$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: 2OibOqRwkKJKoQG5LLSX7zbhOkiqEk9K4mgyMBXuAIw= Subject key identifier: 00:CB:16:00:FE:B4:73:18:51:92:AD:1A:0C:9A:4C:E4:31:59:00:14 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 034B Signing time: Sat 23 Aug 2025 08:18:11 +0000 Manifest this update: Sat 23 Aug 2025 08:18:10 +0000 Manifest next update: Sat 30 Aug 2025 08:18:10 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: OLg+HJG3e/jysU+6TWIDIXbakQZkvRgIrb8AAkPiays=) 2: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: MnpTevKrhY7L4cqXUyU9PXlqHjDSUZYAGeApiPXwlBI=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA=) 4: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Aug 23 08:18:10 2025 GMT Not After : Aug 30 08:18:10 2025 GMT Subject: CN=68a97943-189f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:15:ed:17:c0:f2:4e:79:54:6f:83:1b:6d: fb:30:3c:69:aa:fa:28:99:e0:72:03:d2:b2:38:2b: bb:f1:78:e0:e0:c3:74:7c:41:a9:d8:e2:ce:1f:74: 0c:3f:b3:a4:a6:be:31:e3:87:74:cd:0f:2b:8c:34: 87:16:dd:fe:bd:e1:f2:85:a9:37:3d:6d:b6:fb:12: e9:2c:9d:2d:cc:4c:71:e2:9e:3c:af:95:a3:ab:e4: 8c:05:a2:c0:36:88:87:a3:f8:76:16:94:58:d6:cf: cf:18:81:66:94:1b:bf:b8:21:8f:94:30:b0:ad:65: 4d:14:d4:d5:96:fa:d3:4f:b2:5b:60:b6:62:db:c5: 22:8d:75:c4:a4:59:7b:9a:15:38:a2:98:62:fb:b4: fb:af:ef:8b:17:32:91:c2:38:f7:1d:fb:42:b4:4f: 1d:14:64:b9:0e:1f:28:03:5b:43:9e:17:af:10:f6: 5e:48:71:84:7c:f1:80:be:65:e2:41:c8:08:3e:3e: 6a:cc:8e:ea:3a:ca:69:2f:ff:c6:d7:c1:94:b0:c5: 6b:73:2b:5a:e0:46:44:da:ec:78:f7:18:9a:d8:13: ca:04:be:98:f6:e7:60:84:77:35:89:42:45:9a:35: 26:20:e5:81:7a:da:63:24:79:77:e8:8b:c9:f7:29: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:16:00:FE:B4:73:18:51:92:AD:1A:0C:9A:4C:E4:31:59:00:14 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d1:4f:40:d1:ce:12:dc:3f:42:c7:00:a2:ef:0a:e1:66:93: e6:00:61:00:0e:fc:38:56:63:b7:b8:51:32:e2:ba:4c:f7:03: b6:56:e8:6d:7c:02:4c:8e:9b:78:6a:e7:84:a8:75:0f:ef:4d: 8b:55:50:06:02:79:0e:26:bb:33:1a:fb:68:b8:76:18:02:f5: f6:c1:40:18:82:18:52:6e:d7:db:33:88:e3:f3:37:e1:94:e2: 05:5b:6a:3e:f3:ca:58:89:36:9a:84:f3:bb:e3:b2:df:b4:30: 94:cd:14:51:9c:ca:6c:96:42:4f:3d:5a:67:c7:8d:f4:d5:25: dc:f9:47:30:2d:48:3f:49:10:5c:95:43:6a:d8:be:6c:95:8d: d8:3c:80:5f:14:22:45:c0:40:c6:29:d8:b0:29:dc:72:34:44: fa:b7:ef:51:1a:e5:ac:bb:72:7a:97:4a:e7:18:8a:ac:72:55: 0b:36:1e:ba:7f:59:b3:83:3a:ab:a9:ff:34:8d:9d:2c:10:64: 47:e4:ef:c3:56:bb:b0:5d:97:42:d2:d3:07:6b:1c:82:96:ec: 73:4c:dd:90:20:4e:a3:6e:c3:cb:04:58:b1:ef:39:2a:ad:02: 51:e6:89:00:b5:56:9e:f0:12:50:b8:e2:fc:ac:b1:c5:70:c0: 25:dc:17:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjUwODIzMDgxODEwWhcNMjUwODMwMDgxODEwWjAYMRYwFAYD VQQDEw02OGE5Nzk0My0xODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32IV7RfA8k55VG+DG237MDxpqvoomeByA9KyOCu78Xjg4MN0fEGp2OLOH3QM P7Okpr4x44d0zQ8rjDSHFt3+veHyhak3PW22+xLpLJ0tzExx4p48r5Wjq+SMBaLA NoiHo/h2FpRY1s/PGIFmlBu/uCGPlDCwrWVNFNTVlvrTT7JbYLZi28UijXXEpFl7 mhU4ophi+7T7r++LFzKRwjj3HftCtE8dFGS5Dh8oA1tDnhevEPZeSHGEfPGAvmXi QcgIPj5qzI7qOsppL//G18GUsMVrcyta4EZE2ux49xia2BPKBL6Y9udghHc1iUJF mjUmIOWBetpjJHl36IvJ9ykLcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADLFgD+ tHMYUZKtGgyaTOQxWQAUMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy0U9A0c4S3D9CxwCi7wrhZpPmAGEADvw4VmO3uFEy4rpM9wO2Vuht fAJMjpt4aueEqHUP702LVVAGAnkOJrszGvtouHYYAvX2wUAYghhSbtfbM4jj8zfh lOIFW2o+88pYiTaahPO747LftDCUzRRRnMpslkJPPVpnx4301SXc+UcwLUg/SRBc lUNq2L5slY3YPIBfFCJFwEDGKdiwKdxyNET6t+9RGuWsu3J6l0rnGIqsclULNh66 f1mzgzqrqf80jZ0sEGRH5O/DVruwXZdC0tMHaxyCluxzTN2QIE6jbsPLBFix7zkq rQJR5okAtVae8BJQuOL8rLHFcMAl3BdQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:34:06 2025 by rpki-client