$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: 82SmYa3tsn042OzaQhV0ibSsZmeeuOv2KmToJJOYrz8= Subject key identifier: D9:8B:78:65:FE:28:FF:21:78:43:25:49:82:A3:CF:A4:11:75:50:BB Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01C8 Signing time: Sat 23 Aug 2025 03:05:56 +0000 Manifest this update: Sat 23 Aug 2025 03:05:56 +0000 Manifest next update: Sat 30 Aug 2025 03:05:56 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: 5FjffnqcrrdPrTW9N+72kwhov3O4aqqEwaCkNxotJrs=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: wnETTqWJtI3Udhyqfyf0Gf1ngQci7SXSxAE3DX4g/Ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Aug 23 03:05:56 2025 GMT Not After : Aug 30 03:05:56 2025 GMT Subject: CN=68a93014-3b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:96:c7:8c:16:55:80:dd:ad:12:78:ce:4b: bc:52:36:49:a5:17:b7:b1:d6:81:f1:db:f8:f9:84: 17:12:59:ba:c7:40:b7:4f:4b:aa:58:44:13:ac:ff: 67:c1:53:0c:1d:ca:91:f9:86:c1:e8:19:99:50:94: 8d:93:bf:b5:49:7e:1f:c4:bb:7d:7d:75:1d:12:0a: 26:5f:3a:b4:50:41:2a:bf:74:ac:96:7d:0b:9b:99: 00:4a:72:83:8a:d6:af:64:e2:2d:eb:85:4b:0e:3b: 51:5b:1d:13:da:57:81:78:95:3b:3d:cb:1f:21:7e: a3:21:87:c2:77:af:96:94:64:bf:38:73:81:b8:f5: 24:8e:ee:8a:24:d0:55:58:19:e8:00:0c:8e:dd:d9: 06:e9:ec:23:49:65:58:58:27:2b:cb:d0:31:3b:1c: b6:46:20:ad:bf:27:c5:08:ca:3f:81:3c:36:3e:0b: fe:f7:28:58:87:68:0b:90:37:c0:76:79:ca:d4:0c: 60:14:59:ea:9a:75:07:b1:1f:c3:35:2d:a3:42:8c: 5f:27:2d:9e:6c:25:4a:ba:8c:41:6f:fc:49:2c:5c: 26:b3:21:56:cc:5b:f9:2b:2e:a7:16:b1:fc:5e:14: d6:1c:82:29:5e:d7:60:c9:d5:14:ef:15:2b:57:a2: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8B:78:65:FE:28:FF:21:78:43:25:49:82:A3:CF:A4:11:75:50:BB X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6a:1d:78:90:df:c5:5c:7e:d1:39:54:5c:2e:3b:e0:68:ee: de:64:ca:b8:f3:01:ab:33:86:93:8a:b3:e3:78:d2:ef:16:72: 31:c4:f0:ea:b1:bb:d8:a5:07:66:0f:b9:54:5c:eb:68:ab:88: df:e0:b9:fa:37:a3:55:0b:47:a8:3e:c8:c9:45:68:05:40:61: 65:44:28:80:ea:e9:4c:28:4e:4d:b8:74:0c:7b:b9:db:4c:38: bb:56:e5:e9:92:9a:72:94:98:48:f6:b7:81:3d:e8:76:f6:21: 3e:87:93:80:02:ac:a7:2e:9a:c9:46:0e:ac:c4:60:9f:72:6e: a6:59:b7:68:aa:ff:1f:ba:45:6e:1c:f1:a1:4c:73:d2:fd:7c: 9a:d1:68:b3:70:21:2b:d4:11:9a:07:a6:db:99:3e:16:33:31: ec:13:ce:b7:11:af:45:e4:c4:7a:41:ce:1f:f4:29:8e:f5:79: 87:7e:16:7b:c0:ae:3f:d2:f7:87:21:da:78:50:d5:a5:b9:f8: 7e:c9:ce:0f:86:d1:f5:7e:79:e3:b7:36:ce:20:cc:41:10:eb: 1d:0e:26:56:5f:5b:f5:db:3d:40:60:8a:40:9d:09:5f:ea:be: 73:19:7f:07:22:35:cd:6f:95:9e:7f:43:a7:fa:aa:eb:cf:9c: 94:66:91:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUwODIzMDMwNTU2WhcNMjUwODMwMDMwNTU2WjAYMRYwFAYD VQQDEw02OGE5MzAxNC0zYjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtE2Wx4wWVYDdrRJ4zku8UjZJpRe3sdaB8dv4+YQXElm6x0C3T0uqWEQTrP9n wVMMHcqR+YbB6BmZUJSNk7+1SX4fxLt9fXUdEgomXzq0UEEqv3Ssln0Lm5kASnKD itavZOIt64VLDjtRWx0T2leBeJU7PcsfIX6jIYfCd6+WlGS/OHOBuPUkju6KJNBV WBnoAAyO3dkG6ewjSWVYWCcry9AxOxy2RiCtvyfFCMo/gTw2Pgv+9yhYh2gLkDfA dnnK1AxgFFnqmnUHsR/DNS2jQoxfJy2ebCVKuoxBb/xJLFwmsyFWzFv5Ky6nFrH8 XhTWHIIpXtdgydUU7xUrV6LA/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmLeGX+ KP8heEMlSYKjz6QRdVC7MB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANah14kN/FXH7ROVRcLjvgaO7eZMq48wGrM4aTirPjeNLvFnIxxPDq sbvYpQdmD7lUXOtoq4jf4Ln6N6NVC0eoPsjJRWgFQGFlRCiA6ulMKE5NuHQMe7nb TDi7VuXpkppylJhI9reBPeh29iE+h5OAAqynLprJRg6sxGCfcm6mWbdoqv8fukVu HPGhTHPS/Xya0WizcCEr1BGaB6bbmT4WMzHsE863Ea9F5MR6Qc4f9CmO9XmHfhZ7 wK4/0veHIdp4UNWlufh+yc4PhtH1fnnjtzbOIMxBEOsdDiZWX1v12z1AYIpAnQlf 6r5zGX8HIjXNb5Wef0On+qrrz5yUZpEm -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:22 2025 by rpki-client