$ rpki-client -vvf rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft File: _D34EL_Cm_HPvwqvpWOX65tMq3c.mft (raw, json) Hash identifier: +Ev8bKxzpsiovg0OzrYPwEynzZs1xK5mNeRiLcXlbp0= Subject key identifier: 0A:7F:73:54:44:35:EE:81:4D:24:4A:92:F8:C0:60:24:4C:DD:DA:80 Authority key identifier: FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 Certificate issuer: /CN=A916269D/serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft Manifest number: 0B80 Signing time: Fri 22 Aug 2025 19:09:47 +0000 Manifest this update: Fri 22 Aug 2025 19:09:47 +0000 Manifest next update: Fri 29 Aug 2025 19:09:47 +0000 Files and hashes: 1: _D34EL_Cm_HPvwqvpWOX65tMq3c.crl (hash: 34Cr1EXtsF13eXg9lVHjWquOaT8DjdDN3YpoajYdVu0=) 2: EDA2987A32A211EA87A1561DC4F9AE02.roa (hash: MfEk5NxWi8gs+2M+DhUKf65mWDxmQTJBopQpU/oINak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916269D, serialNumber=FC3DF810BFC29BF1CFBF0AAFA56397EB9B4CAB77 Validity Not Before: Aug 22 19:09:47 2025 GMT Not After : Aug 29 19:09:47 2025 GMT Subject: CN=68a8c07b-7dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:c9:65:ed:01:65:37:39:1f:aa:22:6d:76: 3b:22:2b:83:06:fb:62:91:af:86:be:c9:f8:06:61: 06:c9:79:dc:0e:72:8e:46:a3:1b:9c:15:e8:21:70: 5b:9e:b4:3b:db:86:cf:b7:3f:e8:57:e9:79:4f:70: 9e:41:d7:8e:32:23:5b:54:95:cf:d3:e5:ca:47:4e: 9d:ff:74:89:2c:03:dd:fa:dc:e6:6c:c8:1a:cc:5a: e2:98:9d:ae:34:cc:c7:26:bb:21:28:13:00:20:d5: d9:dc:e7:f8:93:fa:40:67:9c:27:d1:2e:4b:11:7e: 0c:45:dd:c6:85:aa:db:75:33:43:88:b7:d7:56:84: cd:1d:6d:a0:bc:e9:7f:a7:37:5b:09:e8:35:28:8e: 58:9b:25:df:8e:e4:32:cd:02:17:97:40:b0:db:c1: 49:e6:b1:6f:30:42:c6:b1:cd:a7:c0:98:db:eb:32: 91:37:7e:87:55:69:d9:b1:be:37:f3:62:5b:06:e5: 7c:d2:fa:72:d7:b8:69:28:a8:88:42:b6:ff:1d:47: 0a:4d:b1:55:9b:8d:68:56:52:85:8a:04:c3:87:42: 20:b5:25:6e:c9:b3:97:b9:5f:1a:21:45:03:3e:22: 12:a6:c0:7a:bb:31:12:fa:fa:0a:b4:4b:1c:03:3e: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7F:73:54:44:35:EE:81:4D:24:4A:92:F8:C0:60:24:4C:DD:DA:80 X509v3 Authority Key Identifier: keyid:FC:3D:F8:10:BF:C2:9B:F1:CF:BF:0A:AF:A5:63:97:EB:9B:4C:AB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D34EL_Cm_HPvwqvpWOX65tMq3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916269D/78BF945032A111EA862BD517C4F9AE02/_D34EL_Cm_HPvwqvpWOX65tMq3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:8a:30:34:03:83:57:78:a8:84:79:e7:41:21:7d:37:57:52: 9d:5e:fa:cc:38:fc:98:44:71:09:0e:08:65:ac:f0:59:13:ba: 0c:9c:1f:99:71:01:94:8c:f4:96:a6:01:de:75:28:da:d0:70: 79:f8:fb:6a:83:37:73:9e:7e:55:59:7c:7f:4e:7b:ab:bb:5b: f8:8d:f0:4f:f6:b6:80:81:de:f1:5b:64:ac:cd:1d:4c:ce:7c: a8:29:2d:df:72:95:6c:1d:23:dd:5a:e8:c2:7f:bf:5f:32:89: 6c:6e:04:04:0f:0e:df:87:09:e3:15:47:b2:b7:86:d5:84:06: 7d:02:05:85:d8:0a:d4:d8:18:eb:a4:48:0b:fe:72:af:a3:f9: 94:dd:49:3d:d8:d5:67:3b:f8:e2:2c:ee:0c:1b:3f:a3:b6:d6: d7:8e:7f:15:bf:df:5e:9f:73:0d:68:52:57:dd:b7:42:ee:a0: 3b:2b:46:b8:7c:41:39:32:15:51:15:05:70:4b:38:52:75:f6: fe:8f:58:9b:2c:a8:9d:d0:d9:0d:96:3d:44:6e:54:0c:39:e9: 39:c9:f0:9c:24:b7:82:41:ba:1d:9d:f1:e4:07:ad:e9:68:dd: 92:eb:62:df:cd:5e:4f:1c:6a:62:4f:8b:75:11:09:3e:80:b1: 8b:af:bc:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2OUQxMTAvBgNVBAUTKEZDM0RGODEwQkZDMjlCRjFDRkJGMEFBRkE1NjM5N0VC OUI0Q0FCNzcwHhcNMjUwODIyMTkwOTQ3WhcNMjUwODI5MTkwOTQ3WjAYMRYwFAYD VQQDEw02OGE4YzA3Yi03ZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcHJZe0BZTc5H6oibXY7IiuDBvtika+Gvsn4BmEGyXncDnKORqMbnBXoIXBb nrQ724bPtz/oV+l5T3CeQdeOMiNbVJXP0+XKR06d/3SJLAPd+tzmbMgazFrimJ2u NMzHJrshKBMAINXZ3Of4k/pAZ5wn0S5LEX4MRd3GharbdTNDiLfXVoTNHW2gvOl/ pzdbCeg1KI5YmyXfjuQyzQIXl0Cw28FJ5rFvMELGsc2nwJjb6zKRN36HVWnZsb43 82JbBuV80vpy17hpKKiIQrb/HUcKTbFVm41oVlKFigTDh0IgtSVuybOXuV8aIUUD PiISpsB6uzES+voKtEscAz5JjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp/c1RE Ne6BTSRKkvjAYCRM3dqAMB8GA1UdIwQYMBaAFPw9+BC/wpvxz78Kr6Vjl+ubTKt3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjY5RC83OEJGOTQ1MDMy QTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21fSFB2d3F2cFdPWDY1dE1x M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EMzRFTF9DbV9IUHZ3cXZwV09YNjV0TXEzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjY5RC83OEJGOTQ1MDMyQTExMUVBODYyQkQ1MTdDNEY5QUUwMi9fRDM0RUxfQ21f SFB2d3F2cFdPWDY1dE1xM2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ijA0A4NXeKiEeedBIX03V1KdXvrMOPyYRHEJDghlrPBZE7oMnB+Z cQGUjPSWpgHedSja0HB5+Ptqgzdznn5VWXx/Tnuru1v4jfBP9raAgd7xW2SszR1M znyoKS3fcpVsHSPdWujCf79fMolsbgQEDw7fhwnjFUeyt4bVhAZ9AgWF2ArU2Bjr pEgL/nKvo/mU3Uk92NVnO/jiLO4MGz+jttbXjn8Vv99en3MNaFJX3bdC7qA7K0a4 fEE5MhVRFQVwSzhSdfb+j1ibLKid0NkNlj1EblQMOek5yfCcJLeCQbodnfHkB63p aN2S62LfzV5PHGpiT4t1EQk+gLGLr7wE -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:35 2025 by rpki-client