$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: 2sKavGaaNdoUe+JF+x/bqVUeSZUbaoCuxuYTGeNUy3w= Subject key identifier: 99:07:B5:89:81:32:3E:0A:E9:3D:66:5E:A2:8D:2C:DE:4C:C3:29:CB Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 0415 Signing time: Thu 07 Aug 2025 00:55:59 +0000 Manifest this update: Thu 07 Aug 2025 00:55:58 +0000 Manifest next update: Thu 14 Aug 2025 00:55:58 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: gDEoky09g5QbCI+LbhJkoFitPnfvtaulYNGjFdkX7Ic=) 2: 4B167396E74111EC80E35542C4F9AE02.roa (hash: bHN8Wd0Zu68QTsipkyferF9uwGKu6L4i92pMNTEMusM=) 3: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: mO2TDz8iVH1QjiN6s50lIdAYCPwhB4UYqdlU/m/h8sE=) 4: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: J8gquWVTmRgJWJ3mBG8a1mA8su1ptSNi3imZDckI5g0=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: RqwnZfnau7RkdBU68iXpJ/pJr2ocars1rJf1vcp1FOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Aug 7 00:55:58 2025 GMT Not After : Aug 14 00:55:58 2025 GMT Subject: CN=6893f99f-04d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:40:70:2e:5b:41:10:7e:5a:99:55:50:e6: ec:52:55:16:7d:a5:65:56:89:a9:7c:2e:a5:7e:14: 09:1b:58:b2:77:6e:00:69:9e:4d:11:52:ac:af:6c: 31:c3:11:72:f4:ee:5f:3b:3d:39:3c:6f:0a:b2:29: 74:87:85:7d:99:84:1b:36:3f:35:f2:f0:86:b5:c9: 00:ee:b8:0e:c5:74:34:ae:4a:c7:da:13:cf:69:e1: 78:3a:14:34:56:0c:f4:f9:0e:31:21:a6:f9:1f:4e: da:82:ef:a5:5f:1a:2d:d6:f6:f6:c2:c8:68:2f:d6: 09:5b:07:f8:37:34:9c:c0:50:2e:43:eb:eb:54:97: 52:93:8d:b4:74:d0:ab:33:45:16:61:9b:58:cc:86: 0d:81:c6:f2:8c:8b:3e:a6:72:c7:c0:1d:53:c9:b2: 8b:68:41:60:8a:9e:4f:55:3e:02:27:0c:cc:c4:6d: 5b:85:e0:39:4a:d0:8b:93:1d:d4:ef:a8:c7:53:21: 8a:67:17:bc:d9:65:85:0f:d2:00:44:28:54:46:ec: da:b0:65:76:f2:82:df:2c:93:5f:94:03:4b:9f:2c: 80:3f:72:44:9f:f3:f5:4e:30:f3:04:3e:b5:2a:c9: 54:65:9b:81:f8:b1:30:9c:86:81:c5:c6:9c:6f:1a: 9f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:B5:89:81:32:3E:0A:E9:3D:66:5E:A2:8D:2C:DE:4C:C3:29:CB X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6c:80:aa:02:a9:f0:47:ba:e6:e3:8b:8d:80:49:46:58:74: 2d:2b:1b:66:18:de:82:b3:ec:61:70:bb:55:08:7f:4c:61:71: 14:de:f7:d6:6c:66:f3:d9:eb:84:84:93:63:4e:3e:2a:56:df: af:af:df:80:50:49:06:63:15:d2:d2:84:01:ae:42:fb:c8:32: 40:46:0e:2c:7b:f4:72:5a:5b:47:c3:18:31:bd:32:d1:74:a8: c9:78:bd:a1:54:b3:c1:46:cd:1c:73:a5:94:27:fe:c9:47:41: f5:5d:d9:bf:23:f6:50:6b:1e:10:3a:ce:17:74:3d:26:92:05: dc:1e:3c:5b:dc:8c:d0:45:c1:ff:a7:7f:c8:f4:a7:3d:51:3f: e0:52:d1:fe:1c:7c:95:49:15:86:e9:dc:58:47:c1:cb:07:57: ff:37:2b:1e:f1:b1:26:c6:1c:7f:7e:ec:64:e3:00:91:94:c0: c0:4c:2b:37:51:97:0a:7f:71:48:0e:16:cc:12:9d:d3:1d:81: 3d:fe:1c:08:fe:f2:0f:d7:58:ae:e9:e9:44:bf:b2:a2:d1:e8: ef:f8:5d:22:91:58:c9:22:c3:90:62:16:9b:4e:ee:f9:07:01: e0:72:b0:b3:35:a2:e5:73:e3:54:d4:95:72:bb:e8:05:af:91: a2:4c:68:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUwODA3MDA1NTU4WhcNMjUwODE0MDA1NTU4WjAYMRYwFAYD VQQDEw02ODkzZjk5Zi0wNGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7pAcC5bQRB+WplVUObsUlUWfaVlVompfC6lfhQJG1iyd24AaZ5NEVKsr2wx wxFy9O5fOz05PG8Ksil0h4V9mYQbNj818vCGtckA7rgOxXQ0rkrH2hPPaeF4OhQ0 Vgz0+Q4xIab5H07agu+lXxot1vb2wshoL9YJWwf4NzScwFAuQ+vrVJdSk420dNCr M0UWYZtYzIYNgcbyjIs+pnLHwB1TybKLaEFgip5PVT4CJwzMxG1bheA5StCLkx3U 76jHUyGKZxe82WWFD9IARChURuzasGV28oLfLJNflANLnyyAP3JEn/P1TjDzBD61 KslUZZuB+LEwnIaBxcacbxqfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkHtYmB Mj4K6T1mXqKNLN5MwynLMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIbICqAqnwR7rm44uNgElGWHQtKxtmGN6Cs+xhcLtVCH9MYXEU3vfW bGbz2euEhJNjTj4qVt+vr9+AUEkGYxXS0oQBrkL7yDJARg4se/RyWltHwxgxvTLR dKjJeL2hVLPBRs0cc6WUJ/7JR0H1Xdm/I/ZQax4QOs4XdD0mkgXcHjxb3IzQRcH/ p3/I9Kc9UT/gUtH+HHyVSRWG6dxYR8HLB1f/Nyse8bEmxhx/fuxk4wCRlMDATCs3 UZcKf3FIDhbMEp3THYE9/hwI/vIP11iu6elEv7Ki0ejv+F0ikVjJIsOQYhabTu75 BwHgcrCzNaLlc+NU1JVyu+gFr5GiTGj9 -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:06 2025 by rpki-client