$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft File: rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft (raw, json) Hash identifier: +BDknC12lT8P7elJWwW7YesRitQR89CX9bncR5AA2tE= Subject key identifier: DC:1E:E0:E9:85:70:D7:91:A1:A0:F7:D3:A1:A8:84:0A:84:51:2A:22 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 1085 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft Manifest number: 107F Signing time: Fri 22 Aug 2025 17:29:53 +0000 Manifest this update: Fri 22 Aug 2025 17:29:52 +0000 Manifest next update: Fri 29 Aug 2025 17:29:52 +0000 Files and hashes: 1: rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl (hash: JkervFE7Mb2PsQvFMrNgpYmi61S8d2iXQ2rVFpMlPhU=) 2: CBAED530FE6A11ECAB640344C4F9AE02.roa (hash: 8EmwRqTTi0D6Jqb1QQoQFecB/Y41qpXK3rVqh44z4W0=) 3: 6B1B75BC756311EFB6C7E64CC4F9AE02.roa (hash: 7SbyZl6WzchDvPbf0/nq4tvYfqbtpgq7UAgLfrYKHTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4229 (0x1085) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Aug 22 17:29:52 2025 GMT Not After : Aug 29 17:29:52 2025 GMT Subject: CN=68a8a911-2320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:ce:ab:12:6f:ec:da:1b:15:f0:cb:84:d4: c5:68:77:19:f6:ec:6c:d8:ec:4d:6f:a4:8f:91:7d: de:ae:58:74:6d:27:3e:a5:cf:ee:51:c8:6d:84:88: 44:73:6a:dc:8d:80:41:38:8a:c2:21:de:98:6f:33: f0:22:d1:a6:fd:1b:99:eb:e7:3d:9d:52:0f:2d:e6: 0c:79:fe:ff:01:9a:28:be:d0:23:d5:28:ba:96:55: 17:d5:20:33:e8:3e:69:99:1d:c0:45:ea:b4:54:68: ac:57:39:93:12:ab:fe:e9:c6:57:26:62:b1:47:71: be:3f:7f:62:28:ca:43:31:7c:6e:53:c2:03:b4:25: 96:f7:4d:08:0b:c9:9b:c7:79:f1:66:87:88:19:b2: 76:fd:36:70:9e:c6:46:ba:72:bf:67:e1:0d:2c:a6: 7c:79:db:f0:9e:f8:a6:e7:13:41:07:99:49:3d:31: 8d:19:8f:21:6a:0a:d5:29:d1:e3:30:74:38:9e:dc: a6:9a:3d:6e:77:37:02:77:7e:ac:d5:6d:32:8a:9c: 87:85:a8:64:6e:b3:4e:12:10:09:74:e6:a8:a0:dc: 5c:0f:b7:1d:bd:96:a1:cb:49:8b:b6:ed:a0:44:10: 35:0d:91:6c:11:7e:f5:45:cc:51:ee:20:ea:07:3b: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1E:E0:E9:85:70:D7:91:A1:A0:F7:D3:A1:A8:84:0A:84:51:2A:22 X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6e:2d:20:71:fa:98:d5:ab:6c:2d:ae:26:de:2d:2e:a0:e1: cf:8b:e6:ff:dd:55:b2:a5:00:68:b1:ec:4a:7f:ab:54:49:fe: aa:d5:71:3e:e6:3f:ff:c9:3c:af:19:03:0c:13:82:ca:df:b0: eb:85:1f:8a:51:68:a4:1e:d5:a1:47:70:32:8c:2e:ba:5c:54: d2:ba:19:0c:11:9e:02:5d:a3:b8:42:0e:d9:1a:12:6a:a6:b7: c9:ed:d9:f7:73:8f:67:5a:b2:8c:30:c0:40:6d:5f:73:26:56: e0:a4:40:0e:27:41:75:2a:b9:48:d4:9d:79:57:58:d0:12:b1: 17:32:9f:8e:57:79:78:64:2a:5a:99:b8:cf:bc:e7:be:a4:ac: cd:82:b1:aa:b5:a5:94:aa:e0:e0:79:5e:73:8f:eb:be:a3:49: ab:9d:1d:f5:7d:ff:a7:67:a8:eb:5b:f6:e0:2b:9b:90:db:71: ea:91:8d:5e:57:94:6b:20:05:42:45:da:a2:57:c0:8f:27:50: 0d:f5:af:00:c0:61:d6:02:95:ef:a3:d1:f1:f2:5e:68:74:da: 03:2c:fa:67:1f:2d:11:6e:4d:37:e0:85:78:63:cd:49:5d:59: d8:f8:8a:e9:55:b9:db:07:de:53:d7:7e:0c:a8:e4:cd:32:6e: c5:f8:bb:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjUwODIyMTcyOTUyWhcNMjUwODI5MTcyOTUyWjAYMRYwFAYD VQQDEw02OGE4YTkxMS0yMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpfOqxJv7NobFfDLhNTFaHcZ9uxs2OxNb6SPkX3erlh0bSc+pc/uUchthIhE c2rcjYBBOIrCId6YbzPwItGm/RuZ6+c9nVIPLeYMef7/AZoovtAj1Si6llUX1SAz 6D5pmR3AReq0VGisVzmTEqv+6cZXJmKxR3G+P39iKMpDMXxuU8IDtCWW900IC8mb x3nxZoeIGbJ2/TZwnsZGunK/Z+ENLKZ8edvwnvim5xNBB5lJPTGNGY8hagrVKdHj MHQ4ntymmj1udzcCd36s1W0yipyHhahkbrNOEhAJdOaooNxcD7cdvZahy0mLtu2g RBA1DZFsEX71RcxR7iDqBztrwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwe4OmF cNeRoaD306GohAqEUSoiMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FMTA1QjNCQTNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdl TmxXNWwwTGZzNTZJTzdrVVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCebi0gcfqY1atsLa4m3i0uoOHPi+b/3VWypQBosexKf6tUSf6q1XE+ 5j//yTyvGQMME4LK37DrhR+KUWikHtWhR3AyjC66XFTSuhkMEZ4CXaO4Qg7ZGhJq prfJ7dn3c49nWrKMMMBAbV9zJlbgpEAOJ0F1KrlI1J15V1jQErEXMp+OV3l4ZCpa mbjPvOe+pKzNgrGqtaWUquDgeV5zj+u+o0mrnR31ff+nZ6jrW/bgK5uQ23HqkY1e V5RrIAVCRdqiV8CPJ1AN9a8AwGHWApXvo9Hx8l5odNoDLPpnHy0Rbk034IV4Y81J XVnY+IrpVbnbB95T134MqOTNMm7F+Ls+ -----END CERTIFICATE-----Generated at Sat Aug 23 10:40:17 2025 by rpki-client