$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json) Hash identifier: 6J1Mev6DFgZL/4DaZwbxzTWhNjEKzZVLnj5CyvKbzXI= Subject key identifier: 17:FF:64:6D:4B:E0:2C:7B:DB:92:64:B9:C1:8D:85:F3:BB:C1:5A:67 Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft Manifest number: 0257 Signing time: Mon 11 Aug 2025 02:04:34 +0000 Manifest this update: Mon 11 Aug 2025 02:04:34 +0000 Manifest next update: Mon 18 Aug 2025 02:04:34 +0000 Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: xRnEMhmrto7HXd+f1iuZcDVOkVIfYNjwg9/lQ5xSRDk=) 2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B Validity Not Before: Aug 11 02:04:34 2025 GMT Not After : Aug 18 02:04:34 2025 GMT Subject: CN=68994fb2-02b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:ea:7e:53:72:5b:f7:7e:14:a4:3a:fa:0f: ac:16:6b:12:19:75:08:81:ba:00:dd:9d:19:a3:87: 93:c8:e8:f8:fc:c6:30:5a:95:11:88:9b:10:64:58: 11:9f:c4:96:ba:8c:a2:cd:44:e7:e5:11:8a:c1:27: 4d:fb:2a:c9:ac:e0:05:83:d4:18:24:ec:47:b9:90: d9:c4:06:3a:08:76:08:cf:39:8e:24:13:a5:19:8b: c0:68:04:11:83:32:88:25:ce:4f:12:88:54:45:31: 9c:64:fd:2c:98:0d:f1:5a:91:65:d0:c3:ba:68:ed: 33:a6:00:cc:ad:78:8b:79:96:0b:7c:66:77:82:22: 0d:c4:36:02:22:52:7a:19:c4:ac:6b:eb:af:9d:9a: d1:a1:ee:8e:b1:98:9d:11:40:f3:be:22:ee:9f:4d: 35:2e:dc:f6:6c:44:dc:b9:df:69:f9:74:7e:9d:c7: 9e:af:30:7a:22:bd:bb:00:30:87:84:b5:fc:d2:94: fc:51:56:06:6c:d1:b0:62:31:86:f5:7f:2b:07:76: 70:0b:f4:87:ff:13:6e:30:9c:e4:bf:df:db:c3:8c: 7c:53:1c:a3:6c:ca:67:b8:aa:9f:66:4d:b2:49:14: a3:e1:c2:c1:2a:c7:be:82:3a:50:39:07:a1:75:f9: 75:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FF:64:6D:4B:E0:2C:7B:DB:92:64:B9:C1:8D:85:F3:BB:C1:5A:67 X509v3 Authority Key Identifier: keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a4:3f:95:69:af:88:0e:a6:3d:9e:dc:7d:16:5b:92:bf:3f: 5d:ca:32:e5:fd:9d:08:84:f8:6d:01:51:f9:23:ff:80:85:49: 54:83:b6:a5:d9:8b:44:11:9c:27:92:5a:b5:ce:39:c4:79:24: 35:fa:2e:25:d6:87:f6:05:13:28:75:72:5c:7b:20:73:6f:70: 12:c8:3b:3c:70:d7:c9:18:ae:6c:4b:14:3b:a2:dc:2f:cc:de: e2:f9:9f:ee:7e:ec:08:9f:c5:79:97:ed:5e:0c:a7:a9:e2:fd: 4d:7d:83:78:7f:23:59:b9:e1:e4:6b:8b:a5:94:16:1d:d0:7f: d7:57:39:43:48:c9:a3:85:2d:fc:21:67:4f:b0:ad:f7:3b:e0: 83:16:30:5c:e5:56:e3:91:c6:1a:7c:a0:39:0c:dc:91:16:1b: 5a:96:e9:b1:91:cb:3d:4c:51:66:6f:5a:9b:93:2d:4f:fc:63: 30:14:98:a7:70:a5:96:17:5b:00:11:a0:bc:a6:b9:45:80:c4: 89:13:77:2c:ae:e7:03:fe:4a:bc:99:64:00:1c:fd:9e:aa:a3: 2a:c7:13:67:c5:0a:35:e2:bd:a7:61:fa:ab:29:ae:57:02:d0: de:a9:65:60:96:d0:2c:11:1c:49:0d:5c:26:64:8d:29:88:1a: 6a:2a:de:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QjgxMTAvBgNVBAUTKEY4MDNDMzcxOEYwRTgxMjBENDNFQjAzNDgwOUY2QThC Mzg4NEQ3OUIwHhcNMjUwODExMDIwNDM0WhcNMjUwODE4MDIwNDM0WjAYMRYwFAYD VQQDEw02ODk5NGZiMi0wMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF/qflNyW/d+FKQ6+g+sFmsSGXUIgboA3Z0Zo4eTyOj4/MYwWpURiJsQZFgR n8SWuoyizUTn5RGKwSdN+yrJrOAFg9QYJOxHuZDZxAY6CHYIzzmOJBOlGYvAaAQR gzKIJc5PEohURTGcZP0smA3xWpFl0MO6aO0zpgDMrXiLeZYLfGZ3giINxDYCIlJ6 GcSsa+uvnZrRoe6OsZidEUDzviLun001Ltz2bETcud9p+XR+nceerzB6Ir27ADCH hLX80pT8UVYGbNGwYjGG9X8rB3ZwC/SH/xNuMJzkv9/bw4x8UxyjbMpnuKqfZk2y SRSj4cLBKse+gjpQOQehdfl1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf/ZG1L 4Cx725JkucGNhfO7wVpnMB8GA1UdIwQYMBaAFPgDw3GPDoEg1D6wNICfaos4hNeb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZCOC8zODg0MTMxODJB NjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dTRFVQckEwZ0o5cWl6aUUx NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BUERjWThPZ1NEVVByQTBnSjlxaXppRTE1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzZCOC8zODg0MTMxODJBNjMxMUVEQTEyNzIwM0ZDNEY5QUUwMi8tQVBEY1k4T2dT RFVQckEwZ0o5cWl6aUUxNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVpD+Vaa+IDqY9ntx9FluSvz9dyjLl/Z0IhPhtAVH5I/+AhUlUg7al 2YtEEZwnklq1zjnEeSQ1+i4l1of2BRModXJceyBzb3ASyDs8cNfJGK5sSxQ7otwv zN7i+Z/ufuwIn8V5l+1eDKep4v1NfYN4fyNZueHka4ullBYd0H/XVzlDSMmjhS38 IWdPsK33O+CDFjBc5VbjkcYafKA5DNyRFhtalumxkcs9TFFmb1qbky1P/GMwFJin cKWWF1sAEaC8prlFgMSJE3csrucD/kq8mWQAHP2eqqMqxxNnxQo14r2nYfqrKa5X AtDeqWVgltAsERxJDVwmZI0piBpqKt6p -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:37 2025 by rpki-client