$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: uT3d3am53XX+Ghx3TRlXp5DEJv10JQKraSiYDt3/Eo8= Subject key identifier: E6:75:DA:68:A1:6B:B4:B5:CB:CE:0C:5D:CD:BD:2E:B4:70:8E:49:1D Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: 0102 Signing time: Sat 23 Aug 2025 05:15:13 +0000 Manifest this update: Sat 23 Aug 2025 05:15:13 +0000 Manifest next update: Sat 30 Aug 2025 05:15:13 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: UIwT9LHOXDvuDf4FskeaurJmt/UILuCvmuxTXqy0Cag=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: 6fS8of5qHdeb+UJ2vn+0LaqC6SoyuJivSRtsNyhZhrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Aug 23 05:15:13 2025 GMT Not After : Aug 30 05:15:13 2025 GMT Subject: CN=68a94e61-c7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:43:d8:16:3f:71:f4:99:ee:cc:38:47:3e: e2:29:03:11:85:fc:0a:68:01:b0:02:fb:d0:04:2f: a4:7f:9d:89:43:70:81:db:6f:2e:8c:59:06:17:14: 16:7b:96:fb:f7:37:c0:7c:6a:08:cd:38:c6:f7:3c: 90:9c:fd:23:a0:7d:f3:2f:9a:95:1b:12:3a:cf:12: 43:93:01:3f:ba:b1:6c:cd:71:9b:a4:da:7d:7e:e8: 33:b5:0f:a0:fd:98:62:af:7f:03:80:1c:8d:a7:cc: 4e:24:26:f5:4d:cc:bc:6d:ac:ac:84:e4:f5:f1:f5: c7:25:29:0d:93:28:c3:a9:ba:34:d4:9e:af:d1:7e: 04:f9:27:9f:9d:17:e1:bc:c9:43:56:b8:4e:52:5a: 28:b6:6d:53:4f:84:45:53:80:e5:ba:14:1b:66:ce: 15:ad:e1:71:d8:d7:c2:31:bc:7b:ea:0a:e5:7f:75: 24:b0:8f:62:f1:0d:1d:07:e9:ae:d6:d6:4f:e6:fc: 3a:39:01:ec:70:16:6e:ca:9d:5f:e5:26:8c:c9:46: 44:3c:3f:68:18:37:de:f8:a3:c6:53:fa:06:79:33: 15:6d:a0:54:c3:2b:c9:02:11:f4:3c:53:bf:9a:19: c4:84:14:1c:e8:84:0b:f8:8c:eb:63:59:be:df:2e: 38:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:75:DA:68:A1:6B:B4:B5:CB:CE:0C:5D:CD:BD:2E:B4:70:8E:49:1D X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8f:dc:ec:7a:26:78:b7:6e:99:4d:2a:f9:f1:69:be:24:5a: c8:65:9c:53:28:bd:eb:b4:69:7c:5e:ed:9c:a6:f0:27:18:c9: b0:67:5c:83:1c:80:bc:f6:8b:de:37:be:0c:48:b6:9b:2a:0b: 08:cb:20:d9:c6:37:62:b0:32:7a:b4:7b:38:15:a0:4a:8d:7d: 5b:12:d5:ae:59:fb:4c:6c:38:f2:c6:1b:1c:57:8c:e7:4f:89: 10:63:8f:cb:5e:8e:b3:7d:cb:44:eb:65:0f:37:36:d8:ab:cf: 1f:4e:f9:b1:d6:30:08:f4:f7:18:e8:9c:b4:0d:10:bb:4b:d0: af:0c:a4:71:4b:0e:c5:81:c3:ea:41:62:8b:62:8c:ab:93:85: 9e:16:cd:d3:3c:f9:eb:d1:90:87:d8:1c:de:9c:d2:46:35:75: 25:93:1f:50:53:3c:30:d8:6d:75:49:4e:07:19:41:a9:2d:b5: 95:46:d8:7a:a8:cd:43:c8:dc:3e:3d:70:03:71:4b:a1:f0:3f: 65:de:cb:a0:59:f5:4d:55:5a:01:cb:b9:bd:fb:56:77:c1:87: 79:21:c0:fa:57:7a:d3:95:a5:fe:4d:bc:29:d4:f6:84:59:72: 99:5e:25:ee:a0:fc:4a:80:b6:55:de:e0:24:4b:c5:1c:28:0e: 39:c1:f5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUwODIzMDUxNTEzWhcNMjUwODMwMDUxNTEzWjAYMRYwFAYD VQQDEw02OGE5NGU2MS1jN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseVD2BY/cfSZ7sw4Rz7iKQMRhfwKaAGwAvvQBC+kf52JQ3CB228ujFkGFxQW e5b79zfAfGoIzTjG9zyQnP0joH3zL5qVGxI6zxJDkwE/urFszXGbpNp9fugztQ+g /Zhir38DgByNp8xOJCb1Tcy8bayshOT18fXHJSkNkyjDqbo01J6v0X4E+SefnRfh vMlDVrhOUlootm1TT4RFU4DluhQbZs4VreFx2NfCMbx76grlf3UksI9i8Q0dB+mu 1tZP5vw6OQHscBZuyp1f5SaMyUZEPD9oGDfe+KPGU/oGeTMVbaBUwyvJAhH0PFO/ mhnEhBQc6IQL+IzrY1m+3y44nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ12mih a7S1y84MXc29LrRwjkkdMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3j9zseiZ4t26ZTSr58Wm+JFrIZZxTKL3rtGl8Xu2cpvAnGMmwZ1yD HIC89oveN74MSLabKgsIyyDZxjdisDJ6tHs4FaBKjX1bEtWuWftMbDjyxhscV4zn T4kQY4/LXo6zfctE62UPNzbYq88fTvmx1jAI9PcY6Jy0DRC7S9CvDKRxSw7FgcPq QWKLYoyrk4WeFs3TPPnr0ZCH2BzenNJGNXUlkx9QUzww2G11SU4HGUGpLbWVRth6 qM1DyNw+PXADcUuh8D9l3sugWfVNVVoBy7m9+1Z3wYd5IcD6V3rTlaX+Tbwp1PaE WXKZXiXuoPxKgLZV3uAkS8UcKA45wfWI -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:23 2025 by rpki-client