$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft File: aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft (raw, json) Hash identifier: Rc2x7XQdMAcCFYLI7q3fT1RKVKCUImdxNJOcUM+ebS0= Subject key identifier: D7:BE:6D:1A:A4:B2:B7:4F:14:CC:8A:3F:F7:BF:C1:47:14:E2:A8:70 Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81 Certificate issuer: /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft Manifest number: D4 Signing time: Sat 23 Aug 2025 05:48:30 +0000 Manifest this update: Sat 23 Aug 2025 05:48:30 +0000 Manifest next update: Sat 30 Aug 2025 05:48:30 +0000 Files and hashes: 1: aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl (hash: ghra0/MIcCBM5qKMh34/V5VEFtw+yWIAnY4nCZHF4Tc=) 2: 1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (hash: AOFWu44ifsxCI8lU0JTnjALVgoq1vvzoggdsff7v9D8=) 3: F31A7084E2C911EFADAB3C32C4F9AE02.roa (hash: jAscgWh7S9/demSMPFwsCSZccuBN3foVEhiH5Tuiw30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81 Validity Not Before: Aug 23 05:48:30 2025 GMT Not After : Aug 30 05:48:30 2025 GMT Subject: CN=68a9562e-f3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:74:cb:76:05:22:95:3e:fe:69:13:5f:62: 8f:57:ce:31:fb:0c:cf:69:05:62:61:c1:76:2e:19: f2:27:70:84:eb:9b:b3:66:bb:09:b6:8e:38:6b:47: d5:9f:c1:a5:4d:8f:bb:fd:56:bd:ad:f1:ff:15:0f: c8:00:6c:e5:66:f2:b2:f9:fb:3f:5d:f9:20:ad:86: b6:2d:3e:d3:58:6d:2c:37:18:cb:bc:72:a4:38:0f: 39:95:f5:39:f3:19:49:ed:92:8c:bf:93:ef:80:0e: a6:ab:27:c0:c8:4e:35:24:78:5a:43:28:a1:56:c7: 1a:b3:af:42:96:97:12:48:e1:49:35:57:1e:04:f8: 29:93:c9:2d:11:07:a5:48:a5:87:8c:7c:9c:56:a9: a8:34:27:ab:f2:f3:18:e3:63:78:65:64:76:2a:db: f2:ef:d3:0a:82:98:a9:e3:06:df:3a:c8:87:5c:d2: 29:fa:6c:82:47:cf:71:71:44:44:1b:4b:c6:31:ea: f0:d8:9c:cf:67:0a:a4:8f:01:6e:0f:55:0f:67:69: d8:70:ee:5c:2f:fb:7b:1b:40:f8:17:7e:f8:58:be: ae:ed:5e:02:a8:91:ac:15:a5:4e:97:1c:ec:32:66: 67:34:fb:5e:d2:47:9b:a7:3e:0d:30:88:78:d6:ce: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BE:6D:1A:A4:B2:B7:4F:14:CC:8A:3F:F7:BF:C1:47:14:E2:A8:70 X509v3 Authority Key Identifier: keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:12:7a:d2:0c:6d:1a:6d:67:23:d9:fc:a0:fe:dd:6d:40:58: 6a:21:6c:e4:92:52:51:b7:a6:2b:e0:ca:72:b3:ca:c8:b7:fa: 12:29:e4:e9:cd:05:90:ab:0f:75:9b:c9:36:61:fe:65:21:fe: 97:99:01:e6:19:d7:38:b8:69:77:b1:e0:20:ae:42:55:f5:f9: 05:12:22:40:bc:65:12:ed:e6:18:a8:7e:60:63:5e:c5:b5:ec: 1e:f8:38:86:4a:f9:69:da:94:81:88:87:0b:82:4b:83:b8:ae: 4f:3d:42:5a:9f:b4:23:f7:fa:08:ab:ca:46:7d:bd:61:22:67: 23:81:1d:44:6c:94:b5:35:0e:ad:05:3c:49:58:91:38:e0:38: f1:5e:8a:04:af:b9:ec:1d:61:3d:63:02:4d:c5:a2:7b:96:0d: 8f:c1:af:2c:8a:36:05:fb:d3:e3:b6:d7:59:93:ad:97:53:3b: 3a:b7:d9:ec:e2:b5:71:04:73:a4:fb:81:05:db:c5:e4:1a:a5: 07:e7:15:52:8d:62:02:be:a4:9b:d9:ed:ee:fe:1d:87:8a:c1: 5b:41:d8:7f:4e:56:83:8a:83:b6:12:ec:1d:50:c7:cb:4f:e8: db:fb:0b:28:5b:67:b5:93:f1:7f:05:d7:85:40:38:b4:54:9d: 1f:b5:9f:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3NDgxMTAvBgNVBAUTKDY5NDg1OEI5MkJDQTdDMDg3NjVCQzZCQkMxODM5MjNF QjU3MTFGODEwHhcNMjUwODIzMDU0ODMwWhcNMjUwODMwMDU0ODMwWjAYMRYwFAYD VQQDEw02OGE5NTYyZS1mM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyl0y3YFIpU+/mkTX2KPV84x+wzPaQViYcF2LhnyJ3CE65uzZrsJto44a0fV n8GlTY+7/Va9rfH/FQ/IAGzlZvKy+fs/XfkgrYa2LT7TWG0sNxjLvHKkOA85lfU5 8xlJ7ZKMv5PvgA6mqyfAyE41JHhaQyihVscas69ClpcSSOFJNVceBPgpk8ktEQel SKWHjHycVqmoNCer8vMY42N4ZWR2Ktvy79MKgpip4wbfOsiHXNIp+myCR89xcURE G0vGMerw2JzPZwqkjwFuD1UPZ2nYcO5cL/t7G0D4F374WL6u7V4CqJGsFaVOlxzs MmZnNPte0kebpz4NMIh41s5k+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe+bRqk srdPFMyKP/e/wUcU4qhwMB8GA1UdIwQYMBaAFGlIWLkrynwIdlvGu8GDkj61cR+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTc0OC9BMjE4MzdCMDQy QjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZBaDJXOGE3d1lPU1ByVnhI NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FVaFl1U3ZLZkFoMlc4YTd3WU9TUHJWeEg0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTc0OC9BMjE4MzdCMDQyQjExMUVGOTJFNTY1NzhDNEY5QUUwMi9hVWhZdVN2S2ZB aDJXOGE3d1lPU1ByVnhINEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNEnrSDG0abWcj2fyg/t1tQFhqIWzkklJRt6Yr4Mpys8rIt/oSKeTp zQWQqw91m8k2Yf5lIf6XmQHmGdc4uGl3seAgrkJV9fkFEiJAvGUS7eYYqH5gY17F tewe+DiGSvlp2pSBiIcLgkuDuK5PPUJan7Qj9/oIq8pGfb1hImcjgR1EbJS1NQ6t BTxJWJE44DjxXooEr7nsHWE9YwJNxaJ7lg2Pwa8sijYF+9PjttdZk62XUzs6t9ns 4rVxBHOk+4EF28XkGqUH5xVSjWICvqSb2e3u/h2HisFbQdh/TlaDioO2EuwdUMfL T+jb+wsoW2e1k/F/BdeFQDi0VJ0ftZ8T -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:41 2025 by rpki-client