$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: Q1ixPAogOtSjJeZv66m9zhpZVHlbf8nvOO1yZuOXSzA= Subject key identifier: 85:81:FE:F9:C1:FC:D3:6B:38:1B:D3:51:05:3A:F0:F3:F1:4B:AD:B8 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 02B4 Signing time: Sat 23 Aug 2025 01:42:39 +0000 Manifest this update: Sat 23 Aug 2025 01:42:39 +0000 Manifest next update: Sat 30 Aug 2025 01:42:39 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: mY/UTpIXJ6V/Ewwxm+JZ3QGC6SYfJy3g1oscBxlGRIg=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Aug 23 01:42:39 2025 GMT Not After : Aug 30 01:42:39 2025 GMT Subject: CN=68a91c8f-f058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:24:79:d5:f9:dc:80:af:cc:74:d4:d0:55: bd:65:ca:9b:5b:f6:c2:f8:56:d6:6b:02:1b:49:47: b8:e6:1e:35:2c:5a:7a:20:67:8b:ce:c0:43:ec:cf: 28:61:9d:0d:61:76:9d:63:4d:d6:f4:4c:3b:eb:74: 1b:11:28:49:cb:90:2c:32:71:8d:5c:77:f8:4d:07: 4a:84:21:b2:e7:fc:cd:54:3b:bb:f1:74:98:3a:63: e4:80:3d:ab:99:f1:01:57:2a:47:0a:9d:b0:f7:8f: 0f:48:77:cf:cf:57:0d:b4:ad:50:13:2d:32:6c:d3: c8:c7:f9:9c:9f:af:8c:2f:f5:f8:ba:63:c0:d9:47: 72:97:c2:91:c5:ca:5f:33:c9:6f:25:a5:e9:25:88: b0:c0:6f:4c:de:04:53:6a:81:1e:37:6d:93:e5:76: c0:6b:30:dd:86:2f:78:69:8e:86:52:19:46:f9:9f: 8f:37:c7:0e:42:10:df:c6:0c:f4:ae:63:6a:b0:9c: 48:b9:58:86:2a:09:ac:77:50:be:b1:b5:4c:ff:f3: 37:c1:54:ef:4d:b3:ba:d6:7a:ff:96:cc:59:e2:73: f9:be:d5:7a:a7:3d:ba:31:c1:b6:71:90:29:14:3e: 19:e1:59:e9:88:66:12:68:c0:4f:fc:a5:36:6d:3b: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:FE:F9:C1:FC:D3:6B:38:1B:D3:51:05:3A:F0:F3:F1:4B:AD:B8 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:32:57:c0:4f:15:4d:52:6a:c2:25:03:cf:1c:8a:83:df:8f: 2a:f8:87:51:73:ee:59:14:b0:1f:ba:37:78:b5:83:0f:bd:c0: 3d:74:38:b5:d7:b8:26:9b:39:39:57:a5:38:dd:f8:a9:cc:aa: 8b:3b:79:ef:dc:f1:ca:26:a2:bc:15:31:c7:e9:43:16:4b:74: 8b:e1:c7:6a:ef:13:51:58:63:61:3c:c6:41:74:15:46:5f:8b: c3:99:da:76:f9:cc:57:9b:97:a0:61:36:33:3f:f9:26:8a:4f: 81:54:a2:f2:7a:7e:ae:5a:dd:d7:2d:59:54:b0:a9:50:61:35: 27:26:36:dd:04:e0:dc:db:b4:cf:b4:df:c7:d4:c9:d5:e8:ec: f1:8e:0f:c2:c3:08:8c:1b:45:a3:70:55:dd:00:da:e9:06:fa: f8:9f:14:41:9e:b5:ec:51:45:eb:68:7d:05:6f:68:08:68:3b: 1b:1a:81:e4:18:7c:e6:b5:2b:1e:f9:87:11:8b:3d:10:42:6b: cc:cf:7c:39:67:03:d1:1f:a1:76:de:4f:31:67:43:fc:e5:ed: cb:02:c1:82:03:e3:3a:3e:5c:45:a1:28:81:0f:3a:d2:d9:46: ca:3f:b1:b7:b1:50:6f:e8:3c:6a:5a:13:f7:88:e1:de:0b:16: 06:c9:8d:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjUwODIzMDE0MjM5WhcNMjUwODMwMDE0MjM5WjAYMRYwFAYD VQQDEw02OGE5MWM4Zi1mMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNQkedX53ICvzHTU0FW9ZcqbW/bC+FbWawIbSUe45h41LFp6IGeLzsBD7M8o YZ0NYXadY03W9Ew763QbEShJy5AsMnGNXHf4TQdKhCGy5/zNVDu78XSYOmPkgD2r mfEBVypHCp2w948PSHfPz1cNtK1QEy0ybNPIx/mcn6+ML/X4umPA2Udyl8KRxcpf M8lvJaXpJYiwwG9M3gRTaoEeN22T5XbAazDdhi94aY6GUhlG+Z+PN8cOQhDfxgz0 rmNqsJxIuViGKgmsd1C+sbVM//M3wVTvTbO61nr/lsxZ4nP5vtV6pz26McG2cZAp FD4Z4VnpiGYSaMBP/KU2bTsAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWB/vnB /NNrOBvTUQU68PPxS624MB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAMlfATxVNUmrCJQPPHIqD348q+IdRc+5ZFLAfujd4tYMPvcA9dDi1 17gmmzk5V6U43fipzKqLO3nv3PHKJqK8FTHH6UMWS3SL4cdq7xNRWGNhPMZBdBVG X4vDmdp2+cxXm5egYTYzP/kmik+BVKLyen6uWt3XLVlUsKlQYTUnJjbdBODc27TP tN/H1MnV6Ozxjg/CwwiMG0WjcFXdANrpBvr4nxRBnrXsUUXraH0Fb2gIaDsbGoHk GHzmtSse+YcRiz0QQmvMz3w5ZwPRH6F23k8xZ0P85e3LAsGCA+M6PlxFoSiBDzrS 2UbKP7G3sVBv6DxqWhP3iOHeCxYGyY3t -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:19 2025 by rpki-client