$ rpki-client -vvf rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft File: baLnsgc31v3aKTEYAyM4Tcf4AXI.mft (raw, json) Hash identifier: A8ihxBAhXWyhuyZw89hTLWf+3okctWo/FhqQVAiSwG4= Subject key identifier: 52:59:68:49:E2:96:5B:38:CD:99:83:16:8D:DD:77:D8:AA:71:CA:0E Authority key identifier: 6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 Certificate issuer: /CN=A911D415/serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 04:09:37 +0000 Manifest this update: Sat 23 Aug 2025 04:09:37 +0000 Manifest next update: Sat 30 Aug 2025 04:09:37 +0000 Files and hashes: 1: baLnsgc31v3aKTEYAyM4Tcf4AXI.crl (hash: D13OHX1qUS6pYG95qRjaoHPtNh10GdV35WWJyKjrzJY=) 2: B2B7B96067BA11EE99370352C4F9AE02.roa (hash: P/WWt5eI8v2C+zoec4Zd9OnVnDcSJ3bbXF6r7+A0KgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D415, serialNumber=6DA2E7B20737D6FDDA2931180323384DC7F80172 Validity Not Before: Aug 23 04:09:37 2025 GMT Not After : Aug 30 04:09:37 2025 GMT Subject: CN=68a93f01-31fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:7f:aa:a2:75:02:58:df:60:8e:29:1a:a4: 07:09:9e:90:c4:fc:9b:1a:04:d9:85:f6:8d:51:01: 0a:e7:d0:de:fe:65:24:63:9b:d0:8c:33:02:ad:d5: d0:a3:b8:16:ea:53:3b:14:b6:a6:55:c4:06:7c:44: 8e:53:c3:39:fc:45:be:d2:8e:12:dd:75:2f:18:62: 71:ad:a2:63:8f:f2:53:0f:8d:b8:08:1a:90:5d:4c: f7:eb:6e:7e:4a:34:5d:f6:24:73:d7:71:89:96:40: 26:b9:14:b8:9e:83:50:17:fe:c2:11:0b:59:00:cd: 8e:16:ae:16:f6:7b:bb:70:26:c8:e4:a6:c8:4e:55: ed:83:a7:d0:c2:e9:5f:fd:df:a3:88:ee:e0:31:09: 1b:9b:4f:66:dd:31:16:90:4c:de:71:d6:9f:05:6c: b7:38:98:2b:86:ab:f4:a9:13:5a:f0:26:c4:60:6a: b3:11:bb:41:94:7c:d4:47:ab:d1:95:e5:65:41:2e: 75:d1:1c:2f:5c:32:80:0d:30:0e:86:0e:35:1b:2e: 4a:82:87:7c:18:96:74:d9:60:05:d1:32:88:7c:b5: 08:5a:8e:9e:dd:f8:a2:60:84:ef:7d:45:1f:3b:2c: 1b:a8:e9:fe:93:34:06:17:25:73:a0:1b:77:d0:76: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:59:68:49:E2:96:5B:38:CD:99:83:16:8D:DD:77:D8:AA:71:CA:0E X509v3 Authority Key Identifier: keyid:6D:A2:E7:B2:07:37:D6:FD:DA:29:31:18:03:23:38:4D:C7:F8:01:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baLnsgc31v3aKTEYAyM4Tcf4AXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D415/64B7762E67BA11EEA912DE37C4F9AE02/baLnsgc31v3aKTEYAyM4Tcf4AXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:a4:a7:10:c9:89:f2:b4:f9:36:41:42:08:d2:c0:cd:a8: 8d:2c:d9:a1:dc:5b:fe:af:1c:d2:bd:2f:b1:33:2b:43:11:1c: a0:92:4c:4b:45:f0:e1:67:0e:a3:be:40:a9:87:3e:a3:49:6c: 60:65:96:5e:30:71:03:67:4a:7c:ae:f8:5b:6b:45:fb:6e:17: 04:72:10:23:51:38:c5:cb:92:93:9c:48:bb:00:b4:f0:ec:5a: d0:7a:b1:3c:91:aa:47:3e:21:e2:76:2c:7c:e1:50:14:b3:fe: 39:60:4a:b4:a9:65:70:0d:90:ed:c7:bf:ab:ad:49:a1:56:a2: dd:38:ca:01:b3:1f:bb:c2:dc:2b:a2:40:e3:fa:27:f7:64:4b: 7e:e8:33:20:69:6d:e6:1a:9e:0d:b3:d9:45:a0:fe:cd:f8:a5: b7:57:18:f7:19:18:ab:35:db:5f:0e:17:53:1e:95:8c:b9:f1: 84:5c:85:40:0a:4f:03:11:d4:25:e2:f9:d6:ce:ee:a1:39:2c: 8d:8f:6a:a1:d7:86:f8:93:8b:80:c4:e8:0b:45:d0:a0:3a:52: 35:c3:bf:aa:80:2c:0e:83:24:a2:0d:e7:24:c0:ec:c4:be:17: 89:e2:7e:88:07:11:e8:86:cf:a6:23:9f:6a:7a:b7:42:8f:89: e4:87:b9:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MTUxMTAvBgNVBAUTKDZEQTJFN0IyMDczN0Q2RkREQTI5MzExODAzMjMzODRE QzdGODAxNzIwHhcNMjUwODIzMDQwOTM3WhcNMjUwODMwMDQwOTM3WjAYMRYwFAYD VQQDEw02OGE5M2YwMS0zMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoN/qqJ1AljfYI4pGqQHCZ6QxPybGgTZhfaNUQEK59De/mUkY5vQjDMCrdXQ o7gW6lM7FLamVcQGfESOU8M5/EW+0o4S3XUvGGJxraJjj/JTD424CBqQXUz3625+ SjRd9iRz13GJlkAmuRS4noNQF/7CEQtZAM2OFq4W9nu7cCbI5KbITlXtg6fQwulf /d+jiO7gMQkbm09m3TEWkEzecdafBWy3OJgrhqv0qRNa8CbEYGqzEbtBlHzUR6vR leVlQS510RwvXDKADTAOhg41Gy5Kgod8GJZ02WAF0TKIfLUIWo6e3fiiYITvfUUf OywbqOn+kzQGFyVzoBt30HaOyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJZaEni lls4zZmDFo3dd9iqccoOMB8GA1UdIwQYMBaAFG2i57IHN9b92ikxGAMjOE3H+AFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQxNS82NEI3NzYyRTY3 QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2M2FLVEVZQXlNNFRjZjRB WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhTG5zZ2MzMXYzYUtURVlBeU00VGNmNEFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQxNS82NEI3NzYyRTY3QkExMUVFQTkxMkRFMzdDNEY5QUUwMi9iYUxuc2djMzF2 M2FLVEVZQXlNNFRjZjRBWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASdqSnEMmJ8rT5NkFCCNLAzaiNLNmh3Fv+rxzSvS+xMytDERygkkxL RfDhZw6jvkCphz6jSWxgZZZeMHEDZ0p8rvhba0X7bhcEchAjUTjFy5KTnEi7ALTw 7FrQerE8kapHPiHidix84VAUs/45YEq0qWVwDZDtx7+rrUmhVqLdOMoBsx+7wtwr okDj+if3ZEt+6DMgaW3mGp4Ns9lFoP7N+KW3Vxj3GRirNdtfDhdTHpWMufGEXIVA Ck8DEdQl4vnWzu6hOSyNj2qh14b4k4uAxOgLRdCgOlI1w7+qgCwOgySiDeckwOzE vheJ4n6IBxHohs+mI59qerdCj4nkh7lj -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:49 2025 by rpki-client