$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: SR1Dlre6nQx+m0wkm39wMIoBpSTYAanpvcKIY+RMOao= Subject key identifier: 89:0C:EA:E6:31:CA:D5:1E:2A:A9:79:2A:92:51:30:CB:F3:4D:65:6F Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: F4 Signing time: Sat 23 Aug 2025 05:28:14 +0000 Manifest this update: Sat 23 Aug 2025 05:28:14 +0000 Manifest next update: Sat 30 Aug 2025 05:28:14 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: dl1elxE+icsYbHg5KRGzDH2Zc/5/yeN24peAgxPGHKs=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Aug 23 05:28:14 2025 GMT Not After : Aug 30 05:28:14 2025 GMT Subject: CN=68a9516e-59e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:69:8d:d9:de:40:a5:ad:51:6a:36:a1:43: a1:36:83:86:5b:af:6b:35:74:ee:6f:7d:7b:43:44: 72:82:7c:78:b5:a4:7c:bd:18:bc:62:cb:eb:33:97: 52:f1:7a:74:53:eb:fc:53:fa:c9:25:03:78:5d:fb: 04:e6:fc:8b:04:7d:88:55:2f:99:2b:34:9f:59:b5: 94:17:59:e6:a5:a5:06:c1:87:2d:39:85:e6:f0:ec: 0f:96:01:f9:7a:35:9c:30:a5:1d:98:fe:ae:11:02: 07:41:50:15:17:dd:c9:d5:50:30:15:c2:60:30:c1: a1:b0:bc:51:0f:37:78:9c:db:67:85:e0:61:58:a4: 24:e6:10:e0:37:35:2d:39:df:bf:43:58:d3:07:96: b2:06:ba:48:a6:05:55:08:3d:a8:6a:bb:c1:f4:93: d7:38:68:79:40:04:ee:70:54:e6:07:3f:cd:47:34: 0c:50:95:cd:ed:3b:57:27:9b:02:0e:af:c0:43:04: 59:bb:29:83:10:b6:f4:55:f0:93:95:c1:66:12:15: 3a:76:be:04:26:3b:c1:dd:66:c6:9d:fd:cf:08:aa: af:8c:7a:ab:33:3d:7e:14:11:8b:9f:03:bf:cb:98: 25:91:a7:5f:1c:0d:ad:b6:48:a1:9c:55:83:2e:9d: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0C:EA:E6:31:CA:D5:1E:2A:A9:79:2A:92:51:30:CB:F3:4D:65:6F X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d2:45:28:0f:59:cf:85:11:e5:ab:c9:8d:1b:f9:c5:dc:51: 53:58:68:1a:62:b6:1d:50:d6:2a:7b:5f:70:79:91:1d:e7:73: f3:e7:33:f2:ea:a6:15:37:3b:23:c0:9c:c5:92:1b:90:a5:ae: 11:a5:db:d7:48:f3:75:7c:02:37:a3:48:bf:83:ed:17:e6:e5: 26:ae:23:26:bf:54:0d:34:36:fe:43:4d:b3:ef:4d:09:ba:e8: 01:5a:08:08:cb:8a:a5:fb:7a:57:69:b5:01:01:4d:d1:c9:81: 25:83:8c:57:d2:5b:00:13:d8:e8:da:1f:f2:c0:fb:0a:de:be: 37:a1:0b:8c:9c:a0:32:d2:a8:2a:6c:16:b6:db:7b:d1:fb:b4: d0:07:9b:6d:4e:0f:e2:81:78:87:18:13:bc:dd:c3:6e:14:16: 6f:c8:bd:27:ae:db:1b:8c:03:6d:21:8d:f4:04:07:ea:18:77: 70:05:82:bc:87:f9:b1:ae:d1:c0:3d:ee:b7:17:bf:67:b5:4a: 1a:ea:b6:58:58:a9:78:9a:59:4e:21:bf:cb:ad:47:99:0c:8a: 3b:e6:7e:8f:90:d0:6f:40:40:ab:4e:6c:8e:00:4c:94:76:73: 42:cb:63:c7:f3:47:bc:1c:87:90:53:b9:15:ad:4c:37:ac:08: fa:3c:25:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUwODIzMDUyODE0WhcNMjUwODMwMDUyODE0WjAYMRYwFAYD VQQDEw02OGE5NTE2ZS01OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx35pjdneQKWtUWo2oUOhNoOGW69rNXTub317Q0Rygnx4taR8vRi8YsvrM5dS 8Xp0U+v8U/rJJQN4XfsE5vyLBH2IVS+ZKzSfWbWUF1nmpaUGwYctOYXm8OwPlgH5 ejWcMKUdmP6uEQIHQVAVF93J1VAwFcJgMMGhsLxRDzd4nNtnheBhWKQk5hDgNzUt Od+/Q1jTB5ayBrpIpgVVCD2oarvB9JPXOGh5QATucFTmBz/NRzQMUJXN7TtXJ5sC Dq/AQwRZuymDELb0VfCTlcFmEhU6dr4EJjvB3WbGnf3PCKqvjHqrMz1+FBGLnwO/ y5glkadfHA2ttkihnFWDLp2y0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkM6uYx ytUeKql5KpJRMMvzTWVvMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE0kUoD1nPhRHlq8mNG/nF3FFTWGgaYrYdUNYqe19weZEd53Pz5zPy 6qYVNzsjwJzFkhuQpa4RpdvXSPN1fAI3o0i/g+0X5uUmriMmv1QNNDb+Q02z700J uugBWggIy4ql+3pXabUBAU3RyYElg4xX0lsAE9jo2h/ywPsK3r43oQuMnKAy0qgq bBa223vR+7TQB5ttTg/igXiHGBO83cNuFBZvyL0nrtsbjANtIY30BAfqGHdwBYK8 h/mxrtHAPe63F79ntUoa6rZYWKl4mllOIb/LrUeZDIo75n6PkNBvQECrTmyOAEyU dnNCy2PH80e8HIeQU7kVrUw3rAj6PCUN -----END CERTIFICATE-----Generated at Sat Aug 23 21:40:31 2025 by rpki-client