$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: EoCxnuGvZdtUMn2LpSWhWqL/rRnCCRNz0AtCopqjZgw= Subject key identifier: 61:18:F6:6D:45:2B:A9:F6:82:8F:B7:BE:70:89:27:BB:58:58:9A:E2 Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 97 Signing time: Mon 11 Aug 2025 06:40:17 +0000 Manifest this update: Mon 11 Aug 2025 06:40:17 +0000 Manifest next update: Mon 18 Aug 2025 06:40:17 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: 4sXMjInWd6xk7khr33nQ7hq0t8S9/j27BUilZkns0s0=) 2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: h0Ix2v/co1mQt8N7/1X7T+jzKKiC9C9BGQ0eCb34Oxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Aug 11 06:40:17 2025 GMT Not After : Aug 18 06:40:17 2025 GMT Subject: CN=68999051-b3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:95:4e:32:da:81:eb:9d:fb:dc:bd:e0:7e: 0a:66:9f:42:ef:c8:ad:b2:3c:49:e7:66:3b:ca:f5: 1d:ba:22:0d:66:41:c4:81:b3:0c:49:70:ce:55:0f: 8b:77:44:0e:3d:d3:c5:a2:85:88:fe:ca:4f:e0:56: e4:d1:81:57:05:db:cc:57:7a:a4:c7:67:0d:91:93: 0d:a8:14:0b:d8:a1:ea:90:9b:8e:f7:58:92:01:a1: 02:e8:05:0e:a6:38:b2:28:34:a8:06:15:ff:43:0d: c1:ba:ed:39:81:21:c4:8b:b7:45:ce:71:89:b4:08: cb:84:97:16:ea:15:cd:9f:0f:07:83:5d:f8:01:59: fc:ac:ed:d3:29:0d:fb:3c:52:55:5e:5c:1b:f4:d5: ba:f7:b3:5d:0a:a3:2a:60:77:38:15:89:be:e9:19: c5:fd:1d:94:e1:96:45:c1:d9:d1:fd:52:b8:eb:f0: 12:21:09:39:44:de:3d:59:a9:c8:a8:cc:e9:59:e2: 5f:23:00:41:52:68:cb:93:2b:c5:22:c7:dd:e7:0f: 5a:73:01:92:4a:81:3a:11:fc:62:5e:89:ff:c3:1c: 1f:ce:ca:ee:64:ad:c5:f5:7d:10:34:51:00:ea:e8: 2d:68:f7:87:31:ea:8e:f9:cb:15:7b:75:2c:d8:d5: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:18:F6:6D:45:2B:A9:F6:82:8F:B7:BE:70:89:27:BB:58:58:9A:E2 X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b2:51:60:4c:7b:36:b2:68:0a:e2:52:0d:5f:c2:fd:e3:8c: 8c:db:b0:ac:e6:ee:fd:14:33:c9:c0:1f:cf:7c:ef:4a:98:56: 3f:db:c8:84:83:2e:44:5a:b5:5c:05:ca:14:e9:c3:81:c8:93: d5:12:f4:44:71:21:da:bf:8d:e3:27:9a:b4:79:5d:ab:62:9a: d1:7e:53:a3:f7:a5:af:87:41:05:d5:ce:62:54:e5:c2:eb:44: 0d:9e:33:4a:2c:02:7a:c0:c8:f9:e4:a2:32:d4:64:31:05:4c: 39:46:e2:18:2e:d1:51:c4:24:38:b9:c5:5b:fb:8d:d8:e9:8f: f7:e0:4f:21:7f:17:f3:42:3b:ad:7f:8a:78:25:0e:28:f6:33: b1:8c:48:b1:02:84:d5:9a:f2:f9:dc:75:2e:36:e0:c4:8b:f7: 82:4a:55:88:45:9f:4d:d4:49:15:d9:c3:db:38:59:7e:42:16: f9:28:f2:87:28:01:9d:c1:73:57:97:62:16:83:f1:aa:8a:66: fe:44:96:0f:0f:50:6a:2d:ae:9c:c2:f4:2a:b0:49:9c:e5:65: 0f:38:77:fa:f2:d7:44:68:62:0b:85:f9:6d:66:c6:de:02:49: 9e:da:ff:4c:b9:f3:fd:e7:28:91:66:3a:2c:f9:4d:ef:fe:20: 7c:bd:51:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0REODcxMTAvBgNVBAUTKEYzN0YyMzRGM0E4N0QxOEZDQzY3MTNFNDUxMDY3OENB MDU2MUMyRkMwHhcNMjUwODExMDY0MDE3WhcNMjUwODE4MDY0MDE3WjAYMRYwFAYD VQQDEw02ODk5OTA1MS1iM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfaVTjLageud+9y94H4KZp9C78itsjxJ52Y7yvUduiINZkHEgbMMSXDOVQ+L d0QOPdPFooWI/spP4Fbk0YFXBdvMV3qkx2cNkZMNqBQL2KHqkJuO91iSAaEC6AUO pjiyKDSoBhX/Qw3Buu05gSHEi7dFznGJtAjLhJcW6hXNnw8Hg134AVn8rO3TKQ37 PFJVXlwb9NW697NdCqMqYHc4FYm+6RnF/R2U4ZZFwdnR/VK46/ASIQk5RN49WanI qMzpWeJfIwBBUmjLkyvFIsfd5w9acwGSSoE6EfxiXon/wxwfzsruZK3F9X0QNFEA 6ugtaPeHMeqO+csVe3Us2NW+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEY9m1F K6n2go+3vnCJJ7tYWJriMB8GA1UdIwQYMBaAFPN/I086h9GPzGcT5FEGeMoFYcL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ4Ny9FQzU2QjcyMDk3 RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZX01aeFBrVVFaNHlnVmh3 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REQ4Ny9FQzU2QjcyMDk3RTgxMUVGOEUzMjkwM0FDNEY5QUUwMi84MzhqVHpxSDBZ X01aeFBrVVFaNHlnVmh3dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8slFgTHs2smgK4lINX8L944yM27Cs5u79FDPJwB/PfO9KmFY/28iE gy5EWrVcBcoU6cOByJPVEvREcSHav43jJ5q0eV2rYprRflOj96Wvh0EF1c5iVOXC 60QNnjNKLAJ6wMj55KIy1GQxBUw5RuIYLtFRxCQ4ucVb+43Y6Y/34E8hfxfzQjut f4p4JQ4o9jOxjEixAoTVmvL53HUuNuDEi/eCSlWIRZ9N1EkV2cPbOFl+Qhb5KPKH KAGdwXNXl2IWg/Gqimb+RJYPD1BqLa6cwvQqsEmc5WUPOHf68tdEaGILhfltZsbe Akme2v9MufP95yiRZjos+U3v/iB8vVEn -----END CERTIFICATE-----Generated at Wed Aug 13 06:01:00 2025 by rpki-client