$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: 4z8bdYxyebhRzdG9/a+0vPfW4RHYYxS2OW4nfEVS29w= Subject key identifier: 2C:A5:2F:A7:2F:C0:F3:AE:5E:55:21:A9:4E:F7:CD:43:04:42:86:F2 Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0A74 Signing time: Fri 22 Aug 2025 19:46:52 +0000 Manifest this update: Fri 22 Aug 2025 19:46:51 +0000 Manifest next update: Fri 29 Aug 2025 19:46:51 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: dqMZJEfpGjyh6BL0b7UOLpjyJ33VSaBdX5uCuyJWHMs=) 2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=) 3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Validity Not Before: Aug 22 19:46:51 2025 GMT Not After : Aug 29 19:46:51 2025 GMT Subject: CN=68a8c92c-e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:e7:a2:f9:7b:63:12:36:6a:07:35:8b:f0: 8b:a9:83:9e:72:e6:7f:65:b2:34:4c:0a:6d:d7:c2: 75:1f:75:23:fc:c1:2c:fb:d0:e6:20:37:fc:eb:d3: 1f:98:c5:44:cb:c5:30:aa:94:72:9b:f4:09:09:82: 8b:ca:11:94:f0:59:81:cc:72:f4:e6:e9:36:13:5b: 6b:21:f3:c3:bb:62:4b:de:f2:49:9b:16:33:43:19: 46:1a:d4:01:75:82:50:7c:b1:f4:e7:bd:a3:e6:d8: a3:66:17:b2:0b:b0:a7:d4:d7:56:cd:e5:4e:a0:54: 7c:5b:1e:18:b7:fb:c4:f7:43:a2:d5:81:f4:02:fa: 41:55:10:a9:9a:94:28:0e:c9:23:b2:17:6f:0b:95: 2d:06:f2:b9:b7:cf:53:e5:8b:8b:a3:b7:d3:b6:bd: 84:0b:06:e8:14:fc:9b:b3:d1:10:a5:3d:83:e0:cd: d6:33:05:ea:5f:b9:80:32:76:6f:50:84:6d:8e:d8: 15:80:1a:e0:91:c3:3f:a2:1f:31:08:4d:59:ab:e4: 54:0a:5d:b1:d5:a7:9b:7b:ef:c0:47:64:65:c7:41: 28:96:3f:27:83:bb:02:db:89:59:c9:80:10:08:3e: 31:0d:a4:eb:8a:7d:fb:81:89:41:0e:33:a7:1a:4c: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:2F:A7:2F:C0:F3:AE:5E:55:21:A9:4E:F7:CD:43:04:42:86:F2 X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2a:bb:b7:8a:82:4e:69:f6:1d:69:f6:3c:2f:d8:02:fa:2c: d5:14:dd:2a:7e:f0:83:d7:d2:fb:6f:a4:ee:e0:cd:d1:a0:bf: ed:6b:ce:f5:79:8a:ca:43:cc:11:bc:0f:c2:fd:38:bf:d3:88: 82:b4:4b:b4:7a:a3:08:c9:58:7c:84:fe:4e:0a:c9:84:15:5e: 52:6a:29:1b:38:6f:1e:b5:26:f9:12:a4:6d:7d:34:ca:27:9a: d8:61:45:36:03:ae:e8:e3:02:3e:4c:cf:07:e5:34:05:72:85: 2c:b4:24:2f:b3:9d:44:3c:a0:2b:f9:d8:ef:b3:50:c7:99:44: ab:c7:14:72:ae:99:b3:78:c9:a0:84:c5:c4:1c:57:54:90:d7: 76:c4:12:cd:e4:14:c5:49:b0:b9:d8:37:fa:b4:93:10:97:a1: 81:1b:6d:01:85:3c:f8:c2:6a:6c:f1:bc:d9:b6:56:5c:f1:55: 7d:bb:80:01:1c:91:c1:93:a3:80:4a:6b:53:a4:da:57:8d:7a: 08:d6:af:6d:b7:62:29:1e:5b:45:08:fa:67:ad:9a:4f:94:ba: ef:2d:4d:61:7b:3f:3a:86:36:98:64:7e:91:34:06:2d:07:cd: 08:4e:27:ec:43:86:9d:d9:69:22:6d:76:49:0b:aa:38:d8:26: a2:1e:eb:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjUwODIyMTk0NjUxWhcNMjUwODI5MTk0NjUxWjAYMRYwFAYD VQQDEw02OGE4YzkyYy1lOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tPnovl7YxI2agc1i/CLqYOecuZ/ZbI0TApt18J1H3Uj/MEs+9DmIDf869Mf mMVEy8UwqpRym/QJCYKLyhGU8FmBzHL05uk2E1trIfPDu2JL3vJJmxYzQxlGGtQB dYJQfLH0572j5tijZheyC7Cn1NdWzeVOoFR8Wx4Yt/vE90Oi1YH0AvpBVRCpmpQo DskjshdvC5UtBvK5t89T5YuLo7fTtr2ECwboFPybs9EQpT2D4M3WMwXqX7mAMnZv UIRtjtgVgBrgkcM/oh8xCE1Zq+RUCl2x1aebe+/AR2Rlx0Eolj8ng7sC24lZyYAQ CD4xDaTrin37gYlBDjOnGkysFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCylL6cv wPOuXlUhqU73zUMEQobyMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFKru3ioJOafYdafY8L9gC+izVFN0qfvCD19L7b6Tu4M3RoL/ta871 eYrKQ8wRvA/C/Ti/04iCtEu0eqMIyVh8hP5OCsmEFV5SaikbOG8etSb5EqRtfTTK J5rYYUU2A67o4wI+TM8H5TQFcoUstCQvs51EPKAr+djvs1DHmUSrxxRyrpmzeMmg hMXEHFdUkNd2xBLN5BTFSbC52Df6tJMQl6GBG20BhTz4wmps8bzZtlZc8VV9u4AB HJHBk6OASmtTpNpXjXoI1q9tt2IpHltFCPpnrZpPlLrvLU1hez86hjaYZH6RNAYt B80ITifsQ4ad2WkibXZJC6o42CaiHuup -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:06 2025 by rpki-client