$ rpki-client -vvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft File: bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json) Hash identifier: xqZSrQMN87bXGAaiCWKxoph1ETS83EUF/BtV04gLRJk= Subject key identifier: 1A:B5:D5:EA:B1:5D:BF:F5:AE:06:1D:78:73:D0:C3:2B:47:21:88:71 Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 Certificate issuer: /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft Manifest number: 01C1 Signing time: Sat 23 Aug 2025 03:09:59 +0000 Manifest this update: Sat 23 Aug 2025 03:09:59 +0000 Manifest next update: Sat 30 Aug 2025 03:09:59 +0000 Files and hashes: 1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: 6KrJRCeU81kdG8N0nfjFNI5OfKWFIYAm8s5jQFEjIuQ=) 2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: c52+qULtQI4nUSwyiYqI9B7pVL/XEZ9W/nL53Dz6dtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002 Validity Not Before: Aug 23 03:09:59 2025 GMT Not After : Aug 30 03:09:59 2025 GMT Subject: CN=68a93107-7401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:0b:96:46:39:72:da:1d:85:df:4c:9e:ae: 22:96:dd:91:21:de:5d:b5:0b:ee:a2:f0:79:9c:ba: 66:75:5d:f4:73:43:88:a2:ba:f0:5d:81:f7:60:49: 13:9c:28:ca:48:94:3a:16:89:19:01:a0:16:2f:f2: a7:b2:f7:29:36:90:88:7c:a8:48:76:0c:d5:ae:51: 08:98:8f:58:64:3d:6e:4f:9a:58:e3:2d:a0:8b:b5: 3c:96:03:82:70:87:db:e7:0b:d6:99:ca:46:0b:7b: b7:a1:c9:e5:14:1a:a5:6f:77:4a:94:e3:bc:91:0d: 42:4d:4a:a6:69:77:3f:70:1e:b1:64:f9:8e:5e:83: f2:9d:89:48:55:ca:eb:fa:92:63:4b:70:b7:7c:33: 2c:aa:59:50:c0:bc:2d:06:9b:a4:2a:a2:1b:6c:fb: 1c:86:64:80:0f:d7:ff:b5:40:2f:9d:ae:12:07:59: 84:47:0a:72:40:be:09:eb:88:b2:c4:3a:f9:9f:64: 35:69:e9:8e:13:a2:fb:65:a1:3e:9b:7e:81:92:6a: ab:8f:fa:81:dd:f9:70:75:37:bb:d5:7b:79:5a:61: f5:2c:2b:e9:13:77:da:50:0c:61:af:eb:d8:a3:e1: 51:53:de:d9:31:6d:2f:50:0d:46:fc:31:52:74:49: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B5:D5:EA:B1:5D:BF:F5:AE:06:1D:78:73:D0:C3:2B:47:21:88:71 X509v3 Authority Key Identifier: keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:be:44:93:e8:ce:70:2b:2e:de:81:3f:e5:ce:38:b2:60:5a: 65:86:94:81:c2:a1:9a:66:c9:a0:3e:e4:a8:80:ad:ab:2e:16: 9f:6c:c3:36:4a:82:bf:61:e0:e4:c7:d3:39:0f:cc:75:e2:49: 6e:f7:45:67:97:ad:f2:b3:2b:4d:e3:29:e6:05:80:15:f6:f9: 06:96:64:75:0f:25:1b:79:3b:76:eb:13:0f:48:ee:56:b9:a4: e3:92:aa:49:0f:37:a7:f0:9e:bc:d0:7e:cf:bc:7b:f0:0c:3d: 6e:1b:53:97:ef:1d:93:51:3d:33:25:01:eb:90:41:ab:fc:e3: 98:95:0a:88:f0:f2:af:a1:e2:94:f2:02:4d:5d:75:9c:74:a9: 81:42:c4:4a:12:0e:03:c1:0b:65:89:78:c2:a1:9d:4f:21:c2: cb:e3:12:24:6f:23:ae:be:f6:fd:ae:23:52:d4:1f:2a:9e:40: 2e:42:87:a3:f1:39:d3:12:ce:3b:5b:51:de:25:6f:a5:87:3d: fa:c4:99:c4:7f:b6:25:04:43:8e:41:f1:2a:52:39:71:8a:3c: c9:9e:37:49:65:1a:c6:66:83:73:29:19:81:99:6b:fd:1c:98: fc:f0:70:4a:b7:9d:02:c4:20:9c:5b:42:c5:d6:cd:9b:45:02: cb:81:a2:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE RUREREEwMDIwHhcNMjUwODIzMDMwOTU5WhcNMjUwODMwMDMwOTU5WjAYMRYwFAYD VQQDEw02OGE5MzEwNy03NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsywLlkY5ctodhd9Mnq4ilt2RId5dtQvuovB5nLpmdV30c0OIorrwXYH3YEkT nCjKSJQ6FokZAaAWL/KnsvcpNpCIfKhIdgzVrlEImI9YZD1uT5pY4y2gi7U8lgOC cIfb5wvWmcpGC3u3ocnlFBqlb3dKlOO8kQ1CTUqmaXc/cB6xZPmOXoPynYlIVcrr +pJjS3C3fDMsqllQwLwtBpukKqIbbPschmSAD9f/tUAvna4SB1mERwpyQL4J64iy xDr5n2Q1aemOE6L7ZaE+m36Bkmqrj/qB3flwdTe71Xt5WmH1LCvpE3faUAxhr+vY o+FRU97ZMW0vUA1G/DFSdElcdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq11eqx Xb/1rgYdeHPQwytHIYhxMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5 MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx NThMUXgwWTNkSUhlM2RvQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEvkST6M5wKy7egT/lzjiyYFplhpSBwqGaZsmgPuSogK2rLhafbMM2 SoK/YeDkx9M5D8x14klu90Vnl63ysytN4ynmBYAV9vkGlmR1DyUbeTt26xMPSO5W uaTjkqpJDzen8J680H7PvHvwDD1uG1OX7x2TUT0zJQHrkEGr/OOYlQqI8PKvoeKU 8gJNXXWcdKmBQsRKEg4DwQtliXjCoZ1PIcLL4xIkbyOuvvb9riNS1B8qnkAuQoej 8TnTEs47W1HeJW+lhz36xJnEf7YlBEOOQfEqUjlxijzJnjdJZRrGZoNzKRmBmWv9 HJj88HBKt50CxCCcW0LF1s2bRQLLgaJD -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:40 2025 by rpki-client