$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json) Hash identifier: 9hX032DywbLXPCs2CMpooqU+tWCeLYL81wIbsXhdO00= Subject key identifier: 41:59:B9:16:16:AC:D0:D7:B8:33:88:09:DD:51:CA:2B:78:21:2A:C8 Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft Manifest number: 80 Signing time: Sat 23 Aug 2025 06:56:20 +0000 Manifest this update: Sat 23 Aug 2025 06:56:19 +0000 Manifest next update: Sat 30 Aug 2025 06:56:19 +0000 Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: uYBARv2WgCyaPEWrcN6YUcj8tq9GvCwN2gv1dWm2UGA=) 2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=) 3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A Validity Not Before: Aug 23 06:56:19 2025 GMT Not After : Aug 30 06:56:19 2025 GMT Subject: CN=68a96613-5580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9f:9e:8c:76:7d:48:c7:9f:08:ca:fe:53:1d: 2f:3f:01:68:52:92:3d:ca:3c:8e:40:c7:54:21:65: 1e:9e:9a:e4:d5:cc:2d:4b:cb:a5:a1:2c:11:44:95: c9:d3:2c:03:68:13:51:21:0f:16:e5:4e:8d:79:67: 8d:bf:7b:4a:16:d5:6e:f3:21:4a:56:38:81:68:77: a8:66:c1:17:89:00:80:f5:e3:cf:14:10:63:d3:69: e9:b3:e8:e0:5f:ec:eb:ea:3e:f4:df:af:9a:3c:6e: 2f:2c:e3:4f:1b:03:aa:f0:a9:b3:6f:c8:6e:e9:13: f1:c3:0a:88:cf:82:28:65:1c:b1:8c:12:72:70:83: 16:3d:15:12:f6:4c:8c:0f:0b:cd:25:bf:34:a3:6d: 16:d5:5a:06:6e:b8:88:8b:07:3b:d9:d0:f3:4b:af: a0:83:37:41:d2:67:58:1e:71:45:c1:00:db:7e:86: 28:9f:68:80:dc:99:19:c1:32:33:a2:1b:d1:7d:a5: 82:82:aa:41:be:dd:b7:30:eb:10:ca:bd:f2:59:3d: ab:42:c4:b7:83:db:ba:2b:53:e8:45:3c:63:dd:83: 77:76:3e:b6:70:f3:e2:33:d6:f0:33:90:a5:79:f9: 96:80:b5:0e:5a:cb:0c:22:0d:23:08:2e:e5:1e:c5: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:B9:16:16:AC:D0:D7:B8:33:88:09:DD:51:CA:2B:78:21:2A:C8 X509v3 Authority Key Identifier: keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1b:02:d9:bd:a8:e4:87:77:21:45:d4:70:3e:37:95:0c:cb: e1:cc:3b:95:9a:df:1f:f3:78:27:68:87:a8:b8:50:b2:5c:ae: b6:08:1d:99:5b:5d:b0:ae:2a:e6:e2:e5:e5:61:14:4a:9f:eb: 40:40:04:ed:1f:85:2e:64:83:cb:66:81:01:69:e8:d6:a3:50: 9b:0e:59:c6:1a:c6:f8:18:bc:d2:08:32:96:99:81:32:cd:d4: de:e0:b3:af:45:75:ed:6e:6d:04:f6:51:7f:2a:3c:67:39:db: cd:44:2f:08:08:de:a6:dd:09:4d:66:50:1c:9a:24:0d:0d:fd: fa:2d:f7:e7:a9:31:d8:ca:ff:e2:57:0c:f4:21:43:e1:ba:65: 98:91:54:04:0c:72:48:5b:06:e9:b6:2a:fb:dd:c0:7f:2c:b6: 6a:0c:79:8d:1a:99:e3:66:49:dd:b0:03:bc:7e:72:9c:a5:00: 59:45:20:ae:5a:79:bd:ea:7f:5a:3b:f1:11:53:73:07:64:46: 10:01:65:04:bd:c3:8e:2e:5f:a7:7f:5e:80:e0:db:8c:88:35: 44:12:cf:17:be:d2:6b:f7:9f:a4:65:0d:60:e0:b8:f2:f0:c7: a0:a8:27:52:a5:e2:23:bf:70:b6:08:8e:94:1d:62:0f:6b:c4: ed:32:95:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC MTY0NENCOEEwHhcNMjUwODIzMDY1NjE5WhcNMjUwODMwMDY1NjE5WjAYMRYwFAYD VQQDEw02OGE5NjYxMy01NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlp+ejHZ9SMefCMr+Ux0vPwFoUpI9yjyOQMdUIWUenprk1cwtS8uloSwRRJXJ 0ywDaBNRIQ8W5U6NeWeNv3tKFtVu8yFKVjiBaHeoZsEXiQCA9ePPFBBj02nps+jg X+zr6j7036+aPG4vLONPGwOq8Kmzb8hu6RPxwwqIz4IoZRyxjBJycIMWPRUS9kyM DwvNJb80o20W1VoGbriIiwc72dDzS6+ggzdB0mdYHnFFwQDbfoYon2iA3JkZwTIz ohvRfaWCgqpBvt23MOsQyr3yWT2rQsS3g9u6K1PoRTxj3YN3dj62cPPiM9bwM5Cl efmWgLUOWssMIg0jCC7lHsV03wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFZuRYW rNDXuDOICd1Ryit4ISrIMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE MWozX2I4WkFsX0t4WkV5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRGwLZvajkh3chRdRwPjeVDMvhzDuVmt8f83gnaIeouFCyXK62CB2Z W12wrirm4uXlYRRKn+tAQATtH4UuZIPLZoEBaejWo1CbDlnGGsb4GLzSCDKWmYEy zdTe4LOvRXXtbm0E9lF/KjxnOdvNRC8ICN6m3QlNZlAcmiQNDf36LffnqTHYyv/i Vwz0IUPhumWYkVQEDHJIWwbptir73cB/LLZqDHmNGpnjZkndsAO8fnKcpQBZRSCu Wnm96n9aO/ERU3MHZEYQAWUEvcOOLl+nf16A4NuMiDVEEs8XvtJr95+kZQ1g4Ljy 8MegqCdSpeIjv3C2CI6UHWIPa8TtMpUa -----END CERTIFICATE-----Generated at Sat Aug 23 12:50:18 2025 by rpki-client