$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json) Hash identifier: JKmT7y2dOnIhw5J/Zv/qajv8KLlq5sdNufPdzT1YHqs= Subject key identifier: 93:04:82:E4:6F:4B:82:F3:13:A5:C1:0C:78:A6:89:6D:05:61:C7:DE Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft Manifest number: 0BB0 Signing time: Fri 22 Aug 2025 19:05:42 +0000 Manifest this update: Fri 22 Aug 2025 19:05:41 +0000 Manifest next update: Fri 29 Aug 2025 19:05:41 +0000 Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: z78iF/lBTWj5MkLVWAPCP44q2bNPOcV+GHaczX6ma20=) 2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: 5XNAMXcyNSOVLGmmucARGwpqHZGGrdPlivmquQGAyUw=) 3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: 7wRjpl4ak/daHT3cAIU8dsdddsw6EG34B50egxoHuUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346 Validity Not Before: Aug 22 19:05:41 2025 GMT Not After : Aug 29 19:05:41 2025 GMT Subject: CN=68a8bf85-afbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:69:aa:93:33:97:f0:0a:13:c0:05:d8:c8: bd:bc:46:83:60:8c:85:74:c8:d6:18:af:7d:82:54: 1a:b5:56:26:c9:1f:a0:e4:f8:ee:54:e1:a8:d8:6c: e6:69:10:77:51:5c:ca:74:ad:7f:b7:6b:d8:4a:47: 6d:ae:d0:73:70:ed:a0:f1:da:1a:15:2a:b0:59:a8: 0c:3c:73:ad:2c:c2:b1:ca:f1:14:f8:15:b4:d9:7f: 4a:a1:cc:ce:1a:6c:ab:4d:5a:93:f1:0a:a9:13:1e: 8b:1a:05:0f:09:81:0c:14:6b:01:0d:24:87:1c:30: c3:cb:79:ce:8a:20:37:38:2f:dc:b3:3e:7c:5f:3e: 8c:23:b0:46:0f:3d:06:d0:1c:06:01:7e:55:b8:64: 40:47:16:91:72:51:80:f7:91:1d:8d:98:e4:cd:aa: 54:20:1f:7a:c5:2f:d8:b4:f0:a2:e0:28:26:fd:6d: d9:18:67:46:c4:d1:8b:e2:1b:57:df:7c:c9:66:4d: b7:6c:61:ef:49:5c:33:50:70:59:51:46:c9:ba:db: d2:d1:81:1b:e8:d9:6c:0b:4a:9f:40:72:4b:41:75: 72:34:a5:7a:7d:91:78:37:c6:34:fd:1f:82:6d:2b: 3b:2a:4a:81:9a:67:c0:d0:2b:28:04:ca:c4:fe:38: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:04:82:E4:6F:4B:82:F3:13:A5:C1:0C:78:A6:89:6D:05:61:C7:DE X509v3 Authority Key Identifier: keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:a8:64:90:04:e0:ec:2a:89:65:04:c8:6a:1b:c2:12:a2: 69:bb:d7:aa:0f:72:8a:31:ca:ee:77:53:f5:30:06:cf:6d:4b: cf:0e:df:fc:f6:37:e0:2d:16:a6:8a:e2:de:c2:80:f8:fc:db: 98:6b:e3:42:c5:cd:cc:70:06:29:da:3d:0d:7f:23:c1:54:17: c6:b7:2d:3b:7b:6d:45:3f:e3:6b:b5:26:c5:7c:f6:7b:cb:ee: 46:04:8c:b6:d6:d8:a2:57:d8:04:7d:0d:80:9f:18:8b:22:01: 8f:cc:64:f6:b4:d9:21:51:eb:81:4d:5d:ac:67:d3:f7:86:ff: 07:31:36:54:3f:4a:57:f3:81:b7:9d:57:0f:38:76:21:9a:a7: f8:55:8c:ff:86:e0:04:c2:d6:77:a9:fa:94:3b:43:26:b7:36: 66:64:96:63:dc:6e:f0:d7:c5:91:a2:01:08:f2:97:3a:c3:20: 63:8a:af:98:45:c9:f4:c1:9f:b3:9a:5c:2c:9c:de:ce:02:af: 12:d4:a6:ab:57:d2:72:3a:5c:31:f7:95:08:11:a5:9e:76:5e: 01:7a:56:98:ba:ee:70:97:4b:09:f8:5b:0f:aa:9b:5a:d0:06: 7d:f7:7a:ee:0d:d1:c6:50:e1:1c:4f:56:c9:d7:4f:ed:35:a9: d5:23:c8:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF QTQ3NDUzNDYwHhcNMjUwODIyMTkwNTQxWhcNMjUwODI5MTkwNTQxWjAYMRYwFAYD VQQDEw02OGE4YmY4NS1hZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06BpqpMzl/AKE8AF2Mi9vEaDYIyFdMjWGK99glQatVYmyR+g5PjuVOGo2Gzm aRB3UVzKdK1/t2vYSkdtrtBzcO2g8doaFSqwWagMPHOtLMKxyvEU+BW02X9KoczO GmyrTVqT8QqpEx6LGgUPCYEMFGsBDSSHHDDDy3nOiiA3OC/csz58Xz6MI7BGDz0G 0BwGAX5VuGRARxaRclGA95EdjZjkzapUIB96xS/YtPCi4Cgm/W3ZGGdGxNGL4htX 33zJZk23bGHvSVwzUHBZUUbJutvS0YEb6NlsC0qfQHJLQXVyNKV6fZF4N8Y0/R+C bSs7KkqBmmfA0CsoBMrE/jgWvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMEguRv S4LzE6XBDHimiW0FYcfeMB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1gahkkATg7CqJZQTIahvCEqJpu9eqD3KKMcrud1P1MAbPbUvPDt/8 9jfgLRamiuLewoD4/NuYa+NCxc3McAYp2j0NfyPBVBfGty07e21FP+NrtSbFfPZ7 y+5GBIy21tiiV9gEfQ2AnxiLIgGPzGT2tNkhUeuBTV2sZ9P3hv8HMTZUP0pX84G3 nVcPOHYhmqf4VYz/huAEwtZ3qfqUO0MmtzZmZJZj3G7w18WRogEI8pc6wyBjiq+Y Rcn0wZ+zmlwsnN7OAq8S1KarV9JyOlwx95UIEaWedl4BelaYuu5wl0sJ+FsPqpta 0AZ993ruDdHGUOEcT1bJ10/tNanVI8jN -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:48 2025 by rpki-client