$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: QeVFbjog4QSz+V7X6pDniS5AKhFzM78UUQ3dPdeireU= Subject key identifier: 29:E0:E2:0C:5F:32:87:FF:38:85:14:DB:D8:28:5D:67:84:78:64:1F Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 04:44:36 +0000 Manifest this update: Sat 23 Aug 2025 04:44:36 +0000 Manifest next update: Sat 30 Aug 2025 04:44:36 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: X7Mfyt88DoPfXUBux3VJq80eabQL3dTaV9gZ2HRXHhk=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Aug 23 04:44:36 2025 GMT Not After : Aug 30 04:44:36 2025 GMT Subject: CN=68a94734-56b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:76:1c:5d:b2:1e:aa:0f:5e:ab:d3:56:54: e3:49:ed:88:c0:e8:68:23:c7:c2:1d:0d:7a:59:5d: 49:3f:78:55:fc:f2:48:b6:92:97:74:a4:3d:a6:e7: a4:7a:b0:c4:59:6e:96:5f:78:14:c8:0e:c0:28:28: 08:23:64:32:61:3a:f0:e6:47:9e:5f:8a:c9:6c:c2: 8f:14:55:8e:02:49:4b:cc:05:f2:7c:2f:91:bb:b1: 72:14:42:56:a9:17:db:e3:d6:25:b4:b7:b2:f5:a5: f0:43:db:06:4b:87:72:16:c5:ff:b1:61:8b:5e:05: 85:e1:e6:4f:27:2d:5f:9e:fc:9e:5f:f5:ca:f7:59: 0c:1d:48:e7:9b:29:be:2b:79:d6:2a:dd:41:61:ea: dc:e6:c0:52:14:7f:6b:3c:fe:8c:0b:cb:8d:50:d2: 4d:f6:50:60:a2:38:5c:68:7a:0c:e9:b4:d4:73:e6: cd:e5:e3:6c:49:97:5d:8f:03:51:8c:18:86:a3:7a: 40:f1:4f:14:1d:03:f8:17:ec:60:11:d4:5a:5e:c4: 02:d4:2b:b8:a9:7f:97:63:dd:18:4d:55:b6:e4:b6: c6:c2:24:72:d2:4b:e4:70:42:1d:26:ab:d0:1c:dd: 9c:25:a6:f4:b9:0b:62:45:19:ac:c9:da:d3:8f:39: 5d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E0:E2:0C:5F:32:87:FF:38:85:14:DB:D8:28:5D:67:84:78:64:1F X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:03:13:9a:36:24:ad:08:a4:d3:5d:18:0b:32:a2:80:55: 0d:48:ed:af:aa:fe:02:e5:97:21:76:19:f3:b7:21:17:02:ad: b9:e0:ea:e7:2a:ee:84:a1:94:3b:30:db:ad:c4:49:4c:84:06: 82:cd:9e:e3:02:9b:77:22:2b:2d:d8:1b:88:a7:a5:71:7a:8d: 01:f6:d9:26:4e:ac:13:32:72:51:7f:89:aa:0b:b9:dd:3d:47: 40:34:31:e1:45:19:c6:65:30:e2:2f:11:2a:90:76:de:0a:9a: 1a:92:0b:84:20:0a:0f:f4:08:eb:f9:ec:e6:a6:73:b5:b4:22: 11:cf:66:4b:2a:5f:a0:09:31:a1:98:7f:57:43:f5:27:65:c1: 36:c8:84:63:14:d9:3c:00:ab:83:29:73:c2:a1:d6:69:f9:13: 19:24:db:31:bc:4f:61:20:23:10:87:a1:aa:e2:76:08:22:f7: 1c:14:82:61:1e:06:42:9e:cf:08:35:17:65:7a:07:61:86:22: 44:ac:58:9a:c0:f0:97:ad:b5:23:ba:84:f5:84:2c:ab:00:1a: a3:5a:3f:08:d7:f9:eb:b5:f2:3c:26:9e:61:4b:71:1e:09:77: 51:0f:33:8f:b4:75:54:0e:cc:08:65:31:02:55:2f:33:57:42: 23:9a:f1:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUwODIzMDQ0NDM2WhcNMjUwODMwMDQ0NDM2WjAYMRYwFAYD VQQDEw02OGE5NDczNC01NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0d2HF2yHqoPXqvTVlTjSe2IwOhoI8fCHQ16WV1JP3hV/PJItpKXdKQ9puek erDEWW6WX3gUyA7AKCgII2QyYTrw5keeX4rJbMKPFFWOAklLzAXyfC+Ru7FyFEJW qRfb49YltLey9aXwQ9sGS4dyFsX/sWGLXgWF4eZPJy1fnvyeX/XK91kMHUjnmym+ K3nWKt1BYerc5sBSFH9rPP6MC8uNUNJN9lBgojhcaHoM6bTUc+bN5eNsSZddjwNR jBiGo3pA8U8UHQP4F+xgEdRaXsQC1Cu4qX+XY90YTVW25LbGwiRy0kvkcEIdJqvQ HN2cJab0uQtiRRmsydrTjzldswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCng4gxf Mof/OIUU29goXWeEeGQfMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB10wMTmjYkrQik010YCzKigFUNSO2vqv4C5ZchdhnztyEXAq254Orn Ku6EoZQ7MNutxElMhAaCzZ7jApt3Iist2BuIp6Vxeo0B9tkmTqwTMnJRf4mqC7nd PUdANDHhRRnGZTDiLxEqkHbeCpoakguEIAoP9Ajr+ezmpnO1tCIRz2ZLKl+gCTGh mH9XQ/UnZcE2yIRjFNk8AKuDKXPCodZp+RMZJNsxvE9hICMQh6Gq4nYIIvccFIJh HgZCns8INRdlegdhhiJErFiawPCXrbUjuoT1hCyrABqjWj8I1/nrtfI8Jp5hS3Ee CXdRDzOPtHVUDswIZTECVS8zV0IjmvH6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:43 2025 by rpki-client