$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft File: af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json) Hash identifier: lKvO0LLtKTEW7MfNnK8VgvZoKrU6Knj5C75HBYU/ekI= Subject key identifier: 0F:0B:96:81:72:62:F8:4E:D0:72:89:C6:A9:18:B3:A0:69:D0:D8:A2 Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft Manifest number: 020C Signing time: Sat 23 Aug 2025 02:20:39 +0000 Manifest this update: Sat 23 Aug 2025 02:20:38 +0000 Manifest next update: Sat 30 Aug 2025 02:20:38 +0000 Files and hashes: 1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: deUbSw2fpbMEnLUPjhny4hQC3QUHBPcNp1bIchVD+hI=) 2: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: BISS5CmxNxvmt9rFH6DiKF6LgvgQpzJ1qyGwOCZsmrY=) 3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: gXomgC3UWF4hRBWpPOIJ1KbjovqaJl+GP7rjTy7IiYk=) 4: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: /sVqx8q3knVsrGKYvA1MUovYNq+EQPYvWXQlJdzVZFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486 Validity Not Before: Aug 23 02:20:38 2025 GMT Not After : Aug 30 02:20:38 2025 GMT Subject: CN=68a92576-ee5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3e:8e:bd:c1:29:b4:ce:95:5b:33:0f:ec:d8: f8:39:23:dc:bc:6a:61:cf:69:f8:8f:ec:fc:50:cc: 9b:01:6f:ce:c8:c8:be:16:d3:03:08:c5:c1:48:23: 64:00:c3:d8:a1:7b:a0:2e:28:08:c5:04:38:d7:d8: df:be:85:f4:11:26:55:96:3b:94:51:02:1b:1d:8a: 61:09:9b:b6:0b:be:7c:49:aa:ca:63:02:21:9c:8b: 3b:3d:f3:0a:32:bf:52:7a:8f:5f:75:1c:79:d3:96: 48:bd:28:4d:3a:69:96:c1:a4:bb:d4:5b:61:9c:75: 90:e3:9f:39:25:b5:87:33:c4:cf:bc:53:e2:28:5a: b0:d6:f4:40:70:f0:20:f2:f6:65:45:8f:2d:8f:fe: f1:d9:db:a5:9f:46:62:3d:05:05:b7:9a:a3:1f:e2: 69:df:8c:b3:9a:f8:2f:9d:1c:c0:a8:a3:e1:17:29: 55:7a:a5:79:24:68:05:62:bb:e8:31:02:b5:93:3b: e7:e4:a6:b2:ac:27:e6:f5:6b:81:36:2e:e7:32:38: 1d:98:02:22:ec:43:71:a4:fe:71:81:16:35:2a:40: 09:7b:a2:f7:50:3d:a2:e1:a2:11:01:6b:fd:30:ba: 58:39:9e:e9:e0:7d:ae:1d:5c:83:ba:ff:0c:76:36: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0B:96:81:72:62:F8:4E:D0:72:89:C6:A9:18:B3:A0:69:D0:D8:A2 X509v3 Authority Key Identifier: keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:27:f7:67:8a:7f:7b:b7:65:d2:71:22:93:0c:b7:ce:d6:9b: af:62:55:5a:b9:ac:4c:45:b9:c5:4d:d7:f6:cf:14:84:64:d2: aa:be:b8:4f:ab:3e:2f:07:4e:b3:36:6b:4d:fb:df:89:82:ff: f8:03:86:a0:39:b9:45:57:d9:39:80:9b:02:72:a4:65:83:31: f6:0f:48:61:80:42:17:82:c8:2a:66:5f:73:9a:89:b6:87:b2: 92:d7:c9:c5:f5:bd:09:52:04:15:3d:5c:3f:12:aa:80:ce:5e: bb:7a:61:0c:97:15:c8:f4:07:aa:a9:cf:7c:da:86:59:6d:27: b3:07:2e:27:e4:be:de:e2:22:b9:e1:86:fa:bc:af:ba:0b:3d: d3:4d:eb:04:e1:a1:03:c6:e6:e9:5c:15:4c:08:11:45:61:f2: 02:8c:5a:ae:d7:1d:cb:7f:e6:15:ad:53:de:09:22:bb:8c:72: 84:db:39:f0:4b:47:58:cd:12:f9:4a:18:af:c8:90:25:95:45: 71:b9:5e:a0:ee:50:97:fb:d9:dd:2d:9e:f6:8a:be:5e:a3:a4: 41:60:16:3d:33:10:fc:04:7a:6f:c9:02:6c:66:f7:a1:92:96: a4:01:d3:f7:d2:6f:ab:14:35:78:d2:d3:0f:b6:53:90:8d:02: 04:6f:0b:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4 RDlCMzg0ODYwHhcNMjUwODIzMDIyMDM4WhcNMjUwODMwMDIyMDM4WjAYMRYwFAYD VQQDEw02OGE5MjU3Ni1lZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+T6OvcEptM6VWzMP7Nj4OSPcvGphz2n4j+z8UMybAW/OyMi+FtMDCMXBSCNk AMPYoXugLigIxQQ419jfvoX0ESZVljuUUQIbHYphCZu2C758SarKYwIhnIs7PfMK Mr9Seo9fdRx505ZIvShNOmmWwaS71FthnHWQ4585JbWHM8TPvFPiKFqw1vRAcPAg 8vZlRY8tj/7x2duln0ZiPQUFt5qjH+Jp34yzmvgvnRzAqKPhFylVeqV5JGgFYrvo MQK1kzvn5KayrCfm9WuBNi7nMjgdmAIi7ENxpP5xgRY1KkAJe6L3UD2i4aIRAWv9 MLpYOZ7p4H2uHVyDuv8MdjZPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8LloFy YvhO0HKJxqkYs6Bp0NiiMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6 NG9xRmVGeDVHMHFObXpoSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaJ/dnin97t2XScSKTDLfO1puvYlVauaxMRbnFTdf2zxSEZNKqvrhP qz4vB06zNmtN+9+Jgv/4A4agOblFV9k5gJsCcqRlgzH2D0hhgEIXgsgqZl9zmom2 h7KS18nF9b0JUgQVPVw/EqqAzl67emEMlxXI9Aeqqc982oZZbSezBy4n5L7e4iK5 4Yb6vK+6Cz3TTesE4aEDxubpXBVMCBFFYfICjFqu1x3Lf+YVrVPeCSK7jHKE2znw S0dYzRL5ShivyJAllUVxuV6g7lCX+9ndLZ72ir5eo6RBYBY9MxD8BHpvyQJsZveh kpakAdP30m+rFDV40tMPtlOQjQIEbwtu -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:33 2025 by rpki-client