$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: mi7O/0aVDkcTusKRP6ivGV9lQPZDTMamxINhxst53PI= Subject key identifier: 29:8B:6D:14:6B:25:5D:9E:1F:32:25:97:AF:69:23:E9:C9:07:E5:1C Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 01AB Signing time: Sat 23 Aug 2025 03:22:28 +0000 Manifest this update: Sat 23 Aug 2025 03:22:27 +0000 Manifest next update: Sat 30 Aug 2025 03:22:27 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: SlY8n01A3c6ptGt8R9W1j9xeeCnQm1GNkzimW++5jWs=) 2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: hdoIBFcsKBcfu2ieIGwj6SsbqU4NXl1pTKHhFjI1OAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Aug 23 03:22:27 2025 GMT Not After : Aug 30 03:22:27 2025 GMT Subject: CN=68a933f4-60f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:62:e1:f0:91:c2:e7:69:19:62:2a:c5:3a: 29:9c:e9:5b:26:83:20:25:d6:d6:ac:dd:f0:ce:5b: b3:5f:b0:7d:60:d2:de:65:21:bf:c5:13:bd:3e:e1: 19:cf:af:2c:51:a4:1e:dd:c3:da:bc:dd:dd:94:c0: a4:51:13:13:34:ed:9e:ad:e0:a8:0b:d3:17:42:30: 10:ea:65:e3:84:a1:af:69:aa:b9:58:8d:be:e6:7b: dd:c7:bd:b2:7a:76:b4:40:0e:49:bc:6a:ae:9f:1c: 52:8a:6d:e7:f2:65:5e:fb:7a:c9:01:90:76:b2:6f: ec:6a:d2:61:83:fb:c9:68:fe:ca:99:51:51:fa:a5: 4a:fd:13:41:83:93:d0:a7:ca:55:7e:a5:7d:aa:ed: af:c9:09:a0:70:98:27:81:fe:5b:52:24:fb:2e:64: 57:a3:55:23:20:0f:18:ea:5a:ce:41:6d:b1:ae:b7: e4:4a:e3:dc:c6:19:bb:2c:41:33:c0:0b:5e:39:0e: f3:62:93:64:5b:7b:4a:b9:2b:a5:87:e1:ff:4c:7b: 62:82:2b:75:5d:a4:cb:f4:4b:12:86:67:91:74:fc: 30:22:84:b7:26:7c:42:f5:f0:a9:90:8d:37:74:ea: 7c:13:ce:53:44:d2:fb:d1:fc:70:43:1e:35:ae:e7: f8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8B:6D:14:6B:25:5D:9E:1F:32:25:97:AF:69:23:E9:C9:07:E5:1C X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:04:3f:68:fe:1d:66:cb:57:a3:7c:17:7d:ac:29:b0:ed:94: bb:a1:2d:c0:26:d2:e7:49:49:c5:f5:86:c2:3d:46:6a:d8:d1: d2:d5:aa:d5:3f:99:37:e2:dc:c9:2d:12:c4:73:55:5f:c4:7d: 77:98:96:a6:f9:0c:75:c3:5d:fd:63:75:20:5c:1f:a0:c6:03: 1a:39:6a:a8:2f:76:9d:f0:e7:cb:f3:b4:3a:99:fc:9f:ab:03: 6c:18:dd:1b:a6:1f:a4:97:73:03:fb:d1:d3:b5:4a:8d:2e:72: 28:73:66:5e:07:d7:27:5d:5e:a5:64:42:f7:51:8f:a0:3b:38: ae:29:45:b7:66:63:45:e3:7e:78:9f:87:2c:45:27:26:71:42: c3:5d:e4:c0:70:f9:45:ea:b4:85:aa:aa:31:24:72:8b:79:ad: 77:be:84:e7:92:94:97:dd:2c:33:f4:5c:5c:17:0b:58:5d:1f: a3:95:77:6e:b4:33:b8:27:26:51:e5:01:8f:fa:1e:65:36:01: cb:f9:3e:99:81:2b:9a:4f:31:ec:98:2d:d1:43:66:c8:94:0a: 52:d8:97:df:dd:45:c2:64:91:a6:86:e0:a3:66:b1:30:bf:d6: 11:5f:92:09:be:21:89:c3:82:ca:b6:9a:04:19:7b:e5:51:6b: e4:40:9d:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjUwODIzMDMyMjI3WhcNMjUwODMwMDMyMjI3WjAYMRYwFAYD VQQDEw02OGE5MzNmNC02MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1di4fCRwudpGWIqxTopnOlbJoMgJdbWrN3wzluzX7B9YNLeZSG/xRO9PuEZ z68sUaQe3cPavN3dlMCkURMTNO2ereCoC9MXQjAQ6mXjhKGvaaq5WI2+5nvdx72y ena0QA5JvGqunxxSim3n8mVe+3rJAZB2sm/satJhg/vJaP7KmVFR+qVK/RNBg5PQ p8pVfqV9qu2vyQmgcJgngf5bUiT7LmRXo1UjIA8Y6lrOQW2xrrfkSuPcxhm7LEEz wAteOQ7zYpNkW3tKuSulh+H/THtigit1XaTL9EsShmeRdPwwIoS3JnxC9fCpkI03 dOp8E85TRNL70fxwQx41ruf4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmLbRRr JV2eHzIll69pI+nJB+UcMB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoBD9o/h1my1ejfBd9rCmw7ZS7oS3AJtLnSUnF9YbCPUZq2NHS1arV P5k34tzJLRLEc1VfxH13mJam+Qx1w139Y3UgXB+gxgMaOWqoL3ad8OfL87Q6mfyf qwNsGN0bph+kl3MD+9HTtUqNLnIoc2ZeB9cnXV6lZEL3UY+gOziuKUW3ZmNF4354 n4csRScmcULDXeTAcPlF6rSFqqoxJHKLea13voTnkpSX3Swz9FxcFwtYXR+jlXdu tDO4JyZR5QGP+h5lNgHL+T6ZgSuaTzHsmC3RQ2bIlApS2Jff3UXCZJGmhuCjZrEw v9YRX5IJviGJw4LKtpoEGXvlUWvkQJ3T -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:28 2025 by rpki-client