$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: KWHbbLp0GHuval9qHLJPiyjKSC0AGrEWPHnnb3IUnf4= Subject key identifier: 60:8B:0D:AD:0B:AB:C6:13:A9:5D:82:F5:E4:A9:88:40:8D:70:FA:93 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B04 Signing time: Fri 22 Aug 2025 15:36:14 +0000 Manifest this update: Fri 22 Aug 2025 15:36:13 +0000 Manifest next update: Fri 29 Aug 2025 15:36:13 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: fmUYYLfFk/AB82HYspKh7Daft6KeiTbvNcLZ4WvWQwA=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: 8JXHn+tn0IVLCUvOUOerZKmcj6/h+ZMsxk2iLkFwjsA=) 3: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: bFIjQrk+SKu0XJffarEwWtaET/rTeUOfIWLHnin1FNE=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: ReV9a7hSveeezSpIAzgAbbvdpzxiWLw3q4n5gLELjhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11080 (0x2b48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Aug 22 15:36:13 2025 GMT Not After : Aug 29 15:36:13 2025 GMT Subject: CN=68a88e6e-40c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:8c:75:f3:6a:d2:33:7a:84:ba:ce:a9:e6: 26:a7:9c:8d:5f:09:ff:6d:40:94:3e:10:2e:56:9b: ea:2e:7c:13:5c:bd:59:60:a0:81:bd:97:02:67:78: ae:28:f1:8e:1b:57:cc:df:15:84:ee:a0:23:48:e9: 82:bd:6a:59:73:70:c4:71:2e:10:ec:6a:a2:59:af: a6:8c:cf:7e:7b:45:72:42:7f:dd:3a:61:e5:d8:49: da:58:70:b8:bf:80:a5:85:bb:7f:05:a6:3f:42:52: fc:43:e9:83:95:b8:68:2c:79:76:34:92:1d:3f:f0: 3b:5c:0a:7f:14:dd:b3:10:92:21:dd:bc:61:4e:0f: ad:ea:78:89:8d:9e:8a:12:df:ae:46:75:2d:f6:b6: 3e:a8:70:e1:54:ee:8b:7b:52:72:31:bf:c8:27:5c: ef:24:b5:ea:6b:9d:e4:41:34:5a:d9:9b:d5:58:d8: dd:02:eb:93:ff:dd:65:e2:09:6f:5a:32:d9:66:22: 21:fc:9d:2e:ab:58:d2:32:9f:78:6a:00:23:af:4a: a0:36:31:50:2e:9e:f6:e4:58:eb:02:e8:fc:e8:19: c8:1d:0e:8c:47:02:a0:b7:84:c6:b2:e3:b4:18:f8: 10:13:65:46:14:28:ec:de:a8:4e:db:6f:15:b0:e2: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:0D:AD:0B:AB:C6:13:A9:5D:82:F5:E4:A9:88:40:8D:70:FA:93 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f2:99:c6:b5:de:6a:10:a0:76:3b:90:83:27:0b:64:c1:ee: 87:f6:14:da:f1:c5:95:3f:5f:bd:8e:65:8b:bc:ed:d0:5c:93: ab:04:e6:b8:1d:4d:10:53:fe:33:61:af:ba:4e:b1:a7:73:0b: 62:79:1f:57:12:c2:33:d8:27:42:89:b4:f9:41:36:6d:45:22: 78:13:43:a6:85:0e:09:33:19:08:c2:9f:02:ec:e0:10:08:0f: c3:f1:93:37:3d:c4:89:d5:b8:f5:b4:ac:11:57:bb:29:8c:7f: e1:3b:79:1a:92:9b:a7:1c:a3:fd:c1:af:12:84:5e:36:4e:e8: 3d:f6:de:7d:66:5e:f9:37:d9:9b:9d:6c:23:5c:f8:40:66:94: 7c:ed:90:71:eb:8d:10:a8:bf:8d:e9:52:f1:fe:bf:20:29:8f: 6b:fd:04:c4:b6:4c:85:7f:77:f2:ef:ad:da:47:22:25:60:ac: ca:b2:c9:55:a8:fb:6e:80:e3:8c:c0:2b:ad:fa:9e:e9:0f:21: df:e3:86:05:e4:47:35:bb:98:0d:a9:0f:7f:87:45:7d:e1:65: d7:7a:47:9d:b2:9d:1b:1d:5d:c0:a5:fa:ab:0f:7b:d8:89:7c: 72:05:10:8e:05:bf:0f:34:49:19:01:22:3b:d6:9b:f3:a8:72: a3:2e:9c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjUwODIyMTUzNjEzWhcNMjUwODI5MTUzNjEzWjAYMRYwFAYD VQQDEw02OGE4OGU2ZS00MGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cuMdfNq0jN6hLrOqeYmp5yNXwn/bUCUPhAuVpvqLnwTXL1ZYKCBvZcCZ3iu KPGOG1fM3xWE7qAjSOmCvWpZc3DEcS4Q7GqiWa+mjM9+e0VyQn/dOmHl2EnaWHC4 v4Clhbt/BaY/QlL8Q+mDlbhoLHl2NJIdP/A7XAp/FN2zEJIh3bxhTg+t6niJjZ6K Et+uRnUt9rY+qHDhVO6Le1JyMb/IJ1zvJLXqa53kQTRa2ZvVWNjdAuuT/91l4glv WjLZZiIh/J0uq1jSMp94agAjr0qgNjFQLp725FjrAuj86BnIHQ6MRwKgt4TGsuO0 GPgQE2VGFCjs3qhO228VsOJxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCLDa0L q8YTqV2C9eSpiECNcPqTMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB8pnGtd5qEKB2O5CDJwtkwe6H9hTa8cWVP1+9jmWLvO3QXJOrBOa4 HU0QU/4zYa+6TrGncwtieR9XEsIz2CdCibT5QTZtRSJ4E0OmhQ4JMxkIwp8C7OAQ CA/D8ZM3PcSJ1bj1tKwRV7spjH/hO3kakpunHKP9wa8ShF42Tug99t59Zl75N9mb nWwjXPhAZpR87ZBx640QqL+N6VLx/r8gKY9r/QTEtkyFf3fy763aRyIlYKzKsslV qPtugOOMwCut+p7pDyHf44YF5Ec1u5gNqQ9/h0V94WXXekedsp0bHV3ApfqrD3vY iXxyBRCOBb8PNEkZASI71pvzqHKjLpwi -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:38 2025 by rpki-client