$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft File: fCyheDCTqbmvjuRX2glIgkIVJQs.mft (raw, json) Hash identifier: XGS9ehwdVIPANiHQ+b3v4J6ClW2634MLx6v1/A83ruE= Subject key identifier: 0D:26:EC:CE:D0:57:93:DD:F7:96:96:FD:E0:7E:F4:E9:01:7F:79:56 Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:18:12 +0000 Manifest this update: Sat 23 Aug 2025 08:18:11 +0000 Manifest next update: Sat 30 Aug 2025 08:18:11 +0000 Files and hashes: 1: fCyheDCTqbmvjuRX2glIgkIVJQs.crl (hash: eLbUuFUjQI7igZVuEXcneVPXq/WGCUCBIIlmD6e1luQ=) 2: B1B36E8A691911F08409AD61C4F9AE02.roa (hash: MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B Validity Not Before: Aug 23 08:18:11 2025 GMT Not After : Aug 30 08:18:11 2025 GMT Subject: CN=68a97943-8bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b1:dc:49:fe:88:98:23:49:82:39:f9:a2:1b: cf:9d:be:ca:08:7d:31:f0:aa:67:fb:05:f0:51:35: 4d:25:10:93:ae:00:d7:53:3b:8c:d2:b5:4f:f8:77: a8:e1:f6:93:17:5c:b6:d7:65:13:7a:e9:d9:66:4b: e3:e6:23:ac:88:e2:e9:6f:e3:e3:e5:48:2b:3e:75: 4f:b3:df:19:b1:fa:ec:90:e8:0e:29:67:10:de:35: e1:0e:26:e9:d8:3d:e4:d9:84:c8:7d:e5:d5:83:11: cd:61:0c:d5:2d:39:a8:e6:d6:80:8a:de:0a:43:e3: bb:14:ea:85:63:9a:61:61:1d:74:b6:57:05:e0:a4: 6f:fc:d0:6e:5e:52:e2:86:06:03:a2:88:84:0f:e0: 9d:45:c3:a8:5c:f2:b1:a7:56:29:31:be:55:2c:ad: e7:06:19:a7:a7:c4:ba:7e:08:ed:7b:d9:3f:94:59: fd:9a:7b:ae:4c:6c:2b:14:f9:77:05:c4:ea:7b:a9: 51:fa:22:49:fd:03:94:4d:ca:ef:90:c1:9a:b5:b1: b6:47:a1:3b:e6:58:99:34:6d:2c:75:5b:39:e2:e2: df:23:28:f1:9e:ad:a5:1e:56:d0:0c:76:df:98:8e: b5:cd:0f:91:e3:d6:4f:b8:18:f8:08:08:8e:27:7c: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:26:EC:CE:D0:57:93:DD:F7:96:96:FD:E0:7E:F4:E9:01:7F:79:56 X509v3 Authority Key Identifier: keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:6b:ba:64:51:84:88:3a:53:fb:18:34:a5:1f:6e:47:d6:14: f9:ac:3c:ba:6a:88:38:b9:59:39:e4:c1:63:1d:c6:bf:ce:fa: de:9d:5c:36:33:a0:c5:e5:b3:3b:70:bf:d1:d6:2f:9f:35:01: a8:ae:d7:aa:45:f5:65:4b:da:98:67:d0:28:eb:f6:f5:f4:b8: 3e:fc:fd:22:42:2e:5d:4c:92:6c:81:77:4d:e5:a6:4c:43:e7: 0c:58:bc:0b:87:b6:6c:18:d0:06:72:89:8f:de:58:e3:47:f1: 20:25:5a:ee:6c:13:b8:2f:67:77:b8:e9:1b:cd:13:be:b6:89: 24:6b:07:18:f1:90:be:33:e6:1a:13:92:b0:6c:6a:2b:38:10: 4a:ee:cf:2a:23:4f:16:f5:60:5f:98:95:9a:8f:99:11:99:f0: 92:1b:b8:b5:33:1d:b9:47:22:2d:a9:c7:f7:cb:30:40:0c:c4: ac:fb:e0:be:6e:e4:f2:9d:5e:03:56:15:e9:63:c6:86:01:d6: 1e:3b:c1:ce:a7:05:72:98:67:4f:90:d4:f2:22:11:f5:eb:5b: 07:57:88:fe:4b:95:32:82:2e:8e:03:02:14:c9:1d:17:21:20: 42:45:5d:1d:28:40:50:d4:c6:b8:9a:02:86:d8:47:c0:d8:fa: 7d:ac:5a:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoN0MyQ0ExNzgzMDkzQTlCOUFGOEVFNDU3REEwOTQ4ODI0 MjE1MjUwQjAeFw0yNTA4MjMwODE4MTFaFw0yNTA4MzAwODE4MTFaMBgxFjAUBgNV BAMTDTY4YTk3OTQzLThiYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGsdxJ/oiYI0mCOfmiG8+dvsoIfTHwqmf7BfBRNU0lEJOuANdTO4zStU/4d6jh 9pMXXLbXZRN66dlmS+PmI6yI4ulv4+PlSCs+dU+z3xmx+uyQ6A4pZxDeNeEOJunY PeTZhMh95dWDEc1hDNUtOajm1oCK3gpD47sU6oVjmmFhHXS2VwXgpG/80G5eUuKG BgOiiIQP4J1Fw6hc8rGnVikxvlUsrecGGaenxLp+CO172T+UWf2ae65MbCsU+XcF xOp7qVH6Ikn9A5RNyu+QwZq1sbZHoTvmWJk0bSx1Wzni4t8jKPGeraUeVtAMdt+Y jrXND5Hj1k+4GPgICI4nfIkrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDSbsztBX k933lpb94H706QF/eVYwHwYDVR0jBBgwFoAUfCyheDCTqbmvjuRX2glIgkIVJQsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0YyOTY2Njg4Njkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJtdmp1UlgyZ2xJZ2tJVkpR cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZkN5aGVEQ1RxYm12anVSWDJnbElna0lWSlFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0YyOTY2Njg4NjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL2ZDeWhlRENUcWJt dmp1UlgyZ2xJZ2tJVkpRcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdrumRRhIg6U/sYNKUfbkfWFPmsPLpqiDi5WTnkwWMdxr/O+t6dXDYz oMXlsztwv9HWL581Aaiu16pF9WVL2phn0Cjr9vX0uD78/SJCLl1MkmyBd03lpkxD 5wxYvAuHtmwY0AZyiY/eWONH8SAlWu5sE7gvZ3e46RvNE762iSRrBxjxkL4z5hoT krBsais4EEruzyojTxb1YF+YlZqPmRGZ8JIbuLUzHblHIi2px/fLMEAMxKz74L5u 5PKdXgNWFeljxoYB1h47wc6nBXKYZ0+Q1PIiEfXrWwdXiP5LlTKCLo4DAhTJHRch IEJFXR0oQFDUxriaAobYR8DY+n2sWtc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:21 2025 by rpki-client