$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: JGCp33vMNx5ByolilgVL3srgDqbk8jsPAMVVeSQuG78= Subject key identifier: C9:AF:A0:71:F6:2A:C6:CF:95:D6:4F:04:D2:49:2A:18:5E:10:42:A6 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: F3 Signing time: Sat 23 Aug 2025 05:45:13 +0000 Manifest this update: Sat 23 Aug 2025 05:45:12 +0000 Manifest next update: Sat 30 Aug 2025 05:45:12 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: Z0+/18rU3t34JE//9xrhGkl+PuTDOHZlIHab/rZ3x1U=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: vUDH2ZK5OJcy3mBbkdGoudlGrWh6Xv2GZJY44SeKbcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190, serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Aug 23 05:45:12 2025 GMT Not After : Aug 30 05:45:12 2025 GMT Subject: CN=68a95569-e992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:c4:e9:b1:82:63:b0:b8:ae:90:7f:98:03: 5b:7c:6c:72:c1:50:0c:9f:b8:62:44:a1:9f:d7:a8: 68:e0:ad:d2:cd:08:43:1d:00:e9:6f:54:61:38:e6: bb:07:2e:76:4a:c2:73:7f:44:12:c7:bb:ae:a1:cf: 0b:06:9b:7f:a1:33:f8:b5:df:96:fd:ee:cf:8d:0a: 50:59:17:4d:b2:97:ef:13:ad:9b:e0:b0:57:52:bc: 7d:dd:e0:65:ad:89:8d:9c:f8:ae:e2:bf:d6:e2:3c: 5f:29:0a:97:93:a8:a2:a5:c4:31:a9:a9:7f:3a:91: d5:97:b1:8c:10:e0:d3:40:c3:fb:c8:89:e1:40:0f: c6:8d:e7:f6:c9:03:08:49:6a:b4:a0:57:b2:87:d1: 43:34:54:60:9e:4e:9e:29:eb:ca:68:a8:8a:2c:74: 4c:bd:ed:19:3e:94:3c:33:61:45:3d:f2:89:57:60: 08:c9:b2:6a:0d:ba:97:ba:3d:c1:b2:b0:da:d7:44: b5:3c:3b:73:70:fa:08:79:2f:14:22:c5:a6:08:ed: 35:21:e8:46:a4:7e:ed:56:92:08:af:c2:9d:c9:50: 80:9e:54:87:e0:6a:60:61:6c:4e:1f:1a:76:7a:bc: f4:e3:31:b0:ee:3f:14:09:44:40:ac:ab:03:d4:9e: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:A0:71:F6:2A:C6:CF:95:D6:4F:04:D2:49:2A:18:5E:10:42:A6 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a4:94:2d:9e:5d:e0:11:cc:95:15:d5:46:6e:50:1a:82:5c: 0f:b0:31:cf:30:03:2c:3b:56:8e:37:8e:de:c7:b8:73:53:4c: 11:3a:55:28:27:fa:68:6a:3e:2d:4b:2a:7f:d5:59:ae:8c:00: 49:f1:05:bd:49:8f:c5:32:d3:c8:8a:9f:ed:bf:ea:c9:1a:91: 68:9c:75:89:33:e8:a0:b5:d5:d0:97:d1:25:21:20:29:4b:d3: 3a:2c:30:7b:69:0d:6e:36:77:5a:fb:f4:cd:d4:88:c1:62:70: ae:3a:8a:c3:6a:e0:76:d3:9c:d6:f3:89:af:16:51:ab:81:eb: 00:af:3a:85:b6:9e:7d:9e:23:11:bf:6d:75:97:a6:92:12:4b: 03:6f:4c:11:52:c9:7a:15:98:19:1c:33:22:9a:c8:09:58:cc: e2:cb:6a:70:02:37:cb:7b:26:0c:ca:46:13:22:73:d5:90:2c: 7d:17:d7:66:2f:dd:17:cc:c1:6a:f2:2a:94:82:d5:aa:2b:fb: 19:ee:ff:65:6c:4e:af:38:2c:51:d2:c4:a2:b5:cc:36:fe:bb: 94:d8:3b:68:17:0f:bc:17:c9:af:28:8f:34:ea:d6:5f:6e:1c: 57:5a:a9:7c:10:8a:e6:6e:73:af:b0:91:dc:32:8c:57:9f:15: 68:c0:75:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxOTAxMTAvBgNVBAUTKEQ2QkYzREUxNjQ0MUVEN0Q4NzUwNkRFMDlFNERENUQ2 MzhFMEJBNjkwHhcNMjUwODIzMDU0NTEyWhcNMjUwODMwMDU0NTEyWjAYMRYwFAYD VQQDEw02OGE5NTU2OS1lOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN/E6bGCY7C4rpB/mANbfGxywVAMn7hiRKGf16ho4K3SzQhDHQDpb1RhOOa7 By52SsJzf0QSx7uuoc8LBpt/oTP4td+W/e7PjQpQWRdNspfvE62b4LBXUrx93eBl rYmNnPiu4r/W4jxfKQqXk6iipcQxqal/OpHVl7GMEODTQMP7yInhQA/Gjef2yQMI SWq0oFeyh9FDNFRgnk6eKevKaKiKLHRMve0ZPpQ8M2FFPfKJV2AIybJqDbqXuj3B srDa10S1PDtzcPoIeS8UIsWmCO01IehGpH7tVpIIr8KdyVCAnlSH4GpgYWxOHxp2 erz04zGw7j8UCURArKsD1J5ZvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmvoHH2 KsbPldZPBNJJKhheEEKmMB8GA1UdIwQYMBaAFNa/PeFkQe19h1Bt4J5N1dY44Lpp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE5MC81N0I0MDU5NDNB ODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdYMkhVRzNnbmszVjFqamd1 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8xcjg5NFdSQjdY MkhVRzNnbmszVjFqamd1bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBupJQtnl3gEcyVFdVGblAaglwPsDHPMAMsO1aON47ex7hzU0wROlUo J/poaj4tSyp/1VmujABJ8QW9SY/FMtPIip/tv+rJGpFonHWJM+igtdXQl9ElISAp S9M6LDB7aQ1uNnda+/TN1IjBYnCuOorDauB205zW84mvFlGrgesArzqFtp59niMR v211l6aSEksDb0wRUsl6FZgZHDMimsgJWMziy2pwAjfLeyYMykYTInPVkCx9F9dm L90XzMFq8iqUgtWqK/sZ7v9lbE6vOCxR0sSitcw2/ruU2DtoFw+8F8mvKI806tZf bhxXWql8EIrmbnOvsJHcMoxXnxVowHWP -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:05 2025 by rpki-client