$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: C5xzNOytbyIUbSljY70DfVQc9dAPcU3Iu8ybB25pq90= Subject key identifier: 08:38:DB:3F:1E:55:60:50:80:4D:41:0F:80:89:9F:76:83:A3:6E:57 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 92 Signing time: Mon 11 Aug 2025 06:43:04 +0000 Manifest this update: Mon 11 Aug 2025 06:43:04 +0000 Manifest next update: Mon 18 Aug 2025 06:43:04 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: QdyM1jiEtYG9Bqng2AKKZrPRKPyHACPjAcLhnq55Wko=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: pFRSFI6h6cepGXA89QRHkbEToNAY1QtSMdW9gUz8rz8=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: Zk4O88j1RIZ+Ku3IeZORoghBRdg89wRXcbXPFK1V55c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Aug 11 06:43:04 2025 GMT Not After : Aug 18 06:43:04 2025 GMT Subject: CN=689990f8-9b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:4a:04:0c:49:82:5a:4f:d1:f8:ee:d8:6c: 7f:b6:2a:90:3f:83:9b:e4:b9:52:9a:c8:a3:b5:be: a6:87:eb:aa:84:fa:78:c1:9c:99:bf:2f:2e:8d:1c: 9c:0b:0e:0c:2c:88:ee:40:7a:4e:73:fe:a1:c5:89: 96:c0:0d:69:78:be:3f:4f:89:80:1a:55:47:a8:e6: 80:e9:40:95:94:a2:9e:69:8a:23:91:85:5c:8c:35: 0a:49:6d:2b:70:05:36:5c:52:7e:fa:a4:87:f6:39: 3c:39:93:2b:8b:6e:6d:2c:93:f1:29:c1:03:31:72: 58:34:85:1f:9a:1c:d1:80:b2:e7:13:2e:cb:a5:3c: e0:4e:52:72:2b:96:b2:cd:8a:28:24:d5:a9:27:c5: c2:6d:85:80:44:59:23:dc:ea:e0:2b:be:6e:83:ef: 99:f4:26:37:a4:2d:fd:fa:a6:e8:c6:4b:d0:24:4e: d1:fe:ec:e9:36:0b:53:8a:bc:ce:61:fa:dc:e7:5c: bb:a2:3f:ee:08:36:40:a6:1a:b7:75:6b:5e:4d:7c: c7:2a:d2:38:4c:be:bb:f4:b8:6e:6c:e3:34:50:cc: 7d:2a:da:80:e6:8b:43:1c:d4:ea:6b:5e:3c:d0:fb: e9:c9:69:22:0a:27:fd:f4:c0:a2:49:42:db:b2:d7: 6d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:DB:3F:1E:55:60:50:80:4D:41:0F:80:89:9F:76:83:A3:6E:57 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:02:fc:98:19:13:a5:76:55:e6:d1:ce:e6:58:e9:d0:65:db: 6a:59:1a:97:1e:10:fd:d3:c1:6f:02:5a:81:49:64:93:5f:48: aa:f7:ba:b9:81:4b:f1:21:92:0e:81:b2:ce:5e:85:99:4f:3a: 7e:00:96:89:7c:41:bb:13:a5:6c:72:c3:1c:84:64:6f:30:58: 36:5e:b1:b7:b1:e3:ef:c9:48:0b:b4:c9:ac:b6:48:3f:27:78: be:8e:93:84:3b:35:5b:81:5b:c7:63:7a:76:25:2b:9b:0b:e3: e2:fe:3f:fb:5a:40:5a:3b:18:f9:b5:95:29:36:ae:fa:85:2a: 57:fb:ce:93:cc:16:b3:9f:06:0c:9b:7e:58:9f:40:2f:14:f6: e2:f7:f0:20:11:ac:f4:8c:10:6a:93:c3:99:c3:fb:5b:eb:b1: 6e:7d:98:fc:5e:f5:51:da:c0:66:42:bb:11:da:66:15:5a:7d: 72:29:ba:68:5a:a0:a7:ac:25:b7:14:1e:f2:d5:36:34:8d:f0: af:b0:1a:ce:c0:0d:c7:c2:cc:e2:93:ca:cb:0c:7a:14:68:27: af:85:d9:0b:e3:3d:7f:8f:d3:69:25:6b:40:24:1e:4e:43:ad: 18:5e:98:f9:90:6a:a5:45:09:48:66:bd:b4:8c:fa:79:cc:2c: 19:a6:0a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjUwODExMDY0MzA0WhcNMjUwODE4MDY0MzA0WjAYMRYwFAYD VQQDEw02ODk5OTBmOC05YjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssJKBAxJglpP0fju2Gx/tiqQP4Ob5LlSmsijtb6mh+uqhPp4wZyZvy8ujRyc Cw4MLIjuQHpOc/6hxYmWwA1peL4/T4mAGlVHqOaA6UCVlKKeaYojkYVcjDUKSW0r cAU2XFJ++qSH9jk8OZMri25tLJPxKcEDMXJYNIUfmhzRgLLnEy7LpTzgTlJyK5ay zYooJNWpJ8XCbYWARFkj3OrgK75ug++Z9CY3pC39+qboxkvQJE7R/uzpNgtTirzO Yfrc51y7oj/uCDZAphq3dWteTXzHKtI4TL679LhubOM0UMx9KtqA5otDHNTqa148 0PvpyWkiCif99MCiSULbstdt7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAg42z8e VWBQgE1BD4CJn3aDo25XMB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUAvyYGROldlXm0c7mWOnQZdtqWRqXHhD908FvAlqBSWSTX0iq97q5 gUvxIZIOgbLOXoWZTzp+AJaJfEG7E6VscsMchGRvMFg2XrG3sePvyUgLtMmstkg/ J3i+jpOEOzVbgVvHY3p2JSubC+Pi/j/7WkBaOxj5tZUpNq76hSpX+86TzBaznwYM m35Yn0AvFPbi9/AgEaz0jBBqk8OZw/tb67FufZj8XvVR2sBmQrsR2mYVWn1yKbpo WqCnrCW3FB7y1TY0jfCvsBrOwA3Hwszik8rLDHoUaCevhdkL4z1/j9NpJWtAJB5O Q60YXpj5kGqlRQlIZr20jPp5zCwZpgpg -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:54 2025 by rpki-client