$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: CGXEPOKHQqyq1cx4hqaMN2YRQ10uCmMPE0PsQK5INMc= Subject key identifier: 6D:04:13:D1:9F:06:54:2F:D5:3C:BF:AF:8A:A6:69:8F:B1:70:81:20 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 8A Signing time: Sat 09 Aug 2025 06:59:28 +0000 Manifest this update: Sat 09 Aug 2025 06:59:28 +0000 Manifest next update: Sat 16 Aug 2025 06:59:28 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: b8tueIOb9jraVgEA3sscXkjtQeco1l5EU11StqK1re4=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Aug 9 06:59:28 2025 GMT Not After : Aug 16 06:59:28 2025 GMT Subject: CN=6896f1d0-ba79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:26:f6:89:d8:78:58:fe:83:23:99:1a:f8: 72:96:c0:99:41:1d:23:fc:17:a5:bf:25:3f:c1:a6: 13:dd:4a:7f:7f:42:49:b5:17:65:a4:c4:b5:1d:51: 3c:8d:72:33:a5:00:67:f6:3d:f8:49:68:ef:6c:e4: 02:46:b2:6c:84:02:a9:81:b3:16:2a:10:32:47:c6: 9e:69:40:36:af:12:7b:e6:0f:85:f2:5a:8b:45:8c: 6f:77:5e:08:3e:28:6e:0e:4f:de:cc:10:46:48:b8: 2b:39:4b:97:75:87:8b:ca:d0:ed:5b:0b:ba:f7:6c: 17:24:b8:cc:3c:dc:1e:5a:63:54:0e:af:4d:96:ad: 2a:16:84:39:9b:d0:de:79:4e:aa:83:7b:c4:e0:11: c0:7b:26:7f:6c:06:11:f9:86:97:38:6a:f4:df:89: be:d1:b8:14:83:7e:a4:f8:a8:b5:df:2a:de:c2:12: e4:c7:c3:10:34:37:be:a6:ed:27:4e:82:73:6a:ea: 97:e8:e5:e8:44:5e:37:f9:a7:1f:1f:43:3d:6e:0d: 20:9c:49:a0:8b:3c:ac:27:82:b4:0c:7b:af:a6:14: 51:9e:55:e5:bd:88:c7:2c:c2:4e:a6:a8:6b:aa:3e: 1f:1d:f6:c1:97:81:05:19:33:6c:1e:1a:3c:27:d4: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:04:13:D1:9F:06:54:2F:D5:3C:BF:AF:8A:A6:69:8F:B1:70:81:20 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e7:f2:9a:08:09:fd:1a:94:b4:f9:f9:17:11:b3:30:f4:c6: ad:ae:96:66:44:36:98:ce:67:ba:36:fa:9f:58:f7:c3:ab:9f: 9b:33:c7:c0:f4:46:29:84:f1:14:ec:78:4d:37:59:11:e6:7d: 22:12:09:0c:73:a4:0e:90:64:38:4e:5c:53:d2:9e:d2:ed:4b: 55:a3:72:f4:b2:9b:b4:b2:fd:c7:72:80:ed:ff:07:2c:e7:59: be:33:58:24:14:f9:af:93:75:b4:c9:ae:42:96:b4:95:f4:81: af:e1:36:56:71:91:22:08:ac:59:0b:27:06:37:7d:7f:c0:19: 5d:bc:89:27:37:c6:96:2a:02:66:90:ca:0e:09:00:98:e2:a4: 71:0f:55:ce:95:68:5e:84:65:f2:f4:4f:fa:d9:7e:a0:9b:02: 8e:d9:88:bd:70:b1:7f:b9:93:ed:d2:5e:dc:59:58:9b:74:84: bb:09:b2:99:6d:c3:1b:e5:16:f9:14:de:ea:81:8a:27:b0:cd: 96:81:0f:9e:83:f1:ae:e5:5d:7c:f1:e7:f1:a2:fc:d2:8d:39: 9c:87:22:d7:86:f3:ce:28:bf:f5:3e:cf:8a:b5:67:0e:81:f0: de:b8:d0:0c:fe:ca:c6:31:2b:d6:52:d6:17:7d:e2:81:33:be: e6:1e:ad:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjUwODA5MDY1OTI4WhcNMjUwODE2MDY1OTI4WjAYMRYwFAYD VQQDEw02ODk2ZjFkMC1iYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB0m9onYeFj+gyOZGvhylsCZQR0j/BelvyU/waYT3Up/f0JJtRdlpMS1HVE8 jXIzpQBn9j34SWjvbOQCRrJshAKpgbMWKhAyR8aeaUA2rxJ75g+F8lqLRYxvd14I PihuDk/ezBBGSLgrOUuXdYeLytDtWwu692wXJLjMPNweWmNUDq9Nlq0qFoQ5m9De eU6qg3vE4BHAeyZ/bAYR+YaXOGr034m+0bgUg36k+Ki13yrewhLkx8MQNDe+pu0n ToJzauqX6OXoRF43+acfH0M9bg0gnEmgizysJ4K0DHuvphRRnlXlvYjHLMJOpqhr qj4fHfbBl4EFGTNsHho8J9QdiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0EE9Gf BlQv1Ty/r4qmaY+xcIEgMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK5/KaCAn9GpS0+fkXEbMw9MatrpZmRDaYzme6NvqfWPfDq5+bM8fA 9EYphPEU7HhNN1kR5n0iEgkMc6QOkGQ4TlxT0p7S7UtVo3L0spu0sv3HcoDt/wcs 51m+M1gkFPmvk3W0ya5ClrSV9IGv4TZWcZEiCKxZCycGN31/wBldvIknN8aWKgJm kMoOCQCY4qRxD1XOlWhehGXy9E/62X6gmwKO2Yi9cLF/uZPt0l7cWVibdIS7CbKZ bcMb5Rb5FN7qgYonsM2WgQ+eg/Gu5V188efxovzSjTmchyLXhvPOKL/1Ps+KtWcO gfDeuNAM/srGMSvWUtYXfeKBM77mHq1R -----END CERTIFICATE-----Generated at Mon Aug 11 07:46:56 2025 by rpki-client