$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: IVQwz8DTfsCrCLiZjnWTzzkS6Ka5yPEjONjMkMEy0Cc= Subject key identifier: 71:22:85:69:B7:25:B9:48:B9:29:C1:B6:9C:00:5E:35:B4:93:6E:3E Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 038E Signing time: Sat 23 Aug 2025 01:07:19 +0000 Manifest this update: Sat 23 Aug 2025 01:07:19 +0000 Manifest next update: Sat 30 Aug 2025 01:07:19 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: Unk3v923O/GlHsVug3yHSNVxNmIp5Y8pn7TzNQj/92o=) 2: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Aug 23 01:07:19 2025 GMT Not After : Aug 30 01:07:19 2025 GMT Subject: CN=68a91447-7327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b4:72:0f:a7:3b:80:f1:50:6f:52:46:b2:7d: 34:d3:b0:e2:5e:4a:a4:2c:e4:cc:2b:ab:58:23:ed: 66:e0:58:7d:be:f7:97:55:5c:52:9c:40:32:a2:b1: ec:83:82:b9:92:4d:5d:f8:89:37:48:5b:8a:48:b4: e2:ff:b0:9c:63:2e:ab:57:14:e1:1b:7d:33:63:84: 34:6f:48:9f:e0:b3:8b:dc:1f:71:d6:75:8f:c2:06: ea:4b:f1:61:9e:48:11:e9:80:5b:b9:76:15:60:0b: c9:1e:cd:d5:41:c2:76:50:46:5e:5a:e0:b6:f1:4c: f8:b7:59:14:6e:3e:d4:e2:db:51:d9:e2:c9:f4:f3: e4:39:31:6b:d2:ee:22:04:4a:40:8f:e4:2c:6c:f5: 91:10:fa:fc:31:aa:f6:f2:95:5c:75:fd:fa:0a:0e: 51:87:2b:20:6c:47:e3:8f:d9:0c:83:7f:fd:99:64: 6f:dd:d4:40:c9:31:7d:03:b0:67:3f:d1:7a:1d:ab: 42:bd:72:9f:e8:b6:24:1b:26:4a:9a:a4:68:fa:b7: 5d:34:f7:b4:b3:53:c6:df:06:b8:33:ca:80:89:42: a2:d8:ec:70:11:f2:05:94:55:5d:0b:3d:40:54:79: c1:bd:1e:7c:24:70:83:c1:a3:e8:82:fc:ae:46:da: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:22:85:69:B7:25:B9:48:B9:29:C1:B6:9C:00:5E:35:B4:93:6E:3E X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c2:75:e9:73:44:c6:12:ca:05:0d:bc:4c:85:48:bf:2e:23: e5:1c:55:22:e1:f1:cb:0f:27:9d:15:30:14:b5:d6:03:de:d2: 5d:62:34:a6:20:43:fc:3a:96:cb:a0:ae:6d:d0:ae:91:cb:f2: 2a:51:98:3c:3e:f7:f5:08:bc:54:d4:5b:fd:fb:04:6c:47:cb: 49:fd:48:35:f2:6d:3f:8f:4c:2c:ec:0a:09:b5:06:9d:12:b6: a9:46:85:6f:bf:07:35:30:bb:66:35:42:d4:62:82:57:8b:3b: e1:3a:7f:8c:ab:74:53:3d:8d:34:23:18:ea:74:58:cc:aa:eb: 42:19:d7:4f:44:cc:cf:3f:5c:48:89:e3:65:b4:85:78:5b:3b: 79:af:04:e0:d2:16:32:d9:2f:7f:0c:e3:ad:d8:b6:5c:90:1d: ef:6f:4f:87:af:44:52:68:1f:ec:6c:39:62:9c:a6:d1:7b:0b: 85:7a:f7:67:b4:84:0d:20:ae:ad:32:48:a2:da:d5:a7:b2:bf: a1:51:5a:5f:cf:64:df:de:ee:72:d0:75:26:ac:e9:c7:fd:5a: 48:29:b1:75:98:51:a1:7e:2b:d7:b9:5a:c5:1c:e4:5a:85:90: 17:79:70:93:9b:36:fe:db:b6:e1:be:83:48:e1:0a:b4:05:3e: 96:02:fc:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUwODIzMDEwNzE5WhcNMjUwODMwMDEwNzE5WjAYMRYwFAYD VQQDEw02OGE5MTQ0Ny03MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7RyD6c7gPFQb1JGsn0007DiXkqkLOTMK6tYI+1m4Fh9vveXVVxSnEAyorHs g4K5kk1d+Ik3SFuKSLTi/7CcYy6rVxThG30zY4Q0b0if4LOL3B9x1nWPwgbqS/Fh nkgR6YBbuXYVYAvJHs3VQcJ2UEZeWuC28Uz4t1kUbj7U4ttR2eLJ9PPkOTFr0u4i BEpAj+QsbPWREPr8Mar28pVcdf36Cg5RhysgbEfjj9kMg3/9mWRv3dRAyTF9A7Bn P9F6HatCvXKf6LYkGyZKmqRo+rddNPe0s1PG3wa4M8qAiUKi2OxwEfIFlFVdCz1A VHnBvR58JHCDwaPogvyuRtrxOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEihWm3 JblIuSnBtpwAXjW0k24+MB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2wnXpc0TGEsoFDbxMhUi/LiPlHFUi4fHLDyedFTAUtdYD3tJdYjSm IEP8OpbLoK5t0K6Ry/IqUZg8Pvf1CLxU1Fv9+wRsR8tJ/Ug18m0/j0ws7AoJtQad ErapRoVvvwc1MLtmNULUYoJXizvhOn+Mq3RTPY00IxjqdFjMqutCGddPRMzPP1xI ieNltIV4Wzt5rwTg0hYy2S9/DOOt2LZckB3vb0+Hr0RSaB/sbDlinKbRewuFevdn tIQNIK6tMkii2tWnsr+hUVpfz2Tf3u5y0HUmrOnH/VpIKbF1mFGhfivXuVrFHORa hZAXeXCTmzb+27bhvoNI4Qq0BT6WAvyL -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:38 2025 by rpki-client