$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: Vq249YwC7ocYtE7Zq8AQdm3JPry6ZlpYMFJQvrfogeU= Subject key identifier: B1:A0:5D:96:A8:2A:C1:7E:49:37:D2:04:1F:4A:27:12:16:85:E2:6D Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 084F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 148B Signing time: Fri 08 Aug 2025 18:47:46 +0000 Manifest this update: Fri 08 Aug 2025 18:47:46 +0000 Manifest next update: Fri 15 Aug 2025 18:47:46 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: fD6fFZTUKIPTPXgYzqhWsRoGd0ryRHLndJCKH7Hg5ts=) 2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2127 (0x84f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: Aug 8 18:47:46 2025 GMT Not After : Aug 15 18:47:46 2025 GMT Subject: CN=68964652-94dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:55:cb:82:e6:6e:73:4e:66:86:c2:e8:f3: 6c:a3:b3:4b:37:b6:5e:e5:18:c3:ed:3b:ee:5c:c1: 80:8b:6e:14:3b:e4:2c:28:8f:c3:d4:0d:5d:5a:22: dc:5d:6c:d8:69:4f:09:07:20:28:18:7e:a1:db:9a: 00:2b:9b:3d:95:05:74:1f:d0:78:20:20:01:f6:91: 0b:91:2b:2b:20:83:09:74:ec:27:ff:ae:91:03:26: 3b:02:d6:0b:10:a9:11:91:2b:66:25:14:cd:a0:f1: 6b:ff:27:a0:a3:b9:07:b6:1f:ff:bf:1f:4a:d1:bc: 3b:f3:8d:b3:30:70:c9:3c:13:4b:95:3c:70:40:ae: fa:5d:13:95:4e:6b:9a:86:61:1f:b2:19:81:f5:5b: 70:dd:a5:48:31:11:48:88:14:55:d0:87:b8:50:6a: 13:b6:a6:ad:32:27:83:6d:5e:52:1f:81:a6:1e:24: 6d:fb:00:a6:ec:02:1f:e9:2e:67:e4:ed:03:e6:0c: 1b:d7:5f:f0:9d:d9:6d:14:a1:e6:7e:13:e3:d9:57: e5:b8:e2:f2:6c:62:fb:ad:80:c2:4f:f2:8a:81:77: 39:53:2c:d1:ab:e0:29:70:fc:af:8e:6c:bf:86:da: c4:c4:1d:73:b7:04:de:88:96:cf:c8:9f:36:8c:cb: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A0:5D:96:A8:2A:C1:7E:49:37:D2:04:1F:4A:27:12:16:85:E2:6D X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:29:2a:b1:d8:91:67:32:d7:dc:62:d5:f2:ba:23:32:a3:65: f9:c8:34:53:ca:9a:34:6e:87:44:29:68:83:de:d0:49:1e:7f: 62:75:dc:34:77:09:01:01:38:bd:ff:60:2f:7e:7c:29:a6:a4: 65:bf:63:4e:43:d3:24:53:ec:0b:d5:fa:cf:b7:14:71:4c:c4: 2a:39:18:18:60:9e:70:ed:15:aa:c1:78:6a:fe:21:35:ee:39: 0c:c2:ae:a9:fd:a4:b5:f7:11:88:22:91:4d:59:f7:43:a1:28: ae:43:db:6b:d2:3b:0e:f5:11:50:7e:87:42:79:d8:72:e8:33: 14:25:52:7d:fe:e1:fa:f9:de:9f:01:1b:aa:80:57:2b:a8:eb: ad:50:63:ab:c8:ca:af:b9:26:08:61:25:3f:91:1e:83:6e:b5: ff:21:ca:49:47:9f:cf:b8:fb:7f:3b:00:40:a7:e8:a2:71:f8: cc:a3:f3:d6:17:b1:14:e3:14:12:d1:d0:42:7a:dc:56:54:ef: 1a:47:a4:61:9b:66:8a:6e:31:e5:04:bc:5b:98:35:ce:73:b0: db:23:f0:f9:ea:25:a4:5e:b7:79:5c:72:7b:7b:28:52:70:64: 94:3f:96:df:e7:2a:b3:02:59:a8:40:d6:f3:3e:57:18:47:4f: 75:9a:b8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwODA4MTg0NzQ2WhcNMjUwODE1MTg0NzQ2WjAYMRYwFAYD VQQDEw02ODk2NDY1Mi05NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYRVy4LmbnNOZobC6PNso7NLN7Ze5RjD7TvuXMGAi24UO+QsKI/D1A1dWiLc XWzYaU8JByAoGH6h25oAK5s9lQV0H9B4ICAB9pELkSsrIIMJdOwn/66RAyY7AtYL EKkRkStmJRTNoPFr/yego7kHth//vx9K0bw7842zMHDJPBNLlTxwQK76XROVTmua hmEfshmB9Vtw3aVIMRFIiBRV0Ie4UGoTtqatMieDbV5SH4GmHiRt+wCm7AIf6S5n 5O0D5gwb11/wndltFKHmfhPj2VfluOLybGL7rYDCT/KKgXc5UyzRq+ApcPyvjmy/ htrExB1ztwTeiJbPyJ82jMtjBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGgXZao KsF+STfSBB9KJxIWheJtMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATKSqx2JFnMtfcYtXyuiMyo2X5yDRTypo0bodEKWiD3tBJHn9iddw0 dwkBATi9/2AvfnwppqRlv2NOQ9MkU+wL1frPtxRxTMQqORgYYJ5w7RWqwXhq/iE1 7jkMwq6p/aS19xGIIpFNWfdDoSiuQ9tr0jsO9RFQfodCedhy6DMUJVJ9/uH6+d6f ARuqgFcrqOutUGOryMqvuSYIYSU/kR6DbrX/IcpJR5/PuPt/OwBAp+iicfjMo/PW F7EU4xQS0dBCetxWVO8aR6Rhm2aKbjHlBLxbmDXOc7DbI/D56iWkXrd5XHJ7eyhS cGSUP5bf5yqzAlmoQNbzPlcYR091mrgQ -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:15 2025 by rpki-client