$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: bE7Vh9PXDQ8iIlA0tD2koF/HbYh6u5PQ1HCFxU0hX+Y= Subject key identifier: 9B:71:36:7A:49:AF:4B:1B:17:0D:E1:1E:B6:E1:4B:C5:10:34:4F:20 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 1350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 1346 Signing time: Fri 22 Aug 2025 17:08:30 +0000 Manifest this update: Fri 22 Aug 2025 17:08:29 +0000 Manifest next update: Fri 29 Aug 2025 17:08:29 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: 86rgothmaOWTITpQIU+p7aj7v3BguqJE/cw9oynrutY=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: t9IbQoMRsiWsCorQ3w0qnfUpx5CDVs1SA9baB681Ybk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4944 (0x1350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Aug 22 17:08:29 2025 GMT Not After : Aug 29 17:08:29 2025 GMT Subject: CN=68a8a40e-0303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:12:e8:18:a5:86:88:61:a0:13:9a:76:9e: d5:eb:9a:60:3f:db:b7:28:49:7c:5e:a7:a5:54:60: d0:9b:b1:77:c8:37:15:2a:94:cd:dd:29:42:69:34: a3:74:ba:0f:0e:e0:4c:8f:7f:6e:d0:9f:0c:85:36: 9a:66:7f:20:40:f7:b6:9b:1f:b5:87:d6:0a:ca:b3: 2c:82:94:50:35:b1:e2:16:18:00:70:0c:d6:2b:f3: ea:89:c3:7b:e1:35:18:b8:cb:27:8a:53:05:0c:c9: 63:76:e1:58:ad:6f:c3:88:8e:6d:e9:bd:7f:a7:bc: b4:7a:20:d9:02:3b:a9:c8:f2:83:bc:fe:7a:fd:98: 93:f5:7d:a4:39:46:bc:b8:85:e9:be:b9:d1:5f:34: 59:68:4f:d2:14:d9:70:e3:54:49:2f:a9:00:7d:61: 98:25:d1:c3:0c:1a:04:d7:52:6e:ca:c6:d3:a9:b6: 8e:db:9c:2c:cc:77:53:99:e2:e8:ea:07:72:1b:dd: 63:e5:df:f8:8e:35:7f:db:4d:b0:1e:47:ff:1b:3b: f5:69:23:db:90:a2:14:ca:7b:5e:3d:ae:bd:14:55: 46:8b:32:1f:d2:b4:fc:9d:cb:d3:39:56:35:e6:f2: 03:e4:92:56:52:b6:05:0a:5d:c5:cf:d7:52:7a:59: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:71:36:7A:49:AF:4B:1B:17:0D:E1:1E:B6:E1:4B:C5:10:34:4F:20 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:f3:bc:61:f8:48:54:79:b6:10:36:23:48:95:84:4a:6e: eb:7c:d6:86:cb:40:b5:4f:0a:f8:ee:5f:8b:82:fb:8f:39:5e: cd:64:89:03:c0:f5:0f:ed:84:5e:19:bf:79:53:9c:51:79:b1: d6:6a:3f:5b:c6:2b:e3:0c:f9:14:ac:7c:d8:56:f8:0c:d8:c3: 24:64:51:72:80:dd:a2:10:42:63:ba:d0:94:b2:4b:4b:e7:fb: c4:b1:29:9a:dc:21:23:e1:61:36:17:13:22:b1:18:2c:ae:aa: 75:70:26:af:12:ea:17:d9:11:68:2f:c3:90:fb:21:3d:67:24: 36:30:a5:95:a6:78:bd:03:92:aa:d1:db:75:25:e4:90:7f:1b: b3:af:f5:99:a8:27:81:12:a3:51:75:44:06:2b:96:64:63:a9: e4:50:e6:1b:cc:ac:92:69:0a:ec:7a:b9:5e:9c:17:c8:1b:f8: eb:af:b7:af:52:55:81:fe:b1:c2:b0:6c:eb:5d:85:51:b9:e5: 02:51:a2:60:d1:2b:3d:7a:a1:98:cb:46:64:60:37:bb:75:c4: e7:75:f8:3f:61:89:9b:8e:a1:3a:eb:d9:89:4c:8b:4c:60:22: 75:34:2b:e1:0b:4e:a1:59:f8:4e:90:9e:fe:1e:ff:65:02:82: af:08:1e:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjUwODIyMTcwODI5WhcNMjUwODI5MTcwODI5WjAYMRYwFAYD VQQDEw02OGE4YTQwZS0wMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NIS6BilhohhoBOadp7V65pgP9u3KEl8XqelVGDQm7F3yDcVKpTN3SlCaTSj dLoPDuBMj39u0J8MhTaaZn8gQPe2mx+1h9YKyrMsgpRQNbHiFhgAcAzWK/PqicN7 4TUYuMsnilMFDMljduFYrW/DiI5t6b1/p7y0eiDZAjupyPKDvP56/ZiT9X2kOUa8 uIXpvrnRXzRZaE/SFNlw41RJL6kAfWGYJdHDDBoE11JuysbTqbaO25wszHdTmeLo 6gdyG91j5d/4jjV/202wHkf/Gzv1aSPbkKIUyntePa69FFVGizIf0rT8ncvTOVY1 5vID5JJWUrYFCl3Fz9dSelnyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtxNnpJ r0sbFw3hHrbhS8UQNE8gMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9KvO8YfhIVHm2EDYjSJWESm7rfNaGy0C1Twr47l+LgvuPOV7NZIkD wPUP7YReGb95U5xRebHWaj9bxivjDPkUrHzYVvgM2MMkZFFygN2iEEJjutCUsktL 5/vEsSma3CEj4WE2FxMisRgsrqp1cCavEuoX2RFoL8OQ+yE9ZyQ2MKWVpni9A5Kq 0dt1JeSQfxuzr/WZqCeBEqNRdUQGK5ZkY6nkUOYbzKySaQrserlenBfIG/jrr7ev UlWB/rHCsGzrXYVRueUCUaJg0Ss9eqGYy0ZkYDe7dcTndfg/YYmbjqE669mJTItM YCJ1NCvhC06hWfhOkJ7+Hv9lAoKvCB66 -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:34 2025 by rpki-client