$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: 7T2ZdfTvczfVJRCT4fEt0AkqAgDl3qVIlzglxcANKIw= Subject key identifier: 42:DA:C7:64:C9:76:D2:71:F5:26:B6:00:AD:C7:40:0B:C6:C8:4B:EB Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C5B Signing time: Fri 22 Aug 2025 18:38:06 +0000 Manifest this update: Fri 22 Aug 2025 18:38:06 +0000 Manifest next update: Fri 29 Aug 2025 18:38:06 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: 20pj52tpfnl6lbVZ9PMxjpl1OC5WZk3I0X52McVlJK0=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Aug 22 18:38:06 2025 GMT Not After : Aug 29 18:38:06 2025 GMT Subject: CN=68a8b90e-c07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:8a:af:a0:63:dd:e9:a7:c3:b2:c3:a5:ab: f5:11:86:ce:1d:93:77:4f:55:65:8e:0c:78:73:fe: 6f:3f:27:5d:03:17:26:23:bd:d8:64:80:3a:01:25: 0b:10:95:4a:df:e9:e7:c4:f2:28:86:dc:d1:3b:7c: b8:3f:33:66:5e:59:3c:7d:96:24:94:ee:86:65:86: 3a:9e:cf:bb:6e:87:b8:1d:f2:40:25:11:b2:47:14: df:4f:27:0c:5e:d1:9e:88:99:14:57:d2:04:07:13: 77:da:db:91:a6:60:a4:b5:b0:62:8d:ff:3f:f0:54: 8e:31:9a:99:a5:24:71:c7:67:02:81:9b:bc:8d:ad: 2c:01:ab:e4:1f:80:83:71:8c:3b:54:7b:ca:25:10: 10:1e:51:25:35:32:c3:ed:c8:d8:1d:0f:eb:01:ab: 6c:b2:1f:7f:1b:27:ef:ba:04:8f:b4:1b:3a:af:09: fa:b8:fd:bf:dd:5b:f3:ca:e0:5b:59:90:f1:dd:9b: c0:b8:0b:cb:40:1e:d2:3f:84:5b:ed:16:81:eb:34: 8c:c2:b8:a0:22:bb:79:73:47:7f:79:99:17:c8:da: ea:9f:79:73:99:c9:ae:43:c4:fb:7a:92:e3:d6:99: 29:b4:a2:fa:55:23:f5:9e:25:ce:37:a0:92:d1:be: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:C7:64:C9:76:D2:71:F5:26:B6:00:AD:C7:40:0B:C6:C8:4B:EB X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:a6:43:60:7f:2a:2f:8b:cc:41:1e:b1:76:58:32:70:26: 89:c1:08:d3:46:98:4e:b2:61:6c:2f:9c:2a:5e:2d:17:90:ec: d4:61:5c:63:aa:72:78:75:a7:1a:ea:7f:1f:75:c2:87:65:2b: 4b:ab:cd:3e:5b:2f:17:e6:20:ec:c7:9e:1f:0b:63:7e:46:b4: bf:7c:db:c1:6f:22:b3:60:8e:94:f4:18:10:c6:58:0b:50:38: ae:88:7a:ce:1e:dd:e7:20:2c:ec:f3:1b:e7:48:10:31:32:fa: fd:9a:06:4d:eb:1e:45:05:7c:fa:e8:16:be:8a:a0:ed:34:a9: 7b:2b:08:39:e4:b6:2c:99:67:04:ec:d0:0f:b8:f0:69:41:ed: e3:bd:7c:a4:b3:a0:31:55:1f:52:d3:89:96:eb:06:dc:4a:2f: e7:b0:e2:85:cd:b5:ab:2f:02:bb:9a:9e:37:ab:3e:f3:fd:8c: 87:f1:63:b8:43:a1:4e:96:31:da:d1:85:c3:2e:68:a5:2d:18: cc:a8:a5:ce:ad:96:41:ca:99:5a:e6:ca:97:a6:e7:ba:a0:27: 4e:49:22:8e:98:05:82:52:ca:dc:60:20:69:ed:d2:5b:dd:83: d6:71:0f:6c:35:ee:c0:87:79:64:fd:e0:9d:3c:b2:73:82:6a: 93:7d:ac:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUwODIyMTgzODA2WhcNMjUwODI5MTgzODA2WjAYMRYwFAYD VQQDEw02OGE4YjkwZS1jMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFaKr6Bj3emnw7LDpav1EYbOHZN3T1Vljgx4c/5vPyddAxcmI73YZIA6ASUL EJVK3+nnxPIohtzRO3y4PzNmXlk8fZYklO6GZYY6ns+7boe4HfJAJRGyRxTfTycM XtGeiJkUV9IEBxN32tuRpmCktbBijf8/8FSOMZqZpSRxx2cCgZu8ja0sAavkH4CD cYw7VHvKJRAQHlElNTLD7cjYHQ/rAatssh9/GyfvugSPtBs6rwn6uP2/3VvzyuBb WZDx3ZvAuAvLQB7SP4Rb7RaB6zSMwrigIrt5c0d/eZkXyNrqn3lzmcmuQ8T7epLj 1pkptKL6VSP1niXON6CS0b5OoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELax2TJ dtJx9Sa2AK3HQAvGyEvrMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4K6ZDYH8qL4vMQR6xdlgycCaJwQjTRphOsmFsL5wqXi0XkOzUYVxj qnJ4daca6n8fdcKHZStLq80+Wy8X5iDsx54fC2N+RrS/fNvBbyKzYI6U9BgQxlgL UDiuiHrOHt3nICzs8xvnSBAxMvr9mgZN6x5FBXz66Ba+iqDtNKl7Kwg55LYsmWcE 7NAPuPBpQe3jvXyks6AxVR9S04mW6wbcSi/nsOKFzbWrLwK7mp43qz7z/YyH8WO4 Q6FOljHa0YXDLmilLRjMqKXOrZZBypla5sqXpue6oCdOSSKOmAWCUsrcYCBp7dJb 3YPWcQ9sNe7Ah3lk/eCdPLJzgmqTfazd -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:52 2025 by rpki-client