$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: c6G56eUuCYjcitJiqj6+owrAQjalb+tWSqo6uboe5v4= Subject key identifier: 59:58:C2:D4:95:AD:F1:A4:41:62:F2:95:87:9B:FD:3B:62:30:BD:43 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 1887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 1876 Signing time: Tue 12 Aug 2025 16:35:01 +0000 Manifest this update: Tue 12 Aug 2025 16:35:00 +0000 Manifest next update: Tue 19 Aug 2025 16:35:00 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: xvKQt6f4PKXZJf+H+rgZCnn7bM+E/zH+osv4/52Ulvc=) 2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: k9TDuPE5aOqFzmvoIPDe+G9DbuyOrQuREAeCHC4kW88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6279 (0x1887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Aug 12 16:35:00 2025 GMT Not After : Aug 19 16:35:00 2025 GMT Subject: CN=689b6d35-5237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:f7:e0:a7:dc:9a:4d:15:1d:ad:b4:f8:01: f5:05:89:ef:85:27:6f:f4:f6:53:ce:28:ab:18:39: 1d:e3:a5:25:2f:cb:8f:93:5c:e2:30:b6:ee:dd:00: 9c:9c:98:23:36:d5:f0:20:98:03:7e:05:ef:a8:1f: b4:6c:bc:c8:56:19:04:6e:4b:f5:ef:ac:49:72:fe: d3:a1:50:a9:ef:03:18:13:6e:9b:30:7e:32:69:cf: 2a:4b:ae:c6:42:23:2a:98:58:9a:2b:70:4a:e9:75: 02:15:b1:8d:5b:6d:e0:2d:47:96:e1:bf:05:7c:30: ac:ec:31:5f:b2:25:ee:b1:8b:22:08:53:0e:7f:09: af:af:6e:73:fa:b4:e2:e0:46:15:e4:05:95:e2:ef: 02:ce:26:b7:c6:64:b9:a3:01:d8:69:3e:2d:6b:95: b1:34:91:6c:30:6e:94:53:36:9b:3d:a3:b8:27:ae: 3c:bf:65:ab:42:ce:f4:3d:c0:4c:1e:97:af:e1:9e: da:c6:18:89:8c:ae:9f:b4:70:2f:77:bf:d8:ff:e4: 42:0a:d0:e1:fd:75:d5:77:96:d8:c5:86:43:76:9f: 03:e9:c4:28:25:7d:b0:94:e5:46:f3:22:fa:0d:63: ba:aa:e5:9f:1e:c9:f8:53:64:f2:16:81:2d:f8:95: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:58:C2:D4:95:AD:F1:A4:41:62:F2:95:87:9B:FD:3B:62:30:BD:43 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fc:e6:58:e5:e6:81:e5:cc:12:d0:42:89:f8:b2:ac:3c:31: 0a:bd:de:cf:75:86:ab:a1:77:e9:f7:05:82:89:7f:61:25:58: 2a:eb:58:3b:9d:94:fc:3a:e8:5f:96:8c:82:33:4c:fb:ef:67: 46:5b:1c:3b:3c:c4:54:9f:54:4d:c9:a6:54:ff:37:ea:de:b3: 2f:7a:72:a6:06:65:6c:af:f1:d1:6d:92:d5:21:e5:fb:e2:88: e7:6c:32:db:c4:ba:c2:62:c4:74:f6:0d:d8:b4:10:0b:32:c4: 1b:9b:b2:c8:94:8f:98:f5:77:00:08:b3:98:cc:dc:03:ba:d8: 84:f3:a3:17:6b:90:b1:d6:fe:97:a8:85:46:09:f3:27:81:6b: be:c3:04:be:5a:f7:bb:83:5a:58:7b:d3:f1:15:07:ed:40:a1: cf:3a:54:de:f2:39:b3:1d:91:8b:5e:26:c8:38:8a:1e:e7:67: a0:03:94:ee:4f:50:32:0b:81:b6:89:87:ee:02:74:a5:f4:04: fb:55:7e:c2:7e:19:0f:c2:53:bc:1e:0a:78:a0:f0:15:69:1e: 14:eb:4e:14:31:d1:ac:8d:45:ab:12:74:f8:a9:38:b1:7b:c8: a0:db:4c:ca:59:d6:7d:0d:a5:aa:3b:6f:5a:01:13:cd:0f:77: 38:f0:c7:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjUwODEyMTYzNTAwWhcNMjUwODE5MTYzNTAwWjAYMRYwFAYD VQQDEw02ODliNmQzNS01MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xP34Kfcmk0VHa20+AH1BYnvhSdv9PZTziirGDkd46UlL8uPk1ziMLbu3QCc nJgjNtXwIJgDfgXvqB+0bLzIVhkEbkv176xJcv7ToVCp7wMYE26bMH4yac8qS67G QiMqmFiaK3BK6XUCFbGNW23gLUeW4b8FfDCs7DFfsiXusYsiCFMOfwmvr25z+rTi 4EYV5AWV4u8Czia3xmS5owHYaT4ta5WxNJFsMG6UUzabPaO4J648v2WrQs70PcBM Hpev4Z7axhiJjK6ftHAvd7/Y/+RCCtDh/XXVd5bYxYZDdp8D6cQoJX2wlOVG8yL6 DWO6quWfHsn4U2TyFoEt+JXoSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlYwtSV rfGkQWLylYeb/TtiML1DMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX/OZY5eaB5cwS0EKJ+LKsPDEKvd7PdYaroXfp9wWCiX9hJVgq61g7 nZT8OuhfloyCM0z772dGWxw7PMRUn1RNyaZU/zfq3rMvenKmBmVsr/HRbZLVIeX7 4ojnbDLbxLrCYsR09g3YtBALMsQbm7LIlI+Y9XcACLOYzNwDutiE86MXa5Cx1v6X qIVGCfMngWu+wwS+Wve7g1pYe9PxFQftQKHPOlTe8jmzHZGLXibIOIoe52egA5Tu T1AyC4G2iYfuAnSl9AT7VX7CfhkPwlO8Hgp4oPAVaR4U604UMdGsjUWrEnT4qTix e8ig20zKWdZ9DaWqO29aARPND3c48Mf1 -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:47 2025 by rpki-client