$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft File: tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json) Hash identifier: 9nbX/SIbxX2oroEQ0iq5Z94KqMTZyQf5wnPuyNaCN1g= Subject key identifier: AD:AF:09:3B:A3:67:D4:F9:B1:7E:37:92:E2:93:96:CA:B1:C2:4E:CC Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F Certificate issuer: /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft Manifest number: CE Signing time: Sat 09 Aug 2025 06:06:43 +0000 Manifest this update: Sat 09 Aug 2025 06:06:43 +0000 Manifest next update: Sat 16 Aug 2025 06:06:43 +0000 Files and hashes: 1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: YDaHVAAsEG0QyvJPFwhtZejblE+xExPpubJKySjDIOI=) 2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: RTDmiAUTa+6e7BNeD1q7cr5hG3t1MJJWblXaDUXHJew=) 3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: ZlBqKGquKmDZSHNnRJSZITSYuAIz8r1LwmFTYmRFcj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F Validity Not Before: Aug 9 06:06:43 2025 GMT Not After : Aug 16 06:06:43 2025 GMT Subject: CN=6896e573-f7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:a5:31:58:3e:d7:09:86:08:bb:8a:80:c8: d7:c3:db:b6:9b:ee:51:3f:f0:90:4e:32:cb:05:3c: 1d:72:5c:31:28:bd:f6:2c:0a:91:b7:97:e8:84:ef: 04:1e:dd:b7:91:fa:a0:11:8c:a1:da:ec:55:5d:ba: 35:09:1a:c3:7f:d1:66:f9:e2:6b:55:da:28:a7:03: 9a:58:bf:cf:62:df:f1:66:c3:76:3c:9d:a0:54:35: 4b:c3:ba:9b:93:93:50:2d:c4:4a:9c:f3:7c:9f:3f: 79:a5:c7:da:61:d5:70:c2:5c:ba:0f:3e:0b:ba:4c: e8:b3:34:7f:62:e5:5e:64:50:64:46:20:9a:2c:f0: d6:52:d1:a1:29:26:e7:31:6f:4a:cd:9a:4d:93:88: 3a:13:32:53:93:a1:bb:92:5f:c1:9b:d7:f3:82:64: 88:5a:03:75:0f:91:9d:53:19:e5:e5:56:2a:ee:e8: 8f:16:40:ee:4a:85:b4:b2:d8:d8:2d:da:36:86:47: 30:1b:46:25:9f:00:22:66:6b:dd:5f:12:0f:13:64: de:49:84:b6:c6:84:b2:a9:55:8d:9d:9f:b0:8c:f2: 8a:f8:3f:25:7e:b2:90:2d:5f:f8:5f:f6:56:5a:89: e2:2c:d5:c2:f1:34:27:0d:66:42:cb:58:31:86:84: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AF:09:3B:A3:67:D4:F9:B1:7E:37:92:E2:93:96:CA:B1:C2:4E:CC X509v3 Authority Key Identifier: keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cf:af:f5:06:31:af:ed:88:28:79:0f:3a:9e:fa:8f:57:02: a7:b1:bc:5d:06:28:92:55:e3:fb:88:39:33:4c:c8:61:8b:50: 07:de:31:5b:81:de:4e:ea:cb:36:64:72:99:62:5e:80:66:51: a7:0c:24:5a:2d:47:b6:59:5a:2e:e8:d9:d3:83:5c:7e:96:cf: c5:79:bc:91:f3:45:4d:41:e0:f8:89:a7:02:f1:74:83:32:1a: 0d:6b:5a:09:fd:81:7c:79:bb:d2:30:88:1b:62:6d:f5:f3:78: 44:2b:3a:c6:0e:2f:7b:0f:3f:6d:0f:91:62:48:d5:3b:80:e4: 61:3e:59:f8:c3:42:9d:bc:b2:23:99:29:14:30:0c:4a:ec:fd: 66:3f:ec:0e:b5:cb:c1:45:02:32:62:65:19:9a:88:27:e2:b1: d4:21:89:4f:7d:db:e9:b6:4c:6c:9a:b0:d8:b2:76:1b:51:54: 49:0d:7d:33:d1:4f:66:31:b2:29:da:bc:10:50:b2:33:95:f5: 26:8b:0a:03:ca:6e:43:d4:81:6d:6b:a4:04:10:a9:63:eb:ae: 57:6b:ae:87:a8:c4:21:d4:b2:64:8d:91:25:ac:3f:0a:b2:59: ad:6c:b9:a4:a5:c5:ba:ef:b1:22:ea:4d:07:bb:43:66:6b:6c: a2:e1:33:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2 MzdDODlBNkYwHhcNMjUwODA5MDYwNjQzWhcNMjUwODE2MDYwNjQzWjAYMRYwFAYD VQQDEw02ODk2ZTU3My1mN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYKlMVg+1wmGCLuKgMjXw9u2m+5RP/CQTjLLBTwdclwxKL32LAqRt5fohO8E Ht23kfqgEYyh2uxVXbo1CRrDf9Fm+eJrVdoopwOaWL/PYt/xZsN2PJ2gVDVLw7qb k5NQLcRKnPN8nz95pcfaYdVwwly6Dz4LukzoszR/YuVeZFBkRiCaLPDWUtGhKSbn MW9KzZpNk4g6EzJTk6G7kl/Bm9fzgmSIWgN1D5GdUxnl5VYq7uiPFkDuSoW0stjY Ldo2hkcwG0YlnwAiZmvdXxIPE2TeSYS2xoSyqVWNnZ+wjPKK+D8lfrKQLV/4X/ZW WoniLNXC8TQnDWZCy1gxhoR1rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2vCTuj Z9T5sX43kuKTlsqxwk7MMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx QlYwRV9jQWZoUmxqZkltbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+z6/1BjGv7YgoeQ86nvqPVwKnsbxdBiiSVeP7iDkzTMhhi1AH3jFb gd5O6ss2ZHKZYl6AZlGnDCRaLUe2WVou6NnTg1x+ls/FebyR80VNQeD4iacC8XSD MhoNa1oJ/YF8ebvSMIgbYm3183hEKzrGDi97Dz9tD5FiSNU7gORhPln4w0KdvLIj mSkUMAxK7P1mP+wOtcvBRQIyYmUZmogn4rHUIYlPfdvptkxsmrDYsnYbUVRJDX0z 0U9mMbIp2rwQULIzlfUmiwoDym5D1IFta6QEEKlj665Xa66HqMQh1LJkjZElrD8K slmtbLmkpcW677Ei6k0Hu0Nma2yi4TO9 -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:07 2025 by rpki-client