$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json) Hash identifier: DMCdjRxaeL71xU1wxnT9zwCOpYLPzrUlexYsCd7rmOQ= Subject key identifier: 9B:5E:9D:F8:21:7D:AF:E3:8C:C0:B6:9F:EC:B4:6F:FD:77:73:23:78 Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft Manifest number: 0130 Signing time: Sat 23 Aug 2025 04:45:33 +0000 Manifest this update: Sat 23 Aug 2025 04:45:33 +0000 Manifest next update: Sat 30 Aug 2025 04:45:33 +0000 Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: hff0YkDMj6vuFX3cp1oOfJ1XxZ/Jla3wFZDeG5UnSTU=) 2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF Validity Not Before: Aug 23 04:45:33 2025 GMT Not After : Aug 30 04:45:33 2025 GMT Subject: CN=68a9476d-696d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:c6:a7:9f:33:d6:7f:f7:bc:df:b6:6f:45: 47:8f:2c:d5:d6:f8:fe:0b:fb:96:0a:cb:89:06:c5: 52:d2:b0:d9:90:9b:45:b2:86:55:f7:91:54:15:5b: c4:09:07:80:1a:9d:5e:04:e7:2c:98:c1:62:51:81: c7:9c:cb:7d:ac:c3:64:20:4e:bf:cc:28:2a:b0:be: 6e:46:aa:d4:f2:08:23:69:b7:d8:e5:8f:1d:11:ea: d1:88:28:d3:16:19:43:db:e5:0e:27:96:e3:de:fe: c7:3e:a2:aa:c0:c5:de:f5:76:1f:39:3d:49:10:df: e8:17:cf:12:f0:dd:86:92:8e:a1:85:5c:87:b5:73: ae:98:9e:59:0c:72:9c:27:61:82:b2:49:15:30:a9: 9f:38:51:0d:a0:a0:12:f3:59:51:8f:94:f2:bc:02: a2:6c:39:22:20:5f:52:88:99:31:c3:cf:69:1d:94: d7:37:d5:6d:c9:06:9c:e7:79:ce:7e:0f:61:0f:02: 8c:f5:0f:a8:64:51:07:df:04:ab:f6:8a:da:ea:81: 20:65:a1:c7:ab:08:24:b9:3b:94:9b:77:ed:bd:74: ae:7d:46:bc:67:05:57:d9:e0:81:63:0d:70:93:f1: 7a:59:f6:b9:39:9f:7e:7b:8c:bb:42:a7:2b:66:8a: 62:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5E:9D:F8:21:7D:AF:E3:8C:C0:B6:9F:EC:B4:6F:FD:77:73:23:78 X509v3 Authority Key Identifier: keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d8:44:99:29:25:47:00:ee:7c:1a:10:ed:e3:b7:bb:b8:82: 09:e9:6d:9a:83:36:6c:9e:e4:cb:b4:28:0a:f7:ce:eb:3d:ad: 24:02:cb:96:d2:a0:81:04:a1:13:40:00:b7:bd:65:4e:b1:47: 03:59:bd:d4:cd:bf:ae:9c:47:83:57:73:93:7c:15:b4:90:5b: ba:d6:7d:7d:e2:fc:9f:a0:cb:be:95:ab:45:e4:14:01:b0:d7: 7d:72:e7:a8:53:ad:40:c5:fe:66:4e:78:18:01:3c:db:f3:39: d1:95:c2:a0:c8:6c:0a:47:de:96:c8:73:97:ff:f4:3b:d0:0c: 7c:77:25:f2:03:20:c4:a8:53:32:62:1d:3d:04:94:d1:89:52: ed:8f:00:fd:ea:e5:eb:59:9e:24:15:32:b9:0d:05:86:09:01: 5a:91:ad:1f:45:01:7a:5a:34:c0:4c:e5:f2:14:dc:f5:ce:2c: df:73:f3:58:9b:6e:60:0a:87:41:b3:16:6d:62:64:02:61:32: b1:8d:17:4c:62:6f:30:a9:13:2f:12:0c:5d:87:5d:96:76:b9: fd:0c:b4:f4:79:e6:da:8b:7e:a7:7d:23:10:a7:1d:ea:3a:71: 0e:8a:d0:3d:7b:73:76:f2:9b:1d:8f:bf:80:a1:e1:f6:d5:ba: e1:ea:68:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5N0UxMTAvBgNVBAUTKDMzN0JBMzExRkRGN0I3MDUyN0I1N0VDMDM4MEYxRkJC RkEzNThBRUYwHhcNMjUwODIzMDQ0NTMzWhcNMjUwODMwMDQ0NTMzWjAYMRYwFAYD VQQDEw02OGE5NDc2ZC02OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscXGp58z1n/3vN+2b0VHjyzV1vj+C/uWCsuJBsVS0rDZkJtFsoZV95FUFVvE CQeAGp1eBOcsmMFiUYHHnMt9rMNkIE6/zCgqsL5uRqrU8ggjabfY5Y8dEerRiCjT FhlD2+UOJ5bj3v7HPqKqwMXe9XYfOT1JEN/oF88S8N2Gko6hhVyHtXOumJ5ZDHKc J2GCskkVMKmfOFENoKAS81lRj5TyvAKibDkiIF9SiJkxw89pHZTXN9VtyQac53nO fg9hDwKM9Q+oZFEH3wSr9ora6oEgZaHHqwgkuTuUm3ftvXSufUa8ZwVX2eCBYw1w k/F6Wfa5OZ9+e4y7QqcrZopiOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtenfgh fa/jjMC2n+y0b/13cyN4MB8GA1UdIwQYMBaAFDN7oxH997cFJ7V+wDgPH7v6NYrv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk3RS9GMjEyMTJGQ0I2 OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3VW50WDdBT0E4ZnVfbzFp dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL00zdWpFZjMzdHdVbnRYN0FPQThmdV9vMWl1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk3RS9GMjEyMTJGQ0I2OUExMUVFOEQ4REY2MEVDNEY5QUUwMi9NM3VqRWYzM3R3 VW50WDdBT0E4ZnVfbzFpdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62ESZKSVHAO58GhDt47e7uIIJ6W2agzZsnuTLtCgK987rPa0kAsuW 0qCBBKETQAC3vWVOsUcDWb3Uzb+unEeDV3OTfBW0kFu61n194vyfoMu+latF5BQB sNd9cueoU61Axf5mTngYATzb8znRlcKgyGwKR96WyHOX//Q70Ax8dyXyAyDEqFMy Yh09BJTRiVLtjwD96uXrWZ4kFTK5DQWGCQFaka0fRQF6WjTATOXyFNz1zizfc/NY m25gCodBsxZtYmQCYTKxjRdMYm8wqRMvEgxdh12Wdrn9DLT0eebai36nfSMQpx3q OnEOitA9e3N28psdj7+AoeH21brh6mhC -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:33 2025 by rpki-client