$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: vV9fQyLoAoubdizLOnb2Hr4IwF6FbwWEBtZwtJ1jEwk= Subject key identifier: D7:B5:3B:6C:AC:E5:7F:9B:C2:08:0C:A0:DE:0E:30:7C:20:82:69:3B Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 64 Signing time: Sat 23 Aug 2025 07:14:57 +0000 Manifest this update: Sat 23 Aug 2025 07:14:57 +0000 Manifest next update: Sat 30 Aug 2025 07:14:57 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: w1OP80wEslXFQnK56HgbeSusvPhtO9wa83+EoeZMxok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Aug 23 07:14:57 2025 GMT Not After : Aug 30 07:14:57 2025 GMT Subject: CN=68a96a71-b54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:57:68:2f:cd:17:41:27:2e:52:66:45:2f: 0a:4c:78:f3:35:4a:c8:f1:68:ad:52:b5:2e:6a:5d: 92:b9:2a:0a:9e:20:8a:e4:a2:83:2c:a7:67:f4:c0: a7:57:21:b9:5e:c0:36:69:4c:3e:a6:b6:8e:8e:88: c0:82:99:23:fa:09:dd:dc:83:97:59:25:98:5b:66: a3:f1:fc:2f:0b:7c:bc:4a:e4:f9:c0:fe:24:a6:d7: 9d:54:ec:cb:99:f0:50:2d:07:0e:a0:68:37:6f:3c: c0:91:2f:17:0d:5d:39:fb:3f:29:c4:d3:15:f3:74: 83:1f:96:86:a2:7e:f1:86:bb:62:8d:d1:31:36:32: 71:75:c3:ed:cc:a3:fa:d7:36:72:76:77:08:8b:32: 86:41:ac:35:ae:66:51:89:60:86:5b:ea:8c:a0:17: f2:1d:48:12:e7:9f:12:17:4a:b2:0b:34:74:6b:28: 8c:1a:73:62:9a:79:d6:1b:3b:c9:8a:80:4f:b0:dc: fd:35:96:32:7e:94:03:6a:bd:81:95:05:b3:f5:d7: b2:ed:08:79:55:5b:0c:fb:af:fe:75:65:6e:ff:41: 61:03:eb:b0:46:78:0c:66:c7:08:f3:e5:44:3c:e6: 8f:2e:66:0b:85:74:04:6f:55:5f:ac:44:39:d8:6b: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B5:3B:6C:AC:E5:7F:9B:C2:08:0C:A0:DE:0E:30:7C:20:82:69:3B X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:f9:42:2d:32:a6:88:ce:5b:5d:45:d7:80:c3:87:99:5c: 95:80:00:47:e3:04:a5:dd:16:50:2f:56:25:01:ed:f6:87:c0: 1c:87:80:15:e2:19:01:36:8a:e9:97:b7:0c:aa:63:ef:b6:b4: 21:f8:45:57:45:34:a4:9f:f2:77:cd:7b:f7:aa:8a:fa:84:26: ba:cb:0f:54:28:f0:f8:15:f0:93:27:b4:88:6a:13:1b:97:fd: cb:15:84:2a:7b:86:95:65:f3:c5:87:90:b3:e7:7d:f8:8c:44: 14:5b:09:9d:8b:14:be:fc:c8:dc:c0:ca:1c:b9:cb:ad:88:0b: de:ce:f4:f0:81:c9:94:aa:11:f5:1d:8d:e4:12:bd:6a:de:1f: d2:d1:4e:ad:7e:26:33:85:28:d2:be:1a:81:82:3d:46:5b:a7: 50:40:9a:53:36:a7:a0:9c:8b:29:42:b3:ed:b1:73:93:82:0a: ef:3f:a7:6b:3a:17:e5:4c:df:b2:27:3d:73:88:e8:9e:cf:bc: d2:a0:97:a7:f9:8d:22:ef:1d:9f:ad:59:a6:1b:0d:3e:1f:f0: d7:66:0f:6f:0a:c0:20:80:55:35:9e:9e:43:5a:48:c5:6d:29: 08:e5:6e:fa:09:ea:87:e2:f3:76:d9:09:53:0f:9a:38:ab:c5: af:3c:86:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA4MjMwNzE0NTdaFw0yNTA4MzAwNzE0NTdaMBgxFjAUBgNV BAMTDTY4YTk2YTcxLWI1NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9GFdoL80XQScuUmZFLwpMePM1SsjxaK1StS5qXZK5KgqeIIrkooMsp2f0wKdX IblewDZpTD6mto6OiMCCmSP6Cd3cg5dZJZhbZqPx/C8LfLxK5PnA/iSm151U7MuZ 8FAtBw6gaDdvPMCRLxcNXTn7PynE0xXzdIMfloaifvGGu2KN0TE2MnF1w+3Mo/rX NnJ2dwiLMoZBrDWuZlGJYIZb6oygF/IdSBLnnxIXSrILNHRrKIwac2KaedYbO8mK gE+w3P01ljJ+lANqvYGVBbP117LtCHlVWwz7r/51ZW7/QWED67BGeAxmxwjz5UQ8 5o8uZguFdARvVV+sRDnYa45FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU17U7bKzl f5vCCAyg3g4wfCCCaTswHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHsB+UItMqaIzltdRdeAw4eZXJWAAEfjBKXdFlAvViUB7faHwByHgBXi GQE2iumXtwyqY++2tCH4RVdFNKSf8nfNe/eqivqEJrrLD1Qo8PgV8JMntIhqExuX /csVhCp7hpVl88WHkLPnffiMRBRbCZ2LFL78yNzAyhy5y62IC97O9PCByZSqEfUd jeQSvWreH9LRTq1+JjOFKNK+GoGCPUZbp1BAmlM2p6CciylCs+2xc5OCCu8/p2s6 F+VM37InPXOI6J7PvNKgl6f5jSLvHZ+tWaYbDT4f8NdmD28KwCCAVTWenkNaSMVt KQjlbvoJ6ofi83bZCVMPmjirxa88hl4= -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:18 2025 by rpki-client