$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: lkk3sfVxOZU2cKaTuMcG7Ey9KyZ8uE3AX+BIkL9SaDA= Subject key identifier: 0C:C0:51:56:1F:FF:75:B1:87:46:BF:33:FB:50:21:76:A0:D4:3C:27 Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 02C0 Signing time: Tue 05 Aug 2025 02:05:06 +0000 Manifest this update: Tue 05 Aug 2025 02:05:06 +0000 Manifest next update: Tue 12 Aug 2025 02:05:06 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: uXubttZ2Q3GoFUKMoii1cpzQu78Gqo7EqmOM8DELSMg=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 4: DC7E1FA0474711F0A918DB1FC4F9AE02.roa (hash: 4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Aug 5 02:05:06 2025 GMT Not After : Aug 12 02:05:06 2025 GMT Subject: CN=689166d2-412d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:9e:df:06:5a:69:73:6c:20:9f:6f:60:3d: f9:78:ac:71:7a:19:39:0d:11:7a:4a:58:1a:a9:93: a8:66:61:27:5c:ae:40:3b:c5:f4:ed:64:5d:17:1a: 23:01:56:ef:78:52:0f:f6:f0:65:a4:5e:5e:20:27: 35:38:9a:dc:6c:79:a8:ff:96:d7:4b:c3:5c:26:63: 89:8a:3a:6d:64:37:e8:ce:58:27:a2:bc:8c:b4:24: 0b:af:8e:18:2f:2d:75:dd:3d:74:69:8e:52:9a:5e: d9:1b:d5:07:57:52:9e:83:96:db:4f:87:6d:95:74: 40:e4:66:c4:47:b3:b0:17:03:2d:0a:a8:1e:ec:ac: cd:d9:b2:5a:82:38:07:d9:c3:f8:24:76:43:47:87: c5:8b:29:80:80:dc:de:69:24:cb:b5:3f:37:06:17: 57:9b:85:64:06:20:c4:ad:52:3d:74:fa:c4:ee:18: e5:a3:ba:53:3c:19:95:65:b5:56:f9:8e:6e:52:01: 96:cd:8f:10:dc:b0:59:ed:3c:0a:88:59:60:4a:51: 36:55:f7:8f:4c:a7:d0:76:40:0c:28:4d:31:30:c6: 3c:16:2a:95:31:6f:73:50:8c:8b:f4:ef:9e:55:3f: 6c:a2:81:dd:03:cd:9a:fa:d1:81:bd:05:5f:a9:c1: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C0:51:56:1F:FF:75:B1:87:46:BF:33:FB:50:21:76:A0:D4:3C:27 X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:55:c8:33:fd:f7:3a:f2:c6:f1:60:7b:44:89:5e:2c:a2:b3: d4:98:15:e6:79:b4:01:94:be:6f:2b:dd:d8:b5:ab:ba:fb:7e: a0:65:d5:36:0a:35:82:31:e5:88:a6:e8:82:5a:50:51:b3:f4: f0:56:d2:15:6c:67:13:56:53:b8:d8:a7:2b:db:89:b2:b5:f9: 8b:69:fa:bd:f9:89:b6:49:f3:7e:50:80:4b:73:3f:e8:c8:ce: f6:3a:37:c5:84:a6:78:a4:97:1e:b1:bd:96:db:78:00:dd:3c: c5:89:01:1b:94:fd:36:e6:94:18:a4:10:3b:75:bd:e7:67:e8: f7:c4:69:ac:3a:f1:23:6e:40:d9:8d:54:87:4b:4d:20:1f:db: 34:b5:3f:46:bf:db:60:ad:f7:01:44:ac:17:d4:0c:cd:7d:d0: dc:35:23:57:68:87:8d:6d:bf:48:16:9c:e5:b6:73:eb:b8:03: bb:25:d5:b4:4a:f2:69:3b:68:6a:2d:49:3b:25:75:74:37:d5: ee:d5:9a:fc:a7:59:99:79:73:a0:81:7e:04:e0:54:60:71:84: 37:4c:1a:cb:33:b7:3a:a9:00:df:2d:67:8f:08:dc:f4:92:2a: d7:76:c5:1f:75:7e:3f:62:98:eb:fe:b9:6a:9c:a5:7a:54:45: f7:bf:99:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwODA1MDIwNTA2WhcNMjUwODEyMDIwNTA2WjAYMRYwFAYD VQQDEw02ODkxNjZkMi00MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnSe3wZaaXNsIJ9vYD35eKxxehk5DRF6SlgaqZOoZmEnXK5AO8X07WRdFxoj AVbveFIP9vBlpF5eICc1OJrcbHmo/5bXS8NcJmOJijptZDfozlgnoryMtCQLr44Y Ly113T10aY5Sml7ZG9UHV1Keg5bbT4dtlXRA5GbER7OwFwMtCqge7KzN2bJagjgH 2cP4JHZDR4fFiymAgNzeaSTLtT83BhdXm4VkBiDErVI9dPrE7hjlo7pTPBmVZbVW +Y5uUgGWzY8Q3LBZ7TwKiFlgSlE2VfePTKfQdkAMKE0xMMY8FiqVMW9zUIyL9O+e VT9sooHdA82a+tGBvQVfqcGEqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzAUVYf /3Wxh0a/M/tQIXag1DwnMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMVcgz/fc68sbxYHtEiV4sorPUmBXmebQBlL5vK93Ytau6+36gZdU2 CjWCMeWIpuiCWlBRs/TwVtIVbGcTVlO42Kcr24mytfmLafq9+Ym2SfN+UIBLcz/o yM72OjfFhKZ4pJcesb2W23gA3TzFiQEblP025pQYpBA7db3nZ+j3xGmsOvEjbkDZ jVSHS00gH9s0tT9Gv9tgrfcBRKwX1AzNfdDcNSNXaIeNbb9IFpzltnPruAO7JdW0 SvJpO2hqLUk7JXV0N9Xu1Zr8p1mZeXOggX4E4FRgcYQ3TBrLM7c6qQDfLWePCNz0 kirXdsUfdX4/Ypjr/rlqnKV6VEX3v5kF -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:17 2025 by rpki-client