$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: pWE2oYu8dO49oRvCqd5Y9ZzbdF8KkizlFX14T+KRGzE= Subject key identifier: 42:E9:E7:FD:1B:10:61:7D:D2:93:E9:FB:B3:A0:7F:D7:FA:E2:7F:8E Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: 0110 Signing time: Sat 23 Aug 2025 05:06:02 +0000 Manifest this update: Sat 23 Aug 2025 05:06:01 +0000 Manifest next update: Sat 30 Aug 2025 05:06:01 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: goUuF6yPfAlP4NlyyfM/Wy5AfAfKOv9Phwi/mxCjTgQ=) 2: 78585C5EB6E011EFBB3E2A0DC4F9AE02.roa (hash: 2WiCb7OZQZBwQByr0Alkw/fK8rpNuPrkGWgpzt7qSeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F, serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Aug 23 05:06:01 2025 GMT Not After : Aug 30 05:06:01 2025 GMT Subject: CN=68a94c39-fdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:26:a3:12:f9:d9:de:2b:d9:3d:55:97:32: de:d6:33:99:06:4c:87:4d:7c:09:fa:78:7a:1b:f4: 18:db:9a:7e:07:0a:a8:47:0e:62:bf:d6:0e:f5:3c: ad:3a:51:07:98:d0:d9:5e:f6:2d:19:0f:f1:8b:8a: 07:f7:f1:68:42:ff:c6:09:0e:f9:67:1e:41:5a:2b: 65:64:f7:be:17:12:60:cc:76:41:64:e5:1e:85:13: 19:dc:75:cd:d4:06:c0:17:05:61:04:f4:96:2b:65: 9d:e2:aa:36:88:bb:32:04:1b:ff:70:0d:ac:91:53: 3a:f5:6b:be:40:26:c2:60:43:9d:21:0e:6f:7f:49: 45:42:91:04:3f:7f:df:26:dd:64:7b:95:d4:bb:27: fa:c4:73:ce:d5:94:11:4b:8e:cd:bd:7b:de:2a:ba: 9a:e7:cc:a6:6a:44:d0:b9:09:db:df:9c:c3:b2:66: 8a:6c:31:ad:32:ff:a5:fe:db:6d:c0:ca:f2:45:34: 40:7f:c6:3f:d4:40:f9:0c:b4:8a:04:c5:61:bf:ee: 63:8d:f4:c0:6b:45:4d:d5:8d:4c:8d:66:e9:f7:0a: fe:a6:59:ee:9a:c6:67:6a:36:0c:47:77:6e:de:a0: 66:14:fc:14:d2:bc:a7:d4:38:95:9a:f9:24:4a:a7: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E9:E7:FD:1B:10:61:7D:D2:93:E9:FB:B3:A0:7F:D7:FA:E2:7F:8E X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:cc:51:dd:b8:5b:6f:fd:26:7d:1d:bb:ef:2a:cd:28:a2:9b: ec:87:75:6a:4d:ec:e4:74:92:b9:ae:91:98:f2:56:8a:07:9e: 65:9b:32:89:ab:eb:fa:d0:2e:1e:af:44:26:80:ad:26:a6:6d: e8:53:e5:e8:62:04:52:7b:8b:fd:14:76:73:bf:ed:1f:b8:2b: 0f:28:09:64:fe:de:3b:3d:23:bf:81:f6:6e:b2:b7:4f:5c:8c: a7:ec:1c:a5:9d:d7:b0:b8:c8:81:85:96:0d:56:29:55:18:2c: 13:6f:cb:0d:95:69:9f:2d:a7:06:4f:9b:13:9f:32:a2:a4:00: 40:e9:ae:70:2e:44:4e:a9:7d:ab:58:4e:a8:69:b5:56:75:ea: 31:8d:95:ac:75:80:98:c4:13:6d:6b:17:ed:ea:5b:6a:10:f1: 66:18:51:8e:fa:cc:49:5c:53:20:85:9d:7c:51:91:ef:2a:b1: 1e:11:08:78:89:f7:ee:73:57:9e:22:cf:c0:42:5a:d6:4f:36: 32:f0:99:40:1c:60:7d:f3:4b:c3:ff:3a:11:b0:12:49:65:1a: 3b:7c:14:04:d7:47:43:8d:d2:d8:9a:92:8a:5b:74:4d:42:18: ae:d7:88:b4:60:e1:b1:11:9b:9e:68:4a:31:2e:ec:72:d0:7f: 73:de:6c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjUwODIzMDUwNjAxWhcNMjUwODMwMDUwNjAxWjAYMRYwFAYD VQQDEw02OGE5NGMzOS1mZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsImoxL52d4r2T1VlzLe1jOZBkyHTXwJ+nh6G/QY25p+BwqoRw5iv9YO9Tyt OlEHmNDZXvYtGQ/xi4oH9/FoQv/GCQ75Zx5BWitlZPe+FxJgzHZBZOUehRMZ3HXN 1AbAFwVhBPSWK2Wd4qo2iLsyBBv/cA2skVM69Wu+QCbCYEOdIQ5vf0lFQpEEP3/f Jt1ke5XUuyf6xHPO1ZQRS47NvXveKrqa58ymakTQuQnb35zDsmaKbDGtMv+l/ttt wMryRTRAf8Y/1ED5DLSKBMVhv+5jjfTAa0VN1Y1MjWbp9wr+plnumsZnajYMR3du 3qBmFPwU0ryn1DiVmvkkSqejuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELp5/0b EGF90pPp+7Ogf9f64n+OMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQzFHduFtv/SZ9HbvvKs0oopvsh3VqTezkdJK5rpGY8laKB55lmzKJ q+v60C4er0QmgK0mpm3oU+XoYgRSe4v9FHZzv+0fuCsPKAlk/t47PSO/gfZusrdP XIyn7BylndewuMiBhZYNVilVGCwTb8sNlWmfLacGT5sTnzKipABA6a5wLkROqX2r WE6oabVWdeoxjZWsdYCYxBNtaxft6ltqEPFmGFGO+sxJXFMghZ18UZHvKrEeEQh4 iffuc1eeIs/AQlrWTzYy8JlAHGB980vD/zoRsBJJZRo7fBQE10dDjdLYmpKKW3RN Qhiu14i0YOGxEZueaEoxLuxy0H9z3mzR -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:36 2025 by rpki-client