$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft File: sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json) Hash identifier: 15ykPi13f5Wn3UkU59S76TuaFfmrFxYTCI/WI2maIkA= Subject key identifier: 2F:38:9A:1E:4B:AF:09:D5:45:35:66:8C:F4:C9:AF:F9:8F:85:1C:BE Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 Certificate issuer: /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft Manifest number: 4B Signing time: Sat 09 Aug 2025 07:51:54 +0000 Manifest this update: Sat 09 Aug 2025 07:51:54 +0000 Manifest next update: Sat 16 Aug 2025 07:51:54 +0000 Files and hashes: 1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: GqUZTtlQFeEQf2ed4WCkDvqzx4Ft5zMuwa6gcYIMkP0=) 2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: kGx1CJpE3cHBsf4M7cgjGHBrxKAD0rzUUv2UM3HRfTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3 Validity Not Before: Aug 9 07:51:54 2025 GMT Not After : Aug 16 07:51:54 2025 GMT Subject: CN=6896fe1a-5d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:f8:d3:bf:5b:1d:1a:e1:48:52:20:24:bd: 42:a7:9f:f6:0c:64:07:9b:4c:0f:4c:11:89:4f:84: 59:0b:bb:b9:f2:94:cf:ba:9b:1e:9a:8f:e8:4b:03: 55:20:ea:8d:3e:87:f5:64:56:e2:7a:9c:6b:45:5c: 3e:2b:0d:c3:bb:6a:b9:47:13:0c:3e:2f:73:05:df: c5:ba:58:54:ad:d9:47:75:92:c9:3b:79:d5:82:5f: b0:7d:cd:37:cc:a6:70:6a:54:11:a6:3f:cf:32:05: da:c7:3a:2a:58:38:60:e3:56:c0:d3:39:75:62:d3: aa:7a:f4:cd:2e:82:cd:51:98:42:55:4d:1d:ff:4f: 2f:0f:b3:9a:c1:cb:ba:c3:3b:c8:b4:7a:0d:a0:2b: 83:b2:fa:d9:12:c6:dc:db:4e:26:06:db:39:a9:b7: 43:01:80:2c:74:bd:12:c6:ac:b9:67:e1:52:03:b2: 1c:d2:3a:4e:45:36:72:e7:11:a3:2f:27:ff:dc:62: 10:4b:80:28:14:b9:ac:88:37:05:83:8b:f0:70:2a: c8:f1:9e:58:29:d4:54:b1:90:40:f4:a1:5e:3c:c9: 85:66:5c:f8:5d:1b:28:19:53:31:b0:e1:83:1a:f7: 75:41:2d:e3:68:5f:72:2b:d8:8d:45:73:90:38:14: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:38:9A:1E:4B:AF:09:D5:45:35:66:8C:F4:C9:AF:F9:8F:85:1C:BE X509v3 Authority Key Identifier: keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:4c:39:cb:28:99:83:c1:d4:51:7c:14:12:40:3f:6b:d3: 5f:c8:17:45:1d:18:fb:cd:21:e1:67:78:d3:87:ea:27:85:c9: 01:ca:e1:76:c0:37:60:5c:16:ea:ad:ca:a9:88:d9:81:c9:8b: 7b:38:4b:4b:e9:37:ce:c2:5b:b4:15:18:54:79:bb:16:ec:29: cc:d2:9b:74:7f:52:94:e2:cd:1d:eb:69:d1:6c:27:3a:bb:dd: 2a:fa:db:d0:0c:e9:4c:8b:d9:88:57:80:21:90:5d:db:e7:f1: 33:c5:c0:28:c2:84:ff:d9:73:45:63:96:08:1b:b5:3a:89:6b: 85:ec:17:2f:38:30:c4:ad:1d:c2:23:f8:da:cd:2b:50:5f:2e: 2e:9c:7b:62:53:20:7d:02:6e:30:01:db:69:96:b4:aa:c8:e2: 21:88:4f:f4:be:da:84:55:aa:57:d0:10:9b:17:79:5a:d6:91: 4e:dd:b0:18:fe:43:e0:2e:fa:ad:fc:25:c0:7b:3b:eb:66:98: 5d:a4:ae:5b:ee:cb:fa:f6:26:6d:32:52:5e:a8:b1:f1:67:82: 36:12:8c:ee:1b:f1:c5:be:6f:b3:e6:52:21:7b:e6:2f:71:4e: a6:58:a6:4b:8a:7c:cd:20:01:ba:f5:ec:7a:27:1b:85:9b:72: b6:e1:74:a7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 N0ZCQTExMC8GA1UEBRMoQjAzNDFDMzQzRkUxNTI1Rjc2QzkyOTk2MTBDQTBFNzhF OTNFODdDMzAeFw0yNTA4MDkwNzUxNTRaFw0yNTA4MTYwNzUxNTRaMBgxFjAUBgNV BAMTDTY4OTZmZTFhLTVkMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfs/jTv1sdGuFIUiAkvUKnn/YMZAebTA9MEYlPhFkLu7nylM+6mx6aj+hLA1Ug 6o0+h/VkVuJ6nGtFXD4rDcO7arlHEww+L3MF38W6WFSt2Ud1ksk7edWCX7B9zTfM pnBqVBGmP88yBdrHOipYOGDjVsDTOXVi06p69M0ugs1RmEJVTR3/Ty8Ps5rBy7rD O8i0eg2gK4Oy+tkSxtzbTiYG2zmpt0MBgCx0vRLGrLln4VIDshzSOk5FNnLnEaMv J//cYhBLgCgUuayINwWDi/BwKsjxnlgp1FSxkED0oV48yYVmXPhdGygZUzGw4YMa 93VBLeNoX3Ir2I1Fc5A4FI3vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULziaHkuv CdVFNWaM9Mmv+Y+FHL4wHwYDVR0jBBgwFoAUsDQcND/hUl92ySmWEMoOeOk+h8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3RkJBLzQyRkMzRDhBMDQ4 RjExRjA4NzJFODU0N0M0RjlBRTAyL3NEUWNORF9oVWw5MnlTbVdFTW9PZU9rLWg4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0RRY05EX2hVbDkyeVNtV0VNb09lT2staDhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 RkJBLzQyRkMzRDhBMDQ4RjExRjA4NzJFODU0N0M0RjlBRTAyL3NEUWNORF9oVWw5 MnlTbVdFTW9PZU9rLWg4TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHbcTDnLKJmDwdRRfBQSQD9r01/IF0UdGPvNIeFneNOH6ieFyQHK4XbA N2BcFuqtyqmI2YHJi3s4S0vpN87CW7QVGFR5uxbsKczSm3R/UpTizR3radFsJzq7 3Sr629AM6UyL2YhXgCGQXdvn8TPFwCjChP/Zc0VjlggbtTqJa4XsFy84MMStHcIj +NrNK1BfLi6ce2JTIH0CbjAB22mWtKrI4iGIT/S+2oRVqlfQEJsXeVrWkU7dsBj+ Q+Au+q38JcB7O+tmmF2krlvuy/r2Jm0yUl6osfFngjYSjO4b8cW+b7PmUiF75i9x TqZYpkuKfM0gAbr17HonG4WbcrbhdKc= -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:15 2025 by rpki-client