$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json) Hash identifier: qhzSLfXUKg/SqoY3xN3cj+OTYcngf5A5fSZG1LD5o6c= Subject key identifier: 0A:39:4C:19:DC:0A:FD:BE:DD:69:92:51:BE:7D:53:7A:66:9B:0A:10 Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Certificate serial: 18AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft Manifest number: 1825 Signing time: Fri 22 Aug 2025 16:42:11 +0000 Manifest this update: Fri 22 Aug 2025 16:42:11 +0000 Manifest next update: Fri 29 Aug 2025 16:42:11 +0000 Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: tsjNcyIuTkfs+rOMjrm1Hdejj27rUzgqn4s8AAS9oq0=) 2: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: jVYeb9g2m40LD4Q1oPGlGRKw/uMUZMJLfgY/Gg0QUQY=) 3: EF885538C28B11EBBF310469C4F9AE02.roa (hash: RF/S4KRa0Daxc1wRMUy6rkjMc6TZCjTUC2lD+JidsGI=) 4: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: dGp7Ax6FXsyNirWLeSH+pdfHFVVCgwpUbTOMHSuAyCQ=) 5: BE214D76FCFF11EF8523525DC4F9AE02.roa (hash: 9+AsS1AWWP7LZKsvn6SH/dP//eZPMe3e/BeYUo3dTG4=) 6: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: 4QaTtqJ6fCb5Gkmj3dPd7fei5dnVQ+bqBH21oxNpxXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6316 (0x18ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9 Validity Not Before: Aug 22 16:42:11 2025 GMT Not After : Aug 29 16:42:11 2025 GMT Subject: CN=68a89de3-cfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:58:31:ea:c2:23:ab:91:e4:c0:b6:05:9b: c9:30:70:10:b9:3d:44:03:9c:f6:31:4f:f6:dc:01: ad:14:32:5b:50:4b:d7:63:85:d9:27:a7:a9:05:4f: ba:5c:1d:b9:7a:0a:69:9e:95:f7:cf:42:05:3e:fe: 67:a5:d7:e8:e9:c0:d4:70:82:d1:0a:80:b1:bc:29: 51:5b:69:a0:5f:42:ef:e9:a8:32:45:16:f7:9e:9a: f5:7c:10:f0:40:e2:d8:27:81:53:a5:10:4b:6c:4b: 1a:70:a0:00:b6:c5:09:2b:ef:f4:48:1c:27:55:64: b1:7f:23:88:45:4d:51:fe:c9:41:03:7e:e8:a5:a8: 18:21:b9:3e:14:80:f7:a8:f1:8b:98:3e:11:23:3b: 95:6c:be:9e:42:59:e4:1e:e1:ca:d0:ea:dd:af:f2: e9:71:a0:c0:50:9a:93:13:47:67:c1:42:2b:7d:da: 1a:ca:c0:f8:1a:d6:91:9c:37:28:61:3d:15:7e:91: d8:a6:a6:f9:05:d7:80:1f:16:86:68:e4:7b:73:0c: de:4f:39:ed:12:b0:16:67:4b:13:1a:78:43:33:6c: 10:6d:ad:6b:52:38:2c:5d:e2:25:a5:99:d5:19:36: 2f:85:b6:35:b2:24:ee:a1:e0:76:a4:fb:73:d1:dd: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:4C:19:DC:0A:FD:BE:DD:69:92:51:BE:7D:53:7A:66:9B:0A:10 X509v3 Authority Key Identifier: keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:58:65:50:a9:c2:39:53:bb:d9:47:d8:2c:91:08:b3:db:c7: d7:49:63:84:81:0f:bf:c2:1d:a3:ec:16:34:ed:39:5f:51:95: 86:06:d3:87:ad:2e:ab:e0:9e:b1:32:ea:b2:6c:a0:c3:95:b6: a0:f9:73:31:ab:36:74:2a:1b:57:24:8c:83:9a:27:0c:0c:b0: b2:1e:15:01:bd:a1:e3:e8:82:cf:02:5b:a4:4e:47:72:57:5c: 90:d8:09:9b:4c:fd:e9:88:e2:0b:25:0b:f9:dc:af:31:7f:e6: 7d:75:79:13:4f:12:8b:1a:44:44:91:da:c3:b4:fc:87:5e:99: f1:09:0c:30:97:3b:c4:9f:a7:b4:ca:59:51:62:eb:5a:00:ce: d5:3f:4d:1c:2d:7f:37:47:cb:af:46:8d:9b:9e:e4:7f:43:f3: 6b:53:ab:58:4f:06:dd:ba:cb:35:fd:3b:2b:c3:4e:79:7e:6a: 57:05:2e:16:26:ec:56:47:f4:7e:5e:85:a6:df:2b:f7:02:ce: 39:ba:2a:ff:02:4a:33:a9:b2:75:f0:ab:7c:b8:fd:a8:82:f0: 8b:38:b1:50:ba:53:9c:93:8b:f8:ac:3b:c7:9c:a8:30:b8:56: 46:5f:77:44:a4:13:11:22:7c:24:92:ab:9c:85:6e:27:70:b5: 67:d0:5f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC MjVEQjY5QjkwHhcNMjUwODIyMTY0MjExWhcNMjUwODI5MTY0MjExWjAYMRYwFAYD VQQDEw02OGE4OWRlMy1jZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRJYMerCI6uR5MC2BZvJMHAQuT1EA5z2MU/23AGtFDJbUEvXY4XZJ6epBU+6 XB25egppnpX3z0IFPv5npdfo6cDUcILRCoCxvClRW2mgX0Lv6agyRRb3npr1fBDw QOLYJ4FTpRBLbEsacKAAtsUJK+/0SBwnVWSxfyOIRU1R/slBA37opagYIbk+FID3 qPGLmD4RIzuVbL6eQlnkHuHK0Ordr/LpcaDAUJqTE0dnwUIrfdoaysD4GtaRnDco YT0VfpHYpqb5BdeAHxaGaOR7cwzeTzntErAWZ0sTGnhDM2wQba1rUjgsXeIlpZnV GTYvhbY1siTuoeB2pPtz0d3BPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo5TBnc Cv2+3WmSUb59U3pmmwoQMB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi82MjhERTUwMkRGMjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1P VXRsZWlkUUwzMkN5WGJhYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOWGVQqcI5U7vZR9gskQiz28fXSWOEgQ+/wh2j7BY07TlfUZWGBtOH rS6r4J6xMuqybKDDlbag+XMxqzZ0KhtXJIyDmicMDLCyHhUBvaHj6ILPAlukTkdy V1yQ2AmbTP3piOILJQv53K8xf+Z9dXkTTxKLGkREkdrDtPyHXpnxCQwwlzvEn6e0 yllRYutaAM7VP00cLX83R8uvRo2bnuR/Q/NrU6tYTwbduss1/Tsrw055fmpXBS4W JuxWR/R+XoWm3yv3As45uir/AkozqbJ18Kt8uP2ogvCLOLFQulOck4v4rDvHnKgw uFZGX3dEpBMRInwkkquchW4ncLVn0F80 -----END CERTIFICATE-----Generated at Sat Aug 23 19:22:59 2025 by rpki-client