5h7OaGxyYgGkdsO3flQwq0iGREwx26xJGE9za1jxX nVDW17BwA/A5Q2lsZMj8IfZzUY4htHJK95QIowX+LVYtsyJWFoxlljrJ8yN+CVJ7 dY5X6HTD+AvxG4p4J+0Cu54tTdgbjwIJ -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:46 2025 by rpki-client