$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: J6litxMiVtme/owriNPY1DIiFkagkdDwvtnBvth9RBo= Subject key identifier: 0A:77:A8:06:D2:39:9C:22:96:3D:CF:6E:19:0B:CA:1C:99:47:8C:DD Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 0918 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 090B Signing time: Fri 22 Aug 2025 20:27:30 +0000 Manifest this update: Fri 22 Aug 2025 20:27:29 +0000 Manifest next update: Fri 29 Aug 2025 20:27:29 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: eMvmqoqfj+x2ocyvYENyVDQiFpNkt34Z4Y7XJjoaybo=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2328 (0x918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Aug 22 20:27:29 2025 GMT Not After : Aug 29 20:27:29 2025 GMT Subject: CN=68a8d2b2-c82f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:eb:e5:93:89:99:58:b1:d4:11:57:87:16: d4:c1:0a:ac:9d:ba:fa:5d:8f:dd:38:26:32:85:42: ef:eb:9a:90:1b:2f:22:cf:43:1a:7c:39:2c:91:78: a8:92:34:c6:f2:9f:80:da:d3:94:4c:d0:bf:e8:69: 19:d8:ee:a0:38:07:b1:b5:03:d2:71:63:00:bb:54: 91:1d:92:98:10:a0:87:ee:09:58:86:8f:83:4c:bc: 2a:de:0d:38:21:e2:f0:51:f2:d6:c2:e9:3a:9d:d5: b1:c8:e2:c8:ab:f3:55:36:45:e5:f0:7e:3d:26:bb: 0d:5b:a0:37:ce:9e:2e:b7:07:cc:43:91:a8:85:f7: 4e:18:f8:55:70:ec:aa:2b:d6:74:68:25:8c:d3:24: 88:ac:75:98:e5:15:35:04:31:4a:00:4f:a1:e2:ca: a3:c9:86:fc:31:b3:b7:a3:5b:30:2f:ab:e9:81:ec: 4a:25:7c:5d:05:61:b7:cb:2b:86:4b:dd:c7:aa:c4: f9:54:23:58:2a:a2:ba:3f:33:d1:c3:00:76:4d:87: 81:95:ab:5e:0f:f2:1d:74:25:7e:f5:a4:38:c8:3f: 5a:5b:df:b0:d2:0f:66:04:af:22:bd:1a:53:14:3b: 2d:65:7e:2a:f2:42:bb:ad:10:9a:cc:a9:c3:4f:53: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:A8:06:D2:39:9C:22:96:3D:CF:6E:19:0B:CA:1C:99:47:8C:DD X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:fc:ac:4e:3f:f7:a7:d3:b6:f5:f3:6d:c4:b0:5a:35:7b:ab: 40:36:01:9a:aa:57:99:56:0d:49:7e:91:fc:69:69:af:9e:23: ed:81:b3:f5:2f:76:1b:2c:50:2f:f5:4c:7d:b8:47:81:2b:35: 83:d2:2d:91:8c:c4:99:26:df:2a:64:f1:4e:e8:ec:ec:8c:03: 3b:17:53:39:fd:68:15:9e:16:62:d3:30:9a:e3:3a:4d:0f:c8: a7:75:87:07:a9:26:eb:0c:4b:59:7c:f7:26:1a:5c:bf:dd:9a: 9c:38:38:70:b8:71:5f:4e:20:70:24:50:85:89:7e:3d:89:f5: a3:d6:5d:05:37:75:19:07:1b:d6:5d:f9:26:75:29:2b:eb:0b: 4f:d7:50:ed:d4:d0:6e:ad:e7:53:04:71:ca:68:93:bc:5b:9a: ae:e6:11:27:81:3c:10:10:27:6b:1b:8f:86:36:97:a0:fd:70: ca:49:a2:b1:7b:1b:de:75:27:b6:30:2f:62:ea:7e:47:58:99: 5b:41:7b:f3:4c:9b:30:21:21:9a:82:74:b3:a7:fd:a0:42:bc: e8:3b:08:85:a3:f7:da:29:48:26:8d:31:7d:1f:5c:2a:21:55: 81:e6:53:86:8d:75:16:b9:0d:fa:ce:b3:84:50:d0:b8:3f:95: 04:6e:15:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjUwODIyMjAyNzI5WhcNMjUwODI5MjAyNzI5WjAYMRYwFAYD VQQDEw02OGE4ZDJiMi1jODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA073r5ZOJmVix1BFXhxbUwQqsnbr6XY/dOCYyhULv65qQGy8iz0MafDkskXio kjTG8p+A2tOUTNC/6GkZ2O6gOAextQPScWMAu1SRHZKYEKCH7glYho+DTLwq3g04 IeLwUfLWwuk6ndWxyOLIq/NVNkXl8H49JrsNW6A3zp4utwfMQ5GohfdOGPhVcOyq K9Z0aCWM0ySIrHWY5RU1BDFKAE+h4sqjyYb8MbO3o1swL6vpgexKJXxdBWG3yyuG S93HqsT5VCNYKqK6PzPRwwB2TYeBlateD/IddCV+9aQ4yD9aW9+w0g9mBK8ivRpT FDstZX4q8kK7rRCazKnDT1MQXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp3qAbS OZwilj3PbhkLyhyZR4zdMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV/KxOP/en07b1823EsFo1e6tANgGaqleZVg1JfpH8aWmvniPtgbP1 L3YbLFAv9Ux9uEeBKzWD0i2RjMSZJt8qZPFO6OzsjAM7F1M5/WgVnhZi0zCa4zpN D8indYcHqSbrDEtZfPcmGly/3ZqcODhwuHFfTiBwJFCFiX49ifWj1l0FN3UZBxvW XfkmdSkr6wtP11Dt1NBuredTBHHKaJO8W5qu5hEngTwQECdrG4+GNpeg/XDKSaKx exvedSe2MC9i6n5HWJlbQXvzTJswISGagnSzp/2gQrzoOwiFo/faKUgmjTF9H1wq IVWB5lOGjXUWuQ36zrOEUNC4P5UEbhWl -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:23 2025 by rpki-client