$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: BRl5uGFpSFppIJ//xFCXysIphu6SOcMpFSWAl1S/8wg= Subject key identifier: 13:08:03:EE:9C:49:13:D1:92:FA:68:77:AE:6C:AA:A7:76:DB:77:B4 Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 087D Signing time: Fri 22 Aug 2025 20:44:30 +0000 Manifest this update: Fri 22 Aug 2025 20:44:30 +0000 Manifest next update: Fri 29 Aug 2025 20:44:30 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: TuwgTIZAORAK032/HCxuFy6TMws3I5mF+B6KpQZTHCw=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: /M2P6qLYLe5I9DwmD7wnKMTRki3A6i4WYlxxpdISB7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: Aug 22 20:44:30 2025 GMT Not After : Aug 29 20:44:30 2025 GMT Subject: CN=68a8d6ae-aef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:58:f5:af:8a:30:3e:17:cc:cc:e4:57:be: 05:4b:d4:24:2d:b8:d2:16:a1:ce:7b:98:ad:31:4e: 28:28:a6:0d:b4:f3:88:22:48:44:3e:fa:8b:88:23: 4f:3a:12:04:74:f4:73:b2:e5:7b:88:26:78:0c:e0: 4d:75:7a:99:6f:ce:1d:d0:e6:ea:03:fd:f5:9f:fd: 86:10:96:4c:97:97:b2:4d:32:f4:71:46:54:12:88: 65:51:3d:15:3e:fd:cb:0c:05:b8:59:27:3c:61:d2: bc:99:0d:60:b7:17:63:e2:49:1b:e0:03:a3:11:bb: 7b:69:10:3d:6e:f7:92:6a:b0:18:4d:46:88:3a:43: 55:ed:f7:ab:a1:99:4e:d8:68:52:35:9e:aa:0d:ea: d0:8c:39:5b:41:52:c8:f6:36:a1:f5:3a:ba:7d:29: 5b:e9:32:2a:62:ac:f2:c7:8c:16:79:5e:46:1a:61: ef:44:98:b7:0b:68:a6:29:5f:ee:43:ea:ec:58:78: 13:ef:9e:79:d2:64:93:2a:1b:fb:fc:af:aa:d6:b0: 1e:67:bf:c1:67:5c:14:ee:74:84:4a:af:8f:47:b4: 72:7c:07:9e:43:c1:68:88:31:d3:9a:f8:6b:cc:85: c9:b1:9c:bb:48:0e:ec:56:93:fc:1b:f3:0b:2b:20: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:03:EE:9C:49:13:D1:92:FA:68:77:AE:6C:AA:A7:76:DB:77:B4 X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6c:ca:a8:79:49:f7:92:f5:c0:9c:8c:df:71:df:28:e4:85: 36:a3:9b:4b:a1:e8:e7:6d:00:3c:16:d7:18:6b:f7:ca:22:67: da:69:39:a7:8c:55:0d:c9:02:02:bf:75:80:55:f9:c6:57:6e: 2d:83:c8:ed:10:f2:a6:b7:b5:11:d8:29:86:d5:5a:13:dd:73: af:7f:79:5d:b3:10:64:a8:01:8f:0c:3c:f2:4b:d3:f2:18:17: c0:8f:a4:35:a7:f4:d2:5e:a6:9c:86:cb:9d:79:51:fe:dd:60: f2:49:d7:f7:82:9d:d3:d1:ea:f5:b4:70:c2:3e:04:6f:a8:5d: 2c:bd:9b:27:b9:6c:c9:62:22:b4:11:5b:f9:bd:af:62:e1:e1: 42:b4:63:f8:50:db:7f:b3:80:2b:4c:11:1b:20:84:0e:fa:43: 01:fa:c9:94:ec:e8:59:9b:46:6c:74:3d:a4:1a:4c:6e:28:59: ef:a1:d1:71:4a:d4:48:60:3a:bc:f6:cc:10:ff:51:33:52:32: 68:dd:1f:2f:e2:e6:3c:3a:44:d8:88:df:7f:4f:a6:9a:ba:4b: 23:41:12:c4:38:c4:26:c4:8d:7f:94:3a:ec:a2:39:32:54:e7: 77:c5:d6:6f:75:d7:1d:e9:9d:ef:25:88:d4:f9:92:5b:26:29: 85:47:ec:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUwODIyMjA0NDMwWhcNMjUwODI5MjA0NDMwWjAYMRYwFAYD VQQDEw02OGE4ZDZhZS1hZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GhY9a+KMD4XzMzkV74FS9QkLbjSFqHOe5itMU4oKKYNtPOIIkhEPvqLiCNP OhIEdPRzsuV7iCZ4DOBNdXqZb84d0ObqA/31n/2GEJZMl5eyTTL0cUZUEohlUT0V Pv3LDAW4WSc8YdK8mQ1gtxdj4kkb4AOjEbt7aRA9bveSarAYTUaIOkNV7feroZlO 2GhSNZ6qDerQjDlbQVLI9jah9Tq6fSlb6TIqYqzyx4wWeV5GGmHvRJi3C2imKV/u Q+rsWHgT75550mSTKhv7/K+q1rAeZ7/BZ1wU7nSESq+PR7RyfAeeQ8FoiDHTmvhr zIXJsZy7SA7sVpP8G/MLKyC18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMIA+6c SRPRkvpod65sqqd223e0MB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXbMqoeUn3kvXAnIzfcd8o5IU2o5tLoejnbQA8FtcYa/fKImfaaTmn jFUNyQICv3WAVfnGV24tg8jtEPKmt7UR2CmG1VoT3XOvf3ldsxBkqAGPDDzyS9Py GBfAj6Q1p/TSXqachsudeVH+3WDySdf3gp3T0er1tHDCPgRvqF0svZsnuWzJYiK0 EVv5va9i4eFCtGP4UNt/s4ArTBEbIIQO+kMB+smU7OhZm0ZsdD2kGkxuKFnvodFx StRIYDq89swQ/1EzUjJo3R8v4uY8OkTYiN9/T6aauksjQRLEOMQmxI1/lDrsojky VOd3xdZvddcd6Z3vJYjU+ZJbJimFR+zo -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:55 2025 by rpki-client