$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: Z2tAV5mXJ3QgbBpW65sEXlpEn5dP8wix1RAHs4zxJ8U= Subject key identifier: 5A:45:85:37:05:78:73:24:61:3D:4A:56:D1:7F:AF:07:81:1C:5D:43 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CD6 Signing time: Fri 22 Aug 2025 18:16:08 +0000 Manifest this update: Fri 22 Aug 2025 18:16:07 +0000 Manifest next update: Fri 29 Aug 2025 18:16:07 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: BfdoosVYl4wwBtBpNcXYpODpO8dGRXhQkwh50MxMjR8=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Aug 22 18:16:07 2025 GMT Not After : Aug 29 18:16:07 2025 GMT Subject: CN=68a8b3e8-d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:18:9f:8a:da:66:46:1d:47:f4:a6:5b:70: 6e:b7:ba:0f:d4:8b:41:25:b3:b2:2b:20:2a:fc:ca: 42:08:8f:e7:d0:c8:7c:cf:c3:82:5f:cb:0e:56:df: 4a:c3:72:ce:9f:3b:08:49:60:03:a3:a5:98:9a:04: 89:a2:3e:40:fd:90:f2:79:52:16:33:70:f4:c7:c5: 33:76:8e:39:11:01:95:86:2b:e4:7c:bd:6b:36:b8: 49:c8:83:15:93:07:32:b1:0e:5b:94:e5:12:cc:c3: 5b:8a:ef:c0:40:16:e6:17:f1:9f:7d:d9:0a:19:67: 44:7b:e5:47:c5:9b:2e:0c:cb:f2:ee:c7:9f:a9:b6: b7:18:1f:30:12:cf:55:ad:0e:73:ad:9f:63:1a:3f: a7:bb:15:14:d1:8b:bf:32:ed:b4:7c:83:06:21:5b: 53:a7:5f:4a:39:33:a1:84:7d:71:a5:df:0b:26:2d: dd:2a:f0:6f:a5:d8:8f:84:f3:a0:21:30:d8:b9:a0: 97:61:03:7c:57:74:d7:3a:94:50:ac:2e:e0:4d:57: c6:66:00:81:29:e0:1c:f4:3a:48:e0:2f:24:cb:42: bb:5b:45:ef:48:44:82:61:f1:e5:c3:ab:44:83:45: a9:a6:24:bf:69:e4:71:9f:06:cd:81:09:22:2c:e5: b7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:45:85:37:05:78:73:24:61:3D:4A:56:D1:7F:AF:07:81:1C:5D:43 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:3e:d4:bb:76:51:a2:d5:c2:9d:f6:2f:43:0b:62:85:d9:f7: 83:55:b0:bf:b0:b4:9f:26:8b:5d:a5:e0:26:67:e5:4a:6e:e4: 80:a4:bd:fc:6b:0d:da:ef:fd:c2:19:4b:8b:bc:52:bc:60:6d: 96:fd:51:14:80:ce:7f:5a:fe:52:dc:28:df:f3:88:b6:32:05: c9:d2:81:bc:1a:6b:67:18:04:22:48:94:4e:e2:ae:06:c0:12: fb:8a:8f:55:eb:62:b5:a2:20:a6:ae:df:70:3f:af:e8:4d:83: 65:3f:54:f4:39:42:70:7f:db:b8:e0:93:1c:f7:83:5b:78:3b: e3:01:f8:46:3d:3a:06:77:f6:0a:54:1e:c2:57:68:47:cc:c7: 76:e2:50:71:56:f2:d4:3f:5b:77:18:96:b0:23:51:2d:47:90: cd:ac:91:66:50:3e:d7:35:98:5c:0a:f5:98:ec:04:1f:72:70: 32:81:f0:63:88:dc:63:07:e6:64:da:31:d9:84:6f:d1:dd:61: 91:df:aa:a8:20:d3:ca:7e:6c:cb:9d:18:cb:6c:8a:c2:68:7e: bf:57:04:05:e9:e8:60:90:ce:1e:72:1a:6a:cd:6c:be:be:ad: b7:5b:6e:11:d7:8c:46:1b:26:52:07:09:98:31:3e:9a:e4:59: f2:ba:ca:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwODIyMTgxNjA3WhcNMjUwODI5MTgxNjA3WjAYMRYwFAYD VQQDEw02OGE4YjNlOC1kNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7sYn4raZkYdR/SmW3But7oP1ItBJbOyKyAq/MpCCI/n0Mh8z8OCX8sOVt9K w3LOnzsISWADo6WYmgSJoj5A/ZDyeVIWM3D0x8Uzdo45EQGVhivkfL1rNrhJyIMV kwcysQ5blOUSzMNbiu/AQBbmF/GffdkKGWdEe+VHxZsuDMvy7sefqba3GB8wEs9V rQ5zrZ9jGj+nuxUU0Yu/Mu20fIMGIVtTp19KOTOhhH1xpd8LJi3dKvBvpdiPhPOg ITDYuaCXYQN8V3TXOpRQrC7gTVfGZgCBKeAc9DpI4C8ky0K7W0XvSESCYfHlw6tE g0WppiS/aeRxnwbNgQkiLOW3aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpFhTcF eHMkYT1KVtF/rweBHF1DMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3PtS7dlGi1cKd9i9DC2KF2feDVbC/sLSfJotdpeAmZ+VKbuSApL38 aw3a7/3CGUuLvFK8YG2W/VEUgM5/Wv5S3Cjf84i2MgXJ0oG8GmtnGAQiSJRO4q4G wBL7io9V62K1oiCmrt9wP6/oTYNlP1T0OUJwf9u44JMc94NbeDvjAfhGPToGd/YK VB7CV2hHzMd24lBxVvLUP1t3GJawI1EtR5DNrJFmUD7XNZhcCvWY7AQfcnAygfBj iNxjB+Zk2jHZhG/R3WGR36qoINPKfmzLnRjLbIrCaH6/VwQF6ehgkM4echpqzWy+ vq23W24R14xGGyZSBwmYMT6a5Fnyuso6 -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:48 2025 by rpki-client