$ rpki-client -vvf rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft File: sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft (raw, json) Hash identifier: wLbCKPKQk3Lmel2RVPNGdFtR8T98Y/mKArvberxg8Bw= Subject key identifier: 13:5D:1D:90:BF:CC:CD:87:D3:92:EA:10:9C:57:08:3C:69:17:82:03 Authority key identifier: B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 Certificate issuer: /CN=A919C203/serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft Manifest number: 0118 Signing time: Thu 07 Aug 2025 05:19:12 +0000 Manifest this update: Thu 07 Aug 2025 05:19:12 +0000 Manifest next update: Thu 14 Aug 2025 05:19:12 +0000 Files and hashes: 1: sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl (hash: l87ddRU2o6nLoBJrukgyOqAzzoyHgFkLA5d4uzY+5VA=) 2: 1B434E42C58811EEA2A7F049C4F9AE02.roa (hash: eHVAw6t0G0OOVunESIIPqhZXYkGjz7nn6NHSttJw5xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C203, serialNumber=B152A79F1BE97833C2A6FCD6F49F9DBFD843C983 Validity Not Before: Aug 7 05:19:12 2025 GMT Not After : Aug 14 05:19:12 2025 GMT Subject: CN=68943750-81ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:d9:74:be:17:a4:92:3a:4e:8e:35:1a:51: 3f:66:5b:58:9d:0c:34:73:e7:d6:6d:06:92:79:ba: 97:72:bf:05:19:19:35:31:8d:1b:8a:4a:e6:99:2a: a8:40:3a:4d:4e:6a:8b:0f:01:70:ae:44:dd:53:fe: bc:f5:46:1b:e9:7f:df:ab:da:ef:11:7b:08:c0:6d: e8:af:30:b2:8d:ee:4c:f8:7e:1a:6c:f3:54:0f:ca: cb:37:5a:7c:bd:fe:d0:71:4e:8a:9d:b7:92:b6:f9: fc:2a:17:3a:a8:01:0c:e9:ac:d5:f7:2f:7e:30:50: ba:b2:96:c3:b6:a6:2e:55:da:0d:20:90:78:f2:90: 5b:03:18:08:e0:2a:26:e1:92:17:3e:e4:f9:da:a7: 45:08:7a:21:2b:93:61:15:e2:3f:eb:b1:12:5d:16: 2e:e9:6e:39:5f:d7:62:b7:3f:d0:20:ea:69:83:22: 42:8d:28:5f:b6:bc:7c:92:30:8f:9c:d0:7a:9a:b3: a8:8d:47:1f:70:3e:f2:89:ce:92:ce:db:04:30:ff: c4:36:c1:98:4e:4e:38:ed:16:3b:90:77:1a:43:75: 67:5a:bd:74:e2:50:5c:bd:49:6b:d0:38:88:d9:0e: 79:59:93:94:2f:4d:64:bd:48:68:2e:c6:82:e8:71: bc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:1D:90:BF:CC:CD:87:D3:92:EA:10:9C:57:08:3C:69:17:82:03 X509v3 Authority Key Identifier: keyid:B1:52:A7:9F:1B:E9:78:33:C2:A6:FC:D6:F4:9F:9D:BF:D8:43:C9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sVKnnxvpeDPCpvzW9J-dv9hDyYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C203/C59812F8C58611EE91166B83C4F9AE02/sVKnnxvpeDPCpvzW9J-dv9hDyYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:88:7e:08:8e:13:54:22:10:46:32:d9:7c:fa:31:2a:c3:42: cf:ce:3e:8a:f9:72:38:fc:86:ac:3b:79:f5:21:bd:59:fb:0d: 6e:4b:18:3a:81:92:c6:83:e4:d9:76:ff:7a:e6:6e:5e:7e:19: 96:4c:d3:93:9e:1a:58:4c:10:c1:7d:80:d6:c8:44:02:e1:6f: 6f:91:ab:04:3b:df:b0:e8:ec:c5:e4:7f:17:85:b4:9b:61:c3: 39:1a:8b:aa:4f:d3:88:5d:9a:4f:8d:47:57:80:df:b4:09:19: dc:5e:14:b7:2c:e7:a2:4d:94:cc:4e:eb:f7:c1:4a:39:46:46: cb:59:ff:b9:52:4e:49:e8:64:61:c0:90:8f:10:76:c7:37:cf: 7d:66:14:93:43:70:59:fa:1c:9a:6f:2e:a2:32:b1:13:3c:db: c0:05:78:4b:6f:10:d1:75:53:cc:0d:a4:57:59:c6:4d:64:03: ea:7f:3f:13:75:c9:6b:91:2e:b0:2f:ee:2a:91:49:d2:7f:ed: 74:70:f2:aa:0c:3e:f1:8c:d6:4b:2c:2c:6d:44:77:1f:b2:a1: af:5c:b6:de:ce:4c:74:36:a4:f5:2e:b2:a4:33:80:ef:3f:15: 44:38:5c:66:48:c3:92:bd:5c:97:ef:30:2b:dd:73:cc:c9:0a: b7:80:c1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMDMxMTAvBgNVBAUTKEIxNTJBNzlGMUJFOTc4MzNDMkE2RkNENkY0OUY5REJG RDg0M0M5ODMwHhcNMjUwODA3MDUxOTEyWhcNMjUwODE0MDUxOTEyWjAYMRYwFAYD VQQDEw02ODk0Mzc1MC04MWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUvZdL4XpJI6To41GlE/ZltYnQw0c+fWbQaSebqXcr8FGRk1MY0bikrmmSqo QDpNTmqLDwFwrkTdU/689UYb6X/fq9rvEXsIwG3orzCyje5M+H4abPNUD8rLN1p8 vf7QcU6KnbeStvn8Khc6qAEM6azV9y9+MFC6spbDtqYuVdoNIJB48pBbAxgI4Com 4ZIXPuT52qdFCHohK5NhFeI/67ESXRYu6W45X9ditz/QIOppgyJCjShftrx8kjCP nNB6mrOojUcfcD7yic6SztsEMP/ENsGYTk447RY7kHcaQ3VnWr104lBcvUlr0DiI 2Q55WZOUL01kvUhoLsaC6HG8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNdHZC/ zM2H05LqEJxXCDxpF4IDMB8GA1UdIwQYMBaAFLFSp58b6Xgzwqb81vSfnb/YQ8mD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIwMy9DNTk4MTJGOEM1 ODYxMUVFOTExNjZCODNDNEY5QUUwMi9zVktubnh2cGVEUENwdnpXOUotZHY5aER5 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NWS25ueHZwZURQQ3B2elc5Si1kdjloRHlZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzIwMy9DNTk4MTJGOEM1ODYxMUVFOTExNjZCODNDNEY5QUUwMi9zVktubnh2cGVE UENwdnpXOUotZHY5aER5WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIiH4IjhNUIhBGMtl8+jEqw0LPzj6K+XI4/IasO3n1Ib1Z+w1uSxg6 gZLGg+TZdv965m5efhmWTNOTnhpYTBDBfYDWyEQC4W9vkasEO9+w6OzF5H8XhbSb YcM5GouqT9OIXZpPjUdXgN+0CRncXhS3LOeiTZTMTuv3wUo5RkbLWf+5Uk5J6GRh wJCPEHbHN899ZhSTQ3BZ+hyaby6iMrETPNvABXhLbxDRdVPMDaRXWcZNZAPqfz8T dclrkS6wL+4qkUnSf+10cPKqDD7xjNZLLCxtRHcfsqGvXLbezkx0NqT1LrKkM4Dv PxVEOFxmSMOSvVyX7zAr3XPMyQq3gMFj -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:38 2025 by rpki-client