$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: sg5FWqALJNQxhfKQPDdcxhQdkEuxcK/73UwY0HlNAZ0= Subject key identifier: 82:32:3B:FB:CD:F1:06:BB:29:6F:60:8E:50:57:06:00:4D:61:C7:3E Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 0478 Signing time: Sat 09 Aug 2025 00:35:07 +0000 Manifest this update: Sat 09 Aug 2025 00:35:07 +0000 Manifest next update: Sat 16 Aug 2025 00:35:07 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: yrUGXkxrcIsbbZad2/R2zo+YAP6Zx4aOjWcAjLMYbO8=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Aug 9 00:35:07 2025 GMT Not After : Aug 16 00:35:07 2025 GMT Subject: CN=689697bb-e797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:da:03:d3:a0:a1:49:b8:b8:cd:d2:22:34: d9:7a:4d:87:7f:52:85:2b:2e:2b:06:6a:ce:7f:8b: 1b:73:00:63:95:38:1d:bb:80:ef:a1:80:8d:42:7d: 42:8d:57:e8:e6:d5:30:37:ac:b0:2d:b7:2b:16:8b: 3f:7c:76:d5:3e:da:06:d9:5b:57:97:e4:1c:1b:2b: 7f:94:b7:c3:12:bd:b8:1e:df:6e:6f:c9:b7:2c:ff: e8:34:0e:6e:1c:19:6c:6a:82:ff:b4:7b:5d:88:be: ed:4d:f8:36:f1:99:34:97:b2:c2:7b:0f:5c:0c:78: 86:bb:3b:82:27:9f:0a:52:5b:f0:6c:9b:72:8e:12: c8:58:08:6f:ce:ab:d0:d5:4b:38:2e:1d:da:29:8f: 2c:a1:31:10:52:35:f1:8e:ac:0f:91:1f:b9:23:4e: e8:a9:5b:f6:64:a2:84:77:f7:39:75:6e:c4:ad:64: 0a:01:5a:3e:7e:20:e7:f5:3a:5b:e9:e9:c8:ec:34: bf:c1:f5:af:5c:ad:8d:6b:68:0c:38:f4:89:3a:a3: 35:44:19:97:f2:e5:8b:66:6e:52:48:59:5c:d1:d5: 60:94:80:45:39:09:c7:34:3f:e6:3a:e9:59:a1:52: 96:2e:f6:f4:89:f5:67:01:bb:e5:0b:88:71:df:b0: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:3B:FB:CD:F1:06:BB:29:6F:60:8E:50:57:06:00:4D:61:C7:3E X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f1:cb:ea:25:0d:01:d4:3d:fb:62:43:63:17:3f:6c:be:8c: a5:ef:9d:7e:5d:2f:d5:cc:79:cf:f6:61:98:5f:15:45:fe:da: b8:bc:a6:9c:a0:71:bd:e5:3e:bd:68:ac:67:0b:cc:b6:19:a5: 5c:5f:19:30:94:c2:79:bd:b3:c9:c9:d9:7e:eb:3a:0b:7b:0d: 54:51:ca:d7:3e:dc:a1:4f:5b:de:91:d7:2b:71:a9:03:b9:a4: 1d:34:12:c0:87:06:5f:d3:84:7d:e8:8c:53:70:59:db:53:3d: 3c:cd:dc:29:c0:cc:a7:46:f3:49:58:d9:d5:03:a6:f4:46:45: 7d:55:ff:e7:77:96:60:9e:21:23:ef:0a:48:55:78:78:6d:05: 34:cc:f2:e5:80:86:f2:fc:5f:02:2c:ca:97:0e:b9:02:1a:f3: 13:a5:20:f2:fb:e5:55:f6:b8:e5:cb:58:d8:78:f4:0b:b1:2b: 30:b5:51:e2:07:19:90:8d:c8:5e:39:cc:d5:40:fd:37:ae:02: 0b:c5:9c:59:3e:c7:11:9f:bf:a5:e7:f4:12:37:30:56:62:c3: b7:7c:f7:31:d9:b1:f7:4d:a6:12:a3:56:d0:9f:ec:0d:43:0d: 3d:e3:cf:a9:78:15:6e:bb:db:17:f3:21:a7:f5:6d:79:30:b9: e4:b5:a8:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjUwODA5MDAzNTA3WhcNMjUwODE2MDAzNTA3WjAYMRYwFAYD VQQDEw02ODk2OTdiYi1lNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI/aA9OgoUm4uM3SIjTZek2Hf1KFKy4rBmrOf4sbcwBjlTgdu4DvoYCNQn1C jVfo5tUwN6ywLbcrFos/fHbVPtoG2VtXl+QcGyt/lLfDEr24Ht9ub8m3LP/oNA5u HBlsaoL/tHtdiL7tTfg28Zk0l7LCew9cDHiGuzuCJ58KUlvwbJtyjhLIWAhvzqvQ 1Us4Lh3aKY8soTEQUjXxjqwPkR+5I07oqVv2ZKKEd/c5dW7ErWQKAVo+fiDn9Tpb 6enI7DS/wfWvXK2Na2gMOPSJOqM1RBmX8uWLZm5SSFlc0dVglIBFOQnHND/mOulZ oVKWLvb0ifVnAbvlC4hx37B25QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIIyO/vN 8Qa7KW9gjlBXBgBNYcc+MB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv8cvqJQ0B1D37YkNjFz9svoyl751+XS/VzHnP9mGYXxVF/tq4vKac oHG95T69aKxnC8y2GaVcXxkwlMJ5vbPJydl+6zoLew1UUcrXPtyhT1vekdcrcakD uaQdNBLAhwZf04R96IxTcFnbUz08zdwpwMynRvNJWNnVA6b0RkV9Vf/nd5ZgniEj 7wpIVXh4bQU0zPLlgIby/F8CLMqXDrkCGvMTpSDy++VV9rjly1jYePQLsSswtVHi BxmQjcheOczVQP03rgILxZxZPscRn7+l5/QSNzBWYsO3fPcx2bH3TaYSo1bQn+wN Qw0948+peBVuu9sX8yGn9W15MLnktaj6 -----END CERTIFICATE-----Generated at Sun Aug 10 04:54:42 2025 by rpki-client