$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: XIPlIdd8EqURr+SiTGbTjll+BG1Vm+R5WdKI9lhwiHo= Subject key identifier: D0:DF:0F:A5:8C:41:CC:A2:00:2F:83:E7:84:43:9A:D7:72:89:2F:47 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 34DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 34C2 Signing time: Fri 22 Aug 2025 14:45:58 +0000 Manifest this update: Fri 22 Aug 2025 14:45:58 +0000 Manifest next update: Fri 29 Aug 2025 14:45:58 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: ACj7ud31s9cB3aN/TOk43qAQOzQG1RLDkA+1z+Y+gcY=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: /edqiqL2miGSNr0uoaTjo4btCNWXItXesGyoq/gND/E=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: C4bWHi41cN0y8JVNPFitYHiPYUVvz8I3upa7uMSFTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13534 (0x34de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Aug 22 14:45:58 2025 GMT Not After : Aug 29 14:45:58 2025 GMT Subject: CN=68a882a6-661a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:90:1a:3a:89:66:89:df:71:80:3f:48:de:55: 17:02:c8:76:50:eb:50:7c:b5:1e:8f:98:76:15:b1: ab:90:ef:9a:89:90:ac:3f:bd:ab:ac:27:d0:a2:cc: 07:b8:13:f0:85:0a:cc:db:2e:f0:d9:70:af:fa:91: cf:de:c4:e1:22:f8:ad:35:b8:e7:8d:0f:07:74:85: 09:7e:8a:b6:23:41:da:ac:89:38:a7:97:ca:51:7a: fa:aa:1e:cb:05:37:1f:4d:27:65:de:08:0f:e4:f9: 3a:1d:59:49:45:4d:cd:b7:3c:c9:3e:3c:50:60:92: a1:2b:03:3d:b5:86:b8:94:b0:27:cb:fb:f5:82:df: 1e:c1:b7:95:aa:8e:fb:f4:90:4f:04:e0:15:f0:d6: 9a:58:4c:6b:a0:1d:05:cf:a6:06:20:5f:7e:27:b6: 6b:44:86:64:44:32:11:71:67:a0:15:3f:c7:1c:9d: e7:28:26:78:40:9c:3f:58:38:1b:d0:9e:0e:ac:93: e8:b9:c4:44:17:68:a7:a8:7c:04:28:38:39:3b:11: 37:07:90:05:d0:8e:bd:67:7f:77:f4:1a:ea:cd:07: b6:b1:ac:1c:56:33:36:ea:d6:f7:21:01:4e:2b:b9: 8e:f9:b4:06:71:63:34:55:30:97:fa:2c:7b:ad:ef: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DF:0F:A5:8C:41:CC:A2:00:2F:83:E7:84:43:9A:D7:72:89:2F:47 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:48:79:3a:fe:de:b2:ee:9c:2f:48:0d:21:9d:30:31:8d:3f: b6:11:7b:57:3d:48:87:2b:37:f2:00:5e:ac:cf:36:8c:15:b7: 9b:6c:b8:a5:31:e7:44:84:26:f9:31:93:7f:6e:cd:ae:8f:93: 1a:a6:f0:a8:97:c4:1e:1e:05:9b:56:b3:2e:29:e6:21:92:c3: 8a:d0:12:0e:07:d3:7f:64:41:ee:aa:68:22:55:57:f3:0d:43: 8f:51:73:e3:cf:ae:9b:a0:79:94:37:bc:e6:f0:ff:14:bb:25: f6:e2:73:5d:ec:ed:dc:7c:54:c7:9c:13:2b:08:8e:59:c1:5d: f2:a0:03:67:56:9e:de:d6:b2:c6:5b:41:b8:23:bb:de:ad:06: b1:c2:f3:a3:c9:31:55:0c:c5:c4:44:d9:7e:b5:87:a7:e9:d4: 75:ca:66:d7:5c:cc:79:3b:45:30:e4:2f:fe:29:bb:d3:d6:a6: 93:05:79:c0:86:7d:8b:1e:c4:2d:63:50:22:4e:14:0a:9a:12: 9d:c8:a4:c8:0e:be:e8:ef:05:ce:b5:48:31:84:cd:c6:e7:1e: 64:c0:31:34:19:b6:7f:ae:da:16:15:86:b5:f0:9b:0c:26:26: eb:81:e9:6c:f1:a0:fa:30:a8:4d:48:84:cb:29:01:b9:3b:bf: 00:30:c4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjUwODIyMTQ0NTU4WhcNMjUwODI5MTQ0NTU4WjAYMRYwFAYD VQQDEw02OGE4ODJhNi02NjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZAaOolmid9xgD9I3lUXAsh2UOtQfLUej5h2FbGrkO+aiZCsP72rrCfQoswH uBPwhQrM2y7w2XCv+pHP3sThIvitNbjnjQ8HdIUJfoq2I0HarIk4p5fKUXr6qh7L BTcfTSdl3ggP5Pk6HVlJRU3NtzzJPjxQYJKhKwM9tYa4lLAny/v1gt8ewbeVqo77 9JBPBOAV8NaaWExroB0Fz6YGIF9+J7ZrRIZkRDIRcWegFT/HHJ3nKCZ4QJw/WDgb 0J4OrJPoucREF2inqHwEKDg5OxE3B5AF0I69Z3939BrqzQe2sawcVjM26tb3IQFO K7mO+bQGcWM0VTCX+ix7re98JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDfD6WM QcyiAC+D54RDmtdyiS9HMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVSHk6/t6y7pwvSA0hnTAxjT+2EXtXPUiHKzfyAF6szzaMFbebbLil MedEhCb5MZN/bs2uj5MapvCol8QeHgWbVrMuKeYhksOK0BIOB9N/ZEHuqmgiVVfz DUOPUXPjz66boHmUN7zm8P8UuyX24nNd7O3cfFTHnBMrCI5ZwV3yoANnVp7e1rLG W0G4I7verQaxwvOjyTFVDMXERNl+tYen6dR1ymbXXMx5O0Uw5C/+KbvT1qaTBXnA hn2LHsQtY1AiThQKmhKdyKTIDr7o7wXOtUgxhM3G5x5kwDE0GbZ/rtoWFYa18JsM Jibrgels8aD6MKhNSITLKQG5O78AMMTT -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:44 2025 by rpki-client