$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: xkIu+QqYOE+Sd0hnPTQnxE+coNkW352r5S3S1grQQCg= Subject key identifier: E8:2F:DE:47:04:BB:10:9E:10:BF:FD:9F:F7:32:82:30:AE:C9:57:28 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: BF Signing time: Sat 23 Aug 2025 06:04:08 +0000 Manifest this update: Sat 23 Aug 2025 06:04:08 +0000 Manifest next update: Sat 30 Aug 2025 06:04:08 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: YgxCw4Jd2juqTUgvI0RmmpZrsCVKRcaUhwT3zVhQDN4=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Aug 23 06:04:08 2025 GMT Not After : Aug 30 06:04:08 2025 GMT Subject: CN=68a959d8-ef5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:82:6b:47:34:bd:ce:65:72:3c:92:f6:47: 61:96:5c:fb:16:6d:12:0f:ad:51:4d:d2:af:b8:66: 17:69:13:83:60:1d:34:4a:c8:91:ec:e6:47:46:e7: b0:f7:b2:7f:9b:f8:ba:55:55:23:6e:08:cb:3d:13: 42:f3:7d:96:6d:4d:32:45:da:42:4d:28:8a:81:10: 68:95:a0:45:08:4e:98:5a:ac:02:0b:61:de:e4:c1: cd:37:3d:e8:39:aa:43:fd:55:10:f0:be:ef:f3:88: 1e:01:48:cf:06:cf:84:07:72:0a:6f:89:b6:b1:dc: 24:25:1d:1a:a5:53:74:19:ac:31:f9:b3:ac:c3:52: c8:97:3e:ab:b8:94:2c:68:ed:1c:ef:7d:f7:12:e0: 8c:8c:3f:59:5b:c9:3e:bd:ba:3c:0f:88:c7:95:28: 27:27:f2:8d:93:a9:55:78:a0:0b:24:df:17:ab:c7: bc:a7:fc:44:00:95:ca:e2:cd:9e:ca:23:ab:70:18: 78:7a:c0:74:b8:7c:42:ba:08:ae:02:f7:ab:bc:e5: 25:c0:5b:ad:89:ae:59:2a:ce:20:d4:f4:80:1e:9c: b4:68:ae:2a:d4:af:da:0f:50:23:04:a4:9d:60:e1: ae:44:14:cb:76:62:38:c9:62:b8:77:f2:c9:15:e9: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:DE:47:04:BB:10:9E:10:BF:FD:9F:F7:32:82:30:AE:C9:57:28 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:65:1e:50:19:34:22:38:ee:1b:d2:bc:b7:d5:e8:67:b4:d6: ec:24:f1:66:0c:12:ea:b1:92:c5:5f:30:1b:6c:24:6d:8d:ef: 85:1d:49:dc:57:8e:b5:9a:08:95:75:16:b8:26:b5:b1:76:ac: 84:97:77:7c:07:c6:47:f3:4f:21:b0:2d:83:83:ba:28:39:c7: 22:ab:57:26:c6:13:a7:2f:78:98:da:68:c5:63:96:de:c8:02: 93:74:12:49:d2:24:22:78:64:3e:cb:12:7c:88:9a:12:53:ce: bb:9f:b8:d6:2f:d0:10:70:7b:41:55:21:d4:bf:1f:89:aa:7b: 25:37:67:d5:f5:87:82:ac:89:21:77:9b:9a:77:61:fd:cb:1b: 61:8d:59:6e:ca:29:e7:da:98:ba:cd:7e:9d:39:ff:95:cd:25: b3:fb:b6:1d:7b:58:f0:cc:85:d5:af:ef:36:2f:42:44:a1:de: cb:a6:af:04:c3:2e:d1:7b:82:98:85:61:58:a0:f4:fd:64:06: 85:d6:38:0a:75:f8:46:74:f0:72:70:78:b7:50:ac:6b:0f:90: 3c:39:57:3a:d9:1e:90:01:f8:4c:63:6a:de:a0:e5:9d:e0:16: 49:bf:bb:fa:52:6b:6b:cb:85:56:1d:3d:cc:4b:c3:fe:a8:ba: dd:6f:cb:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwODIzMDYwNDA4WhcNMjUwODMwMDYwNDA4WjAYMRYwFAYD VQQDEw02OGE5NTlkOC1lZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/eCa0c0vc5lcjyS9kdhllz7Fm0SD61RTdKvuGYXaRODYB00SsiR7OZHRuew 97J/m/i6VVUjbgjLPRNC832WbU0yRdpCTSiKgRBolaBFCE6YWqwCC2He5MHNNz3o OapD/VUQ8L7v84geAUjPBs+EB3IKb4m2sdwkJR0apVN0Gawx+bOsw1LIlz6ruJQs aO0c7333EuCMjD9ZW8k+vbo8D4jHlSgnJ/KNk6lVeKALJN8Xq8e8p/xEAJXK4s2e yiOrcBh4esB0uHxCugiuAvervOUlwFutia5ZKs4g1PSAHpy0aK4q1K/aD1AjBKSd YOGuRBTLdmI4yWK4d/LJFem8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgv3kcE uxCeEL/9n/cygjCuyVcoMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADZR5QGTQiOO4b0ry31ehntNbsJPFmDBLqsZLFXzAbbCRtje+FHUnc V461mgiVdRa4JrWxdqyEl3d8B8ZH808hsC2Dg7ooOcciq1cmxhOnL3iY2mjFY5be yAKTdBJJ0iQieGQ+yxJ8iJoSU867n7jWL9AQcHtBVSHUvx+JqnslN2fV9YeCrIkh d5uad2H9yxthjVluyinn2pi6zX6dOf+VzSWz+7Yde1jwzIXVr+82L0JEod7Lpq8E wy7Re4KYhWFYoPT9ZAaF1jgKdfhGdPBycHi3UKxrD5A8OVc62R6QAfhMY2reoOWd 4BZJv7v6Umtry4VWHT3MS8P+qLrdb8vl -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:39 2025 by rpki-client