$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json) Hash identifier: /IxNfqsH25btCzcwjfyF17v3uoZARtdtTg7qNYcTR5M= Subject key identifier: 75:52:AF:6A:E0:C3:7B:5B:B9:5C:7B:F0:B4:86:65:59:FB:71:6B:41 Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft Manifest number: 0210 Signing time: Tue 05 Aug 2025 03:06:40 +0000 Manifest this update: Tue 05 Aug 2025 03:06:40 +0000 Manifest next update: Tue 12 Aug 2025 03:06:40 +0000 Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: Vbs3xJgRuZ+DkOELxb0J24+CYAo07zyDoMF6U5344vA=) 2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB Validity Not Before: Aug 5 03:06:40 2025 GMT Not After : Aug 12 03:06:40 2025 GMT Subject: CN=68917540-4114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:5f:50:9d:8b:d5:b6:9d:10:e2:bb:fd:64: 65:2a:8e:d2:86:de:f4:ce:e6:2a:55:fb:4b:4f:47: e1:58:0b:e2:f8:c4:46:0c:39:d3:1b:28:f1:af:d7: ab:54:62:80:9d:40:e1:64:e2:1f:bb:b5:3a:46:8c: 3f:8f:3e:0d:87:cd:f5:7d:42:2a:88:5b:aa:08:67: 15:b8:7d:d0:97:ae:a2:21:69:90:28:30:7f:74:26: d9:13:1c:b6:21:6d:5e:32:8f:6d:52:cb:b1:67:ce: c0:d6:cd:36:e4:1a:c9:bb:05:f5:2c:d2:ab:14:2c: 74:07:b0:c8:74:ca:3d:be:16:7e:a6:3a:64:f1:54: 56:6e:49:9e:09:94:88:f3:a9:6c:09:e7:6e:61:b9: 02:13:e1:36:02:6a:89:c2:fd:e1:fb:e9:a7:d7:24: 84:14:27:43:00:79:36:a0:25:af:1e:01:69:56:aa: c1:d2:2d:74:ab:b5:2d:2a:9b:72:30:6f:c5:67:df: 45:1c:e1:31:49:be:dc:37:4c:35:c8:4a:34:50:f4: 7b:08:0c:14:08:45:c5:50:fc:db:e6:a2:aa:7b:74: 60:00:99:f6:bd:47:ee:21:e8:58:91:3a:53:f1:55: e9:fe:d8:9b:95:53:00:fd:c2:5d:9d:8f:a2:90:85: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:52:AF:6A:E0:C3:7B:5B:B9:5C:7B:F0:B4:86:65:59:FB:71:6B:41 X509v3 Authority Key Identifier: keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:df:04:61:8b:6f:79:32:bc:c1:95:f8:89:ff:fd:95:3c:02: c8:17:8a:f8:62:c2:e8:d7:48:b9:b4:4b:d8:01:fb:b0:06:dc: ca:b0:b9:27:1a:34:3f:09:17:39:06:a9:61:f1:7a:5b:0e:6b: 58:17:46:b8:6b:43:27:7a:45:0a:d9:e7:f5:3c:df:c9:4c:59: 4d:a4:f4:42:0c:40:87:22:8c:7f:ca:c8:cc:64:fb:b3:a2:96: d0:21:c0:bc:8b:3b:62:92:d6:50:91:a6:b9:0d:ba:1c:07:f6: 70:98:d4:c8:36:1e:76:e4:77:a4:d8:90:ae:5e:14:87:75:cc: bb:67:66:ce:5f:a0:3d:9a:e2:d9:c6:03:dc:66:62:6c:52:35: 4a:d8:d8:81:ca:8c:d8:50:b8:62:b0:59:71:41:02:d5:54:4b: 92:51:f6:8a:76:06:5a:23:d4:b4:d3:91:14:c0:ff:fc:c1:6d: 60:63:0e:08:ad:5f:1c:05:43:0b:8c:1e:a7:b7:c7:7e:5c:8f: 86:9a:ea:dd:a7:df:95:9e:67:1a:88:56:83:ff:91:81:54:65: c0:e2:5c:08:e9:dc:5b:24:9d:cf:ec:9f:4f:4b:40:df:0d:6c: cd:57:b2:d3:1c:2f:21:d8:6d:26:03:50:40:5c:83:b6:d9:d6: b7:97:90:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkU0QjExMC8GA1UEBRMoRDBBNDY2NkFGMzVCNEI2NTREODE4MUM0Q0QxQzkxMUFF Rjk5NDVCQjAeFw0yNTA4MDUwMzA2NDBaFw0yNTA4MTIwMzA2NDBaMBgxFjAUBgNV BAMTDTY4OTE3NTQwLTQxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIvV9QnYvVtp0Q4rv9ZGUqjtKG3vTO5ipV+0tPR+FYC+L4xEYMOdMbKPGv16tU YoCdQOFk4h+7tTpGjD+PPg2HzfV9QiqIW6oIZxW4fdCXrqIhaZAoMH90JtkTHLYh bV4yj21Sy7FnzsDWzTbkGsm7BfUs0qsULHQHsMh0yj2+Fn6mOmTxVFZuSZ4JlIjz qWwJ525huQIT4TYCaonC/eH76afXJIQUJ0MAeTagJa8eAWlWqsHSLXSrtS0qm3Iw b8Vn30Uc4TFJvtw3TDXISjRQ9HsIDBQIRcVQ/Nvmoqp7dGAAmfa9R+4h6FiROlPx Ven+2JuVUwD9wl2dj6KQhRM7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdVKvauDD e1u5XHvwtIZlWftxa0EwHwYDVR0jBBgwFoAU0KRmavNbS2VNgYHEzRyRGu+ZRbsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTRCL0MxNDAxNkI0OEQ3 RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJWTmdZSEV6UnlSR3UtWlJi cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMEtSbWF2TmJTMlZOZ1lIRXpSeVJHdS1aUmJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG RTRCL0MxNDAxNkI0OEQ3RjExRURCN0RCODU0Q0M0RjlBRTAyLzBLUm1hdk5iUzJW TmdZSEV6UnlSR3UtWlJicy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALnfBGGLb3kyvMGV+In//ZU8AsgXivhiwujXSLm0S9gB+7AG3MqwuSca ND8JFzkGqWHxelsOa1gXRrhrQyd6RQrZ5/U838lMWU2k9EIMQIcijH/KyMxk+7Oi ltAhwLyLO2KS1lCRprkNuhwH9nCY1Mg2Hnbkd6TYkK5eFId1zLtnZs5foD2a4tnG A9xmYmxSNUrY2IHKjNhQuGKwWXFBAtVUS5JR9op2Bloj1LTTkRTA//zBbWBjDgit XxwFQwuMHqe3x35cj4aa6t2n35WeZxqIVoP/kYFUZcDiXAjp3Fsknc/sn09LQN8N bM1XstMcLyHYbSYDUEBcg7bZ1reXkLg= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:18 2025 by rpki-client