$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: eJ62sf3FJ4FaNanLoGq/H8rsGfDBYa4NQ+AEPHxibVM= Subject key identifier: 7D:C2:9F:57:4E:43:C0:24:CE:AC:0D:E3:A8:9D:91:5D:EF:5B:EC:94 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: FE Signing time: Sat 23 Aug 2025 05:18:08 +0000 Manifest this update: Sat 23 Aug 2025 05:18:07 +0000 Manifest next update: Sat 30 Aug 2025 05:18:07 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: Ngs9sW7n9dHktY9Rp/6yah8XWgowcuQRkTsTKzdmoLY=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Aug 23 05:18:07 2025 GMT Not After : Aug 30 05:18:07 2025 GMT Subject: CN=68a94f10-cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:20:b1:72:70:1a:29:d9:00:46:40:bd:6d: ce:7b:86:b9:a6:44:01:18:bb:7b:54:3f:20:45:97: bc:f6:b1:ce:81:18:e9:4c:8a:01:08:7c:1e:ae:9c: 9d:19:f1:36:52:d3:c7:5e:ec:26:a0:fd:f2:3a:2b: 09:19:17:e1:a9:19:fd:ee:51:1d:e7:92:51:e6:e6: ba:d3:c0:51:61:a3:a7:c5:0c:5a:ec:01:a0:1c:7b: 91:22:d0:a7:31:93:cb:ea:78:57:3c:b2:fb:44:38: 4e:d1:ca:04:ca:64:b7:47:df:dc:86:3f:1a:25:cb: 0d:ee:15:36:f2:1f:d4:c2:d5:8d:cd:22:94:02:d9: e4:13:e0:b2:2c:77:ac:cf:54:59:52:60:66:f3:89: b5:3a:0b:fc:23:2b:68:07:14:c4:21:80:68:6b:c7: bf:80:c1:41:9d:75:e4:ee:b2:8f:f3:70:c0:e9:1f: 38:d4:06:c3:81:6c:26:4d:1c:22:f5:e7:53:97:2d: b4:98:e0:3e:ec:bd:eb:2a:15:5e:8b:39:a9:e0:69: 1d:91:b6:d6:8a:a6:a8:f6:25:10:02:f9:58:c7:25: de:dc:a6:36:27:71:bd:a9:79:e5:41:9f:0c:fe:c0: 86:a0:8d:f8:e1:af:4d:3a:d6:cc:09:78:9c:c1:a3: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C2:9F:57:4E:43:C0:24:CE:AC:0D:E3:A8:9D:91:5D:EF:5B:EC:94 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b8:61:12:1b:d8:d8:13:08:a7:27:8a:1b:52:bd:11:98:c8: fa:d3:78:8f:9e:70:c9:d4:31:22:40:b7:0c:3c:73:86:e8:b6: 27:8e:59:cc:d0:64:a4:71:1c:04:0e:1e:1a:7e:53:37:c4:74: fd:65:be:86:55:1f:f6:08:e8:6a:03:88:03:b7:ae:5f:53:03: a6:37:19:40:51:ec:ba:26:fa:e1:4a:1e:1b:5a:49:c8:1d:77: b0:d0:17:62:32:f8:f9:70:ce:d4:b8:2c:6f:ee:a5:a4:ff:4e: c2:45:a7:f3:77:06:b1:68:a3:36:4a:07:07:6e:3f:aa:36:9a: 75:e6:33:ac:eb:72:f5:ca:a2:9f:d2:21:42:f4:81:c9:13:ea: 46:ea:f5:c4:7e:bb:39:09:fb:cc:ab:cb:df:21:91:40:69:bd: 5e:a7:e2:9c:5d:98:55:ee:4f:9a:cc:43:56:79:26:c2:61:e1: 10:73:4e:b8:79:c2:bf:47:db:97:4d:2a:17:8e:08:71:29:ab: 42:26:e4:32:31:95:b0:5b:0a:65:1d:fb:1f:40:20:5c:45:60: b5:f6:82:48:e1:a0:4f:15:07:1b:a2:0e:0d:e3:1d:f8:b5:88: a5:cf:85:af:5c:47:20:58:23:20:ab:e2:c7:79:9b:61:8e:39: 62:e5:1d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUwODIzMDUxODA3WhcNMjUwODMwMDUxODA3WjAYMRYwFAYD VQQDEw02OGE5NGYxMC1jYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvQgsXJwGinZAEZAvW3Oe4a5pkQBGLt7VD8gRZe89rHOgRjpTIoBCHwerpyd GfE2UtPHXuwmoP3yOisJGRfhqRn97lEd55JR5ua608BRYaOnxQxa7AGgHHuRItCn MZPL6nhXPLL7RDhO0coEymS3R9/chj8aJcsN7hU28h/UwtWNzSKUAtnkE+CyLHes z1RZUmBm84m1Ogv8IytoBxTEIYBoa8e/gMFBnXXk7rKP83DA6R841AbDgWwmTRwi 9edTly20mOA+7L3rKhVeizmp4GkdkbbWiqao9iUQAvlYxyXe3KY2J3G9qXnlQZ8M /sCGoI344a9NOtbMCXicwaP7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3Cn1dO Q8AkzqwN46idkV3vW+yUMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByuGESG9jYEwinJ4obUr0RmMj603iPnnDJ1DEiQLcMPHOG6LYnjlnM 0GSkcRwEDh4aflM3xHT9Zb6GVR/2COhqA4gDt65fUwOmNxlAUey6JvrhSh4bWknI HXew0BdiMvj5cM7UuCxv7qWk/07CRafzdwaxaKM2SgcHbj+qNpp15jOs63L1yqKf 0iFC9IHJE+pG6vXEfrs5CfvMq8vfIZFAab1ep+KcXZhV7k+azENWeSbCYeEQc064 ecK/R9uXTSoXjghxKatCJuQyMZWwWwplHfsfQCBcRWC19oJI4aBPFQcbog4N4x34 tYilz4WvXEcgWCMgq+LHeZthjjli5R1m -----END CERTIFICATE-----Generated at Sat Aug 23 13:34:30 2025 by rpki-client