$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: OKKBm+nHN/mP/7SUBQ0zKXyCXSjg0amkh2YXxOKUPEg= Subject key identifier: 24:8C:9E:9D:EF:BB:94:B1:25:3D:1F:26:49:5A:89:CD:4E:FB:05:24 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 0670 Signing time: Fri 08 Aug 2025 17:02:54 +0000 Manifest this update: Fri 08 Aug 2025 17:02:54 +0000 Manifest next update: Fri 15 Aug 2025 17:02:54 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: sBfh0lbhjkKHk4LuHmz9K9ucJJuimVAx57L4+0wQ0k0=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Aug 8 17:02:54 2025 GMT Not After : Aug 15 17:02:54 2025 GMT Subject: CN=68962dbe-ccce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:a3:80:89:89:68:6e:56:2b:b1:9c:cb:d2: 58:fb:18:47:cd:27:b9:b0:6b:1f:57:57:bd:bd:65: 33:b0:82:d9:95:f8:17:ce:28:c8:32:45:fb:ac:f9: b5:44:dc:50:d4:fd:3d:19:69:b5:44:ed:1d:d2:c6: e6:90:fa:02:5a:04:bd:2f:34:bf:51:fa:ad:95:a0: 85:93:00:98:7d:b9:e4:11:a1:32:22:9d:f0:f0:b0: 9f:59:73:e0:f6:16:2d:eb:f7:6e:a9:26:3c:1b:72: cd:6f:99:a9:92:5d:ac:63:6a:10:44:4c:04:6f:a0: c4:01:aa:13:4d:3d:c1:2e:69:1a:cb:e8:3f:99:35: 56:4d:e0:31:22:21:8d:55:fa:c7:bb:55:5c:95:f2: 20:d0:f2:1c:d2:e0:49:85:74:1c:f7:59:8a:26:6c: 8b:fd:77:83:e2:34:ae:d7:4f:46:7d:e1:b6:e2:6c: 59:c5:2e:2f:c4:9c:a8:20:05:5b:0a:67:ff:ce:6b: 05:94:fb:12:91:25:31:2d:b2:02:96:32:96:94:b7: c4:89:67:36:c3:84:1c:63:c9:bd:9e:a8:60:ab:ee: 6b:03:53:95:f2:ab:6a:2e:bc:e2:0b:88:f4:83:5a: af:1b:f9:3a:1f:bf:79:e1:90:eb:28:ce:6b:b1:86: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:9E:9D:EF:BB:94:B1:25:3D:1F:26:49:5A:89:CD:4E:FB:05:24 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:63:05:27:f7:a0:5e:20:5c:d6:31:28:b4:04:f5:34:e7: bb:67:9c:25:17:5b:4b:ca:b8:40:52:0d:50:d3:74:10:80:f1: 32:8f:67:4d:a4:59:2a:bb:6e:8d:8c:78:40:79:e9:4c:f5:87: a4:ed:54:da:20:e2:f0:56:82:7b:11:1e:38:a2:7f:b1:77:ac: 06:bc:a5:30:fb:45:4a:5b:fb:58:23:83:4b:64:44:f1:23:a2: 14:81:82:fa:10:53:0e:f1:c6:22:5e:3e:88:00:07:e7:55:71: b1:3b:de:df:16:f9:f2:3c:79:4d:f6:af:89:53:99:5a:b2:fd: 54:4f:a8:c8:81:3c:cd:f9:f8:af:75:68:aa:37:43:a9:1d:67: a2:e2:10:7c:3e:67:bc:8c:90:b2:49:8f:bc:05:42:75:f4:3f: 01:70:82:20:75:28:71:4d:66:8e:0d:73:49:fb:37:24:c0:fe: 24:77:3b:9e:4e:77:f6:37:13:6b:fa:64:d4:92:89:4a:db:8e: 3b:13:b2:68:91:be:0e:71:29:7c:41:8d:83:2d:59:0f:18:ed: 5c:cc:26:24:5b:4b:10:17:90:c7:c5:11:b8:51:f0:ef:7d:a7: f6:a9:b9:29:42:11:4b:15:e9:79:8a:10:46:5f:43:5b:19:88: 7e:3b:5e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwODA4MTcwMjU0WhcNMjUwODE1MTcwMjU0WjAYMRYwFAYD VQQDEw02ODk2MmRiZS1jY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupCjgImJaG5WK7Gcy9JY+xhHzSe5sGsfV1e9vWUzsILZlfgXzijIMkX7rPm1 RNxQ1P09GWm1RO0d0sbmkPoCWgS9LzS/UfqtlaCFkwCYfbnkEaEyIp3w8LCfWXPg 9hYt6/duqSY8G3LNb5mpkl2sY2oQREwEb6DEAaoTTT3BLmkay+g/mTVWTeAxIiGN VfrHu1VclfIg0PIc0uBJhXQc91mKJmyL/XeD4jSu109GfeG24mxZxS4vxJyoIAVb Cmf/zmsFlPsSkSUxLbICljKWlLfEiWc2w4QcY8m9nqhgq+5rA1OV8qtqLrziC4j0 g1qvG/k6H7954ZDrKM5rsYYZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSMnp3v u5SxJT0fJklaic1O+wUkMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT4WMFJ/egXiBc1jEotAT1NOe7Z5wlF1tLyrhAUg1Q03QQgPEyj2dN pFkqu26NjHhAeelM9Yek7VTaIOLwVoJ7ER44on+xd6wGvKUw+0VKW/tYI4NLZETx I6IUgYL6EFMO8cYiXj6IAAfnVXGxO97fFvnyPHlN9q+JU5lasv1UT6jIgTzN+fiv dWiqN0OpHWei4hB8Pme8jJCySY+8BUJ19D8BcIIgdShxTWaODXNJ+zckwP4kdzue Tnf2NxNr+mTUkolK2447E7Jokb4OcSl8QY2DLVkPGO1czCYkW0sQF5DHxRG4UfDv faf2qbkpQhFLFel5ihBGX0NbGYh+O14a -----END CERTIFICATE-----Generated at Sat Aug 9 14:21:47 2025 by rpki-client