$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft File: 8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json) Hash identifier: yjh1m3FepVfFaZQsiz7wyaDNmghtExC962gZf/qcksk= Subject key identifier: 4E:C4:2F:9D:28:5D:B1:DE:C4:C1:68:75:EA:13:7A:7B:F1:D9:C7:46 Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 Certificate issuer: /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft Manifest number: 0368 Signing time: Sat 23 Aug 2025 01:10:14 +0000 Manifest this update: Sat 23 Aug 2025 01:10:14 +0000 Manifest next update: Sat 30 Aug 2025 01:10:14 +0000 Files and hashes: 1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: p16OwEWXsOaIHPjvyHZnZP1+QEHAqUiYsGRN1wW2F88=) 2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: S7JF/bNkGQBKzWyyMCIfasqHndqaViHJP5nFlj8AfpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99 Validity Not Before: Aug 23 01:10:14 2025 GMT Not After : Aug 30 01:10:14 2025 GMT Subject: CN=68a914f6-fc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:57:4e:47:fe:ad:2c:d0:51:20:38:6d:12: 94:9e:5a:9a:66:6a:06:51:4f:94:95:c2:fa:8b:fe: 7c:dc:3e:00:a1:9a:c5:76:6f:2f:53:ac:04:76:70: 9e:53:26:ba:7c:e0:65:45:24:8f:92:38:bb:0a:d0: ac:a5:01:cb:42:0f:d8:1d:72:22:a4:13:56:12:53: 97:fd:fc:fd:56:17:54:51:8b:17:11:a1:6f:e4:94: ac:27:8c:50:c6:aa:48:b1:09:ab:8d:8f:3d:3b:4f: d9:5d:2e:4f:a8:d2:18:df:a1:70:ee:c0:16:67:f9: 0c:50:9f:87:d6:5d:7f:bd:87:2d:4f:ae:3a:29:e2: 5d:51:ff:5a:a4:f4:76:fb:3a:7c:aa:42:71:b3:01: ec:5c:18:81:4d:e7:de:d5:83:5f:bd:68:1c:8f:72: be:11:75:42:f7:e7:03:94:a5:ed:2d:94:1d:ca:4d: 28:de:7e:24:02:2b:d0:92:7e:86:d0:af:91:38:65: 4f:a4:77:99:ec:34:61:4b:10:3c:82:9e:97:5a:11: 37:bf:ff:b5:85:2b:f4:af:bb:5d:0b:81:44:9f:a4: d7:7e:15:59:9c:4c:15:cc:2f:c0:4a:a1:82:8b:a0: 75:07:cf:b0:6d:f5:e9:cd:6e:6b:94:31:03:5a:69: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C4:2F:9D:28:5D:B1:DE:C4:C1:68:75:EA:13:7A:7B:F1:D9:C7:46 X509v3 Authority Key Identifier: keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:92:3d:94:e5:a5:63:6e:b4:62:cd:5c:9e:ef:4c:1a:48:f7: 22:67:66:59:62:ac:ce:c8:92:c8:7b:8c:57:75:e4:1f:09:72: f1:73:0c:d4:ee:36:80:26:3e:bb:08:d7:e2:55:71:6e:3f:47: ff:d0:80:7f:f8:f9:63:16:b9:c9:27:97:6a:b6:6e:8d:ce:8e: 2f:24:f7:16:c3:db:13:d2:69:17:e8:6a:84:ba:c7:e8:f1:71: 5e:4d:d5:2b:53:90:f8:cc:c0:93:6e:ce:da:0f:37:c9:b8:fe: b8:ad:ab:4e:4d:d0:19:e6:5c:ea:f2:83:a6:e0:a9:c3:db:86: be:7e:da:2a:da:6e:07:99:8e:43:5c:7c:7b:dc:a8:e7:5f:c0: a0:8c:06:c5:08:f0:56:57:45:b1:a7:38:1b:87:c9:88:50:67: aa:69:59:98:97:63:68:06:c4:19:2f:ee:31:d3:88:14:f6:ff: e5:3f:17:d1:1b:f3:0e:d5:b4:ba:a7:04:62:32:90:ec:bd:74: c9:64:56:70:70:eb:0d:68:64:cd:69:84:ef:1e:b1:0b:8c:a4: 88:39:f1:0b:35:49:e4:30:bb:4e:5f:38:03:83:e8:d6:40:fa: e5:00:70:2b:44:60:23:4b:e0:b7:3a:f2:60:7b:c1:79:80:e9: 5d:e2:30:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB MkYxRTlBOTkwHhcNMjUwODIzMDExMDE0WhcNMjUwODMwMDExMDE0WjAYMRYwFAYD VQQDEw02OGE5MTRmNi1mYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVhXTkf+rSzQUSA4bRKUnlqaZmoGUU+UlcL6i/583D4AoZrFdm8vU6wEdnCe Uya6fOBlRSSPkji7CtCspQHLQg/YHXIipBNWElOX/fz9VhdUUYsXEaFv5JSsJ4xQ xqpIsQmrjY89O0/ZXS5PqNIY36Fw7sAWZ/kMUJ+H1l1/vYctT646KeJdUf9apPR2 +zp8qkJxswHsXBiBTefe1YNfvWgcj3K+EXVC9+cDlKXtLZQdyk0o3n4kAivQkn6G 0K+ROGVPpHeZ7DRhSxA8gp6XWhE3v/+1hSv0r7tdC4FEn6TXfhVZnEwVzC/ASqGC i6B1B8+wbfXpzW5rlDEDWmmulQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7EL50o XbHexMFodeoTenvx2cdGMB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003 SmhFYlNpaDBMM3VpOGVtcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPkj2U5aVjbrRizVye70waSPciZ2ZZYqzOyJLIe4xXdeQfCXLxcwzU 7jaAJj67CNfiVXFuP0f/0IB/+PljFrnJJ5dqtm6Nzo4vJPcWw9sT0mkX6GqEusfo 8XFeTdUrU5D4zMCTbs7aDzfJuP64ratOTdAZ5lzq8oOm4KnD24a+ftoq2m4HmY5D XHx73KjnX8CgjAbFCPBWV0Wxpzgbh8mIUGeqaVmYl2NoBsQZL+4x04gU9v/lPxfR G/MO1bS6pwRiMpDsvXTJZFZwcOsNaGTNaYTvHrELjKSIOfELNUnkMLtOXzgDg+jW QPrlAHArRGAjS+C3OvJge8F5gOld4jCy -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:11 2025 by rpki-client