$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json) Hash identifier: pp/tyU7pf/MlmkvaAZTqLeiaroPYUelfq9qb8aOV5RI= Subject key identifier: 8C:29:01:19:F6:12:0E:0F:19:9D:0F:B4:E3:66:48:AC:4B:C9:77:71 Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft Manifest number: 022A Signing time: Sat 23 Aug 2025 02:08:58 +0000 Manifest this update: Sat 23 Aug 2025 02:08:57 +0000 Manifest next update: Sat 30 Aug 2025 02:08:57 +0000 Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: T1Phz1SQfPX3I6mNMrpb8nAJySCAbvhaVlou26yYqL8=) 2: 7B00C6B83F1D11ED8A66DC5AC4F9AE02.roa (hash: 2Fh4hwQIdZbln/uQFk/hnm7n5pbTcIACPB8cEmZ2S3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737 Validity Not Before: Aug 23 02:08:57 2025 GMT Not After : Aug 30 02:08:57 2025 GMT Subject: CN=68a922ba-3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:9e:4e:01:88:8b:d2:db:78:80:bd:a2:d0: ce:24:a4:9e:c8:b0:b0:52:e8:6b:0c:1d:5c:98:01: 69:6d:22:f0:a3:90:5a:6d:6e:58:e1:34:e4:59:91: a6:99:10:81:fb:e9:6e:42:b7:ba:ae:39:d9:6b:73: e5:85:f3:ef:8d:87:c1:a8:8b:ef:51:b1:bf:f8:77: c5:59:ac:f5:85:86:01:89:8d:d8:62:72:91:0f:e1: 2d:c0:11:bd:0b:fc:21:67:16:84:79:24:ea:7a:5f: 6f:24:53:c2:3a:1a:2b:95:2b:42:da:fb:ec:6f:6c: e1:57:2e:26:a4:16:78:e9:cb:a8:83:e6:2a:e8:0e: 70:19:3b:90:2e:e9:25:50:a4:a8:46:1f:31:dc:bc: 57:15:c2:f3:84:93:db:31:1d:24:4a:2a:3f:75:8c: 31:1e:4b:ac:d1:0a:6f:79:66:14:8e:d4:ab:9a:26: ee:54:04:e6:33:57:68:8d:aa:c4:89:ae:6f:da:f2: cb:09:09:05:b7:6f:97:aa:20:00:16:50:66:b3:4b: eb:22:65:96:99:fa:b7:82:26:96:3b:24:36:7b:7d: 57:bd:05:31:44:ac:cd:5b:7d:8f:4b:26:48:de:2a: fa:47:06:33:5a:25:6d:14:96:91:73:77:82:94:d0: 60:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:29:01:19:F6:12:0E:0F:19:9D:0F:B4:E3:66:48:AC:4B:C9:77:71 X509v3 Authority Key Identifier: keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ec:a2:8d:6b:7f:30:8a:1e:b2:9c:c1:f2:74:70:60:33:05: 2a:a0:c6:08:bb:b6:ba:1d:6d:77:c4:79:69:90:3a:73:b8:1e: ca:26:68:34:56:a2:cf:d0:fb:57:01:dd:02:9a:7c:a9:8b:9a: 80:fa:04:b8:4f:25:51:e9:47:97:95:57:4c:0f:0f:89:9c:e3: 6f:90:ea:5e:22:e2:95:c6:e7:a7:1e:58:c5:25:b4:c2:45:3e: f4:2c:74:f9:85:a1:a1:8d:ba:9d:e2:1b:52:87:69:3e:bc:10: a2:6e:71:67:89:6e:e3:cd:28:24:54:34:ed:39:f5:18:00:0e: b0:33:6d:81:5c:5c:01:79:2f:d7:65:47:dd:91:4c:ee:5d:b8: bf:35:06:f1:00:3c:64:b6:b0:6a:0e:7b:68:f1:21:37:08:9d: aa:57:1e:f5:6e:d0:01:ef:06:40:14:f0:bb:e0:bc:5e:60:8c: 86:78:75:f5:93:54:33:85:62:e3:2a:e9:ed:68:53:c3:c5:28: f7:1a:b8:7a:9b:6e:f6:38:57:a1:c1:bd:00:d2:12:d7:49:a7: 56:51:0c:4d:1d:a0:b5:bb:df:9f:76:4e:dc:28:34:63:03:04: dc:49:9b:12:2d:67:df:08:97:53:3e:8b:64:3f:ad:fa:a6:a4: a4:46:c1:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3 MzM1NjU3MzcwHhcNMjUwODIzMDIwODU3WhcNMjUwODMwMDIwODU3WjAYMRYwFAYD VQQDEw02OGE5MjJiYS0zYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ+eTgGIi9LbeIC9otDOJKSeyLCwUuhrDB1cmAFpbSLwo5BabW5Y4TTkWZGm mRCB++luQre6rjnZa3PlhfPvjYfBqIvvUbG/+HfFWaz1hYYBiY3YYnKRD+EtwBG9 C/whZxaEeSTqel9vJFPCOhorlStC2vvsb2zhVy4mpBZ46cuog+Yq6A5wGTuQLukl UKSoRh8x3LxXFcLzhJPbMR0kSio/dYwxHkus0QpveWYUjtSrmibuVATmM1dojarE ia5v2vLLCQkFt2+XqiAAFlBms0vrImWWmfq3giaWOyQ2e31XvQUxRKzNW32PSyZI 3ir6RwYzWiVtFJaRc3eClNBgjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwpARn2 Eg4PGZ0PtONmSKxLyXdxMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF cVU3ajhHVnlwSzl6TldWemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA17KKNa38wih6ynMHydHBgMwUqoMYIu7a6HW13xHlpkDpzuB7KJmg0 VqLP0PtXAd0Cmnypi5qA+gS4TyVR6UeXlVdMDw+JnONvkOpeIuKVxuenHljFJbTC RT70LHT5haGhjbqd4htSh2k+vBCibnFniW7jzSgkVDTtOfUYAA6wM22BXFwBeS/X ZUfdkUzuXbi/NQbxADxktrBqDnto8SE3CJ2qVx71btAB7wZAFPC74LxeYIyGeHX1 k1QzhWLjKuntaFPDxSj3Grh6m272OFehwb0A0hLXSadWUQxNHaC1u9+fdk7cKDRj AwTcSZsSLWffCJdTPotkP636pqSkRsGs -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:21 2025 by rpki-client