$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: v5V6sZ6+sA8PHXKO97kK8/eoTySVy8rjM62TBkzTNJE= Subject key identifier: 72:C3:03:8F:87:45:08:6C:CB:69:F6:B8:3C:BE:D5:5B:87:30:07:02 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03EA Signing time: Mon 11 Aug 2025 00:44:11 +0000 Manifest this update: Mon 11 Aug 2025 00:44:10 +0000 Manifest next update: Mon 18 Aug 2025 00:44:10 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: vaXYBrLMC7rKmA/7LHvWQOso/0PNSBWT1V4/PIeISCY=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Aug 11 00:44:10 2025 GMT Not After : Aug 18 00:44:10 2025 GMT Subject: CN=68993cda-e673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:37:5d:00:cf:ce:0d:46:2c:eb:df:7d:8c: 9f:65:9c:7e:cb:9f:55:b5:55:e5:ac:84:97:33:50: df:5c:9f:bc:f6:df:40:74:de:58:e9:bb:a3:21:0f: 4e:68:1b:1e:7f:29:96:ea:c4:bf:cc:cb:48:6c:62: f8:67:18:9b:42:94:d3:a0:a1:b6:e2:77:32:4e:ac: 06:74:e1:c8:40:56:0a:f7:ad:30:a3:0c:a9:9a:f2: 25:7c:50:8a:d4:90:18:f0:1d:96:50:db:0f:89:32: f3:79:dc:bc:49:02:fa:95:ce:d6:fb:ff:24:ba:37: b6:73:1e:40:8b:d2:e7:9b:75:f1:17:81:0e:10:1a: bf:2c:9f:5c:03:b7:a1:2b:1d:8c:df:77:fd:d4:bd: f1:ba:32:76:bd:f0:f3:38:5e:50:f3:1a:22:c1:af: e5:65:9f:95:ff:8b:c5:58:89:7e:f8:5c:b9:dd:d3: 92:4a:80:76:48:8c:87:77:08:33:0b:c3:51:e0:13: 8d:b1:60:50:40:d3:ba:27:ad:93:d3:92:40:35:aa: 0e:e2:d0:15:68:65:f3:0f:70:c2:ae:36:39:c3:47: d8:6c:2a:5a:3d:4f:16:ca:59:d4:7e:a4:01:6c:66: 68:31:9c:12:b3:48:26:ae:79:60:48:6b:c7:a9:82: 92:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:03:8F:87:45:08:6C:CB:69:F6:B8:3C:BE:D5:5B:87:30:07:02 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d4:94:1c:71:a3:65:28:65:a2:29:18:47:cc:18:5f:c5:f7: 6a:e5:82:9b:91:c9:7b:6a:c9:f6:f1:39:9a:38:50:47:eb:5e: bb:b9:d8:69:aa:00:f1:66:77:37:f1:90:17:c4:99:45:84:36: 01:f4:b7:01:e0:fb:f1:8c:f2:fe:a0:17:b5:1b:e3:21:22:10: 84:bb:20:da:42:29:67:72:74:54:db:cf:31:69:2e:c4:ee:d6: dc:fa:8c:84:a3:cb:03:29:02:14:50:0d:a6:46:f7:79:91:7e: b8:31:9f:43:e8:dc:1d:89:e1:0c:87:c7:8c:c2:40:fe:55:1c: c3:e5:c3:9d:ea:7e:d2:2d:4c:be:a3:34:35:20:2c:f8:21:60: 1e:93:04:3d:59:8a:c0:ed:09:91:a9:74:f4:41:b0:d5:e6:9a: 57:2f:e5:dc:8c:3a:13:f5:82:02:cf:ec:94:f2:d2:8a:f0:67: 96:e7:f0:6c:c6:42:ea:1d:80:a7:25:55:62:e7:8a:aa:f4:10: b9:ef:5b:f8:4b:a0:73:34:df:17:a7:42:48:df:ae:d5:66:03: 49:30:77:4a:05:34:e1:2b:70:bf:7d:c5:11:0e:40:ed:01:fa: e2:44:fb:f8:50:bf:d6:9c:aa:1a:20:60:13:28:47:b2:e9:41: e8:62:bc:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwODExMDA0NDEwWhcNMjUwODE4MDA0NDEwWjAYMRYwFAYD VQQDEw02ODk5M2NkYS1lNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJE3XQDPzg1GLOvffYyfZZx+y59VtVXlrISXM1DfXJ+89t9AdN5Y6bujIQ9O aBsefymW6sS/zMtIbGL4ZxibQpTToKG24ncyTqwGdOHIQFYK960wowypmvIlfFCK 1JAY8B2WUNsPiTLzedy8SQL6lc7W+/8kuje2cx5Ai9Lnm3XxF4EOEBq/LJ9cA7eh Kx2M33f91L3xujJ2vfDzOF5Q8xoiwa/lZZ+V/4vFWIl++Fy53dOSSoB2SIyHdwgz C8NR4BONsWBQQNO6J62T05JANaoO4tAVaGXzD3DCrjY5w0fYbCpaPU8WylnUfqQB bGZoMZwSs0gmrnlgSGvHqYKS2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLDA4+H RQhsy2n2uDy+1VuHMAcCMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt1JQccaNlKGWiKRhHzBhfxfdq5YKbkcl7asn28TmaOFBH6167udhp qgDxZnc38ZAXxJlFhDYB9LcB4PvxjPL+oBe1G+MhIhCEuyDaQilncnRU288xaS7E 7tbc+oyEo8sDKQIUUA2mRvd5kX64MZ9D6NwdieEMh8eMwkD+VRzD5cOd6n7SLUy+ ozQ1ICz4IWAekwQ9WYrA7QmRqXT0QbDV5ppXL+XcjDoT9YICz+yU8tKK8GeW5/Bs xkLqHYCnJVVi54qq9BC571v4S6BzNN8Xp0JI367VZgNJMHdKBTThK3C/fcURDkDt AfriRPv4UL/WnKoaIGATKEey6UHoYryU -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:41 2025 by rpki-client