$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft File: 4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json) Hash identifier: 1N0sFh0SM1FDF0BVh65DfADNw1E5+RN2qM1PwTzyhMc= Subject key identifier: 0C:99:3B:38:B1:74:42:87:69:73:AF:23:FA:D3:DA:39:88:4B:02:D6 Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft Manifest number: 028D Signing time: Sat 23 Aug 2025 01:53:38 +0000 Manifest this update: Sat 23 Aug 2025 01:53:37 +0000 Manifest next update: Sat 30 Aug 2025 01:53:37 +0000 Files and hashes: 1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: sRMR24rC5mVj9RJ4rdlIGbtAYLgsFppQOsV2cU6loNE=) 2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=) 3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=) 4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2 Validity Not Before: Aug 23 01:53:37 2025 GMT Not After : Aug 30 01:53:37 2025 GMT Subject: CN=68a91f21-3b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:3f:b5:0f:d7:d5:a1:7a:c4:45:02:b4:62: 8f:46:63:70:f9:f6:0c:17:4d:1c:af:76:57:c5:68: 1a:16:9a:51:e4:63:83:a7:7e:b6:ed:e0:90:31:5f: 22:89:7b:9c:e9:1e:63:69:27:94:5d:0c:65:1c:c8: 1f:e9:81:90:2c:ba:29:ee:bf:19:b0:20:31:58:bf: dc:c3:2f:84:35:21:dc:ed:10:fd:53:4b:16:5d:87: 03:80:83:48:61:44:55:69:78:f5:4d:9e:b0:82:76: d0:83:5d:21:88:d3:ca:27:52:30:63:2c:74:cc:49: 8e:34:25:67:dd:4a:58:b0:6a:ea:1e:9d:63:28:4f: ae:9d:83:6c:e1:97:af:9d:e7:7e:13:56:c9:a7:11: 8d:36:09:37:b1:b5:7f:fd:f5:ba:43:be:9e:d3:55: 2b:d2:4d:fc:6c:27:c2:60:e2:f5:6e:fa:0a:a2:9d: 7b:49:a8:b6:e9:99:49:5e:f6:c3:67:90:53:c0:a8: 5d:0e:77:4d:3c:d0:ba:c9:49:58:b6:1f:f4:0e:e9: eb:cd:97:b8:37:5e:25:0b:83:d1:36:43:ec:9c:31: 71:55:54:3b:f3:94:96:d1:59:c3:3d:f7:1d:e9:21: 54:8b:49:e9:83:71:bb:59:5c:05:4b:ff:72:d3:83: bf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:99:3B:38:B1:74:42:87:69:73:AF:23:FA:D3:DA:39:88:4B:02:D6 X509v3 Authority Key Identifier: keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f8:52:06:6c:bc:ac:bd:97:20:07:4f:a4:2a:31:b0:05:b5: 79:dc:40:b7:84:72:cd:90:92:49:32:3e:e9:70:a3:f9:95:4d: d5:43:94:9c:e2:7b:2a:b6:c0:bf:42:33:61:b1:87:8b:56:21: 07:77:53:43:da:f4:2c:f4:fc:79:bb:d7:a8:5c:2e:a0:86:85: 20:dd:73:28:eb:c0:ea:1f:5f:68:78:77:49:fa:86:89:19:30: e3:58:4b:b5:6d:31:03:73:12:71:81:ca:75:f3:2d:c5:df:16: 28:70:49:77:b1:5c:43:b8:ec:61:b5:62:5f:2b:22:35:71:ba: 8f:e2:8f:a5:d2:85:ba:7d:3f:f8:10:6c:db:39:79:e1:48:31: 09:af:2d:6c:c1:42:2f:83:83:02:4a:63:4e:42:67:86:c9:b2: e9:2a:c6:34:65:4a:e7:9d:2e:f7:e2:80:02:6c:90:2b:fd:6a: 23:3a:78:fd:36:4e:44:e9:9a:4a:e9:9c:f8:fa:f8:4e:6b:ed: d1:70:2f:c8:aa:39:31:3b:0e:c4:db:92:17:e2:d0:08:b8:e5: ed:56:b7:5f:33:34:8f:0b:0d:98:5e:2c:a4:a0:cb:c1:cd:fc: 86:ee:cb:2b:74:5c:ae:d6:a9:85:2a:0d:3f:ee:71:94:f8:93: 0c:0f:ea:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz Rjg2MDI5QTIwHhcNMjUwODIzMDE1MzM3WhcNMjUwODMwMDE1MzM3WjAYMRYwFAYD VQQDEw02OGE5MWYyMS0zYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCQ/tQ/X1aF6xEUCtGKPRmNw+fYMF00cr3ZXxWgaFppR5GODp3627eCQMV8i iXuc6R5jaSeUXQxlHMgf6YGQLLop7r8ZsCAxWL/cwy+ENSHc7RD9U0sWXYcDgINI YURVaXj1TZ6wgnbQg10hiNPKJ1IwYyx0zEmONCVn3UpYsGrqHp1jKE+unYNs4Zev ned+E1bJpxGNNgk3sbV//fW6Q76e01Ur0k38bCfCYOL1bvoKop17Sai26ZlJXvbD Z5BTwKhdDndNPNC6yUlYth/0DunrzZe4N14lC4PRNkPsnDFxVVQ785SW0VnDPfcd 6SFUi0npg3G7WVwFS/9y04O/3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyZOzix dEKHaXOvI/rT2jmISwLWMB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2 QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+FIGbLysvZcgB0+kKjGwBbV53EC3hHLNkJJJMj7pcKP5lU3VQ5Sc 4nsqtsC/QjNhsYeLViEHd1ND2vQs9Px5u9eoXC6ghoUg3XMo68DqH19oeHdJ+oaJ GTDjWEu1bTEDcxJxgcp18y3F3xYocEl3sVxDuOxhtWJfKyI1cbqP4o+l0oW6fT/4 EGzbOXnhSDEJry1swUIvg4MCSmNOQmeGybLpKsY0ZUrnnS734oACbJAr/WojOnj9 Nk5E6ZpK6Zz4+vhOa+3RcC/IqjkxOw7E25IX4tAIuOXtVrdfMzSPCw2YXiykoMvB zfyG7ssrdFyu1qmFKg0/7nGU+JMMD+rg -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:14 2025 by rpki-client