$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: 99PN3IRC/czG7HcbSqfZOZTKNJK/8tMDCBAycMy/NEo= Subject key identifier: F5:9B:7C:8A:2E:C8:2B:CF:03:BD:50:DF:70:A0:16:48:A2:5D:A2:39 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0B8D Signing time: Fri 08 Aug 2025 19:15:40 +0000 Manifest this update: Fri 08 Aug 2025 19:15:39 +0000 Manifest next update: Fri 15 Aug 2025 19:15:39 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: OCamOmWU6FmNslyUFizBSeq8lxN2cHtVg/lb50EMk4k=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2965 (0xb95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Aug 8 19:15:39 2025 GMT Not After : Aug 15 19:15:39 2025 GMT Subject: CN=68964cdc-d4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:d1:d8:91:1e:5a:52:1a:6f:de:e3:52:2b: 5e:58:81:72:ac:02:af:cb:63:a6:f9:09:69:dc:2f: d5:f8:10:cf:75:ea:49:9f:f7:a0:29:d4:6c:59:65: b1:a5:66:31:b3:d4:74:d9:a9:79:56:c9:0e:51:d4: ef:fc:5c:09:0d:27:f6:8f:e3:71:fa:05:3d:46:4e: 97:8f:cf:2d:d8:d0:fa:49:0e:7e:60:35:d9:b3:a9: 9c:bf:c4:f1:75:8a:80:d7:71:ee:78:8b:21:c5:0e: 42:01:38:cf:4c:25:f1:4a:21:c3:72:94:65:d6:15: e8:31:59:75:30:af:24:e4:20:b4:6b:8e:1d:b2:7e: c6:99:f1:55:42:2e:e2:f7:1d:31:b3:ac:a4:4f:84: 33:53:d5:0e:44:5f:15:73:09:38:81:64:10:c7:58: 0b:23:7f:00:75:db:98:49:91:16:d7:2c:d3:1c:ff: ae:8f:87:a2:89:41:33:5f:84:c3:c2:e9:06:7e:f7: 01:bc:20:40:a6:63:16:84:15:82:02:cc:e2:3b:c1: 00:02:b3:ae:f8:a1:ee:19:bb:33:69:b7:6c:31:74: 44:a0:ac:a6:46:5a:b8:04:6d:a1:09:65:12:f1:11: 04:54:65:e5:c2:c1:59:a9:a2:58:3c:04:89:2c:c9: d4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:7C:8A:2E:C8:2B:CF:03:BD:50:DF:70:A0:16:48:A2:5D:A2:39 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:4d:1b:64:f0:05:95:97:ec:34:3c:e7:a0:00:5b:e2:60:77: 1b:47:51:1c:f1:e7:d8:6f:21:89:50:36:99:12:61:e4:3c:89: b9:90:1d:35:ed:e6:0f:cb:2c:7c:1c:c2:80:90:9b:43:ce:80: c0:c1:5e:5f:c7:a7:fa:90:2c:72:ea:b2:64:f3:b8:a0:d6:40: d9:2c:5e:d7:44:10:35:9a:39:9c:50:bc:3f:2d:be:8b:07:08: f9:22:c1:68:d4:81:2c:d3:b5:e3:d3:cc:91:d8:88:70:96:3e: 8c:58:73:ac:0f:0b:6a:c9:48:a5:a1:39:9a:db:99:13:29:48: 27:83:04:33:62:9a:1d:bb:44:d2:1e:9a:64:8a:65:9b:11:af: 5d:ee:95:19:05:ce:6f:05:40:04:40:91:fb:b1:d7:7e:b4:47: 45:09:5a:39:25:6c:7a:92:18:b3:73:b1:73:cb:88:15:17:9a: 09:2f:df:f4:18:49:87:6c:67:50:a1:14:1b:24:66:98:2e:f3: 3c:f9:c4:7c:ae:1a:de:3f:ae:ff:94:64:d4:6b:25:53:dd:bc: c7:a3:74:49:4c:30:61:1d:5a:5c:b1:ba:64:0a:e6:da:02:a1: 48:79:2c:e9:12:f5:5d:52:e4:37:84:17:ad:ae:6b:74:7a:a8: b6:0a:44:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUwODA4MTkxNTM5WhcNMjUwODE1MTkxNTM5WjAYMRYwFAYD VQQDEw02ODk2NGNkYy1kNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsrR2JEeWlIab97jUiteWIFyrAKvy2Om+Qlp3C/V+BDPdepJn/egKdRsWWWx pWYxs9R02al5VskOUdTv/FwJDSf2j+Nx+gU9Rk6Xj88t2ND6SQ5+YDXZs6mcv8Tx dYqA13HueIshxQ5CATjPTCXxSiHDcpRl1hXoMVl1MK8k5CC0a44dsn7GmfFVQi7i 9x0xs6ykT4QzU9UORF8Vcwk4gWQQx1gLI38AdduYSZEW1yzTHP+uj4eiiUEzX4TD wukGfvcBvCBApmMWhBWCAsziO8EAArOu+KHuGbszabdsMXREoKymRlq4BG2hCWUS 8REEVGXlwsFZqaJYPASJLMnU5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWbfIou yCvPA71Q33CgFkiiXaI5MB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2TRtk8AWVl+w0POegAFviYHcbR1Ec8efYbyGJUDaZEmHkPIm5kB01 7eYPyyx8HMKAkJtDzoDAwV5fx6f6kCxy6rJk87ig1kDZLF7XRBA1mjmcULw/Lb6L Bwj5IsFo1IEs07Xj08yR2Ihwlj6MWHOsDwtqyUiloTma25kTKUgngwQzYpodu0TS HppkimWbEa9d7pUZBc5vBUAEQJH7sdd+tEdFCVo5JWx6khizc7Fzy4gVF5oJL9/0 GEmHbGdQoRQbJGaYLvM8+cR8rhreP67/lGTUayVT3bzHo3RJTDBhHVpcsbpkCuba AqFIeSzpEvVdUuQ3hBetrmt0eqi2CkTu -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:15 2025 by rpki-client