$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: /0noE8lGd4JXFrROyqfagOYPCCCRdHgS2Ye6ZIqhZZE= Subject key identifier: 02:FF:60:E4:3C:1A:CF:4E:BF:60:97:53:B4:9F:FF:6A:12:85:DD:0C Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 134B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1341 Signing time: Tue 12 Aug 2025 17:07:29 +0000 Manifest this update: Tue 12 Aug 2025 17:07:28 +0000 Manifest next update: Tue 19 Aug 2025 17:07:28 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: DtIMqFtoX9eUCrn42qns1yEYSZkzHegfFn1nS+RbRS4=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4939 (0x134b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Aug 12 17:07:28 2025 GMT Not After : Aug 19 17:07:28 2025 GMT Subject: CN=689b74d1-d124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:58:cc:a0:c0:10:ba:50:51:f7:2c:24:a3: a2:d8:26:49:f5:a3:88:ea:fa:42:72:d8:9b:cc:6c: 86:ee:09:78:5b:43:14:9c:33:13:eb:07:36:c4:f2: 90:dc:ea:07:85:dc:7d:23:51:f9:32:e3:a2:ca:6e: b6:fb:48:b8:6d:b6:0f:05:c6:21:5d:7a:d9:c3:8a: 34:dd:bf:76:2a:36:43:ff:69:d0:49:b4:f9:df:a2: 48:27:ed:72:f0:83:5d:08:a4:d0:cb:08:05:98:c6: 27:43:32:83:d9:1a:04:5a:cb:ac:a9:ed:9f:09:9f: da:74:3f:f4:e6:41:58:95:22:57:b1:79:00:0e:1c: e9:3a:2d:dd:39:44:fc:fe:b3:52:b4:f1:be:a7:27: 8f:d4:1b:24:a4:ab:7d:67:36:08:86:56:88:0b:d8: 2f:1e:e5:29:ec:e9:c7:81:49:5f:ec:21:7c:12:f0: 76:f9:13:10:96:a0:34:46:c2:d7:3a:b9:1a:3c:fd: 26:f5:16:64:16:9c:d0:63:8b:a4:28:98:dc:f9:0b: 1d:65:4e:02:09:ee:17:02:c1:91:e5:e2:1c:58:4c: 9d:2e:45:bb:ff:8b:a0:32:65:9c:3d:e9:9f:94:00: 39:41:b1:41:75:13:1c:96:5a:3d:b5:8f:9c:c2:fd: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:60:E4:3C:1A:CF:4E:BF:60:97:53:B4:9F:FF:6A:12:85:DD:0C X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:c6:ef:a3:fa:32:5a:39:8a:77:0e:36:10:2c:aa:c2:f9:55: d9:70:14:ab:3b:5d:ac:e7:e3:4a:a1:04:0d:ce:6f:66:85:d3: 5d:ae:f5:fd:1e:b7:f8:ad:9c:7e:5d:51:6d:9d:74:1e:79:3a: 00:05:e0:e5:e6:73:65:3c:36:71:4a:50:da:d3:90:a6:27:f0: f5:23:5c:63:58:93:a5:96:1b:81:b5:f4:9f:68:a4:84:9f:37: fc:d8:ea:db:4e:ff:c1:15:1c:e1:31:08:3e:57:7a:16:59:c9: c8:83:46:42:53:a1:bc:6d:5a:ae:da:0b:7c:42:2b:67:b0:37: f0:89:f1:ec:bd:61:54:e9:94:88:6a:95:e3:b2:76:b2:90:04: 4c:25:30:a8:0a:5c:a4:d7:2c:72:13:e8:14:71:c5:2d:17:3b: bf:c7:01:01:ae:34:37:8b:15:24:75:6c:da:4a:55:59:f3:0c: 9c:7e:a1:18:65:67:d9:a9:58:50:47:24:0f:d9:9e:ec:88:4a: 92:6f:25:2e:e5:70:1f:1f:5a:a9:8b:c8:83:43:29:83:cb:21: 73:96:8b:f3:bd:ed:14:1a:a3:b3:00:74:15:f4:41:03:d7:8d: 05:1d:81:58:bf:f6:53:b2:88:bf:b2:75:ab:a2:db:9e:16:11: ea:3c:ca:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUwODEyMTcwNzI4WhcNMjUwODE5MTcwNzI4WjAYMRYwFAYD VQQDEw02ODliNzRkMS1kMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyARYzKDAELpQUfcsJKOi2CZJ9aOI6vpCctibzGyG7gl4W0MUnDMT6wc2xPKQ 3OoHhdx9I1H5MuOiym62+0i4bbYPBcYhXXrZw4o03b92KjZD/2nQSbT536JIJ+1y 8INdCKTQywgFmMYnQzKD2RoEWsusqe2fCZ/adD/05kFYlSJXsXkADhzpOi3dOUT8 /rNStPG+pyeP1BskpKt9ZzYIhlaIC9gvHuUp7OnHgUlf7CF8EvB2+RMQlqA0RsLX OrkaPP0m9RZkFpzQY4ukKJjc+QsdZU4CCe4XAsGR5eIcWEydLkW7/4ugMmWcPemf lAA5QbFBdRMcllo9tY+cwv2YgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL/YOQ8 Gs9Ov2CXU7Sf/2oShd0MMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWxu+j+jJaOYp3DjYQLKrC+VXZcBSrO12s5+NKoQQNzm9mhdNdrvX9 Hrf4rZx+XVFtnXQeeToABeDl5nNlPDZxSlDa05CmJ/D1I1xjWJOllhuBtfSfaKSE nzf82OrbTv/BFRzhMQg+V3oWWcnIg0ZCU6G8bVqu2gt8QitnsDfwifHsvWFU6ZSI apXjsnaykARMJTCoClyk1yxyE+gUccUtFzu/xwEBrjQ3ixUkdWzaSlVZ8wycfqEY ZWfZqVhQRyQP2Z7siEqSbyUu5XAfH1qpi8iDQymDyyFzlovzve0UGqOzAHQV9EED 140FHYFYv/ZTsoi/snWrotueFhHqPMqZ -----END CERTIFICATE-----Generated at Wed Aug 13 07:39:55 2025 by rpki-client