$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: ifE+bpTZTDYR0c8N8SZt371jziTkPGNBFz3BN6hMasw= Subject key identifier: 0B:55:12:87:9A:AF:76:E7:8F:86:62:06:01:41:8D:FC:2C:3D:4C:70 Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0B94 Signing time: Fri 22 Aug 2025 19:34:29 +0000 Manifest this update: Fri 22 Aug 2025 19:34:29 +0000 Manifest next update: Fri 29 Aug 2025 19:34:29 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: aK7SM9f3WPs7qqNhFoaSrG0+vgWo2Smf3u/3dhRS0JI=) 2: E8819018178811EC876F5F50C4F9AE02.roa (hash: TUeSGThA71gPmHqcyXZanu8mExqUQgocKEFv3yzea/g=) 3: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: xgcAPmybhdKKX1LB8rArE+ilDIHuIkSGwEMHOrxxz6w=) 4: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: SlT7b5WGF4xDvO5UnYsRWIEsNMsfCj2P0RDQ0c4uxVg=) 5: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: zf45ltuWfmdAtT9A7Ih3Fv5EL5oWc6vkxJu3n9BqugE=) 6: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: fKITGlH8Ym4FGCNTLdBz3N/9fT41O0ewrHeW85uprek=) 7: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: pWNi2zqUl2KymH0GwVdvbCWQHY1sj05kmoe0wb+HqN0=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: fpApiu1FjrarZlPUsOOK6GGIbKmnMiZ6mCyLBRP/A/k=) 9: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: RxzJdhNL3XRe6UM0O5+yODZOZOT+QSs+nHTsvvP7oUM=) 10: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: kxUXf7mA4CW5b99j/+9BBjl+HFe5y/+Il84nYKPjkAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Aug 22 19:34:29 2025 GMT Not After : Aug 29 19:34:29 2025 GMT Subject: CN=68a8c645-b172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:bb:e2:e5:9d:41:c5:76:51:fc:7a:dd:64: 36:bd:b9:33:9a:b5:0f:19:b0:a2:91:84:41:ea:07: ed:64:7d:f9:e6:6f:e0:33:24:40:ab:ce:8e:c7:54: ef:89:05:af:44:93:d1:73:c7:6a:38:47:a8:66:d0: 06:47:b6:3f:0f:b8:28:a9:de:82:ba:84:19:39:96: ae:01:fb:58:0f:ac:69:02:81:a8:02:88:3a:bd:53: 0a:20:01:dd:cf:2d:06:f7:4b:db:4e:eb:20:35:5a: 92:77:c8:cb:11:1f:2d:c6:22:25:e8:f1:85:06:d2: b1:74:e0:7c:36:aa:e5:c7:a6:7d:a3:b6:0e:c4:52: 82:0a:06:f8:a4:66:b9:b1:e0:19:e3:80:5d:68:7b: 7f:ff:4f:71:72:bd:01:df:08:af:bb:84:44:c7:ba: ef:45:b8:a0:a0:82:b0:db:29:42:a9:20:64:b7:ba: b3:26:7f:e3:5f:2b:81:d0:4d:28:f0:59:72:33:97: ca:69:01:f1:56:6a:91:aa:5f:4a:f6:78:83:74:36: 1a:c0:d7:ab:38:0e:96:1e:da:db:aa:f2:eb:c4:68: 5a:0c:8f:22:34:97:b2:33:73:39:32:96:e4:65:db: e3:63:3e:b1:59:58:7e:df:29:72:c2:00:9a:c8:27: 40:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:12:87:9A:AF:76:E7:8F:86:62:06:01:41:8D:FC:2C:3D:4C:70 X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:2b:50:a8:2d:32:cc:de:c4:c7:fa:2c:9a:44:88:50:81: bc:4b:cf:f3:80:63:56:cb:2a:79:b7:ab:5c:86:1f:a0:99:a2: d8:6c:22:d1:97:02:cb:c6:37:59:23:1e:39:3e:c0:1e:01:8d: 13:b5:72:0c:af:41:e6:84:29:88:24:b2:c9:df:3f:83:7b:29: 0c:36:93:18:df:e0:af:7d:fd:f2:f6:c6:9f:58:62:b4:b6:f8: 26:50:40:17:d3:39:36:f0:1b:19:9e:01:f8:d4:ea:ab:0e:23: 5a:76:7d:55:9d:50:e4:d1:02:2e:78:5c:93:45:18:d2:dd:04: 58:66:7a:7d:ea:be:94:7e:e1:84:54:f8:7f:1b:52:0e:48:cc: 7b:6f:33:4c:d0:bd:0e:57:89:24:10:ed:c8:56:1a:0f:61:aa: d8:a2:e2:01:c5:86:97:c2:cb:c4:5c:a6:50:bc:cb:69:51:78: be:ff:52:c5:6d:5c:77:61:85:da:2c:82:7f:dc:9c:ee:18:77: 29:39:f9:4f:51:4b:7c:26:18:52:25:8e:9f:d0:f5:33:34:f9: fc:ab:19:d0:ff:0f:08:a9:09:63:1e:3c:a0:85:d3:16:08:0b: 38:70:fc:d5:65:e3:0e:3c:85:6a:4b:26:7e:ef:f2:9b:74:04: 77:00:b0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjUwODIyMTkzNDI5WhcNMjUwODI5MTkzNDI5WjAYMRYwFAYD VQQDEw02OGE4YzY0NS1iMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto+74uWdQcV2Ufx63WQ2vbkzmrUPGbCikYRB6gftZH355m/gMyRAq86Ox1Tv iQWvRJPRc8dqOEeoZtAGR7Y/D7goqd6CuoQZOZauAftYD6xpAoGoAog6vVMKIAHd zy0G90vbTusgNVqSd8jLER8txiIl6PGFBtKxdOB8Nqrlx6Z9o7YOxFKCCgb4pGa5 seAZ44BdaHt//09xcr0B3wivu4REx7rvRbigoIKw2ylCqSBkt7qzJn/jXyuB0E0o 8FlyM5fKaQHxVmqRql9K9niDdDYawNerOA6WHtrbqvLrxGhaDI8iNJeyM3M5Mpbk ZdvjYz6xWVh+3ylywgCayCdAqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtVEoea r3bnj4ZiBgFBjfwsPUxwMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBygCtQqC0yzN7Ex/osmkSIUIG8S8/zgGNWyyp5t6tchh+gmaLYbCLR lwLLxjdZIx45PsAeAY0TtXIMr0HmhCmIJLLJ3z+DeykMNpMY3+Cvff3y9safWGK0 tvgmUEAX0zk28BsZngH41OqrDiNadn1VnVDk0QIueFyTRRjS3QRYZnp96r6UfuGE VPh/G1IOSMx7bzNM0L0OV4kkEO3IVhoPYarYouIBxYaXwsvEXKZQvMtpUXi+/1LF bVx3YYXaLIJ/3JzuGHcpOflPUUt8JhhSJY6f0PUzNPn8qxnQ/w8IqQljHjyghdMW CAs4cPzVZeMOPIVqSyZ+7/KbdAR3ALBK -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:20 2025 by rpki-client