$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: nNXgCNrR9narHi19daJermKfxCk8urnxxvE83/3wvII= Subject key identifier: E7:69:93:ED:4D:11:97:B8:A8:28:3B:CA:1D:25:70:3F:87:91:4F:7D Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 253D Signing time: Fri 22 Aug 2025 15:48:08 +0000 Manifest this update: Fri 22 Aug 2025 15:48:08 +0000 Manifest next update: Fri 29 Aug 2025 15:48:08 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: 5aE2l3Zy7AKeaM+lwIcyuu8Ot8FZ/DyLfvA8XgLODqo=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: cn19kmgTI5pykmKU6ztYW1fuk/UgkkZVZQRR4mCHAg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9553 (0x2551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Aug 22 15:48:08 2025 GMT Not After : Aug 29 15:48:08 2025 GMT Subject: CN=68a89138-2fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:bf:39:c0:a1:8a:59:58:cc:79:46:83:20: 21:45:35:b6:f6:5e:66:56:c8:2b:0d:ae:1b:b7:da: 14:a5:f1:14:01:1f:2e:0e:cc:ba:1d:67:da:9a:4c: a5:07:93:25:b0:ec:dd:c5:f2:8f:e5:dd:e8:be:78: 44:55:94:58:68:d6:30:51:6b:d8:74:e9:ad:84:ba: 20:34:d4:79:b3:05:5d:32:b8:3f:98:49:eb:c8:46: d2:14:72:2c:12:ef:5e:48:3a:2b:98:f8:55:a4:d0: ac:77:d8:c7:f0:f3:28:aa:35:b3:f7:26:d4:e7:ac: 1b:70:f4:83:31:5e:03:1c:90:7e:4e:ad:78:5b:aa: fb:45:71:7e:11:b1:15:85:25:7d:cd:26:40:e1:b8: af:05:e8:67:1d:62:ab:30:aa:52:3e:bc:b2:d2:fd: 1c:9e:67:b4:5e:9e:3e:8f:a8:9f:64:da:7c:d7:79: 03:2f:3e:d9:dd:be:5b:21:50:e1:c7:b0:5b:01:65: 8d:19:f4:31:48:ef:8b:74:cc:c8:c1:3b:b5:fd:d1: 45:53:37:0e:9e:66:2c:7d:28:cc:75:00:22:3d:ea: 4c:62:c8:d6:31:9a:6a:2d:c8:a5:99:7d:b0:7a:cb: 2e:5a:c9:6f:49:3f:a1:d0:75:38:d7:ff:0f:0d:28: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:69:93:ED:4D:11:97:B8:A8:28:3B:CA:1D:25:70:3F:87:91:4F:7D X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:92:0c:4b:15:07:10:1c:20:20:14:16:20:86:ee:37:be:b4: 57:c3:b7:f6:64:f3:6d:23:e5:27:d9:af:3a:3d:4d:5c:c1:30: 8b:28:e9:33:0a:9b:3a:8a:ed:b7:51:81:9c:64:96:a8:ab:f4: 4c:50:c7:7a:39:1e:91:4d:4e:25:a1:90:7c:7b:ae:49:87:5d: d6:ed:28:95:ed:2f:08:69:75:f0:43:c4:5a:1b:07:28:c0:9c: bd:01:cd:69:5d:ee:6f:df:d4:ab:41:77:1b:81:0b:02:49:15: 81:bc:72:b3:ec:61:6d:49:7b:08:10:bd:f6:f9:b5:d0:5e:da: 12:81:87:04:ae:e8:5d:dd:fd:0b:5f:df:51:80:99:43:7a:8e: 57:62:ff:51:64:fc:13:1d:77:a1:fd:a7:e8:7d:18:8f:03:e0: 6b:20:fa:83:11:cc:ec:74:3e:a3:4f:31:06:3e:f7:ef:ec:37: eb:a2:fc:c5:66:99:69:a8:24:76:81:8e:57:a8:39:06:89:ed: a9:d8:f1:7d:3b:ea:d4:d2:67:da:78:fc:8f:d3:f9:0d:c2:24: 76:56:f4:30:ef:50:09:83:19:55:d6:fd:c5:f9:b7:e3:cc:d5: 52:fe:af:df:94:e0:15:57:ca:9a:ff:15:05:1c:15:4a:8b:d0: 50:d0:9f:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUwODIyMTU0ODA4WhcNMjUwODI5MTU0ODA4WjAYMRYwFAYD VQQDEw02OGE4OTEzOC0yZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE2/OcChillYzHlGgyAhRTW29l5mVsgrDa4bt9oUpfEUAR8uDsy6HWfamkyl B5MlsOzdxfKP5d3ovnhEVZRYaNYwUWvYdOmthLogNNR5swVdMrg/mEnryEbSFHIs Eu9eSDormPhVpNCsd9jH8PMoqjWz9ybU56wbcPSDMV4DHJB+Tq14W6r7RXF+EbEV hSV9zSZA4bivBehnHWKrMKpSPryy0v0cnme0Xp4+j6ifZNp813kDLz7Z3b5bIVDh x7BbAWWNGfQxSO+LdMzIwTu1/dFFUzcOnmYsfSjMdQAiPepMYsjWMZpqLcilmX2w essuWslvST+h0HU41/8PDSjP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdpk+1N EZe4qCg7yh0lcD+HkU99MB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGkgxLFQcQHCAgFBYghu43vrRXw7f2ZPNtI+Un2a86PU1cwTCLKOkz Cps6iu23UYGcZJaoq/RMUMd6OR6RTU4loZB8e65Jh13W7SiV7S8IaXXwQ8RaGwco wJy9Ac1pXe5v39SrQXcbgQsCSRWBvHKz7GFtSXsIEL32+bXQXtoSgYcEruhd3f0L X99RgJlDeo5XYv9RZPwTHXeh/afofRiPA+BrIPqDEczsdD6jTzEGPvfv7DfrovzF ZplpqCR2gY5XqDkGie2p2PF9O+rU0mfaePyP0/kNwiR2VvQw71AJgxlV1v3F+bfj zNVS/q/flOAVV8qa/xUFHBVKi9BQ0J/W -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:33 2025 by rpki-client