$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: 72Dk+SD6u5+ghG8AFuf2g+SXNp0tHb7j80vL96b3w+k= Subject key identifier: 32:9E:4A:64:AA:56:CC:08:3E:77:4C:FE:3C:BA:AC:B1:0D:0C:CD:21 Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: D6 Signing time: Sat 23 Aug 2025 05:43:28 +0000 Manifest this update: Sat 23 Aug 2025 05:43:28 +0000 Manifest next update: Sat 30 Aug 2025 05:43:28 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: xhjxYiT4G9gN8p6hRhIB85eHK1uW2aOBVwM2gjUSc+A=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: N6wnq+SiTT7KZAm9ihuMhFBquoYx3YiKfww2FuMhesA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Aug 23 05:43:28 2025 GMT Not After : Aug 30 05:43:28 2025 GMT Subject: CN=68a95500-611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:18:59:9d:11:73:8e:c6:9b:82:2c:04:3c: 02:bc:e9:a3:83:25:c5:36:61:16:6b:41:10:8f:9b: ad:76:57:4d:a0:6c:df:2c:d8:9d:1f:b0:ea:05:2b: 78:1b:e4:9f:79:83:19:06:a2:b4:6e:ff:8d:d6:24: 3a:42:fa:81:53:c4:fa:25:b4:c0:30:8a:4d:03:cf: 91:86:86:4f:3c:e9:21:5b:69:5d:37:96:0d:ce:d2: 4d:9f:a8:d3:b5:b3:3f:2a:c0:3e:94:ca:e8:22:7c: bb:65:e7:6f:c3:c0:80:31:df:4d:42:0c:5d:05:8f: 74:b0:0f:ef:d5:7b:6f:1e:0b:64:78:ac:92:68:34: 73:60:6b:04:93:d4:ef:2d:6a:75:ce:44:1e:3c:66: 32:85:69:e7:02:7e:08:ba:a9:47:13:51:c0:44:1a: 5e:d2:7e:64:d9:d7:2c:cc:53:35:25:cf:04:c6:c6: af:26:c0:0d:c8:e6:ed:ad:d8:63:36:c9:64:58:43: a7:87:3d:63:8f:c9:9a:41:16:a6:7d:b6:70:42:0c: 89:77:c8:86:dc:c1:83:af:2b:20:c3:4e:61:7d:9e: b1:05:ce:da:be:94:f1:05:d4:e4:8c:98:05:56:78: e4:d6:fa:43:6e:c7:65:df:ed:e9:7d:47:3c:07:20: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9E:4A:64:AA:56:CC:08:3E:77:4C:FE:3C:BA:AC:B1:0D:0C:CD:21 X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b3:c9:b4:fb:f4:19:ba:cf:db:40:46:7c:1f:38:3e:31:9d: 85:3d:7c:78:f4:2f:ca:10:c8:e8:85:4c:f0:07:39:d1:62:23: 56:f3:5a:62:37:e1:6f:f3:cc:b0:87:96:c4:2d:4b:cd:f9:b0: 76:22:76:9a:d0:32:19:6e:09:da:92:78:32:4a:15:85:55:74: dc:e4:e6:d6:96:8b:ce:53:6b:cb:81:67:59:42:33:7d:6e:88: b4:c2:2c:99:df:42:a5:b2:3a:5d:e4:c5:c2:57:d0:43:43:92: c1:53:6a:b6:cb:1d:7f:00:46:b7:f5:5e:a8:89:1c:46:6f:d0: f6:33:cf:5d:e8:99:ee:aa:f8:a6:dc:39:06:ec:e5:ae:27:c4: a5:b8:e2:c2:23:0f:43:dd:37:e4:b5:73:82:3d:05:1e:44:6f: 5d:8b:5b:d9:4a:7b:05:dd:6a:fc:c0:4f:13:87:55:cc:7e:dd: 3d:fb:42:88:a3:7b:44:81:1a:86:be:55:39:b6:cc:ff:28:f9: 79:22:9e:9a:e3:c4:f4:89:13:6d:f3:b3:98:e9:8a:c8:d0:8a: 7f:1d:f1:91:68:41:e0:c5:ca:88:d0:ef:e5:ad:f6:72:d7:cb: b6:ac:bb:df:89:59:fb:a3:11:ca:91:17:58:67:03:b7:c0:ec: 27:8b:5f:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUwODIzMDU0MzI4WhcNMjUwODMwMDU0MzI4WjAYMRYwFAYD VQQDEw02OGE5NTUwMC02MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR8YWZ0Rc47Gm4IsBDwCvOmjgyXFNmEWa0EQj5utdldNoGzfLNidH7DqBSt4 G+SfeYMZBqK0bv+N1iQ6QvqBU8T6JbTAMIpNA8+RhoZPPOkhW2ldN5YNztJNn6jT tbM/KsA+lMroIny7Zedvw8CAMd9NQgxdBY90sA/v1XtvHgtkeKySaDRzYGsEk9Tv LWp1zkQePGYyhWnnAn4IuqlHE1HARBpe0n5k2dcszFM1Jc8ExsavJsANyObtrdhj NslkWEOnhz1jj8maQRamfbZwQgyJd8iG3MGDrysgw05hfZ6xBc7avpTxBdTkjJgF Vnjk1vpDbsdl3+3pfUc8ByBLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKeSmSq VswIPndM/jy6rLENDM0hMB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPs8m0+/QZus/bQEZ8Hzg+MZ2FPXx49C/KEMjohUzwBznRYiNW81pi N+Fv88ywh5bELUvN+bB2Inaa0DIZbgnakngyShWFVXTc5ObWlovOU2vLgWdZQjN9 boi0wiyZ30Klsjpd5MXCV9BDQ5LBU2q2yx1/AEa39V6oiRxGb9D2M89d6Jnuqvim 3DkG7OWuJ8SluOLCIw9D3TfktXOCPQUeRG9di1vZSnsF3Wr8wE8Th1XMft09+0KI o3tEgRqGvlU5tsz/KPl5Ip6a48T0iRNt87OY6YrI0Ip/HfGRaEHgxcqI0O/lrfZy 18u2rLvfiVn7oxHKkRdYZwO3wOwni1/y -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:31 2025 by rpki-client