$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: MGsIIEE/e4iIlk+Ep8cIr6DLEUNzDngzondkWTxYYQ8= Subject key identifier: 90:72:63:69:F3:EC:7B:C7:3D:A7:9B:53:B8:00:7A:55:1B:31:9D:F7 Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: A1 Signing time: Sat 23 Aug 2025 06:34:54 +0000 Manifest this update: Sat 23 Aug 2025 06:34:54 +0000 Manifest next update: Sat 30 Aug 2025 06:34:54 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: y7PafzGOaCG3AfqZ2ytnwXpLdicDud3X7jbFSLT05e4=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: MvYbkMM7qX+K3Cl1XMK5DsKY9VO54145P/lZVkIO3Zo=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CBRfaNleeLhQbkhZ9Y/Gyu8j+qS/vePZy+tfvqG3Iy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: Aug 23 06:34:54 2025 GMT Not After : Aug 30 06:34:54 2025 GMT Subject: CN=68a9610e-18fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:39:e5:d4:c4:52:20:19:ee:05:07:02:dd: 61:42:8f:31:f6:2e:20:14:03:28:57:4f:95:bb:57: ef:63:d0:fb:4b:73:7b:4c:a4:ab:a6:89:b5:6f:f8: d4:23:d3:e1:55:41:b4:7f:70:b0:c3:92:7d:6b:68: bf:73:43:1f:eb:6a:a4:7c:02:e1:86:68:a6:b7:22: 16:f9:0a:82:c8:e1:c7:c2:cb:3b:3e:0b:a1:7f:0a: 34:44:36:76:b1:7e:9b:81:ac:96:14:29:b7:69:24: 07:f2:16:08:ef:69:f4:81:43:14:52:48:4d:f2:ce: 01:0b:58:47:5c:29:f9:04:2a:e5:f0:76:90:79:79: 2c:c8:4f:05:35:a8:62:52:67:f1:46:24:5c:fb:38: 0e:b3:04:59:b4:6a:7d:b0:82:e6:c2:31:e4:8c:87: 79:68:02:1f:28:1c:ea:fd:e3:93:c4:b8:cd:ef:b3: 35:20:ce:a8:47:10:1f:1c:7d:03:0c:4d:a8:d5:11: 97:56:f5:fe:31:b8:6f:44:ac:4a:61:a2:17:87:6a: 4a:5d:15:d4:3e:d5:03:45:78:07:b0:ab:6c:e6:a1: 4d:29:ca:62:01:2c:d7:d4:50:b7:29:32:76:3d:ed: 1a:19:d7:a4:2b:cf:86:f1:ad:f9:da:75:b7:14:4b: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:72:63:69:F3:EC:7B:C7:3D:A7:9B:53:B8:00:7A:55:1B:31:9D:F7 X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:1e:56:e0:7e:17:50:e6:e8:33:82:45:44:3f:2a:95:41: 07:17:6b:6e:99:92:5a:4d:5f:59:8b:c8:21:14:8d:bc:be:b6: 29:17:da:15:c2:29:31:77:30:bf:8e:db:19:11:71:6e:6e:32: 9d:07:1d:8b:bd:32:c4:27:68:b1:eb:d9:21:32:e1:2f:fa:f6: 45:03:6c:23:b7:77:75:df:c3:c1:99:ea:2b:6d:79:9f:ad:8c: 9f:3f:73:28:68:43:b1:d1:a8:0a:4e:cc:70:3c:05:2e:6e:1a: 1b:65:fb:5c:18:65:f1:79:5f:c2:45:b8:32:8b:aa:95:fd:d2: cf:34:a8:06:bd:6a:61:15:42:41:f5:0c:6b:39:61:12:3b:7b: 49:5a:cf:d5:55:f7:54:de:6f:20:1f:a0:ac:5f:5a:80:67:91: 22:ee:76:68:1a:35:62:3d:b6:41:11:7e:bf:da:d7:30:3a:e1: 70:8a:75:b1:5f:56:d0:40:00:e6:88:e5:20:bb:f7:21:ff:20: b7:ec:95:1e:d1:30:ff:e7:f9:d0:0f:c0:9b:eb:3a:f0:4d:10: cb:e5:58:d5:20:10:6b:50:10:30:88:03:16:2d:c7:f3:16:46: 5d:c1:54:84:d2:77:10:24:91:18:f6:40:71:eb:dc:fe:27:37: 97:9b:d1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0 MzRDMzMxOTEwHhcNMjUwODIzMDYzNDU0WhcNMjUwODMwMDYzNDU0WjAYMRYwFAYD VQQDEw02OGE5NjEwZS0xOGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6Q55dTEUiAZ7gUHAt1hQo8x9i4gFAMoV0+Vu1fvY9D7S3N7TKSrpom1b/jU I9PhVUG0f3Cww5J9a2i/c0Mf62qkfALhhmimtyIW+QqCyOHHwss7Pguhfwo0RDZ2 sX6bgayWFCm3aSQH8hYI72n0gUMUUkhN8s4BC1hHXCn5BCrl8HaQeXksyE8FNahi UmfxRiRc+zgOswRZtGp9sILmwjHkjId5aAIfKBzq/eOTxLjN77M1IM6oRxAfHH0D DE2o1RGXVvX+MbhvRKxKYaIXh2pKXRXUPtUDRXgHsKts5qFNKcpiASzX1FC3KTJ2 Pe0aGdekK8+G8a352nW3FEvxGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJByY2nz 7HvHPaebU7gAelUbMZ33MB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU eHBxWTFVTnhJSnREVERNWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuCh5W4H4XUOboM4JFRD8qlUEHF2tumZJaTV9Zi8ghFI28vrYpF9oV wikxdzC/jtsZEXFubjKdBx2LvTLEJ2ix69khMuEv+vZFA2wjt3d138PBmeorbXmf rYyfP3MoaEOx0agKTsxwPAUubhobZftcGGXxeV/CRbgyi6qV/dLPNKgGvWphFUJB 9QxrOWESO3tJWs/VVfdU3m8gH6CsX1qAZ5Ei7nZoGjViPbZBEX6/2tcwOuFwinWx X1bQQADmiOUgu/ch/yC37JUe0TD/5/nQD8Cb6zrwTRDL5VjVIBBrUBAwiAMWLcfz FkZdwVSE0ncQJJEY9kBx69z+JzeXm9Hb -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:53 2025 by rpki-client