$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: msB8csqFFqJVqTvbXWPAcsXdPSLniTmAAixWObtSh+A= Subject key identifier: 8D:46:2E:0C:7A:FB:B0:C0:C3:F9:09:0E:36:8D:92:2A:54:F9:0D:11 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0297 Signing time: Sat 09 Aug 2025 02:09:21 +0000 Manifest this update: Sat 09 Aug 2025 02:09:21 +0000 Manifest next update: Sat 16 Aug 2025 02:09:21 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: 3HwzKT+9aj0+opcoZmvthHPJyf2OpybfvVfhJd85k3o=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Aug 9 02:09:21 2025 GMT Not After : Aug 16 02:09:21 2025 GMT Subject: CN=6896add1-2e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:74:4a:f8:02:be:c4:59:2b:9f:67:0e:d8: 7c:2a:7c:c6:f5:52:a7:8d:77:6f:90:62:1f:53:c9: 7e:96:ff:4a:ed:56:42:fe:43:c4:48:86:61:de:5f: de:8e:3e:b6:d3:7e:46:c9:d2:00:88:a4:64:06:3a: b1:a3:97:70:44:3c:e5:a7:7d:a9:00:cf:b0:4b:f6: 8f:b1:a0:f8:40:dc:b9:7c:60:2a:fb:8f:35:f9:91: cf:5d:a8:fb:b1:e9:38:30:3e:39:98:e4:f9:19:c7: 22:b8:96:ac:6c:d2:aa:e7:b1:90:d3:20:1c:17:b3: b4:4f:92:0c:73:73:7b:93:15:f7:1e:45:2b:00:00: 42:6a:78:d8:cf:3a:65:96:a8:d3:c7:97:5b:a6:79: bc:42:ee:d6:b3:a6:bf:15:c8:a0:fb:14:6c:ff:fb: 0e:af:ac:c2:29:16:03:02:9c:bb:e0:62:13:ed:f9: 33:23:0b:ad:54:dd:95:6b:00:a7:6f:26:ac:8b:2c: 55:d9:ac:a2:f7:e6:45:8b:0b:8b:23:c2:02:5b:ae: f1:cc:a5:cd:d7:a2:ed:54:19:0a:7d:87:2b:4f:75: 8a:55:59:7e:8f:6e:85:4a:1e:34:06:6d:5f:bf:44: 42:97:1d:09:b2:eb:26:93:5c:e9:7c:a9:0f:43:05: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:2E:0C:7A:FB:B0:C0:C3:F9:09:0E:36:8D:92:2A:54:F9:0D:11 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:1c:7a:46:e2:d5:a0:77:18:c5:e1:55:cf:13:e3:03:4e:18: 20:55:93:9d:6b:4d:ef:ad:5f:1a:5d:3d:55:b3:c0:a3:f5:5f: 82:48:d5:20:3b:66:bd:3e:57:10:15:1e:28:8c:53:b8:53:be: 34:68:00:1c:61:3d:5c:4b:fa:a1:16:53:56:07:e5:de:17:ac: 17:93:9b:13:59:62:8b:de:71:ff:5c:46:83:7c:dd:f5:b6:b7: e1:96:90:87:65:97:69:f5:72:3a:2c:28:5c:18:22:cf:5d:12: 79:71:23:17:e1:0a:18:e3:27:04:a2:19:37:75:ba:1d:07:5f: f1:fd:43:4c:e2:35:87:48:8d:c5:6f:a8:44:1e:73:e5:ea:f7: 35:d2:2e:00:30:15:7c:36:6e:d9:21:8f:85:be:f7:7d:c0:43: 27:b2:14:3d:03:24:6c:f0:3d:59:0f:7e:67:5d:fa:f5:ac:30: 98:8e:c9:61:e4:71:11:61:28:1f:a8:38:4c:fa:be:29:a5:8c: ee:02:94:eb:2b:6a:97:1c:01:6e:01:d7:ab:fe:0d:d4:5f:8d: d6:65:21:47:4f:8b:80:e3:87:98:04:9e:c5:d0:94:8e:1e:24: 43:b5:4b:d8:f7:37:6a:95:5f:8c:5e:70:52:d7:00:c1:5d:20: e1:7e:90:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwODA5MDIwOTIxWhcNMjUwODE2MDIwOTIxWjAYMRYwFAYD VQQDEw02ODk2YWRkMS0yZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcZ0SvgCvsRZK59nDth8KnzG9VKnjXdvkGIfU8l+lv9K7VZC/kPESIZh3l/e jj62035GydIAiKRkBjqxo5dwRDzlp32pAM+wS/aPsaD4QNy5fGAq+481+ZHPXaj7 sek4MD45mOT5GcciuJasbNKq57GQ0yAcF7O0T5IMc3N7kxX3HkUrAABCanjYzzpl lqjTx5dbpnm8Qu7Ws6a/Fcig+xRs//sOr6zCKRYDApy74GIT7fkzIwutVN2VawCn byasiyxV2ayi9+ZFiwuLI8ICW67xzKXN16LtVBkKfYcrT3WKVVl+j26FSh40Bm1f v0RClx0Jsusmk1zpfKkPQwU8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1GLgx6 +7DAw/kJDjaNkipU+Q0RMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdHHpG4tWgdxjF4VXPE+MDThggVZOda03vrV8aXT1Vs8Cj9V+CSNUg O2a9PlcQFR4ojFO4U740aAAcYT1cS/qhFlNWB+XeF6wXk5sTWWKL3nH/XEaDfN31 trfhlpCHZZdp9XI6LChcGCLPXRJ5cSMX4QoY4ycEohk3dbodB1/x/UNM4jWHSI3F b6hEHnPl6vc10i4AMBV8Nm7ZIY+Fvvd9wEMnshQ9AyRs8D1ZD35nXfr1rDCYjslh 5HERYSgfqDhM+r4ppYzuApTrK2qXHAFuAder/g3UX43WZSFHT4uA44eYBJ7F0JSO HiRDtUvY9zdqlV+MXnBS1wDBXSDhfpAK -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:50 2025 by rpki-client