$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: czEeML9V4Snv6YrFtuqwBXVBk1wXBIqTNl8QAMQ8HiE= Subject key identifier: 34:D4:32:FD:DB:37:03:AF:A5:1D:AF:83:E0:6B:57:AB:68:38:0E:59 Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0B13 Signing time: Sat 02 Aug 2025 19:35:08 +0000 Manifest this update: Sat 02 Aug 2025 19:35:07 +0000 Manifest next update: Sat 09 Aug 2025 19:35:07 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: RhuD7HRkMPZ6MeJDybSl/ab1k9ttbS7B4+/RDd0eULs=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: H58uLnLgtQRXxjwDdpgj46LQrUNsRnsgJgSttmaA0KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2844 (0xb1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Aug 2 19:35:07 2025 GMT Not After : Aug 9 19:35:07 2025 GMT Subject: CN=688e686c-1a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:f3:80:3a:b8:52:8b:b0:c3:b0:e5:40:5d: f4:14:b6:97:77:70:7f:52:f7:4f:e2:7d:7a:7c:a1: 5d:ee:53:7f:ec:73:bc:d4:04:4f:9f:b7:a3:be:d8: 19:f5:d8:a4:f6:40:b4:39:f8:2d:26:ee:25:b2:1c: ef:78:17:22:6a:0d:a7:c5:36:7a:e9:f0:d5:d7:9d: 20:b0:c3:64:c0:d1:78:a6:c9:fd:a4:a7:29:74:16: e7:4a:d9:62:93:7f:bb:b8:33:32:60:f6:1d:aa:86: 58:f0:01:e2:65:51:dd:4c:8e:a4:20:78:78:0d:3a: b4:be:02:a1:b2:27:bb:b8:6e:5f:4f:ed:9e:9b:24: 12:95:79:11:69:63:3a:23:2d:b3:7c:85:47:ee:84: fa:f8:c9:7a:24:b5:3c:fc:dc:fd:90:d6:28:7d:6e: d1:0c:c5:22:3c:af:2d:c0:91:c9:cd:37:3f:49:d5: 99:2a:5a:3c:c4:0a:d3:61:30:90:4c:e7:ad:d2:d2: f7:0a:9a:8c:ad:51:cd:57:50:cd:a1:0a:66:5e:92: 09:59:ed:41:10:68:11:32:bb:e4:02:ee:8d:68:08: b9:c9:28:fe:3e:56:53:f8:dd:8b:2d:81:4a:e1:49: 29:3b:37:10:d8:8e:e3:1a:e6:49:48:0d:0d:00:31: 07:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:32:FD:DB:37:03:AF:A5:1D:AF:83:E0:6B:57:AB:68:38:0E:59 X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:ed:24:06:c2:10:b4:ab:66:ac:dd:db:3e:82:cb:24:1b:07: 4d:b8:ec:e5:c2:b2:87:23:0d:3f:d4:92:bf:86:05:ad:bb:c4: d4:c3:49:4b:e0:5f:d3:57:11:82:42:8c:40:4a:45:14:08:a5: 2c:0e:35:b2:15:17:5c:7c:d2:8f:01:66:b0:90:59:0b:bb:d6: c5:01:d4:db:d7:56:ad:2e:f5:e7:28:46:98:6e:41:dd:96:c3: 5b:7c:e9:6f:62:a9:7c:3b:f5:ca:8b:32:db:2e:43:56:2c:a2: 59:e3:82:d0:ef:1b:7f:0f:d5:61:93:a0:c2:cf:6c:c3:0e:ad: b1:9a:75:14:75:76:ab:d2:b4:bb:c4:37:63:6b:e8:b8:86:23: b9:93:a7:a7:00:78:2f:89:ec:7f:a1:c7:0a:a5:ec:ea:e6:95: 85:37:3a:a2:78:d7:86:0f:0d:c8:c1:16:4f:85:00:c0:09:88: f4:59:bd:5b:e4:0f:e5:dc:f1:a6:36:a3:06:16:dc:63:1e:89: bb:58:1c:9c:a5:52:5b:52:43:6f:e1:e1:b7:04:f4:40:58:37: ab:8c:e0:41:c3:81:ff:04:53:bf:3c:7c:f6:7f:02:e2:d8:26: 8b:b9:f7:7f:2f:26:9e:13:7d:f5:cf:2e:2f:ec:2d:14:69:67: 77:e1:5c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjUwODAyMTkzNTA3WhcNMjUwODA5MTkzNTA3WjAYMRYwFAYD VQQDEw02ODhlNjg2Yy0xYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1svzgDq4Uouww7DlQF30FLaXd3B/UvdP4n16fKFd7lN/7HO81ARPn7ejvtgZ 9dik9kC0OfgtJu4lshzveBciag2nxTZ66fDV150gsMNkwNF4psn9pKcpdBbnStli k3+7uDMyYPYdqoZY8AHiZVHdTI6kIHh4DTq0vgKhsie7uG5fT+2emyQSlXkRaWM6 Iy2zfIVH7oT6+Ml6JLU8/Nz9kNYofW7RDMUiPK8twJHJzTc/SdWZKlo8xArTYTCQ TOet0tL3CpqMrVHNV1DNoQpmXpIJWe1BEGgRMrvkAu6NaAi5ySj+PlZT+N2LLYFK 4UkpOzcQ2I7jGuZJSA0NADEHOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTUMv3b NwOvpR2vg+BrV6toOA5ZMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE7SQGwhC0q2as3ds+gsskGwdNuOzlwrKHIw0/1JK/hgWtu8TUw0lL 4F/TVxGCQoxASkUUCKUsDjWyFRdcfNKPAWawkFkLu9bFAdTb11atLvXnKEaYbkHd lsNbfOlvYql8O/XKizLbLkNWLKJZ44LQ7xt/D9Vhk6DCz2zDDq2xmnUUdXar0rS7 xDdja+i4hiO5k6enAHgviex/occKpezq5pWFNzqieNeGDw3IwRZPhQDACYj0Wb1b 5A/l3PGmNqMGFtxjHom7WBycpVJbUkNv4eG3BPRAWDerjOBBw4H/BFO/PHz2fwLi 2CaLufd/LyaeE331zy4v7C0UaWd34Vwg -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:28 2025 by rpki-client