$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: S2akO0P0uqhF8B+wVBBk9PFtMbV9ukfRWN6iAT7Ym1k= Subject key identifier: 67:85:3B:7C:BE:77:64:6E:00:10:53:7A:7E:F3:01:78:1A:49:6D:E6 Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 02D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 02C8 Signing time: Thu 07 Aug 2025 02:00:58 +0000 Manifest this update: Thu 07 Aug 2025 02:00:58 +0000 Manifest next update: Thu 14 Aug 2025 02:00:58 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: rv5HwMR4YW+i5MarTZqx9oRQTxFrT/CRwb+avOO+pWo=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 723 (0x2d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Aug 7 02:00:58 2025 GMT Not After : Aug 14 02:00:58 2025 GMT Subject: CN=689408da-e8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ec:bc:fd:17:0d:42:0a:d4:93:c0:6f:bd:88: 2e:39:26:84:6c:ba:69:0e:48:37:3f:2b:11:e0:4c: 54:4e:d5:44:20:94:4c:5d:39:7b:c1:a2:ae:bf:9e: c3:40:d4:a4:57:3a:bf:5c:44:5a:83:f4:ca:0c:21: 23:dd:39:2b:07:a5:a8:95:de:93:5d:ea:b4:1d:3b: 96:b3:fa:cc:cf:ce:7e:a6:3a:e9:0e:37:d2:9d:99: b5:67:a9:ae:5b:89:c3:b9:a0:2d:ff:d6:7f:9a:8a: d0:31:26:17:32:95:d4:f4:9c:98:ef:db:bf:db:5c: 38:a3:23:ca:38:9d:70:4b:61:2e:0a:6f:65:6e:a2: c0:bf:7d:2f:0b:f5:d4:d0:25:cf:3c:82:19:04:88: d9:98:58:ea:77:7b:a8:9a:a2:e6:df:bc:6a:40:a0: b9:01:85:a9:73:4f:93:35:90:c9:31:62:7b:2c:97: 75:83:61:88:55:81:19:57:2f:b6:70:31:a0:86:66: e3:2d:db:fc:6f:2c:b1:45:2a:32:88:60:09:12:49: b8:58:b5:27:b4:df:1c:0a:46:44:82:95:07:ac:4f: 0d:2e:fd:ed:35:e0:42:2b:ab:da:62:07:0c:f4:6d: 43:65:eb:ba:bb:84:42:4f:f3:9b:a4:61:65:c2:9a: 3e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:85:3B:7C:BE:77:64:6E:00:10:53:7A:7E:F3:01:78:1A:49:6D:E6 X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:45:39:b8:af:a6:fe:d7:0d:31:a3:61:f3:80:26:ab:a7:fe: 47:b8:db:b7:02:55:d9:e4:72:36:0c:10:2c:5f:32:b7:10:72: dc:b5:23:54:08:f6:d3:1a:64:74:9a:93:2f:9d:35:31:6e:44: 2e:df:9d:6b:98:4b:39:f2:50:06:94:26:20:5e:8f:54:3b:f8: 1e:36:3a:e7:a7:52:db:69:3b:04:a1:5e:78:b6:a7:42:8b:25: a2:1c:36:2e:3b:41:57:e5:02:4c:8e:eb:f3:4a:aa:33:e2:38: 1d:12:65:3a:e2:62:fd:4c:d8:59:09:a4:bd:35:4c:ee:95:9f: bc:1f:d8:a8:11:16:08:5b:4d:cf:c0:14:c3:bf:ee:41:8d:a2: 6d:2c:64:c9:c6:b8:df:22:ef:2a:da:2f:cc:16:50:e3:bb:03: 5a:96:7d:d7:d1:43:3f:6b:b5:27:56:85:1b:1d:51:bd:24:f4: aa:f8:a8:13:df:6f:a9:f5:6c:24:94:8b:e8:b7:43:5f:10:18: 12:b9:77:fa:6a:65:2b:60:da:5e:a2:c9:e1:0e:50:34:86:26: a8:dc:2a:fc:34:2a:32:57:ec:38:2c:49:ba:1e:0d:b5:e1:8d: 5b:12:21:2f:be:1c:6b:2f:a4:9e:44:9b:01:f9:48:00:7e:28: a1:6b:d2:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjUwODA3MDIwMDU4WhcNMjUwODE0MDIwMDU4WjAYMRYwFAYD VQQDEw02ODk0MDhkYS1lOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+y8/RcNQgrUk8BvvYguOSaEbLppDkg3PysR4ExUTtVEIJRMXTl7waKuv57D QNSkVzq/XERag/TKDCEj3TkrB6Wold6TXeq0HTuWs/rMz85+pjrpDjfSnZm1Z6mu W4nDuaAt/9Z/morQMSYXMpXU9JyY79u/21w4oyPKOJ1wS2EuCm9lbqLAv30vC/XU 0CXPPIIZBIjZmFjqd3uomqLm37xqQKC5AYWpc0+TNZDJMWJ7LJd1g2GIVYEZVy+2 cDGghmbjLdv8byyxRSoyiGAJEkm4WLUntN8cCkZEgpUHrE8NLv3tNeBCK6vaYgcM 9G1DZeu6u4RCT/ObpGFlwpo+xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeFO3y+ d2RuABBTen7zAXgaSW3mMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtRTm4r6b+1w0xo2HzgCarp/5HuNu3AlXZ5HI2DBAsXzK3EHLctSNU CPbTGmR0mpMvnTUxbkQu351rmEs58lAGlCYgXo9UO/geNjrnp1LbaTsEoV54tqdC iyWiHDYuO0FX5QJMjuvzSqoz4jgdEmU64mL9TNhZCaS9NUzulZ+8H9ioERYIW03P wBTDv+5BjaJtLGTJxrjfIu8q2i/MFlDjuwNaln3X0UM/a7UnVoUbHVG9JPSq+KgT 32+p9WwklIvot0NfEBgSuXf6amUrYNpeosnhDlA0hiao3Cr8NCoyV+w4LEm6Hg21 4Y1bEiEvvhxrL6SeRJsB+UgAfiiha9Im -----END CERTIFICATE-----Generated at Thu Aug 7 05:13:27 2025 by rpki-client