$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json) Hash identifier: mmS6WYiOKIdI2ONtwf4loNwBzARR/qzHXYstyli+44A= Subject key identifier: 46:C1:FB:EC:E2:17:2D:62:54:BD:4D:16:1C:E5:27:C3:4E:4E:FA:34 Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 08:04:58 +0000 Manifest this update: Sat 23 Aug 2025 08:04:57 +0000 Manifest next update: Sat 30 Aug 2025 08:04:57 +0000 Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: +2Ed9dfDJJPpXuvvjuGRynLs3LMkKqMjTyxPQzdrMPQ=) 2: E641780E535211F0A795A950C4F9AE02.roa (hash: /6fZjzm6zMKlJavcLCHUvZwJwnYnVUAiwPFKfA2za2E=) 3: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: JnKzQUCZZIkzk+PTJ2yOthp2jewtbhpdupguptGlDRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91 Validity Not Before: Aug 23 08:04:57 2025 GMT Not After : Aug 30 08:04:57 2025 GMT Subject: CN=68a9762a-fa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:d4:16:1b:a0:e8:2e:99:68:70:16:88:3b: a6:99:ea:8c:20:82:25:f6:01:91:f3:7e:de:8d:5b: 58:56:70:66:76:81:5a:61:7e:91:50:4d:09:09:14: 85:3d:21:72:67:c3:98:c9:48:d9:a6:65:9a:ae:2a: 34:1d:de:57:13:66:92:01:64:6a:9e:1a:29:8f:4b: 8d:65:b7:48:aa:ad:9a:92:9d:f6:ea:e5:4a:da:19: 1a:be:91:36:47:35:19:a3:eb:aa:c1:81:49:0d:d9: 31:c1:3d:0a:60:81:ed:01:3c:b6:7b:36:ab:ea:d9: 2b:7f:da:3e:ae:6a:10:3a:b3:8a:d4:34:0f:c1:1e: 4a:40:a7:ce:4c:a3:bc:e2:15:9f:e7:c7:19:f4:ad: db:ba:08:5d:62:01:0b:f4:08:ca:41:79:91:97:fd: b4:7a:33:73:28:17:8a:76:0d:b4:73:56:83:7f:53: c3:09:5d:27:33:dc:d6:55:b5:84:f9:c1:36:8f:c7: 16:b3:d1:d2:0a:c6:13:a5:f5:a7:d2:62:a0:f4:30: e9:97:56:ea:02:3c:98:05:fd:88:f9:e4:42:8e:91: 59:af:54:54:af:2c:09:2d:30:1c:f3:52:ae:37:f6: d7:99:ed:73:9d:1e:f0:b9:9a:56:7b:3e:f0:d2:07: 8d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C1:FB:EC:E2:17:2D:62:54:BD:4D:16:1C:E5:27:C3:4E:4E:FA:34 X509v3 Authority Key Identifier: keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:38:69:03:96:8a:fe:94:af:85:82:a2:7e:96:de:a5:62:a6: f3:cc:6f:ef:cb:73:a1:ab:fc:76:76:26:bc:d8:5b:f4:34:9a: 54:ee:9d:da:be:0f:14:d5:0f:4d:03:0d:8c:8c:f3:16:5d:3e: b4:7a:26:29:59:dd:68:a1:d7:0a:12:ea:32:0e:6f:46:0c:2b: 74:72:55:42:67:bb:58:46:3d:83:97:69:26:a8:65:c4:46:5d: 0b:fb:ca:38:4e:43:f9:5a:66:c1:c4:c4:2f:e7:26:49:f4:ec: fd:a0:48:c3:46:fe:d8:85:83:d8:85:2a:b9:21:7b:b1:11:b4: e8:6a:e6:3c:90:67:00:12:2d:e6:1c:62:72:d8:e4:d7:e2:bf: d8:ff:3e:15:ee:54:4f:03:5b:b5:6c:3a:e6:83:09:ce:ac:88: e6:63:e6:69:91:4f:64:fd:c9:56:bb:84:b7:93:c5:3a:78:b7: 2a:1a:f1:a6:a9:5b:c7:71:9e:9c:28:a9:ba:6b:ef:e6:72:93: 33:96:cc:53:71:76:ab:00:b0:92:bb:2a:39:06:8c:f1:46:57: c9:d2:c4:c6:0c:89:78:bd:05:93:8b:68:1b:cd:59:f0:8a:c1: d2:c3:7b:bc:f7:10:5c:ce:47:28:b3:0a:32:10:91:fc:99:2f: dc:28:31:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QUJBQzExMC8GA1UEBRMoQjQwMzhBQjY0MDM5RjMxNDU2MjJBMjBGRjcwRUQ3QkUx RDRFN0Y5MTAeFw0yNTA4MjMwODA0NTdaFw0yNTA4MzAwODA0NTdaMBgxFjAUBgNV BAMTDTY4YTk3NjJhLWZhMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAkNQWG6DoLplocBaIO6aZ6owggiX2AZHzft6NW1hWcGZ2gVphfpFQTQkJFIU9 IXJnw5jJSNmmZZquKjQd3lcTZpIBZGqeGimPS41lt0iqrZqSnfbq5UraGRq+kTZH NRmj66rBgUkN2THBPQpgge0BPLZ7Nqvq2St/2j6uahA6s4rUNA/BHkpAp85Mo7zi FZ/nxxn0rdu6CF1iAQv0CMpBeZGX/bR6M3MoF4p2DbRzVoN/U8MJXScz3NZVtYT5 wTaPxxaz0dIKxhOl9afSYqD0MOmXVuoCPJgF/Yj55EKOkVmvVFSvLAktMBzzUq43 9teZ7XOdHvC5mlZ7PvDSB43xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURsH77OIX LWJUvU0WHOUnw05O+jQwHwYDVR0jBBgwFoAUtAOKtkA58xRWIqIP9w7Xvh1Of5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBQkFDLzY0OUJDM0IyNTBD OTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhSV0lxSVA5dzdYdmgxT2Y1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEFPS3RrQTU4eFJXSXFJUDl3N1h2aDFPZjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB QkFDLzY0OUJDM0IyNTBDOTExRjBCNDczMDI0NkM0RjlBRTAyL3RBT0t0a0E1OHhS V0lxSVA5dzdYdmgxT2Y1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAI4aQOWiv6Ur4WCon6W3qVipvPMb+/Lc6Gr/HZ2JrzYW/Q0mlTundq+ DxTVD00DDYyM8xZdPrR6JilZ3Wih1woS6jIOb0YMK3RyVUJnu1hGPYOXaSaoZcRG XQv7yjhOQ/laZsHExC/nJkn07P2gSMNG/tiFg9iFKrkhe7ERtOhq5jyQZwASLeYc YnLY5Nfiv9j/PhXuVE8DW7VsOuaDCc6siOZj5mmRT2T9yVa7hLeTxTp4tyoa8aap W8dxnpwoqbpr7+ZykzOWzFNxdqsAsJK7KjkGjPFGV8nSxMYMiXi9BZOLaBvNWfCK wdLDe7z3EFzORyizCjIQkfyZL9woMXc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:37:35 2025 by rpki-client