$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: qig0WF2D5chz3JNl26B8Vgl9TdeUNyso+yJytKKOEjQ= Subject key identifier: 74:02:AB:28:B4:99:8D:24:1C:51:5D:69:02:0E:CB:92:1B:38:20:BD Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CCF Signing time: Fri 08 Aug 2025 18:22:43 +0000 Manifest this update: Fri 08 Aug 2025 18:22:43 +0000 Manifest next update: Fri 15 Aug 2025 18:22:43 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: aDohC3Tp2umEOr3A1EMTraloYM7qchJU+cGMBcIOLf8=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Aug 8 18:22:43 2025 GMT Not After : Aug 15 18:22:43 2025 GMT Subject: CN=68964073-3dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:3d:3e:af:78:18:36:db:20:ed:e1:e0:ea: b0:f7:f3:e3:7d:fa:3d:f7:71:82:6d:c2:bc:2f:80: f1:f8:37:83:70:2c:4b:9c:02:dc:54:fc:05:2c:49: c2:34:a4:91:27:c7:b5:33:84:45:6a:cf:e1:57:a0: fb:cf:cf:a3:fa:80:2c:51:2b:b7:a7:1b:6a:18:51: e7:40:fa:34:2d:77:80:c3:be:75:c3:f5:9a:e0:c0: 13:54:f6:6f:32:5f:b6:9d:3d:18:50:b5:f9:a5:e8: d5:17:95:f6:be:a3:9b:27:66:80:32:77:b4:df:e5: ff:09:d6:97:a8:d7:00:6d:96:22:4c:02:3e:21:e5: 35:0a:1f:36:4f:4b:ce:6f:a2:78:44:ed:04:ff:b5: 8b:df:ab:e0:42:66:b7:b6:8b:84:7e:c2:1d:9f:36: 9b:9e:5f:7e:b9:b1:b2:c3:32:22:40:1c:28:11:67: 88:35:7b:47:d3:9c:37:64:8e:a0:4e:eb:8c:c6:53: d8:11:6f:61:2b:02:0d:71:06:ca:01:bb:7e:79:8f: b1:e2:22:93:81:dd:7a:5d:6d:f9:09:7d:2e:6c:10: 25:90:ff:08:7e:6f:34:87:3f:d1:be:fb:71:a9:b0: b0:15:3f:db:e4:7b:64:22:fb:0b:3d:ca:42:9a:9f: bf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:02:AB:28:B4:99:8D:24:1C:51:5D:69:02:0E:CB:92:1B:38:20:BD X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:6a:24:74:18:82:6c:27:44:49:a6:ce:a9:43:4a:2d:88: f1:14:64:cc:e5:ae:54:50:69:43:c4:bd:0c:35:8a:de:b1:d3: af:79:78:f0:8b:d8:d2:de:4f:47:3f:21:18:bd:38:35:6b:fe: cd:79:57:7e:16:1f:54:7d:da:73:66:6e:3c:16:ef:c7:50:e2: 93:b8:d6:14:8a:f5:b2:6d:4c:79:fc:9c:40:b2:71:66:53:b7: c4:6b:fa:2c:88:ef:3c:46:10:64:b3:a1:92:a7:dc:d8:9f:ff: 2f:9f:3a:1a:00:df:a1:89:ec:3e:3d:17:cb:15:af:f8:76:13: 03:83:64:87:5d:a4:88:44:81:6d:9c:13:33:29:08:48:93:75: 64:f5:4c:ab:29:54:f5:e5:95:bf:13:6e:4c:4f:e7:b9:5f:f9: 45:1f:eb:d4:68:8b:61:c4:6f:f9:71:bd:87:cc:f3:bc:8d:59: 47:65:a0:5d:64:26:62:93:03:0f:d7:8e:c0:ac:d7:05:1e:c5: 4c:f3:e0:12:b0:fa:96:ae:e7:27:1b:ff:90:5d:fa:c0:63:f1: 17:0a:78:94:67:6f:05:29:86:ac:e0:11:00:3c:8c:19:bf:d4: 2b:c7:35:8d:56:2b:12:1d:20:80:c4:57:c1:94:bd:0c:a1:3b: 95:b1:2b:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwODA4MTgyMjQzWhcNMjUwODE1MTgyMjQzWjAYMRYwFAYD VQQDEw02ODk2NDA3My0zZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kU9Pq94GDbbIO3h4Oqw9/Pjffo993GCbcK8L4Dx+DeDcCxLnALcVPwFLEnC NKSRJ8e1M4RFas/hV6D7z8+j+oAsUSu3pxtqGFHnQPo0LXeAw751w/Wa4MATVPZv Ml+2nT0YULX5pejVF5X2vqObJ2aAMne03+X/CdaXqNcAbZYiTAI+IeU1Ch82T0vO b6J4RO0E/7WL36vgQma3touEfsIdnzabnl9+ubGywzIiQBwoEWeINXtH05w3ZI6g TuuMxlPYEW9hKwINcQbKAbt+eY+x4iKTgd16XW35CX0ubBAlkP8Ifm80hz/Rvvtx qbCwFT/b5HtkIvsLPcpCmp+/dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQCqyi0 mY0kHFFdaQIOy5IbOCC9MB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARkGokdBiCbCdESabOqUNKLYjxFGTM5a5UUGlDxL0MNYresdOveXjw i9jS3k9HPyEYvTg1a/7NeVd+Fh9UfdpzZm48Fu/HUOKTuNYUivWybUx5/JxAsnFm U7fEa/osiO88RhBks6GSp9zYn/8vnzoaAN+hiew+PRfLFa/4dhMDg2SHXaSIRIFt nBMzKQhIk3Vk9UyrKVT15ZW/E25MT+e5X/lFH+vUaIthxG/5cb2HzPO8jVlHZaBd ZCZikwMP147ArNcFHsVM8+ASsPqWrucnG/+QXfrAY/EXCniUZ28FKYas4BEAPIwZ v9QrxzWNVisSHSCAxFfBlL0MoTuVsSv/ -----END CERTIFICATE-----Generated at Sat Aug 9 20:46:51 2025 by rpki-client