$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: NH4itBOhtMxawUo5RRvHJu8n5OB/WYq4huDfVxS44HA= Subject key identifier: B9:12:E1:4A:1D:A8:36:5A:E1:C6:F1:1A:08:C3:34:5F:5B:DE:6E:F1 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: E1 Signing time: Sat 23 Aug 2025 05:55:41 +0000 Manifest this update: Sat 23 Aug 2025 05:55:40 +0000 Manifest next update: Sat 30 Aug 2025 05:55:40 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: d9sD3LD1sVh0dS8963/azYKrMKnck/TS5w2cIBRp9kc=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Aug 23 05:55:40 2025 GMT Not After : Aug 30 05:55:40 2025 GMT Subject: CN=68a957dc-69ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:62:3f:c6:5c:fe:96:20:5b:ac:83:79:34: 18:f8:dd:2e:56:99:cc:04:ce:68:53:e4:92:17:be: 85:70:ef:a7:9c:89:23:7b:dd:7b:dc:a6:b3:38:65: 6a:9b:19:cb:50:93:09:24:7d:05:8b:78:21:c9:23: 90:60:ea:ff:70:10:6e:d5:f8:5f:32:4f:bf:b7:78: ca:17:16:48:84:a3:93:98:f4:ff:c7:2d:1b:7a:55: b4:fe:14:42:cc:17:36:00:d6:81:c7:20:fa:f7:02: 58:5f:54:12:42:0c:29:b1:97:12:75:db:8b:c0:02: 47:92:03:0f:4a:ce:68:2e:d3:20:e3:4e:ab:33:75: c2:1c:c0:0d:14:44:dc:32:c8:8f:03:23:16:6b:9c: c5:af:d7:02:de:c2:62:92:8c:99:3c:3e:ec:c6:fa: 17:4e:26:11:a7:bc:d8:72:c1:ab:02:7f:5d:86:c8: 9a:95:c1:9e:a8:e1:aa:a2:f3:3f:be:a6:ab:e6:c2: 37:2b:0c:c4:2b:e9:56:2a:87:49:b3:6a:c5:6e:bd: 25:64:a3:92:3a:58:17:70:fe:6d:40:b0:cb:0f:63: ae:ab:76:67:dd:64:4a:f9:d3:c5:c3:a1:af:95:77: 1f:08:c9:c9:0e:61:c0:2c:c7:3f:fc:80:0a:16:84: 54:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:E1:4A:1D:A8:36:5A:E1:C6:F1:1A:08:C3:34:5F:5B:DE:6E:F1 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e5:32:d3:6d:b0:4a:a9:47:ee:29:93:4e:f0:c0:71:b8:00: 9d:62:4e:21:16:c9:51:b9:7d:94:11:81:40:3f:a8:f4:7a:72: a6:d6:e0:f0:08:0c:40:5b:6e:f9:06:b5:28:65:05:96:6f:3a: c1:0b:2b:68:d5:ea:5e:8a:d2:3d:c0:a6:53:6e:cd:2f:52:dd: 73:e3:fe:f9:89:34:ea:24:b7:a9:f9:38:37:c1:3f:36:56:d5: ce:ac:69:a8:84:38:e7:c3:cc:33:ac:a6:42:10:d9:dc:27:1e: 96:39:bd:77:98:46:8d:ff:f0:9d:0b:00:2f:6f:00:8a:85:d4: 89:31:01:0e:c4:ec:c4:13:1a:42:12:0e:e7:36:6c:44:df:55: c7:b4:86:13:94:c4:aa:4e:1a:2d:05:0a:45:a1:83:c5:0a:7e: 4d:9f:b5:f6:a1:2a:40:58:d5:c9:d4:0e:9e:87:86:87:ff:a6: ad:34:ba:5e:1f:91:db:af:e5:6b:f1:ef:0d:80:1f:d7:df:e7: 4b:90:b4:f5:fa:36:ec:8f:16:d9:7d:e7:7c:74:b5:47:f1:ec: 2d:e3:9d:e6:81:bb:dc:b0:2b:ac:2c:a0:11:af:38:b3:70:39: 87:4b:92:78:d8:3d:4d:4f:16:58:e9:61:11:c9:95:5e:f8:7a: b0:fe:80:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMxMzQxMTAvBgNVBAUTKDg0NDJEQzQ2MDI0MDA2MDExQUQ1Q0Y0OENEN0U0QzQ4 QkI5N0ExMUUwHhcNMjUwODIzMDU1NTQwWhcNMjUwODMwMDU1NTQwWjAYMRYwFAYD VQQDEw02OGE5NTdkYy02OWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJpiP8Zc/pYgW6yDeTQY+N0uVpnMBM5oU+SSF76FcO+nnIkje9173KazOGVq mxnLUJMJJH0Fi3ghySOQYOr/cBBu1fhfMk+/t3jKFxZIhKOTmPT/xy0belW0/hRC zBc2ANaBxyD69wJYX1QSQgwpsZcSdduLwAJHkgMPSs5oLtMg406rM3XCHMANFETc MsiPAyMWa5zFr9cC3sJikoyZPD7sxvoXTiYRp7zYcsGrAn9dhsialcGeqOGqovM/ vqar5sI3KwzEK+lWKodJs2rFbr0lZKOSOlgXcP5tQLDLD2Ouq3Zn3WRK+dPFw6Gv lXcfCMnJDmHALMc//IAKFoRUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkS4Uod qDZa4cbxGgjDNF9b3m7xMB8GA1UdIwQYMBaAFIRC3EYCQAYBGtXPSM1+TEi7l6Ee MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzEzNC9FNjVGQThBMDU0 NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJnRWExYzlJelg1TVNMdVhv UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9SNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzEzNC9FNjVGQThBMDU0NTMxMUVGOEFENzc0MDlDNEY5QUUwMi9oRUxjUmdKQUJn RWExYzlJelg1TVNMdVhvUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA5TLTbbBKqUfuKZNO8MBxuACdYk4hFslRuX2UEYFAP6j0enKm1uDw CAxAW275BrUoZQWWbzrBCyto1epeitI9wKZTbs0vUt1z4/75iTTqJLep+Tg3wT82 VtXOrGmohDjnw8wzrKZCENncJx6WOb13mEaN//CdCwAvbwCKhdSJMQEOxOzEExpC Eg7nNmxE31XHtIYTlMSqThotBQpFoYPFCn5Nn7X2oSpAWNXJ1A6eh4aH/6atNLpe H5Hbr+Vr8e8NgB/X3+dLkLT1+jbsjxbZfed8dLVH8ewt453mgbvcsCusLKARrziz cDmHS5J42D1NTxZY6WERyZVe+Hqw/oBs -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:10 2025 by rpki-client