$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json) Hash identifier: bnWPCne0vrbZVNCGdJHwrvo3/rGEmab0O83H/KsTPE4= Subject key identifier: A8:CE:04:ED:E8:23:79:44:5A:19:4A:E9:C9:A2:C4:B2:C9:B6:CB:56 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft Manifest number: 048A Signing time: Sat 23 Aug 2025 00:15:08 +0000 Manifest this update: Sat 23 Aug 2025 00:15:07 +0000 Manifest next update: Sat 30 Aug 2025 00:15:07 +0000 Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: 3DKNC1dcqSvL2iEYpXk/RBKfQBfbFA3qcimwjPO3YdY=) 2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: OH+ilqdv9s3kTRrQEcIweA5ha/9ZRdWs4Wko3puaZH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: Aug 23 00:15:07 2025 GMT Not After : Aug 30 00:15:07 2025 GMT Subject: CN=68a9080c-a340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:13:b1:7e:f4:43:d6:89:10:c3:1d:bc:61:e4: 0b:80:da:0c:31:76:ae:42:77:d3:0a:82:6b:27:38: ee:47:58:16:e0:15:0b:21:93:02:7f:29:27:28:3a: d4:ac:fc:2d:43:48:ae:f4:15:6a:ae:4e:4d:b8:2a: 72:05:64:07:59:f5:86:d9:fa:a8:42:7c:79:b1:a0: 1f:f9:32:f5:ab:ef:9a:bb:0b:a6:b6:96:2c:a3:fb: ad:9b:81:a5:93:17:ed:ed:98:7f:59:d0:86:27:b4: 40:17:24:ae:39:59:ab:98:de:f3:fa:d7:9b:b5:6a: 72:ad:9c:4b:34:8e:2a:7e:86:6d:0e:32:11:79:d5: 21:43:f3:d8:54:0d:3e:eb:47:ba:71:46:34:63:c9: 58:68:24:15:d3:f0:6e:7f:fd:98:53:25:d1:5a:7a: b0:c2:bd:ac:ad:13:d6:28:bb:5c:31:b3:0b:a0:d7: d0:d7:40:99:61:de:6b:54:89:37:2b:51:a3:17:76: d1:c8:97:e5:a6:8b:0a:1d:3f:11:b0:6f:3e:0b:e8: 39:b5:13:f9:6f:88:e5:2d:0c:06:12:f3:42:c8:cd: 3a:20:27:bb:e6:50:0f:63:a7:a1:8c:b6:95:9b:a2: b8:b4:b7:0b:51:e2:2e:35:50:5a:91:a6:42:6d:0e: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CE:04:ED:E8:23:79:44:5A:19:4A:E9:C9:A2:C4:B2:C9:B6:CB:56 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f1:03:43:2f:da:d0:1b:04:71:70:88:2c:b9:63:61:bd:4f: ef:9c:61:0a:05:c3:03:93:48:da:69:ba:48:74:0e:55:29:9b: b1:4b:59:1c:fe:54:6f:56:9d:a9:1b:ab:62:33:42:30:6c:8c: a9:e4:0c:e2:c8:c1:95:52:95:28:0c:ab:26:84:67:7d:e0:78: 38:ba:e1:69:d1:28:97:bc:2d:d5:71:7c:e7:4e:f7:79:a9:87: 08:e9:ed:99:4c:12:78:dd:4b:37:5b:29:c9:15:74:8b:fd:13: 3c:2b:b5:f8:df:ae:30:37:de:eb:26:42:d7:ca:0f:56:ff:a3: 40:c1:39:db:2c:15:fe:18:e9:bb:b3:dc:2f:5d:d1:bc:cb:1d: 81:2a:9f:7b:a1:7e:e9:f5:fe:9e:d5:b9:4f:bc:b3:6e:ea:76: 1a:05:96:39:25:f1:ed:1e:d0:31:68:90:6f:01:ac:9e:6f:42: ea:64:92:8f:77:12:1d:06:7e:ce:bc:10:70:fb:c3:ba:8d:45: b4:c9:90:93:58:32:9b:d4:06:2d:db:2b:54:1f:51:53:1d:a0: 7b:29:21:62:99:14:aa:99:3c:c4:91:97:16:a7:da:91:c5:1e: f1:17:0e:dc:c6:61:5e:40:30:2f:d5:69:d2:aa:68:a0:2e:9f: 5c:69:cc:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjUwODIzMDAxNTA3WhcNMjUwODMwMDAxNTA3WjAYMRYwFAYD VQQDEw02OGE5MDgwYy1hMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BOxfvRD1okQwx28YeQLgNoMMXauQnfTCoJrJzjuR1gW4BULIZMCfyknKDrU rPwtQ0iu9BVqrk5NuCpyBWQHWfWG2fqoQnx5saAf+TL1q++auwumtpYso/utm4Gl kxft7Zh/WdCGJ7RAFySuOVmrmN7z+tebtWpyrZxLNI4qfoZtDjIRedUhQ/PYVA0+ 60e6cUY0Y8lYaCQV0/Buf/2YUyXRWnqwwr2srRPWKLtcMbMLoNfQ10CZYd5rVIk3 K1GjF3bRyJflposKHT8RsG8+C+g5tRP5b4jlLQwGEvNCyM06ICe75lAPY6ehjLaV m6K4tLcLUeIuNVBakaZCbQ65WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjOBO3o I3lEWhlK6cmixLLJtstWMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL8QNDL9rQGwRxcIgsuWNhvU/vnGEKBcMDk0jaabpIdA5VKZuxS1kc /lRvVp2pG6tiM0IwbIyp5AziyMGVUpUoDKsmhGd94Hg4uuFp0SiXvC3VcXznTvd5 qYcI6e2ZTBJ43Us3WynJFXSL/RM8K7X4364wN97rJkLXyg9W/6NAwTnbLBX+GOm7 s9wvXdG8yx2BKp97oX7p9f6e1blPvLNu6nYaBZY5JfHtHtAxaJBvAayeb0LqZJKP dxIdBn7OvBBw+8O6jUW0yZCTWDKb1AYt2ytUH1FTHaB7KSFimRSqmTzEkZcWp9qR xR7xFw7cxmFeQDAv1WnSqmigLp9caczw -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:00 2025 by rpki-client