$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json) Hash identifier: 9FVZLFlIeNl7gXHStkgfdbaFLms0tVPN4KZrLldAYDE= Subject key identifier: 8D:E7:6A:73:98:20:C0:6C:36:B1:3D:2C:95:2E:96:D4:F7:80:DF:33 Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft Manifest number: 070E Signing time: Fri 22 Aug 2025 22:00:37 +0000 Manifest this update: Fri 22 Aug 2025 22:00:36 +0000 Manifest next update: Fri 29 Aug 2025 22:00:36 +0000 Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: /aLNhvDMrE709CUTyEwYakgQkNF4jApXDXiZjYClx0Q=) 2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38 Validity Not Before: Aug 22 22:00:36 2025 GMT Not After : Aug 29 22:00:36 2025 GMT Subject: CN=68a8e884-e1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:4c:84:5f:78:ff:49:de:72:40:ac:80:43: 8e:24:16:c6:3d:ae:34:ca:2f:af:15:c3:9d:68:ab: c3:51:1e:33:97:fc:48:ae:cd:7f:a1:b1:a1:b4:7b: 73:b4:0a:24:32:fe:ae:13:21:53:7a:29:dd:04:13: 5a:ef:cc:96:c2:0f:11:1f:46:dc:ff:73:79:f6:45: f7:15:1f:06:7d:d7:24:21:e7:64:58:01:6c:d0:c3: 5d:07:80:74:4c:cc:f7:8e:8b:00:d6:71:1b:1a:20: 71:be:3f:88:80:b1:8f:2d:93:f8:da:47:f2:93:b3: ac:c0:ff:83:f6:e9:e0:39:99:ac:f3:83:d2:66:e6: 98:fe:f2:c2:b0:6f:ab:c8:74:2a:f3:f1:60:83:bf: 95:e5:ae:f8:aa:e2:fe:7c:b0:a2:ae:e7:91:28:09: 5d:1a:a7:52:da:37:1d:26:7e:70:f7:75:c9:b2:97: d6:7f:e1:bb:62:5d:45:8f:5d:9b:6c:50:61:91:0c: 23:94:31:1f:8c:4b:62:27:10:cc:90:5a:95:8c:9b: 44:79:fb:19:78:85:10:2a:e7:f1:5d:2e:d8:c5:a8: d1:7b:75:76:45:ff:6c:74:0d:50:66:7f:ea:e3:00: b8:1f:2b:3c:8f:9c:08:9b:0a:51:36:86:30:72:ac: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:6A:73:98:20:C0:6C:36:B1:3D:2C:95:2E:96:D4:F7:80:DF:33 X509v3 Authority Key Identifier: keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:98:50:a5:81:05:b0:f7:70:ad:9d:f7:93:ee:e7:6d:90:1b: 8c:9c:b1:5a:52:29:2c:b2:b2:8d:76:10:cb:5e:34:33:64:10: d2:07:44:2b:97:8c:89:77:d0:ac:93:43:6f:aa:82:c0:fb:a8: 56:b8:52:cc:b1:c1:e7:7d:19:8b:38:33:b2:f7:f1:63:a3:86: bc:85:37:23:8d:0c:ef:9c:65:36:5f:23:e8:5a:e1:f7:82:51: f0:b8:9d:4c:fb:a8:a9:e0:d8:23:a2:ce:1d:f9:3e:39:30:a2: 9b:ec:ad:7a:c2:eb:7a:f4:c5:65:02:fe:d8:19:1b:a0:ed:da: 4c:df:d1:fc:39:fa:fb:ee:52:ca:8b:00:c7:2a:b6:d7:6a:c1: 5b:19:0a:e3:f7:83:49:bc:72:fd:2d:c7:c3:83:fc:e6:60:81: 89:e7:d9:92:0b:b5:68:b3:52:96:ff:85:67:98:fe:a9:07:19: f9:4c:71:fd:00:6c:cd:06:e3:25:8a:47:7c:26:db:96:de:21: 6d:f0:de:4e:22:47:bf:26:e5:d9:5f:0d:a5:16:d3:73:19:e2: 2f:05:1e:69:77:75:04:00:15:63:90:9c:a4:53:f2:5f:9c:c0: 5e:dd:2b:65:3c:07:29:cd:1e:df:3b:03:02:c7:70:5a:16:43: ee:a4:d8:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M2RDkxMTAvBgNVBAUTKDY5NjlEMTUwQUQwMzQ4MjA4MUJCMUJEN0MxM0JFNUYw MERDNTNBMzgwHhcNMjUwODIyMjIwMDM2WhcNMjUwODI5MjIwMDM2WjAYMRYwFAYD VQQDEw02OGE4ZTg4NC1lMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gNMhF94/0neckCsgEOOJBbGPa40yi+vFcOdaKvDUR4zl/xIrs1/obGhtHtz tAokMv6uEyFTeindBBNa78yWwg8RH0bc/3N59kX3FR8GfdckIedkWAFs0MNdB4B0 TMz3josA1nEbGiBxvj+IgLGPLZP42kfyk7OswP+D9ungOZms84PSZuaY/vLCsG+r yHQq8/Fgg7+V5a74quL+fLCirueRKAldGqdS2jcdJn5w93XJspfWf+G7Yl1Fj12b bFBhkQwjlDEfjEtiJxDMkFqVjJtEefsZeIUQKufxXS7YxajRe3V2Rf9sdA1QZn/q 4wC4Hys8j5wImwpRNoYwcqy1WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3nanOY IMBsNrE9LJUultT3gN8zMB8GA1UdIwQYMBaAFGlp0VCtA0gggbsb18E75fANxTo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzZEOS82QTVGMTMyNDRG RDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFNDQ0J1eHZYd1R2bDhBM0ZP amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXblJVSzBEU0NDQnV4dlh3VHZsOEEzRk9qZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzZEOS82QTVGMTMyNDRGRDExMUVCQUZCMTY3NkJDNEY5QUUwMi9hV25SVUswRFND Q0J1eHZYd1R2bDhBM0ZPamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/mFClgQWw93CtnfeT7udtkBuMnLFaUikssrKNdhDLXjQzZBDSB0Qr l4yJd9Csk0NvqoLA+6hWuFLMscHnfRmLODOy9/Fjo4a8hTcjjQzvnGU2XyPoWuH3 glHwuJ1M+6ip4Ngjos4d+T45MKKb7K16wut69MVlAv7YGRug7dpM39H8Ofr77lLK iwDHKrbXasFbGQrj94NJvHL9LcfDg/zmYIGJ59mSC7Vos1KW/4VnmP6pBxn5THH9 AGzNBuMlikd8JtuW3iFt8N5OIke/JuXZXw2lFtNzGeIvBR5pd3UEABVjkJykU/Jf nMBe3StlPAcpzR7fOwMCx3BaFkPupNhL -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:22 2025 by rpki-client