$ rpki-client -vvf rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft File: aFEZgfy52vrY49MDBLtBqW-5p28.mft (raw, json) Hash identifier: OPb6lJPsRDZqPUGd4cCv2yOoag4GITGHrRNtx9eWAsw= Subject key identifier: D8:CB:29:06:11:47:F9:58:12:09:F4:E4:19:F7:67:01:46:A8:6D:5E Authority key identifier: 68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F Certificate issuer: /CN=A918196D/serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft Manifest number: 04B0 Signing time: Mon 11 Aug 2025 00:04:23 +0000 Manifest this update: Mon 11 Aug 2025 00:04:22 +0000 Manifest next update: Mon 18 Aug 2025 00:04:22 +0000 Files and hashes: 1: aFEZgfy52vrY49MDBLtBqW-5p28.crl (hash: iShLXGve2EynpXi8IBn+Ohjs9URti+Ve0AU0v2zwmug=) 2: 5C2186C444B011F0B9799F48C4F9AE02.roa (hash: JJ/1SR0EZ5l7PECR67PAK+euRry+RLFa/pJug2YY29I=) 3: 3E60217E42D211EC956C7F65C4F9AE02.roa (hash: uugn7/J2yz2AlJqn3GxqBNZUwmGZ4weF3jg7XtTcTNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918196D, serialNumber=68511981FCB9DAFAD8E3D30304BB41A96FB9A76F Validity Not Before: Aug 11 00:04:22 2025 GMT Not After : Aug 18 00:04:22 2025 GMT Subject: CN=68993386-aa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:b3:d2:ef:53:fc:f6:ac:8e:86:79:51:e8: ae:8e:dc:45:f0:62:0c:9b:36:9a:da:89:2f:11:ca: c3:ae:7d:c5:7a:fb:d7:8b:f8:73:db:2f:d3:d1:09: 33:06:ff:54:3d:93:1f:75:7e:ae:96:9e:69:ab:1b: 31:42:b4:f7:c9:79:eb:6f:78:96:d4:35:39:d8:6a: 57:9c:ca:48:b4:4e:5c:c9:9d:49:3e:df:68:ac:b4: 30:b8:f9:2f:e0:a3:53:40:fc:9e:61:cf:05:85:b0: 9e:dd:02:e0:11:26:ed:19:bd:a0:6e:87:e6:dd:86: a8:49:cc:72:22:1b:2b:69:b6:36:dd:07:15:3e:49: 66:47:7a:81:99:c7:64:c4:94:41:cf:b2:3b:08:31: c0:bc:d8:9e:11:07:0d:c5:ce:97:09:eb:41:b2:cd: d0:59:d4:04:e6:7b:46:a4:a9:dc:f0:08:70:26:41: b0:2f:33:e1:e8:3a:4b:f0:64:94:7e:7f:6f:9a:4a: 40:9b:89:c2:4b:65:21:91:4a:de:4c:c6:1d:68:c1: 6c:5b:23:e3:4d:70:0d:e9:73:5c:58:d1:b3:ca:74: 0b:43:ac:aa:08:f0:20:7f:e0:ad:5b:43:05:14:17: 6c:22:6a:42:82:d7:53:47:e4:15:7d:61:53:3c:a9: 87:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CB:29:06:11:47:F9:58:12:09:F4:E4:19:F7:67:01:46:A8:6D:5E X509v3 Authority Key Identifier: keyid:68:51:19:81:FC:B9:DA:FA:D8:E3:D3:03:04:BB:41:A9:6F:B9:A7:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFEZgfy52vrY49MDBLtBqW-5p28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918196D/6202AA3E411011EC9939C00FC4F9AE02/aFEZgfy52vrY49MDBLtBqW-5p28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:03:8c:32:f3:fd:90:3f:8f:3a:69:4c:6c:da:3c:98:24:98: 9f:a9:03:8a:37:5d:26:db:d5:12:7f:4a:55:b9:ec:db:7a:55: 25:cb:1a:74:5f:5e:b0:58:64:52:b8:62:cf:20:75:d0:d7:2e: eb:b0:90:48:01:32:a0:61:4c:a2:5a:08:56:70:b4:b1:e0:78: 8d:1d:0d:7e:aa:04:85:44:d1:00:2e:7d:2b:12:3b:32:37:ed: 80:81:f1:f3:77:32:8f:f3:52:b8:38:d0:12:7e:cb:f0:cd:b8: c4:cc:fd:09:bc:c7:cc:16:cd:5a:59:95:e8:64:92:ec:3f:d9: 8b:e0:99:54:79:46:32:d9:b5:7f:01:7f:08:47:ac:c5:a4:48: 82:56:40:16:9a:aa:66:c0:00:ad:9d:17:d2:c5:2f:1c:37:26: 3b:0d:1c:17:26:fc:a3:69:f2:e1:eb:23:a2:44:e2:bc:2e:b8: bb:0a:9e:b5:08:d4:1b:17:55:69:fb:21:e6:8d:ac:7f:80:19: 73:55:a3:45:81:35:fb:c6:a7:d5:51:75:9e:63:84:91:08:69: af:7c:53:65:50:7b:5b:5b:24:0d:95:6d:51:e0:44:83:c8:24: df:25:90:6f:c9:1a:01:c4:71:f8:c7:30:65:ce:2c:28:5d:cf: 24:8d:3c:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE5NkQxMTAvBgNVBAUTKDY4NTExOTgxRkNCOURBRkFEOEUzRDMwMzA0QkI0MUE5 NkZCOUE3NkYwHhcNMjUwODExMDAwNDIyWhcNMjUwODE4MDAwNDIyWjAYMRYwFAYD VQQDEw02ODk5MzM4Ni1hYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp2z0u9T/PasjoZ5UeiujtxF8GIMmzaa2okvEcrDrn3FevvXi/hz2y/T0Qkz Bv9UPZMfdX6ulp5pqxsxQrT3yXnrb3iW1DU52GpXnMpItE5cyZ1JPt9orLQwuPkv 4KNTQPyeYc8FhbCe3QLgESbtGb2gbofm3YaoScxyIhsrabY23QcVPklmR3qBmcdk xJRBz7I7CDHAvNieEQcNxc6XCetBss3QWdQE5ntGpKnc8AhwJkGwLzPh6DpL8GSU fn9vmkpAm4nCS2UhkUreTMYdaMFsWyPjTXAN6XNcWNGzynQLQ6yqCPAgf+CtW0MF FBdsImpCgtdTR+QVfWFTPKmHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjLKQYR R/lYEgn05Bn3ZwFGqG1eMB8GA1UdIwQYMBaAFGhRGYH8udr62OPTAwS7Qalvuadv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTk2RC82MjAyQUEzRTQx MTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2clk0OU1EQkx0QnFXLTVw MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FGRVpnZnk1MnZyWTQ5TURCTHRCcVctNXAyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTk2RC82MjAyQUEzRTQxMTAxMUVDOTkzOUMwMEZDNEY5QUUwMi9hRkVaZ2Z5NTJ2 clk0OU1EQkx0QnFXLTVwMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEA4wy8/2QP486aUxs2jyYJJifqQOKN10m29USf0pVuezbelUlyxp0 X16wWGRSuGLPIHXQ1y7rsJBIATKgYUyiWghWcLSx4HiNHQ1+qgSFRNEALn0rEjsy N+2AgfHzdzKP81K4ONASfsvwzbjEzP0JvMfMFs1aWZXoZJLsP9mL4JlUeUYy2bV/ AX8IR6zFpEiCVkAWmqpmwACtnRfSxS8cNyY7DRwXJvyjafLh6yOiROK8Lri7Cp61 CNQbF1Vp+yHmjax/gBlzVaNFgTX7xqfVUXWeY4SRCGmvfFNlUHtbWyQNlW1R4ESD yCTfJZBvyRoBxHH4xzBlziwoXc8kjTzu -----END CERTIFICATE-----Generated at Wed Aug 13 00:30:32 2025 by rpki-client