$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: WgxT6TbRJgLSRhGuAADNckVHOCsfW4SG1gOWHIiWvas= Subject key identifier: CE:16:6B:B1:31:D8:E5:5C:69:E9:44:9D:8F:88:E1:DE:18:28:A7:FE Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0A68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 097D Signing time: Fri 22 Aug 2025 20:44:48 +0000 Manifest this update: Fri 22 Aug 2025 20:44:48 +0000 Manifest next update: Fri 29 Aug 2025 20:44:48 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: Gf2bhE+ZxshfTxowHhsLo1XtalUZt/wcjVZv81rMSKY=) 2: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: hwOF3wEGPYN9Coi28CC6fcXclDNnN/zPBkBKCSSYw20=) 3: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: SMU4xFi1+BMgC34BsBqVGrlL7Nhi/uMYFKO8+xvL4gc=) 4: E94D73BE291D11EF86792873C4F9AE02.roa (hash: qoIoX0JsFREycCLqPoVIIwH985mBQUcv+rcmwGljHCU=) 5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: W4Wbfb9YnYtu8VIOO6jpXdYrtPZMihSeu+gvyUB2w5I=) 6: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: /WqiErWrMk0Gg59ZNQRQV8k1iCmu38eqjuLSdgpmAoA=) 7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: 808jJ7dFgnwvbwRsKTU5jr+nJdVb6zUdp+50FtVbbEI=) 8: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (hash: d2Z7O9G1FWB4V5oGPnBBGEBaPjMRgiy0uyIvKJzJFLM=) 9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: auhnazCcpZ7TKgsrAgKTEGN+Zxpu+wqNpKG4gMblQpk=) 10: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: 6gpu6/dBOZ2MchgvmUzyjPzKbIW+kNyxsH+MazWyCl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2664 (0xa68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Aug 22 20:44:48 2025 GMT Not After : Aug 29 20:44:48 2025 GMT Subject: CN=68a8d6c0-d341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:85:0a:b0:65:31:b8:62:56:2d:b4:33:92:6c: 97:65:fd:bf:0b:05:83:ee:a9:10:e6:31:85:15:d5: b5:95:48:65:5e:63:d0:32:a0:ef:ee:e3:d1:b1:0e: 9f:40:1b:7f:3d:b0:de:9e:7c:2e:40:23:fe:5c:00: ab:57:72:48:20:0a:ad:16:a2:5a:09:a8:16:75:6d: 18:26:dc:d6:bd:c7:24:5c:46:e6:15:62:13:59:56: 75:02:57:ae:a7:56:42:44:25:82:73:bf:88:c2:25: 1b:a3:e5:78:02:a6:e3:05:9f:e9:9b:14:50:87:63: 36:65:b5:43:d1:ea:da:10:5e:ca:7a:dd:5d:d0:05: b6:2a:1e:e4:eb:91:b2:e6:b8:f8:51:5e:af:82:42: 0c:bb:38:84:12:e4:ee:9d:19:83:b8:61:44:5e:fd: 03:27:59:ae:25:b2:a8:d0:ff:45:1d:42:1a:45:5f: 99:f8:94:ff:b6:4f:fc:c2:2b:01:5d:e3:26:02:4a: af:c3:d3:10:7e:75:4e:c3:11:a4:5d:86:17:c8:14: 52:82:c3:aa:67:86:4a:16:20:de:b3:85:42:08:ae: 98:1d:d1:74:da:e4:59:27:c5:16:4f:ed:36:fe:a4: 71:9c:52:63:fb:b2:96:04:9c:bf:9f:95:f4:f2:ea: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:6B:B1:31:D8:E5:5C:69:E9:44:9D:8F:88:E1:DE:18:28:A7:FE X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8a:ed:bc:fe:ab:23:39:9a:5e:a2:e0:b0:c1:0c:84:da:b2: 6d:b9:76:d7:58:7d:91:a2:9e:45:96:c5:c3:3e:a8:cb:95:3e: 08:a1:1d:2b:ef:d0:ff:fa:b3:e7:b8:fa:dd:e9:5f:e0:a7:3a: 53:79:9d:a5:0e:12:eb:43:b8:35:55:7e:f6:57:56:2c:0d:d8: cb:bc:47:32:1a:36:c9:d2:c1:57:0e:f5:82:25:fd:39:ee:83: ce:3e:9b:9c:a1:bc:74:50:30:42:1d:d8:75:4a:ef:4d:e2:49: 25:bd:7d:d5:40:3a:e9:2a:ba:a3:e2:ed:e7:31:b5:d0:4d:a5: 24:a1:f4:05:56:ed:59:41:ba:29:94:0c:97:76:fb:1e:13:41: 53:6b:c5:35:d1:06:56:e2:a2:7e:09:2f:f4:16:82:14:b7:01: 3b:af:55:b9:fe:00:b1:3b:f1:81:23:a8:92:75:64:14:f7:de: 70:07:a3:3d:80:7a:f7:79:96:9d:1d:b2:27:f6:fd:1d:94:99: 92:df:33:ac:e6:6f:8b:83:0b:78:c2:1d:5c:92:15:7c:77:c5: 50:a6:f6:c1:34:27:e6:56:f2:a9:f4:6a:89:b4:d3:76:70:4a: c8:de:2f:fb:bf:e1:d5:07:55:3f:13:ba:14:7a:5a:26:33:05: 02:b7:a7:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUwODIyMjA0NDQ4WhcNMjUwODI5MjA0NDQ4WjAYMRYwFAYD VQQDEw02OGE4ZDZjMC1kMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoUKsGUxuGJWLbQzkmyXZf2/CwWD7qkQ5jGFFdW1lUhlXmPQMqDv7uPRsQ6f QBt/PbDennwuQCP+XACrV3JIIAqtFqJaCagWdW0YJtzWvcckXEbmFWITWVZ1Aleu p1ZCRCWCc7+IwiUbo+V4AqbjBZ/pmxRQh2M2ZbVD0eraEF7Ket1d0AW2Kh7k65Gy 5rj4UV6vgkIMuziEEuTunRmDuGFEXv0DJ1muJbKo0P9FHUIaRV+Z+JT/tk/8wisB XeMmAkqvw9MQfnVOwxGkXYYXyBRSgsOqZ4ZKFiDes4VCCK6YHdF02uRZJ8UWT+02 /qRxnFJj+7KWBJy/n5X08uqnRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4Wa7Ex 2OVcaelEnY+I4d4YKKf+MB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbiu28/qsjOZpeouCwwQyE2rJtuXbXWH2Rop5FlsXDPqjLlT4IoR0r 79D/+rPnuPrd6V/gpzpTeZ2lDhLrQ7g1VX72V1YsDdjLvEcyGjbJ0sFXDvWCJf05 7oPOPpucobx0UDBCHdh1Su9N4kklvX3VQDrpKrqj4u3nMbXQTaUkofQFVu1ZQbop lAyXdvseE0FTa8U10QZW4qJ+CS/0FoIUtwE7r1W5/gCxO/GBI6iSdWQU995wB6M9 gHr3eZadHbIn9v0dlJmS3zOs5m+Lgwt4wh1ckhV8d8VQpvbBNCfmVvKp9GqJtNN2 cErI3i/7v+HVB1U/E7oUelomMwUCt6eG -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:30 2025 by rpki-client