$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: eibXWZ+IEOGqKQj2fda0IB8gO1FDOO6jog+0qQK70OQ= Subject key identifier: A2:C8:2B:C8:7C:C7:91:54:16:1A:EB:7A:6B:CC:71:B6:4A:1E:D2:75 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0DC5 Signing time: Fri 22 Aug 2025 18:00:28 +0000 Manifest this update: Fri 22 Aug 2025 18:00:27 +0000 Manifest next update: Fri 29 Aug 2025 18:00:27 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: cEuuuaq8s4HVtgF4xsv2cGjEy5EdHwQyOPE7yd/vsnA=) 2: FCFEAA74DB9111E9B70EDD2EC4F9AE02.roa (hash: Bv4wN8OF2Bm5se8xe4Mu+kG3hxKKklF4aauYgHDM/QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Aug 22 18:00:27 2025 GMT Not After : Aug 29 18:00:27 2025 GMT Subject: CN=68a8b03b-1cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:97:3f:fa:ec:f4:b4:14:42:9f:7b:8a:22: 72:72:1b:60:1f:1f:17:34:08:44:17:72:98:bf:4c: 9c:b0:95:0c:1b:c9:e5:23:05:7e:08:4f:ec:8f:9e: b9:d3:c3:a0:9c:8c:84:3a:4f:a4:77:a0:88:f2:69: db:26:3a:37:df:0e:ea:85:76:4d:a6:ff:9a:fa:b5: e4:f8:62:91:04:8d:6c:29:6a:da:12:67:fc:ea:0e: 42:a8:2f:f0:c5:8a:8d:ef:39:cf:e9:da:b3:02:91: 2d:81:e6:37:89:0b:bb:ee:ca:70:01:3f:5d:ec:1a: 79:eb:20:37:4e:e6:c0:22:f3:17:a1:df:f8:a6:ea: 79:b5:88:ec:7c:8a:0d:0c:68:41:a4:9a:ec:b2:0a: 9f:68:d4:fe:40:dc:1c:a7:b2:3b:43:80:0f:80:8c: 54:6c:45:ad:c0:d6:94:a8:09:a0:54:e4:68:3c:6b: 0f:9e:35:4f:e7:70:af:49:10:8d:2d:65:c7:ee:57: f9:e4:a3:ed:5b:08:87:4b:f7:79:dd:a5:da:7b:61: c3:b4:1c:86:c5:ea:cb:c6:4c:44:3b:6c:dd:44:ce: 04:78:d0:fb:4d:45:d0:56:f8:1c:fb:47:c7:d0:54: 27:b1:5d:2b:c8:2b:8d:45:9e:6c:4c:1d:35:11:6e: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:2B:C8:7C:C7:91:54:16:1A:EB:7A:6B:CC:71:B6:4A:1E:D2:75 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f7:8b:63:70:cb:87:87:60:26:69:56:ca:68:5d:14:32:e7: 88:9d:42:38:14:f4:78:63:b0:c4:26:6a:fc:59:af:52:b7:6e: 35:dc:c3:80:53:19:bf:e9:0e:42:10:5e:3a:4e:49:d7:5d:3d: ef:35:09:6a:be:e9:92:ff:56:ed:39:b2:78:03:21:9c:a6:ce: 00:9b:f7:cd:b0:8c:cb:a1:dd:c1:51:46:f1:af:ba:2e:9f:85: 81:f3:33:e3:10:73:b4:91:06:52:da:1b:13:77:f1:7b:67:74: 4f:6b:08:25:96:37:01:ed:44:b9:98:3f:3b:2a:66:0f:15:26: 4f:e2:17:70:7d:ef:a4:6b:af:95:2e:ce:f9:89:bb:da:06:e3: 8f:62:d8:8a:b0:54:a7:d2:b1:df:a0:df:8a:48:4a:03:0a:76: ce:51:9b:af:f2:a7:95:c0:e2:c8:6f:2e:9b:4d:00:a2:88:86: 6b:23:da:2a:0c:b5:6a:f5:0a:5d:e8:89:9b:71:a7:81:14:ad: 27:71:dd:e0:12:dd:ca:6e:2d:60:e7:1c:4a:41:ab:5a:4e:80: 57:97:2b:3f:13:06:55:1d:b9:69:74:91:de:4a:81:c3:d5:1e: f0:d8:5c:fb:ba:75:fd:5e:ad:b9:e1:1b:4a:43:3f:45:60:0c: 3b:53:4e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjUwODIyMTgwMDI3WhcNMjUwODI5MTgwMDI3WjAYMRYwFAYD VQQDEw02OGE4YjAzYi0xY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXuXP/rs9LQUQp97iiJychtgHx8XNAhEF3KYv0ycsJUMG8nlIwV+CE/sj565 08OgnIyEOk+kd6CI8mnbJjo33w7qhXZNpv+a+rXk+GKRBI1sKWraEmf86g5CqC/w xYqN7znP6dqzApEtgeY3iQu77spwAT9d7Bp56yA3TubAIvMXod/4pup5tYjsfIoN DGhBpJrssgqfaNT+QNwcp7I7Q4APgIxUbEWtwNaUqAmgVORoPGsPnjVP53CvSRCN LWXH7lf55KPtWwiHS/d53aXae2HDtByGxerLxkxEO2zdRM4EeND7TUXQVvgc+0fH 0FQnsV0ryCuNRZ5sTB01EW6YywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLIK8h8 x5FUFhrremvMcbZKHtJ1MB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw94tjcMuHh2AmaVbKaF0UMueInUI4FPR4Y7DEJmr8Wa9St2413MOA Uxm/6Q5CEF46TknXXT3vNQlqvumS/1btObJ4AyGcps4Am/fNsIzLod3BUUbxr7ou n4WB8zPjEHO0kQZS2hsTd/F7Z3RPawglljcB7US5mD87KmYPFSZP4hdwfe+ka6+V Ls75ibvaBuOPYtiKsFSn0rHfoN+KSEoDCnbOUZuv8qeVwOLIby6bTQCiiIZrI9oq DLVq9Qpd6ImbcaeBFK0ncd3gEt3Kbi1g5xxKQataToBXlys/EwZVHblpdJHeSoHD 1R7w2Fz7unX9Xq254RtKQz9FYAw7U06/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:49 2025 by rpki-client