$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json) Hash identifier: 2+URtJHpj91FV7JFwWpRkcWIZBVQdXk75ID+xvdrjFY= Subject key identifier: 0F:81:97:75:C3:4E:93:DE:44:3F:CE:F8:FD:09:A2:16:51:99:E9:34 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft Manifest number: 0161 Signing time: Fri 22 Aug 2025 19:22:24 +0000 Manifest this update: Fri 22 Aug 2025 19:22:23 +0000 Manifest next update: Fri 29 Aug 2025 19:22:23 +0000 Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: wdOcQMVNC05rjpCCyZoie7OqP831WY9qoBpMXSU0D3U=) 2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: Aug 22 19:22:23 2025 GMT Not After : Aug 29 19:22:23 2025 GMT Subject: CN=68a8c370-a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:fd:a5:85:7b:b7:1c:0c:4c:65:7f:03:e0: 4b:6c:93:30:20:e0:86:5a:e7:20:8b:fa:43:de:39: d1:0b:9c:95:76:01:82:d2:c9:f7:29:32:a7:ed:cd: bd:7a:dc:5b:7f:40:0e:9b:9b:d4:15:f2:b1:6a:fb: 04:57:62:f5:69:c7:c7:41:d3:e2:ad:29:d7:ee:c0: 7c:fd:12:db:3a:87:91:27:4e:2e:97:53:cc:92:da: bd:f0:ed:e3:d6:f9:f6:6a:65:b1:04:fa:60:4f:58: ba:1d:64:2c:04:67:87:e3:be:a4:ca:fb:75:7d:96: 70:da:16:bf:af:c5:3f:f6:e6:ee:df:a4:40:2d:b2: 0c:42:5b:6c:da:60:d4:1a:65:80:4b:8f:85:ce:67: 38:65:ca:cf:b5:9c:eb:f1:0c:a8:e5:dd:d7:7f:6b: a5:06:e2:84:5e:93:08:a6:aa:db:09:e9:b6:e4:19: ef:d2:59:7f:a5:7d:8b:84:76:df:20:ca:01:ef:b5: 7e:d1:01:7f:1e:8d:ef:c4:59:43:83:a9:ba:67:27: 61:62:0d:7f:6d:ff:f4:3a:c1:ae:8f:72:23:70:31: 74:6c:a4:77:e5:db:80:32:d4:9f:2e:d1:45:77:f5: e9:53:52:79:ab:cc:3f:72:ae:0f:ef:6f:69:d3:d8: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:97:75:C3:4E:93:DE:44:3F:CE:F8:FD:09:A2:16:51:99:E9:34 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9b:5f:22:17:bb:1f:95:54:21:6e:58:ce:ae:b2:92:18:c0: 6b:2f:e1:c7:1a:6e:6e:de:fc:69:c2:9c:e6:40:12:f1:ca:80: 5b:87:0c:3e:93:56:0e:03:89:44:32:64:80:66:bc:66:ed:bf: a2:95:62:a3:fe:e2:19:be:06:00:dc:bc:8f:95:82:96:2e:d6: 8c:e9:0e:bd:95:aa:8a:7d:f8:98:9a:e3:3f:cc:75:bc:6d:53: f9:28:78:91:48:7b:82:7b:45:21:5a:be:33:47:77:14:4f:05: 09:5b:a3:bc:bd:92:ea:b5:a8:d4:05:fa:a5:f7:d4:75:60:15: 83:66:e7:70:fc:64:ce:43:9a:9e:84:34:19:0e:66:9f:ea:e9: 9a:9e:cb:2c:83:6f:31:8f:81:ab:56:30:5c:a7:73:6a:3e:24: 95:51:8d:41:d9:79:f7:62:58:38:cb:13:bb:e0:97:18:26:76: 17:d0:76:da:38:f2:37:fe:f1:c4:57:75:dd:d6:3b:5d:ad:43: 7b:aa:5c:3d:4c:81:4e:6b:18:66:57:0a:02:a6:c3:6b:84:7e: 81:00:3f:5e:de:26:e6:dd:46:d2:23:c1:fd:7c:c8:73:5c:83: 85:77:3f:aa:77:7d:69:38:f5:6d:d9:4d:c2:ec:1e:cf:6a:fe: 99:8f:21:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG NTE4NjY1Q0EwHhcNMjUwODIyMTkyMjIzWhcNMjUwODI5MTkyMjIzWjAYMRYwFAYD VQQDEw02OGE4YzM3MC1hMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlz79pYV7txwMTGV/A+BLbJMwIOCGWucgi/pD3jnRC5yVdgGC0sn3KTKn7c29 etxbf0AOm5vUFfKxavsEV2L1acfHQdPirSnX7sB8/RLbOoeRJ04ul1PMktq98O3j 1vn2amWxBPpgT1i6HWQsBGeH476kyvt1fZZw2ha/r8U/9ubu36RALbIMQlts2mDU GmWAS4+Fzmc4ZcrPtZzr8Qyo5d3Xf2ulBuKEXpMIpqrbCem25Bnv0ll/pX2LhHbf IMoB77V+0QF/Ho3vxFlDg6m6ZydhYg1/bf/0OsGuj3IjcDF0bKR35duAMtSfLtFF d/XpU1J5q8w/cq4P729p09h6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+Bl3XD TpPeRD/O+P0JohZRmek0MB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4 MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtU QTZtd09ZQmhfbzcxR0daY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZm18iF7sflVQhbljOrrKSGMBrL+HHGm5u3vxpwpzmQBLxyoBbhww+ k1YOA4lEMmSAZrxm7b+ilWKj/uIZvgYA3LyPlYKWLtaM6Q69laqKffiYmuM/zHW8 bVP5KHiRSHuCe0UhWr4zR3cUTwUJW6O8vZLqtajUBfql99R1YBWDZudw/GTOQ5qe hDQZDmaf6umansssg28xj4GrVjBcp3NqPiSVUY1B2Xn3Ylg4yxO74JcYJnYX0Hba OPI3/vHEV3Xd1jtdrUN7qlw9TIFOaxhmVwoCpsNrhH6BAD9e3ibm3UbSI8H9fMhz XIOFdz+qd31pOPVt2U3C7B7Pav6ZjyEJ -----END CERTIFICATE-----Generated at Sat Aug 23 17:18:44 2025 by rpki-client