$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft File: R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json) Hash identifier: +rBDSL80/5JegyOKvpIAU/LlO2zwmlnY+bnqCNVdlJI= Subject key identifier: 48:84:60:C0:CA:16:EF:8C:1C:16:E3:BF:D1:CD:A2:12:8F:28:3E:66 Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Certificate serial: 12C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft Manifest number: 12A2 Signing time: Fri 22 Aug 2025 17:13:02 +0000 Manifest this update: Fri 22 Aug 2025 17:13:01 +0000 Manifest next update: Fri 29 Aug 2025 17:13:01 +0000 Files and hashes: 1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: sFLq4jeZBY/uZde6kdLEA7pdrnSynVrfbA53xnzgEqE=) 2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=) 3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4804 (0x12c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C Validity Not Before: Aug 22 17:13:01 2025 GMT Not After : Aug 29 17:13:01 2025 GMT Subject: CN=68a8a51e-f2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:55:31:7f:85:e7:d1:5c:4d:0d:d5:ed:7a: c4:b5:4b:d3:77:59:6f:f3:54:5e:a5:92:52:80:8c: 8e:b1:3c:07:59:29:5a:df:08:88:ef:15:03:d5:6b: fd:79:ae:20:e7:71:ea:54:3e:d3:0e:ef:d6:8d:73: a4:5e:39:62:3f:cc:4a:a2:e7:13:4f:04:15:96:67: 17:18:49:f8:e1:2c:d5:5b:f3:c7:19:f8:9a:12:55: fe:81:f0:a0:0f:af:c3:46:34:25:21:03:71:cf:1e: 0a:ef:63:b0:8a:28:b4:2e:3b:5d:1f:72:15:59:d6: 97:20:dc:0e:31:aa:b3:25:62:ac:65:7d:cc:4a:b7: 46:d1:8b:f1:7d:a3:d0:b9:a8:b2:f2:47:79:ce:23: 92:e4:3e:2f:d0:00:e9:8b:a7:e3:09:27:88:8a:ce: 93:2c:8a:7c:81:4b:96:32:36:46:45:3c:8a:d1:b7: bd:bb:6c:36:52:f9:2b:3f:83:11:fe:57:be:37:2b: 5d:cb:b2:19:96:25:fd:41:24:42:64:1e:2c:c1:05: 1a:5d:88:df:9b:65:54:b1:6e:d4:61:76:f4:da:1b: d9:21:01:9e:af:c1:83:4a:de:f2:b6:42:cf:7b:cf: 25:ec:b7:94:39:fd:40:48:76:a4:71:64:ed:46:ab: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:84:60:C0:CA:16:EF:8C:1C:16:E3:BF:D1:CD:A2:12:8F:28:3E:66 X509v3 Authority Key Identifier: keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2d:81:13:fd:f8:32:32:0c:97:61:8c:e0:5e:07:3c:3a:6f: 02:7b:61:73:46:b8:0f:41:a6:2a:17:82:9b:92:1e:8c:da:2d: aa:f0:00:06:6b:cb:18:3d:5e:43:97:a0:d0:3f:63:3c:ec:df: 41:1e:c7:ac:4b:fa:8d:5f:4c:35:c7:e2:10:c7:3e:e9:a5:58: 72:82:cc:26:95:e7:f2:f3:ff:3b:bc:c4:20:a7:4f:1b:16:b8: 01:eb:f9:67:8a:5a:dc:d2:12:86:cf:eb:51:af:dd:da:f6:84: 15:81:71:17:b4:bf:a5:9d:bf:16:88:21:fc:9b:7f:f3:39:c1: a1:e6:41:4f:58:e6:e1:50:9d:6d:26:39:6d:ae:10:e1:48:38: bd:12:74:2a:4d:65:56:db:3b:bc:31:d0:69:c1:c4:31:f0:b7: 69:b5:b8:5a:b3:ad:dc:92:6a:bd:28:f6:1e:cc:b4:10:18:1a: 04:28:f3:7d:23:6e:79:86:e2:ba:a0:8b:98:ee:60:18:6e:84: c2:00:6f:f9:80:e7:08:58:55:bd:ca:22:46:cb:a6:27:87:0f: 55:62:f0:50:fa:27:2e:17:8b:3e:07:3f:f4:49:9e:2e:af:94: 19:93:fa:0e:c9:85:ac:30:3c:fc:cb:d6:fc:18:1a:65:90:1f: ff:15:d4:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE MkZCQkFEN0MwHhcNMjUwODIyMTcxMzAxWhcNMjUwODI5MTcxMzAxWjAYMRYwFAYD VQQDEw02OGE4YTUxZS1mMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSBVMX+F59FcTQ3V7XrEtUvTd1lv81RepZJSgIyOsTwHWSla3wiI7xUD1Wv9 ea4g53HqVD7TDu/WjXOkXjliP8xKoucTTwQVlmcXGEn44SzVW/PHGfiaElX+gfCg D6/DRjQlIQNxzx4K72Owiii0LjtdH3IVWdaXINwOMaqzJWKsZX3MSrdG0YvxfaPQ uaiy8kd5ziOS5D4v0ADpi6fjCSeIis6TLIp8gUuWMjZGRTyK0be9u2w2UvkrP4MR /le+Nytdy7IZliX9QSRCZB4swQUaXYjfm2VUsW7UYXb02hvZIQGer8GDSt7ytkLP e88l7LeUOf1ASHakcWTtRquABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiEYMDK Fu+MHBbjv9HNohKPKD5mMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqLYET/fgyMgyXYYzgXgc8Om8Ce2FzRrgPQaYqF4Kbkh6M2i2q8AAG a8sYPV5Dl6DQP2M87N9BHsesS/qNX0w1x+IQxz7ppVhygswmlefy8/87vMQgp08b FrgB6/lnilrc0hKGz+tRr93a9oQVgXEXtL+lnb8WiCH8m3/zOcGh5kFPWObhUJ1t JjltrhDhSDi9EnQqTWVW2zu8MdBpwcQx8Ldptbhas63ckmq9KPYezLQQGBoEKPN9 I255huK6oIuY7mAYboTCAG/5gOcIWFW9yiJGy6Ynhw9VYvBQ+icuF4s+Bz/0SZ4u r5QZk/oOyYWsMDz8y9b8GBplkB//FdQO -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:24 2025 by rpki-client