$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: i0Q6hVm3zcjmJKZV6A6CT7Rxw4DM2ynrYLITY5ngSCo= Subject key identifier: 29:D7:74:A7:DC:7D:BD:F9:48:CE:F0:9C:27:1A:C6:38:6D:BC:15:57 Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 029E Signing time: Sat 23 Aug 2025 01:49:34 +0000 Manifest this update: Sat 23 Aug 2025 01:49:34 +0000 Manifest next update: Sat 30 Aug 2025 01:49:34 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: b744nrh+HwoPb2YIxnnNDjWuk00IvAUaTtku5/cV2DM=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Aug 23 01:49:34 2025 GMT Not After : Aug 30 01:49:34 2025 GMT Subject: CN=68a91e2e-3e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:be:2e:b1:0a:0e:1a:58:fc:2c:54:3a:55: 3f:58:24:56:80:b0:a6:08:68:2a:16:5e:36:00:73: f7:71:99:ef:42:c0:3c:3b:da:f4:d3:b5:6f:69:bc: 60:a5:2d:0d:d1:12:d2:44:e9:56:46:84:85:30:49: a9:49:ac:e4:18:25:62:32:e7:64:1e:bb:8c:11:85: d9:a4:7c:58:1a:76:db:5c:86:7d:2d:ba:5c:37:b6: a9:f8:59:f8:db:31:bc:ea:c7:a8:76:16:a4:84:61: 1c:7f:91:4d:4f:b1:0c:bb:39:51:97:05:9b:ab:8c: c5:3e:7a:ec:a0:d9:5e:af:99:f8:08:c2:1c:42:78: 8b:5d:85:d4:81:67:ea:ab:92:41:4a:db:40:8d:67: 67:15:5f:b9:1d:32:f9:16:a9:38:3e:9e:fe:bd:e3: 2d:31:ca:b1:43:51:f6:98:30:95:9b:04:09:0e:c2: b0:b6:2b:00:27:a7:2d:1a:65:83:d3:64:70:a9:c4: 85:95:43:f6:77:84:13:d1:8d:b5:a3:99:38:02:3d: 30:1d:92:66:19:06:a3:f6:b6:db:e6:c6:61:d2:bb: 0c:68:e7:46:f4:ce:fd:28:f1:49:f9:7c:79:66:b3: 34:9c:1a:d8:15:97:f4:c8:de:74:b2:4a:f5:31:05: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:74:A7:DC:7D:BD:F9:48:CE:F0:9C:27:1A:C6:38:6D:BC:15:57 X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:db:78:77:52:9d:3f:08:ba:24:93:b5:ca:b4:ca:ac:57:40: 5d:95:58:cc:b2:99:e6:36:df:66:81:d5:bd:f8:f6:85:da:dd: c1:00:69:cf:7c:ed:d0:c0:79:66:3b:7e:e5:e1:0e:30:17:17: d5:22:23:bf:88:e6:99:cc:cd:3c:f8:b6:f1:ec:79:ae:4b:3e: 33:54:5f:d6:72:26:ec:94:83:89:ae:23:77:50:cd:07:27:0b: a1:99:6d:66:e0:63:ca:77:e9:64:b3:2e:69:2f:51:26:42:d4: 56:80:90:d9:0d:0c:d7:cd:96:06:61:68:18:8d:5e:da:5b:de: 9e:af:45:8f:eb:d7:51:c1:6f:20:6e:24:d0:b3:73:c1:6a:d3: e7:ab:8e:be:bb:b0:a7:fe:42:5b:dd:3c:72:62:bf:33:19:79: 97:31:af:5b:c0:29:cb:ff:64:ca:cc:11:79:38:82:cf:a3:96: 3b:00:a0:2f:64:86:76:8c:fa:8f:d8:4b:fd:23:c0:3a:f7:4e: 87:8f:89:78:d1:a4:b6:69:52:db:ce:2d:95:99:f5:48:8b:90: c1:dc:32:0e:6c:5c:09:6b:aa:00:36:b6:91:15:da:ba:0c:58: c0:6a:64:a9:ff:5f:8a:cd:21:23:37:ad:ba:a0:94:ca:76:f9: b6:85:4f:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUwODIzMDE0OTM0WhcNMjUwODMwMDE0OTM0WjAYMRYwFAYD VQQDEw02OGE5MWUyZS0zZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGS+LrEKDhpY/CxUOlU/WCRWgLCmCGgqFl42AHP3cZnvQsA8O9r007Vvabxg pS0N0RLSROlWRoSFMEmpSazkGCViMudkHruMEYXZpHxYGnbbXIZ9LbpcN7ap+Fn4 2zG86seodhakhGEcf5FNT7EMuzlRlwWbq4zFPnrsoNler5n4CMIcQniLXYXUgWfq q5JBSttAjWdnFV+5HTL5Fqk4Pp7+veMtMcqxQ1H2mDCVmwQJDsKwtisAJ6ctGmWD 02RwqcSFlUP2d4QT0Y21o5k4Aj0wHZJmGQaj9rbb5sZh0rsMaOdG9M79KPFJ+Xx5 ZrM0nBrYFZf0yN50skr1MQUmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnXdKfc fb35SM7wnCcaxjhtvBVXMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf23h3Up0/CLokk7XKtMqsV0BdlVjMspnmNt9mgdW9+PaF2t3BAGnP fO3QwHlmO37l4Q4wFxfVIiO/iOaZzM08+Lbx7HmuSz4zVF/WcibslIOJriN3UM0H JwuhmW1m4GPKd+lksy5pL1EmQtRWgJDZDQzXzZYGYWgYjV7aW96er0WP69dRwW8g biTQs3PBatPnq46+u7Cn/kJb3TxyYr8zGXmXMa9bwCnL/2TKzBF5OILPo5Y7AKAv ZIZ2jPqP2Ev9I8A6906Hj4l40aS2aVLbzi2VmfVIi5DB3DIObFwJa6oANraRFdq6 DFjAamSp/1+KzSEjN626oJTKdvm2hU+0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:19 2025 by rpki-client