$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: s4gmzJ8L05NgaSGihMMzTJzTujlUcYm6We1pjlyFvAQ= Subject key identifier: 48:31:05:DC:77:57:20:07:84:E9:2A:8D:16:D9:67:64:5F:39:FC:79 Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 07A8 Signing time: Sat 02 Aug 2025 21:38:47 +0000 Manifest this update: Sat 02 Aug 2025 21:38:46 +0000 Manifest next update: Sat 09 Aug 2025 21:38:46 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: xGZW0QYqh2SIO0tD9nhtM0ppVStZRoLI/7FRv2f2dSQ=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 0a3iDH5bkO5J9nl1C2L0muZWxN/ekxHt+EqAXGCfnCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 21:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Aug 2 21:38:46 2025 GMT Not After : Aug 9 21:38:46 2025 GMT Subject: CN=688e8567-49c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:89:af:96:c1:9c:60:56:0c:4e:88:59:7b: 9d:5f:db:e4:6e:15:a1:2c:9b:ae:60:86:e2:1f:45: a7:b5:c7:31:4c:9e:ce:19:f1:b3:e0:87:79:d6:68: 43:83:c2:cb:b4:2f:0c:02:c2:bf:8b:af:67:89:7b: 78:7e:e6:bb:10:40:ff:66:e0:d0:9e:71:d9:82:87: 2a:ef:b0:7d:9c:12:c3:ef:97:1d:4d:bd:72:b3:3e: dd:16:db:87:28:72:bf:9e:2d:11:db:f9:c1:c8:7f: 41:9e:fd:61:72:d7:b7:36:3a:62:73:10:c4:c6:08: 1a:2c:4f:a9:e0:58:e6:06:86:3f:5b:fe:35:95:2b: eb:27:0e:d5:ae:04:98:b2:d9:3e:10:f0:84:66:31: 00:7a:36:0d:42:60:49:8f:b8:de:a4:8c:94:fd:09: 37:e0:4b:3d:12:8a:d5:f6:a5:66:fa:a2:ee:a7:8a: d4:76:7f:3c:ca:ce:eb:97:fc:24:ce:a5:04:07:60: f9:2e:87:38:41:23:4a:55:3b:df:6f:f0:c3:e4:37: a8:e5:f3:3e:a9:d6:28:8e:10:c4:b4:a4:50:82:9c: 12:83:35:5c:34:bd:e5:74:28:55:24:07:a6:f4:99: f2:f3:58:c4:15:e0:24:cb:e3:fb:f1:ce:fa:f6:ad: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:05:DC:77:57:20:07:84:E9:2A:8D:16:D9:67:64:5F:39:FC:79 X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:55:ef:50:b5:ed:46:83:ec:7c:a0:6e:8a:bc:6e:13:94:9e: db:d5:ee:e2:cc:8b:70:2d:6a:8d:24:8d:ac:54:37:25:0f:e5: 6a:2e:15:6f:e8:1d:f9:0b:67:2a:cf:aa:ad:49:d2:55:63:b2: 06:95:5a:8d:55:80:77:49:cc:7c:a4:76:25:c9:4b:c6:7b:39: df:ae:64:c2:7f:fd:68:8b:72:1f:3b:36:c8:46:ae:83:24:d7: 8b:0f:8b:f1:67:7e:4d:5c:78:52:66:35:62:13:f5:8d:5d:63: f7:e4:90:aa:5a:4d:17:f3:69:49:f4:79:32:b9:19:ba:c9:1d: de:bf:8a:05:83:cb:a4:ee:53:1e:05:a9:b5:35:6b:0d:a9:79: f6:a4:87:18:05:de:1e:0a:c6:ef:b8:9f:f2:c8:97:a6:19:02: fb:77:12:4f:61:e6:2b:a2:fd:56:d4:b4:1d:ec:71:84:8f:ab: c6:0c:2f:0d:af:df:c2:80:3d:3f:56:e3:4b:db:1a:c8:89:08: bb:43:ef:3c:50:66:6f:81:21:66:f1:d8:52:b0:09:f9:39:20: 5b:ca:f4:c8:8f:b1:fc:e9:12:80:37:86:3d:1e:81:d1:1d:42: e1:9f:b9:8e:fd:ed:9e:64:e3:06:75:1c:13:db:96:95:5c:f9: 5d:09:01:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUwODAyMjEzODQ2WhcNMjUwODA5MjEzODQ2WjAYMRYwFAYD VQQDEw02ODhlODU2Ny00OWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlyJr5bBnGBWDE6IWXudX9vkbhWhLJuuYIbiH0WntccxTJ7OGfGz4Id51mhD g8LLtC8MAsK/i69niXt4fua7EED/ZuDQnnHZgocq77B9nBLD75cdTb1ysz7dFtuH KHK/ni0R2/nByH9Bnv1hcte3NjpicxDExggaLE+p4FjmBoY/W/41lSvrJw7VrgSY stk+EPCEZjEAejYNQmBJj7jepIyU/Qk34Es9EorV9qVm+qLup4rUdn88ys7rl/wk zqUEB2D5Loc4QSNKVTvfb/DD5Deo5fM+qdYojhDEtKRQgpwSgzVcNL3ldChVJAem 9Jny81jEFeAky+P78c769q0fJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgxBdx3 VyAHhOkqjRbZZ2RfOfx5MB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHVe9Qte1Gg+x8oG6KvG4TlJ7b1e7izItwLWqNJI2sVDclD+VqLhVv 6B35C2cqz6qtSdJVY7IGlVqNVYB3Scx8pHYlyUvGeznfrmTCf/1oi3IfOzbIRq6D JNeLD4vxZ35NXHhSZjViE/WNXWP35JCqWk0X82lJ9HkyuRm6yR3ev4oFg8uk7lMe Bam1NWsNqXn2pIcYBd4eCsbvuJ/yyJemGQL7dxJPYeYrov1W1LQd7HGEj6vGDC8N r9/CgD0/VuNL2xrIiQi7Q+88UGZvgSFm8dhSsAn5OSBbyvTIj7H86RKAN4Y9HoHR HULhn7mO/e2eZOMGdRwT25aVXPldCQFu -----END CERTIFICATE-----Generated at Mon Aug 4 11:11:26 2025 by rpki-client