$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: hHYB0n70yExJ2iQwzr4LTyywAXSr1OigWkbf90bDyHs= Subject key identifier: 0F:C3:B7:46:BB:92:BF:C1:36:2B:C7:D9:CC:94:33:E6:40:A5:E4:D0 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0219 Signing time: Sat 09 Aug 2025 02:35:09 +0000 Manifest this update: Sat 09 Aug 2025 02:35:08 +0000 Manifest next update: Sat 16 Aug 2025 02:35:08 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 99UIxZZRCrq7cS7URDme3HdAN5jDWNlcJHti0WJeTVA=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: /cbaTktdW8E1yuwyyLv6euCmC3kworQWAZraDFOpKP8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 2mKwnMpgR04h28Vp1kCMChznHcUKBjq3JV55A80+RxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Aug 9 02:35:08 2025 GMT Not After : Aug 16 02:35:08 2025 GMT Subject: CN=6896b3dc-d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:29:ab:84:54:dd:c3:00:75:98:fe:52:09: fb:6f:39:a8:15:4b:62:13:38:d6:1c:3e:29:0d:71: 6a:72:bf:2a:60:08:5d:43:1c:98:42:38:d0:83:61: 14:f6:bc:d4:97:65:c1:39:31:56:26:50:eb:7f:54: 35:04:45:e8:d6:3f:48:cf:ac:55:73:44:f2:ef:5a: ef:06:2d:5f:5b:44:c7:51:56:2a:ef:1d:49:d7:80: d2:df:cd:b9:67:c0:84:0c:78:fc:6d:15:29:1c:ec: d1:ea:1d:fa:04:2e:0f:a9:3a:ce:4b:2e:3b:f5:06: 0b:6d:14:ce:10:72:76:13:31:7f:0a:39:27:80:0e: 7a:aa:f0:d0:02:ea:d7:f9:da:77:72:7c:f4:11:74: e0:af:89:0b:3b:bc:17:de:7f:fd:61:75:21:ad:7e: af:01:fd:9c:b0:43:a7:e6:24:62:d5:8a:b0:c3:a0: 24:f2:4f:53:79:48:e3:a3:2a:56:97:95:41:68:de: 26:c8:e9:4c:a7:d3:cb:f2:f6:28:eb:81:87:c7:24: 16:c5:d8:27:b3:63:56:95:c2:65:64:34:ed:d0:ab: b1:41:f8:f0:dd:6f:04:1d:df:04:37:2f:15:12:05: eb:b2:c2:89:b0:82:28:00:53:ca:1f:29:e6:c7:dd: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:B7:46:BB:92:BF:C1:36:2B:C7:D9:CC:94:33:E6:40:A5:E4:D0 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:73:df:a8:27:82:46:5a:fb:45:68:b9:9a:25:58:37:b4:74: e4:f7:de:c6:9b:7c:ba:54:25:ab:f3:f0:7f:44:d8:c5:b6:88: 43:34:8f:aa:13:4e:f0:90:97:d2:2c:bf:16:aa:5e:ea:5b:54: 91:f2:fe:40:b4:fd:f1:e5:1e:64:12:aa:d9:4e:0d:b6:fd:70: 1f:02:26:08:8c:a7:bd:72:a5:28:f0:02:aa:9c:4f:e7:f3:a7: b9:ef:90:38:5d:87:c2:14:c2:b5:6f:7b:33:83:5c:73:74:6e: 6d:d9:9b:50:e3:8f:78:8b:99:5a:22:5b:c0:de:41:e3:c7:45: 7f:f3:4a:0e:2c:6e:46:a2:af:2f:05:f3:d9:dc:29:89:c0:a5: aa:95:9b:85:c2:cf:4b:12:c1:81:a6:a6:f5:24:bf:74:44:d1: 51:03:f2:70:20:93:81:ce:7a:72:93:fd:2e:67:22:29:28:30: 0c:4e:60:4d:ad:b2:21:8c:c4:45:5e:12:72:47:63:06:5c:cb: 36:11:68:37:66:08:0a:a2:67:92:74:7b:b6:e4:f4:ea:91:45: bc:bf:36:f3:37:d2:be:f1:d9:e8:0f:05:76:62:76:f2:dc:0d: a9:31:65:ed:03:75:18:1b:06:8f:25:02:b1:c1:cf:6a:ba:c7: d4:e1:7b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjUwODA5MDIzNTA4WhcNMjUwODE2MDIzNTA4WjAYMRYwFAYD VQQDEw02ODk2YjNkYy1kNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPopq4RU3cMAdZj+Ugn7bzmoFUtiEzjWHD4pDXFqcr8qYAhdQxyYQjjQg2EU 9rzUl2XBOTFWJlDrf1Q1BEXo1j9Iz6xVc0Ty71rvBi1fW0THUVYq7x1J14DS3825 Z8CEDHj8bRUpHOzR6h36BC4PqTrOSy479QYLbRTOEHJ2EzF/CjkngA56qvDQAurX +dp3cnz0EXTgr4kLO7wX3n/9YXUhrX6vAf2csEOn5iRi1Yqww6Ak8k9TeUjjoypW l5VBaN4myOlMp9PL8vYo64GHxyQWxdgns2NWlcJlZDTt0KuxQfjw3W8EHd8ENy8V EgXrssKJsIIoAFPKHynmx93heQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/Dt0a7 kr/BNivH2cyUM+ZApeTQMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuc9+oJ4JGWvtFaLmaJVg3tHTk997Gm3y6VCWr8/B/RNjFtohDNI+q E07wkJfSLL8Wql7qW1SR8v5AtP3x5R5kEqrZTg22/XAfAiYIjKe9cqUo8AKqnE/n 86e575A4XYfCFMK1b3szg1xzdG5t2ZtQ4494i5laIlvA3kHjx0V/80oOLG5Goq8v BfPZ3CmJwKWqlZuFws9LEsGBpqb1JL90RNFRA/JwIJOBznpyk/0uZyIpKDAMTmBN rbIhjMRFXhJyR2MGXMs2EWg3ZggKomeSdHu25PTqkUW8vzbzN9K+8dnoDwV2Ynby 3A2pMWXtA3UYGwaPJQKxwc9qusfU4XuQ -----END CERTIFICATE-----Generated at Sat Aug 9 23:12:55 2025 by rpki-client