$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft File: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json) Hash identifier: YilsLnXNwctTJdhna9G0vde4PlkkvuNiOXnlCuvYfMw= Subject key identifier: B2:18:5F:CE:2E:54:E6:18:09:DA:25:F7:D2:1D:42:E0:4B:A5:53:82 Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E Certificate issuer: /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Certificate serial: 0DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft Manifest number: 0DA3 Signing time: Fri 22 Aug 2025 18:02:20 +0000 Manifest this update: Fri 22 Aug 2025 18:02:20 +0000 Manifest next update: Fri 29 Aug 2025 18:02:20 +0000 Files and hashes: 1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: oj4aWvIOyKzIlyR07Tu+XbU/v4rvNVYr1xniTwbsMc8=) 2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=) 3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=) 4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=) 5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E Validity Not Before: Aug 22 18:02:20 2025 GMT Not After : Aug 29 18:02:20 2025 GMT Subject: CN=68a8b0ac-40de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:85:c5:07:84:4a:14:67:4e:2c:67:39:c2: b5:3c:3f:d4:a5:7c:2f:f5:2c:89:50:16:02:20:2e: e9:a6:72:7e:69:8f:7c:d8:33:14:8f:f6:44:2e:72: 5d:38:dc:e0:04:92:a8:f2:34:1c:fb:d4:7d:7d:0d: 4b:88:76:14:d7:27:5e:34:5c:9a:fe:66:33:1b:86: be:11:d6:1a:74:ce:e8:3a:f4:54:09:6e:9d:72:5b: 72:70:56:e2:95:b1:09:bc:7b:5e:d1:6c:c7:56:3b: d5:ce:5b:3a:e1:4b:f6:64:f8:e8:ff:99:1b:01:f0: db:ae:de:f4:f3:8b:7a:2d:d4:e2:d3:cc:0a:86:91: 9d:84:e4:f9:f2:07:6d:ca:ca:c7:f9:0d:7e:9a:02: 95:d0:58:df:93:c3:17:bf:8b:21:07:76:73:20:47: 1e:2e:f3:da:73:62:f2:92:49:a6:ed:f2:5e:d5:dd: 64:69:2b:fa:ec:91:47:dc:5f:8f:8d:33:46:8d:9f: 1c:60:3e:6d:ec:8f:82:b4:3a:d3:6f:d2:d8:b0:b0: 27:33:ad:05:95:63:3d:44:be:6b:ea:af:f4:6f:40: bd:b6:c8:c0:b7:7d:e6:a3:55:29:90:e1:c3:f6:6d: b9:12:68:5a:a8:0d:91:42:2d:e5:4c:a1:9b:d0:b2: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:5F:CE:2E:54:E6:18:09:DA:25:F7:D2:1D:42:E0:4B:A5:53:82 X509v3 Authority Key Identifier: keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ab:32:bf:e2:49:8f:94:3b:4a:b2:86:19:0a:12:9f:cc:90: 40:f1:fc:4d:2b:47:64:de:cf:34:34:b1:8a:20:90:27:7f:9c: 8e:4f:dd:8f:09:1d:c6:56:51:ca:13:aa:6e:a4:78:7b:ed:84: fd:55:0e:2c:f5:b2:56:b1:ed:db:5e:87:0c:d3:47:5d:11:ad: 69:f0:eb:0f:a2:bc:be:4e:fb:e0:ef:2a:9f:9d:69:f9:44:fb: 78:8d:8e:9b:55:9e:0f:99:95:a8:7a:07:33:9e:f8:8f:f1:04: 82:cc:65:12:c5:18:1d:d3:d0:b8:24:97:cb:29:c9:2b:e0:73: f3:e9:1a:be:db:20:f2:32:33:a1:a9:e8:66:b1:05:91:ea:de: b7:a7:df:f4:d8:f8:19:df:98:fd:8f:76:9f:0e:d3:01:eb:75: e5:34:32:36:4b:e2:4d:60:9b:7e:ae:e3:81:d9:ec:56:53:bb: 9d:d9:16:29:65:0f:8d:d4:1f:2e:56:e5:8a:ee:0e:c6:dc:c8: e6:3d:d9:8d:8a:71:f1:ca:f2:60:77:4c:a3:d3:a8:dd:1f:e1: ca:f2:d7:02:23:8d:1b:b9:55:6e:4e:10:b5:de:96:0a:ff:3b: ef:bd:fd:fa:f7:d9:a0:56:a5:7c:df:32:61:f8:e5:bf:d6:65: 51:7e:10:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyQUMxMTAvBgNVBAUTKEY0N0QwRkJCNkU4QjY0RUNEOTkxMTY4RDhGNzMwRjc4 OTFFNEY0NEUwHhcNMjUwODIyMTgwMjIwWhcNMjUwODI5MTgwMjIwWjAYMRYwFAYD VQQDEw02OGE4YjBhYy00MGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/yFxQeEShRnTixnOcK1PD/UpXwv9SyJUBYCIC7ppnJ+aY982DMUj/ZELnJd ONzgBJKo8jQc+9R9fQ1LiHYU1ydeNFya/mYzG4a+EdYadM7oOvRUCW6dcltycFbi lbEJvHte0WzHVjvVzls64Uv2ZPjo/5kbAfDbrt7084t6LdTi08wKhpGdhOT58gdt ysrH+Q1+mgKV0Fjfk8MXv4shB3ZzIEceLvPac2Lykkmm7fJe1d1kaSv67JFH3F+P jTNGjZ8cYD5t7I+CtDrTb9LYsLAnM60FlWM9RL5r6q/0b0C9tsjAt33mo1UpkOHD 9m25EmhaqA2RQi3lTKGb0LI3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIYX84u VOYYCdol99IdQuBLpVOCMB8GA1UdIwQYMBaAFPR9D7tui2Ts2ZEWjY9zD3iR5PRO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTJBQy82NDE3MTMxNkNB MzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpPelprUmFOajNNUGVKSGs5 RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlIMFB1MjZMWk96WmtSYU5qM01QZUpIazlFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTJBQy82NDE3MTMxNkNBMzIxMUU5OEJGQ0QzNTJDNEY5QUUwMi85SDBQdTI2TFpP elprUmFOajNNUGVKSGs5RTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqzK/4kmPlDtKsoYZChKfzJBA8fxNK0dk3s80NLGKIJAnf5yOT92P CR3GVlHKE6pupHh77YT9VQ4s9bJWse3bXocM00ddEa1p8OsPory+Tvvg7yqfnWn5 RPt4jY6bVZ4PmZWoegcznviP8QSCzGUSxRgd09C4JJfLKckr4HPz6Rq+2yDyMjOh qehmsQWR6t63p9/02PgZ35j9j3afDtMB63XlNDI2S+JNYJt+ruOB2exWU7ud2RYp ZQ+N1B8uVuWK7g7G3MjmPdmNinHxyvJgd0yj06jdH+HK8tcCI40buVVuThC13pYK /zvvvf3699mgVqV83zJh+OW/1mVRfhAr -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:28 2025 by rpki-client