$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: MAyKj9Ic30kBLaoxNg1wlclnmNk37CxO3+jIm/Bgp58= Subject key identifier: BB:C7:43:0A:A5:50:58:2B:DF:97:75:F8:42:E2:43:CC:D3:DF:88:2A Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 8F Signing time: Mon 11 Aug 2025 06:42:08 +0000 Manifest this update: Mon 11 Aug 2025 06:42:07 +0000 Manifest next update: Mon 18 Aug 2025 06:42:07 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: Y4Ym9xB9/n3uJq4gQv52dkHmUMS6r0gkvLIOWx/a7iM=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Aug 11 06:42:07 2025 GMT Not After : Aug 18 06:42:07 2025 GMT Subject: CN=689990c0-cd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:4d:59:eb:ef:90:6e:d1:b3:bd:3b:51:d9: b8:94:e0:f3:96:02:4b:d8:96:a4:4f:a8:f8:d2:f3: 25:eb:5f:64:77:b1:cc:d3:dd:6d:03:2e:ef:5c:6d: b4:12:68:7d:fa:34:f6:f7:7f:ef:8d:6c:92:86:89: 89:e3:4f:b0:10:e7:b1:eb:2c:f0:f1:84:8a:a6:cf: 4e:6f:45:bb:3a:66:d4:3c:15:36:12:5c:1b:80:87: 2e:e4:75:f9:43:2a:21:ed:4e:e7:7f:64:3f:b4:96: 96:22:9e:57:11:84:f9:dd:dd:18:ae:77:79:83:16: ca:e7:f2:e4:74:4d:32:39:7a:5b:17:69:f2:50:82: f7:ab:2a:49:d4:39:84:b0:7c:bb:b0:eb:82:6e:76: d7:fa:23:9e:57:c7:84:48:d8:77:e3:5b:5e:bf:f0: 3d:cc:c7:81:9c:df:64:68:2e:99:2b:15:a9:4a:b7: 64:04:cb:62:a5:6e:6b:ab:68:a9:cf:22:5f:8b:d0: 29:9c:0e:e0:52:22:f3:2d:b0:a6:76:fe:cc:f1:d5: 5c:56:78:38:16:4c:5a:72:39:85:02:68:22:46:a6: ae:f8:c7:08:94:aa:33:52:df:32:a3:8c:6e:37:6b: e6:c8:fa:14:82:35:c1:9d:59:4f:cf:61:c7:57:bd: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:43:0A:A5:50:58:2B:DF:97:75:F8:42:E2:43:CC:D3:DF:88:2A X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3a:d2:56:cc:db:be:73:0b:9f:f1:d5:7c:22:88:87:b3:f2: 30:86:3b:ca:18:90:16:d9:96:79:a7:a1:95:dc:f8:c0:27:98: ee:49:23:ca:79:61:db:40:5e:90:16:a5:66:80:72:c6:fc:0b: d7:05:a3:95:30:60:72:13:90:19:74:2b:45:64:e5:21:f4:af: ca:9f:3a:b7:b7:27:b0:47:46:b9:8a:a5:48:ce:9e:f1:38:d1: 88:ea:82:34:61:57:98:72:e2:8a:9a:25:54:d5:fd:49:42:2e: de:fd:1a:2a:cb:82:f6:f1:a0:e0:f6:c7:74:1f:d4:6b:39:5e: d6:6e:2f:4b:1f:35:0d:ff:9e:3f:ca:6b:1e:ab:66:cb:7b:92: 36:ab:e4:bf:4f:27:37:2b:f1:f7:3a:19:0e:51:1d:40:1b:f1: 7c:5e:3f:9e:1a:d7:3e:14:4c:ec:fc:da:76:37:c8:cd:9a:62: 54:51:21:2e:19:48:e1:00:ca:8c:3e:5c:8a:a5:de:6f:0a:19: 1d:66:0d:4b:1c:88:b9:15:36:0e:43:37:be:07:41:3d:15:94: 37:78:7c:e0:6e:a2:94:f4:a3:41:91:36:a5:57:c5:e9:67:66: de:65:25:1c:54:f8:59:cb:80:9f:24:e5:02:e8:03:89:3d:e0: a1:8d:dd:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUwODExMDY0MjA3WhcNMjUwODE4MDY0MjA3WjAYMRYwFAYD VQQDEw02ODk5OTBjMC1jZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGdNWevvkG7Rs707Udm4lODzlgJL2JakT6j40vMl619kd7HM091tAy7vXG20 Emh9+jT293/vjWyShomJ40+wEOex6yzw8YSKps9Ob0W7OmbUPBU2ElwbgIcu5HX5 Qyoh7U7nf2Q/tJaWIp5XEYT53d0Yrnd5gxbK5/LkdE0yOXpbF2nyUIL3qypJ1DmE sHy7sOuCbnbX+iOeV8eESNh341tev/A9zMeBnN9kaC6ZKxWpSrdkBMtipW5rq2ip zyJfi9ApnA7gUiLzLbCmdv7M8dVcVng4FkxacjmFAmgiRqau+McIlKozUt8yo4xu N2vmyPoUgjXBnVlPz2HHV72hBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvHQwql UFgr35d1+ELiQ8zT34gqMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8OtJWzNu+cwuf8dV8IoiHs/IwhjvKGJAW2ZZ5p6GV3PjAJ5juSSPK eWHbQF6QFqVmgHLG/AvXBaOVMGByE5AZdCtFZOUh9K/Knzq3tyewR0a5iqVIzp7x ONGI6oI0YVeYcuKKmiVU1f1JQi7e/Roqy4L28aDg9sd0H9RrOV7Wbi9LHzUN/54/ ymseq2bLe5I2q+S/Tyc3K/H3OhkOUR1AG/F8Xj+eGtc+FEzs/Np2N8jNmmJUUSEu GUjhAMqMPlyKpd5vChkdZg1LHIi5FTYOQze+B0E9FZQ3eHzgbqKU9KNBkTalV8Xp Z2beZSUcVPhZy4CfJOUC6AOJPeChjd2W -----END CERTIFICATE-----Generated at Tue Aug 12 19:09:32 2025 by rpki-client