$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft File: 64EbFIiyDxJmTmSKgmJKMFBonyU.mft (raw, json) Hash identifier: K3yy3dhbtRSSn+2cs/oNUFSVPsvxET3pyQIBuvfNoDc= Subject key identifier: 32:6A:67:56:C5:82:E1:6F:B7:2D:1F:C7:D7:99:D0:64:2A:A9:61:8A Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 Certificate issuer: /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Certificate serial: 0DA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft Manifest number: 0D7A Signing time: Fri 22 Aug 2025 18:05:36 +0000 Manifest this update: Fri 22 Aug 2025 18:05:36 +0000 Manifest next update: Fri 29 Aug 2025 18:05:36 +0000 Files and hashes: 1: 64EbFIiyDxJmTmSKgmJKMFBonyU.crl (hash: hf5Jki2Jgep+mEzZPvUuh5Gwes5iXc3GyKmKCm/FPQc=) 2: F67B28D0B86811EFB4FB3552C4F9AE02.roa (hash: yCxqzmWa893doOfv6hENPdTITWlM9j+UWoyn6s0IOuA=) 3: 9A1481AAB2F411EF9B46DC64C4F9AE02.roa (hash: Add7F0lhUmSvXDEdaWnBa/fqtGzEQ9y//LGpbHGkCZc=) 4: B48F5974897C11EB9D7AE318C4F9AE02.roa (hash: UjEhrY6BSDNfZnVVPw3EjbmEipeGvEYmxIV0JR9ypjw=) 5: C14E20B6B22511EFA8BCE16EC4F9AE02.roa (hash: qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3492 (0xda4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25 Validity Not Before: Aug 22 18:05:36 2025 GMT Not After : Aug 29 18:05:36 2025 GMT Subject: CN=68a8b170-da0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:c5:c0:9d:20:14:49:2b:80:23:2e:a4:46: 42:35:22:b3:04:88:ee:28:c1:c2:8b:9f:38:97:da: a5:be:f9:d9:a9:e2:c6:87:f4:d2:31:8a:ca:2f:70: db:d9:ef:94:05:1d:c7:85:34:ce:e9:20:cb:eb:9a: 32:3a:86:cf:71:65:5f:f6:62:3a:e4:9e:ab:14:1d: 80:ef:10:ae:5a:2c:b0:09:74:bb:7b:3c:4f:f6:c8: 21:cc:37:cf:49:1d:10:06:5c:cd:ff:a6:b2:69:0d: ff:b6:c2:cb:c7:24:62:52:1d:00:74:3b:b8:32:d5: b1:0b:89:3e:87:ca:e7:9f:26:45:74:c8:83:fc:d6: 34:92:b7:5e:5f:bc:f6:9c:88:04:56:69:a4:b7:3e: 1a:33:84:99:56:f9:e7:44:f5:ac:1b:0e:00:df:a8: fb:5a:01:5e:e2:87:1d:4b:12:5a:d3:ab:16:21:9e: 61:46:8b:c6:8c:22:52:d3:4c:89:67:d1:4f:2a:e2: 79:4d:32:21:9c:f2:6c:50:72:68:13:64:06:eb:e2: 49:12:13:6f:4b:39:ef:4b:d8:27:69:34:3f:f7:00: 69:c8:c9:28:d8:47:ab:54:08:4a:37:11:33:e3:b2: 08:40:c7:0d:99:e4:96:7a:e9:93:fd:25:e4:ca:63: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6A:67:56:C5:82:E1:6F:B7:2D:1F:C7:D7:99:D0:64:2A:A9:61:8A X509v3 Authority Key Identifier: keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:66:bc:73:18:9c:2b:56:47:4f:96:5e:d5:65:f4:1a:69: c1:78:bb:4f:93:03:85:44:8a:33:51:7a:31:b5:29:d5:a7:27: ad:f5:2a:f1:1c:9b:9d:a7:7b:c3:e4:8d:5f:49:d9:18:16:5b: b8:0f:d2:e2:23:18:4f:99:66:c3:d9:ec:e3:3f:13:ea:5e:15: f0:eb:75:e2:eb:cf:b0:c0:4e:e6:a4:2a:26:8b:f7:04:df:c6: a7:16:6c:b9:40:e7:44:cb:68:b7:16:76:3a:c4:12:a8:a8:d5: f2:14:80:be:b1:ae:a1:f4:35:be:4b:9b:74:b7:73:22:71:67: e6:cf:23:94:f5:50:0e:3f:bf:b6:7f:07:ea:c4:fa:a7:50:cf: 73:93:49:c7:6f:e8:ee:2c:4e:75:75:4d:28:91:da:82:5d:71: 2b:12:5b:c8:9c:24:e6:1d:c9:2f:46:da:a1:aa:98:f8:5f:e2: 9a:70:fe:eb:6f:69:80:c3:d9:18:ca:80:c1:ed:2f:11:3c:54: 6c:5f:62:08:d3:2d:9e:f5:28:84:1b:1f:80:3b:47:bb:ab:2c: ac:4e:af:ab:2f:0a:80:53:e7:3c:89:c2:c2:00:95:b6:65:5c: 23:1f:e3:97:fa:e4:f2:d6:32:05:79:90:f8:e3:9b:73:bc:77: e8:69:d9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzMEExMTAvBgNVBAUTKEVCODExQjE0ODhCMjBGMTI2NjRFNjQ4QTgyNjI0QTMw NTA2ODlGMjUwHhcNMjUwODIyMTgwNTM2WhcNMjUwODI5MTgwNTM2WjAYMRYwFAYD VQQDEw02OGE4YjE3MC1kYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YfFwJ0gFEkrgCMupEZCNSKzBIjuKMHCi584l9qlvvnZqeLGh/TSMYrKL3Db 2e+UBR3HhTTO6SDL65oyOobPcWVf9mI65J6rFB2A7xCuWiywCXS7ezxP9sghzDfP SR0QBlzN/6ayaQ3/tsLLxyRiUh0AdDu4MtWxC4k+h8rnnyZFdMiD/NY0krdeX7z2 nIgEVmmktz4aM4SZVvnnRPWsGw4A36j7WgFe4ocdSxJa06sWIZ5hRovGjCJS00yJ Z9FPKuJ5TTIhnPJsUHJoE2QG6+JJEhNvSznvS9gnaTQ/9wBpyMko2EerVAhKNxEz 47IIQMcNmeSWeumT/SXkymNAIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJqZ1bF guFvty0fx9eZ0GQqqWGKMB8GA1UdIwQYMBaAFOuBGxSIsg8SZk5kioJiSjBQaJ8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDMwQS9CODU0MjRGOEQ0 OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4Sm1UbVNLZ21KS01GQm9u eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RWJGSWl5RHhKbVRtU0tnbUpLTUZCb255VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDMwQS9CODU0MjRGOEQ0OTgxMUU5Qjk0NzQ3MzhDNEY5QUUwMi82NEViRklpeUR4 Sm1UbVNLZ21KS01GQm9ueVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU/2a8cxicK1ZHT5Ze1WX0GmnBeLtPkwOFRIozUXoxtSnVpyet9Srx HJudp3vD5I1fSdkYFlu4D9LiIxhPmWbD2ezjPxPqXhXw63Xi68+wwE7mpComi/cE 38anFmy5QOdEy2i3FnY6xBKoqNXyFIC+sa6h9DW+S5t0t3MicWfmzyOU9VAOP7+2 fwfqxPqnUM9zk0nHb+juLE51dU0okdqCXXErElvInCTmHckvRtqhqpj4X+KacP7r b2mAw9kYyoDB7S8RPFRsX2II0y2e9SiEGx+AO0e7qyysTq+rLwqAU+c8icLCAJW2 ZVwjH+OX+uTy1jIFeZD445tzvHfoadlt -----END CERTIFICATE-----Generated at Sun Aug 24 00:56:13 2025 by rpki-client