$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json) Hash identifier: xpEZXiHNzstiUgjfXftjlgFXKJrND/3LQHEP96+7cKA= Subject key identifier: CB:6E:CB:09:5A:CD:5E:0F:40:6C:10:75:44:34:14:25:98:7E:0D:FD Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D Certificate issuer: /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft Manifest number: 0122 Signing time: Sat 09 Aug 2025 04:15:06 +0000 Manifest this update: Sat 09 Aug 2025 04:15:06 +0000 Manifest next update: Sat 16 Aug 2025 04:15:06 +0000 Files and hashes: 1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: S/0ZkoC4/YDX18H0Ov4GugeWHu29Luu95cyK6eCZdeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D Validity Not Before: Aug 9 04:15:06 2025 GMT Not After : Aug 16 04:15:06 2025 GMT Subject: CN=6896cb4a-e7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:f3:da:8c:4e:96:a3:df:cf:d1:14:44:a2: e8:ba:44:d9:c7:b8:f9:37:e4:1f:15:18:ef:2b:e3: 98:62:a2:83:3c:97:af:76:31:62:7c:78:f8:09:63: a0:67:c3:19:78:a4:82:7d:1a:a0:9d:48:2e:3c:5e: 63:16:cf:bd:59:17:ad:b6:f5:c6:6e:c0:c8:b5:c9: c0:03:5d:a4:cb:ef:28:14:c9:48:e0:52:f4:94:17: 6b:5e:97:f0:c1:a0:df:94:e0:89:5e:43:06:aa:0f: d6:8f:c2:a5:fb:58:d8:ed:f5:3b:3c:99:53:1e:af: c2:01:22:7a:c7:f2:40:71:0c:24:80:a1:e6:71:db: 37:c4:0d:7b:01:37:cc:a8:b6:7f:39:d3:d1:b9:e8: 3b:6e:a4:45:9e:28:08:d9:77:73:9a:93:85:c9:40: 0e:11:97:b6:28:57:4f:3f:0d:51:9a:bd:2b:36:95: 82:91:35:12:ab:93:6d:2f:19:58:69:7b:a5:8e:b2: 80:bd:d8:bb:bd:ef:88:53:fb:a4:5c:45:cf:25:5b: 37:bd:05:ce:37:77:01:a4:48:bd:bc:6e:29:af:ac: 8c:62:5f:d5:75:e0:00:3b:6e:c0:3f:09:59:fe:e0: 30:e0:1b:63:be:36:39:74:e2:1a:19:99:71:2a:b9: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6E:CB:09:5A:CD:5E:0F:40:6C:10:75:44:34:14:25:98:7E:0D:FD X509v3 Authority Key Identifier: keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:80:11:ec:8f:39:a3:af:4d:5c:2d:79:fc:7f:db:f9:df:7c: ed:39:0b:63:3a:c6:80:99:47:71:67:56:55:f8:fa:49:a3:83: 2e:b9:23:fc:be:36:b6:77:84:b9:6a:dc:ed:5c:3c:12:0c:e0: 85:4a:e1:68:5e:d7:4f:8b:d1:41:65:54:d0:72:ca:0a:df:0d: 69:d9:20:fc:d6:f4:20:07:16:bb:32:8d:b7:4f:c4:80:99:f3: 17:15:34:26:1d:13:85:67:fa:7a:84:86:0b:5a:e7:77:73:7e: cc:48:a9:db:cb:6c:ce:e1:74:bb:49:9d:72:2d:d9:f0:7d:cd: 23:d6:da:49:8b:b3:03:50:52:75:b8:95:f2:be:2c:0d:8f:60: 5e:e0:1f:57:2d:e9:0e:dd:b0:d2:fa:b1:82:0c:82:45:68:40: 19:ce:ff:be:f8:80:d9:c3:b7:11:4f:b7:63:e6:72:cc:9a:6d: 6e:dd:2f:a4:a5:be:24:cc:ae:4b:3f:d1:ae:db:9d:dd:ca:ec: bb:67:02:b2:4b:0f:a3:88:71:77:e4:ae:f0:e5:d9:08:56:54: 9f:df:28:27:a3:b9:fe:32:02:3c:99:cb:d2:09:67:d1:a1:6f: 9b:0c:3f:1c:95:ba:fc:eb:d9:5e:e3:1f:ca:d7:43:c7:47:7f: c7:9b:4c:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDE0RTU1RUMzNDI4RTNEMkJBNERDNzFDMTU5RTVGNjA2 MUYxNjNDNkQwHhcNMjUwODA5MDQxNTA2WhcNMjUwODE2MDQxNTA2WjAYMRYwFAYD VQQDEw02ODk2Y2I0YS1lN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZbz2oxOlqPfz9EURKLoukTZx7j5N+QfFRjvK+OYYqKDPJevdjFifHj4CWOg Z8MZeKSCfRqgnUguPF5jFs+9WRettvXGbsDItcnAA12ky+8oFMlI4FL0lBdrXpfw waDflOCJXkMGqg/Wj8Kl+1jY7fU7PJlTHq/CASJ6x/JAcQwkgKHmcds3xA17ATfM qLZ/OdPRueg7bqRFnigI2XdzmpOFyUAOEZe2KFdPPw1Rmr0rNpWCkTUSq5NtLxlY aXuljrKAvdi7ve+IU/ukXEXPJVs3vQXON3cBpEi9vG4pr6yMYl/VdeAAO27APwlZ /uAw4BtjvjY5dOIaGZlxKrkUfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtuywla zV4PQGwQdUQ0FCWYfg39MB8GA1UdIwQYMBaAFBTlXsNCjj0rpNxxwVnl9gYfFjxt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8zQUU3MzlBRUI5 N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BTdWszSEhCV2VYMkJoOFdQ RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZPVmV3MEtPUFN1azNISEJXZVgyQmg4V1BHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8zQUU3MzlBRUI5N0UxMUVFQjNDMjI5NTVDNEY5QUUwMi9GT1ZldzBLT1BT dWszSEhCV2VYMkJoOFdQRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7gBHsjzmjr01cLXn8f9v533ztOQtjOsaAmUdxZ1ZV+PpJo4MuuSP8 vja2d4S5atztXDwSDOCFSuFoXtdPi9FBZVTQcsoK3w1p2SD81vQgBxa7Mo23T8SA mfMXFTQmHROFZ/p6hIYLWud3c37MSKnby2zO4XS7SZ1yLdnwfc0j1tpJi7MDUFJ1 uJXyviwNj2Be4B9XLekO3bDS+rGCDIJFaEAZzv+++IDZw7cRT7dj5nLMmm1u3S+k pb4kzK5LP9Gu253dyuy7ZwKySw+jiHF35K7w5dkIVlSf3ygno7n+MgI8mcvSCWfR oW+bDD8clbr869le4x/K10PHR3/Hm0xT -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:59 2025 by rpki-client