$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft File: 4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json) Hash identifier: 9nVXDtjTNJ+WSxR9pClt1fJQVRBziBz98R76J+WV5+Q= Subject key identifier: AE:A0:EF:F5:86:C4:7A:F4:2D:46:E5:B9:E1:09:E9:C2:83:A4:C4:13 Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 Certificate issuer: /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Certificate serial: 182A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft Manifest number: 17F0 Signing time: Fri 22 Aug 2025 16:39:58 +0000 Manifest this update: Fri 22 Aug 2025 16:39:58 +0000 Manifest next update: Fri 29 Aug 2025 16:39:58 +0000 Files and hashes: 1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: pDDE1j+fUsxazs/CV37hTLo90lpMBwfKpqjvcxCAwg8=) 2: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: wcQu6qDmYL8RSwTWQdHq8swDuqsLZ/b+WksTXiVZeUI=) 3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: ukI4z4ZMWUWet1XkTlAm00Pda4+ffxxraVEq+pStj8k=) 4: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: mm0VJeRGh/+0foB6ENfn+0Td2KUkG+rfML9gCL5EGhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6186 (0x182a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196 Validity Not Before: Aug 22 16:39:58 2025 GMT Not After : Aug 29 16:39:58 2025 GMT Subject: CN=68a89d5e-b9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:5d:42:2b:03:bf:4a:c9:16:54:48:08:84: 79:d7:93:ab:6f:2e:4a:7d:3f:70:24:f3:d8:0d:08: 1e:b1:57:63:e9:c2:02:a8:f2:0f:ff:b2:d4:49:65: ce:69:0d:c3:a0:70:f7:82:ad:36:62:39:9d:e3:64: c2:82:a6:8b:cf:49:8d:67:7d:a0:c2:3c:96:11:d7: d4:87:49:84:2a:a2:51:b9:68:d2:a8:4e:fd:ba:3f: 24:22:3c:ad:0b:e8:16:dc:7d:47:23:30:3f:68:f6: 2d:f1:7a:f5:ee:8f:26:8c:f9:48:b6:eb:0b:81:c0: 43:7e:0e:46:31:5a:fc:5c:35:96:6e:1e:3f:02:86: 2b:6e:9e:67:b9:d1:28:cb:a1:c6:c3:8c:11:35:b0: c2:b1:e6:d5:8c:80:b7:44:98:e0:e0:97:69:95:ba: 98:41:8c:09:44:41:91:e4:b4:e7:c6:e4:5c:2b:55: 87:6c:6c:5f:0b:1f:cd:69:5f:5b:97:1e:27:ad:3f: 20:ad:72:81:71:a3:74:ae:ba:d3:28:9c:2e:dd:db: 14:20:3c:f0:8a:8c:ae:a4:82:16:25:0a:71:65:49: dc:3b:65:8d:ca:59:cc:2f:9a:d2:70:46:26:e5:46: 6e:0c:2f:d0:a6:14:12:87:de:14:5c:3a:70:81:0b: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:EF:F5:86:C4:7A:F4:2D:46:E5:B9:E1:09:E9:C2:83:A4:C4:13 X509v3 Authority Key Identifier: keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:3b:e9:14:8d:48:0a:95:7d:26:83:17:0f:80:16:ca:53:53: a5:c2:54:ab:10:56:98:ff:12:51:2d:26:a1:15:af:ea:42:78: 4d:b3:86:3b:44:2e:d3:12:7e:1a:23:01:77:9a:13:22:4e:2b: 9e:cb:ba:4b:b9:54:10:cf:14:97:78:d2:5e:e6:a6:61:51:b7: 27:dd:04:e6:c1:c7:61:26:55:60:3f:98:da:a3:41:cc:79:f5: ed:93:6f:fe:8c:79:8f:d8:72:a4:f4:14:67:ac:46:f5:35:1a: 90:9c:b3:a5:6e:69:9b:0a:c0:80:da:a2:fb:1b:a8:25:36:4a: 72:c2:fc:98:42:ee:0e:37:08:74:9e:2e:e5:f2:44:e8:9c:3d: b4:bc:80:ad:b3:cd:96:6b:ca:28:06:e0:f9:25:00:46:3b:a8: 0a:d1:17:d1:e0:e5:29:f4:d5:37:0d:29:75:8f:38:15:78:74: 30:e9:49:f8:e2:cd:13:a8:e2:b1:96:ba:ee:dd:3b:e3:8b:1b: dd:8f:fa:03:82:ac:cf:a6:d4:37:5d:a7:e1:80:38:c9:d1:18: 93:1a:0d:cb:ac:b6:07:f5:88:fd:a0:04:79:ff:01:ef:95:6a: e8:47:ae:13:45:42:01:e4:a8:d5:98:fc:5b:43:6d:70:a4:8c: cf:16:ee:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy Q0UyNDUxOTYwHhcNMjUwODIyMTYzOTU4WhcNMjUwODI5MTYzOTU4WjAYMRYwFAYD VQQDEw02OGE4OWQ1ZS1iOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPddQisDv0rJFlRICIR515Orby5KfT9wJPPYDQgesVdj6cICqPIP/7LUSWXO aQ3DoHD3gq02Yjmd42TCgqaLz0mNZ32gwjyWEdfUh0mEKqJRuWjSqE79uj8kIjyt C+gW3H1HIzA/aPYt8Xr17o8mjPlItusLgcBDfg5GMVr8XDWWbh4/AoYrbp5nudEo y6HGw4wRNbDCsebVjIC3RJjg4JdplbqYQYwJREGR5LTnxuRcK1WHbGxfCx/NaV9b lx4nrT8grXKBcaN0rrrTKJwu3dsUIDzwioyupIIWJQpxZUncO2WNylnML5rScEYm 5UZuDC/QphQSh94UXDpwgQvw5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6g7/WG xHr0LUblueEJ6cKDpMQTMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4 Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3 TWlEX2tqeldvUm9zNGtVWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIO+kUjUgKlX0mgxcPgBbKU1OlwlSrEFaY/xJRLSahFa/qQnhNs4Y7 RC7TEn4aIwF3mhMiTiuey7pLuVQQzxSXeNJe5qZhUbcn3QTmwcdhJlVgP5jao0HM efXtk2/+jHmP2HKk9BRnrEb1NRqQnLOlbmmbCsCA2qL7G6glNkpywvyYQu4ONwh0 ni7l8kTonD20vICts82Wa8ooBuD5JQBGO6gK0RfR4OUp9NU3DSl1jzgVeHQw6Un4 4s0TqOKxlrru3Tvjixvdj/oDgqzPptQ3XafhgDjJ0RiTGg3LrLYH9Yj9oAR5/wHv lWroR64TRUIB5KjVmPxbQ21wpIzPFu6Y -----END CERTIFICATE-----Generated at Sun Aug 24 04:06:11 2025 by rpki-client