$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: 5wFjScrXQIqFnFE+L7Vismf3pQzC4fCQyLQTx7H+rjg= Subject key identifier: 06:EE:AC:BB:21:A0:35:9F:83:28:B0:D7:2C:0D:31:67:86:3C:5F:A2 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 01:47:47 +0000 Manifest this update: Sat 23 Aug 2025 01:47:46 +0000 Manifest next update: Sat 30 Aug 2025 01:47:46 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: 0D75YrXlC+00i95jTmwzTD8yHaqymqLA0jYBZKRR/qw=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: cG28lDeyahzWWkmTahaq+sCJHYmimDEkICh6+dm+qWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Aug 23 01:47:46 2025 GMT Not After : Aug 30 01:47:46 2025 GMT Subject: CN=68a91dc2-b2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:61:56:ee:18:41:c7:2f:50:46:41:aa:eb: bc:9f:1d:ef:aa:69:76:32:46:c8:10:a9:22:9e:74: eb:7a:42:ba:16:07:c1:ed:ab:00:4f:ff:39:ef:1c: fa:14:af:29:0f:19:2e:53:2a:c5:e7:ae:75:37:4f: ad:c7:5f:02:eb:b1:b0:4f:31:d3:25:11:b3:ae:be: 2c:69:a0:7e:92:6d:48:08:44:59:80:66:43:57:b1: 74:0c:ee:cf:bc:71:6f:ce:8a:79:07:36:31:23:d0: 0b:7c:3f:85:dc:11:7e:26:26:a9:53:a9:a3:8f:83: e3:cf:72:bd:ca:d2:61:d0:d8:56:8e:24:8f:0c:4e: dd:81:86:f0:d5:e8:23:95:68:b9:e7:7f:69:a3:53: f3:df:5b:37:42:b0:fb:97:78:8a:37:77:c1:14:50: 08:53:e3:b5:fd:a1:60:a3:43:8b:17:b9:43:92:47: 9a:b8:a7:50:71:95:c2:9b:bf:b0:a2:1e:c3:f1:8f: 14:65:f3:1f:3b:fa:ca:28:b4:14:fa:d7:76:3e:26: 0a:ba:68:15:bb:64:a8:f0:a1:f8:94:bb:0c:5a:30: d0:a7:ac:29:72:06:1a:2a:2a:33:4d:87:91:26:62: cd:12:57:61:a8:2c:ed:2f:fd:f9:22:8f:e0:de:7b: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EE:AC:BB:21:A0:35:9F:83:28:B0:D7:2C:0D:31:67:86:3C:5F:A2 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:63:52:4e:d5:cd:c9:88:0c:4f:02:12:a7:ce:e5:5a:5a:2a: 5d:2f:e9:59:37:7e:c5:6d:9b:c8:b2:ce:2e:76:4a:81:9f:31: e5:fd:f4:5d:05:5e:6b:9e:75:6e:0b:44:57:38:71:d7:d3:71: c1:fe:ae:75:dd:7a:a5:d2:39:80:57:31:d4:16:f5:b4:00:26: 8b:90:2a:16:8d:9e:48:fb:a7:d2:7f:20:d3:0d:7e:da:a2:e2: bd:bf:c1:5d:4a:38:b8:30:48:6d:6d:a7:0d:19:54:a9:a2:53: b4:6d:14:38:dc:ac:0d:71:78:0f:d5:d1:3c:12:bf:90:ae:0c: 99:d7:61:c8:4d:bc:77:d1:8a:1c:7d:9a:ba:f2:3c:12:69:c4: 83:25:83:f1:60:18:52:93:8e:a5:f0:9e:e2:10:c0:fb:58:07: 3c:a4:22:18:3a:9b:e8:0a:81:51:2e:eb:79:c4:fe:d9:ed:ef: 63:a2:bd:b2:fc:96:a5:c8:87:52:9c:f4:cc:24:aa:b1:52:1e: 98:b4:3b:d6:f3:62:0d:ca:b6:58:07:88:36:be:7c:4f:df:38: 1b:9f:75:87:ae:8b:6a:69:86:97:5a:da:c3:80:64:c6:cb:e0: 90:97:0a:d4:47:2a:04:24:b2:58:b9:df:6d:f8:72:b0:92:73: f4:99:d8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjUwODIzMDE0NzQ2WhcNMjUwODMwMDE0NzQ2WjAYMRYwFAYD VQQDEw02OGE5MWRjMi1iMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6BhVu4YQccvUEZBquu8nx3vqml2MkbIEKkinnTrekK6FgfB7asAT/857xz6 FK8pDxkuUyrF5651N0+tx18C67GwTzHTJRGzrr4saaB+km1ICERZgGZDV7F0DO7P vHFvzop5BzYxI9ALfD+F3BF+JiapU6mjj4Pjz3K9ytJh0NhWjiSPDE7dgYbw1egj lWi5539po1Pz31s3QrD7l3iKN3fBFFAIU+O1/aFgo0OLF7lDkkeauKdQcZXCm7+w oh7D8Y8UZfMfO/rKKLQU+td2PiYKumgVu2So8KH4lLsMWjDQp6wpcgYaKiozTYeR JmLNEldhqCztL/35Io/g3nv81QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAburLsh oDWfgyiw1ywNMWeGPF+iMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Y1JO1c3JiAxPAhKnzuVaWipdL+lZN37FbZvIss4udkqBnzHl/fRd BV5rnnVuC0RXOHHX03HB/q513Xql0jmAVzHUFvW0ACaLkCoWjZ5I+6fSfyDTDX7a ouK9v8FdSji4MEhtbacNGVSpolO0bRQ43KwNcXgP1dE8Er+QrgyZ12HITbx30Yoc fZq68jwSacSDJYPxYBhSk46l8J7iEMD7WAc8pCIYOpvoCoFRLut5xP7Z7e9jor2y /JalyIdSnPTMJKqxUh6YtDvW82INyrZYB4g2vnxP3zgbn3WHrotqaYaXWtrDgGTG y+CQlwrURyoEJLJYud9t+HKwknP0mdgS -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:00 2025 by rpki-client