$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: ZjMAe4A0aCcAaTo/QwyfM3C927Xkd+xUzvAYFdwSXcg= Subject key identifier: 18:ED:3D:6A:4B:16:B7:5E:28:6E:F6:4D:2F:6F:BF:CA:4E:92:C4:E0 Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 02FD Signing time: Sat 23 Aug 2025 01:31:41 +0000 Manifest this update: Sat 23 Aug 2025 01:31:40 +0000 Manifest next update: Sat 30 Aug 2025 01:31:40 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: lI/AO/nmwgtyX4KY75tHeYp0LUqhx+GawyNBd4BO0ic=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: FUZ5azqpAEZ0qmf1CYejZILVHYibj+rRrJRKN/AtVm0=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: UN/nfQHhGfzyZRq2W+uh9scaawp6d2w2Zs3dhUguHjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Aug 23 01:31:40 2025 GMT Not After : Aug 30 01:31:40 2025 GMT Subject: CN=68a919fd-96ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:a4:d0:28:f2:fb:c2:0f:4d:06:42:f5:99: c8:7e:27:d7:89:09:e3:d1:5d:ff:02:58:9a:7d:15: 6a:06:f2:70:bb:ce:23:ea:23:a7:56:5b:0d:d9:e1: ba:3a:b5:62:bc:18:91:24:6f:fb:51:69:e5:ec:24: 54:8a:04:39:6f:72:7d:dc:05:a9:62:ff:9f:bf:8f: bf:17:66:f1:c1:f3:66:ae:2d:c3:74:d7:b1:e9:c3: a6:ff:3d:18:0a:2e:be:cb:89:f6:bb:b2:f9:65:91: 6b:27:4e:07:13:d7:52:92:10:8f:ea:33:f7:0f:8c: 04:41:4d:0d:3a:e4:a0:47:f8:f5:33:4f:c6:6c:1c: 1e:17:fb:73:39:d5:39:91:93:ac:b9:6c:35:9b:e2: 0e:1a:d6:16:af:21:33:1a:8f:e9:ff:21:d5:65:4c: f6:1f:2b:c2:b3:b7:76:02:30:7c:6d:3d:2f:43:f8: 90:d2:b7:a1:c5:ad:1a:5e:6a:ec:9a:6d:32:72:47: a1:61:da:8e:8a:23:eb:a6:93:97:b7:d4:c2:56:14: c7:8f:1d:01:fb:4c:c7:21:28:d0:45:a3:84:3c:21: 3c:0a:8f:aa:3b:b1:e6:bb:ea:38:ef:d5:82:e4:f4: d2:2c:65:a3:b7:9a:17:b2:58:c7:a1:a8:cc:a0:c5: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:ED:3D:6A:4B:16:B7:5E:28:6E:F6:4D:2F:6F:BF:CA:4E:92:C4:E0 X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:f0:10:04:a5:4c:65:d8:8f:f9:3d:d2:65:7f:f7:e0:67:5e: 2f:20:1c:27:40:a3:46:34:4d:25:48:f2:3d:a4:bf:e8:76:ab: b1:16:f9:9e:3f:07:ab:0b:47:ec:11:5a:b9:cf:5d:ee:42:d6: 66:50:54:07:d2:ae:d9:b5:e2:99:75:1c:1e:ac:43:42:ea:64: b3:11:93:3e:8d:0c:06:81:2d:b5:26:53:ec:22:27:16:ed:84: c9:bf:26:dc:b4:ff:38:bb:6d:5d:c7:1a:94:49:50:b4:cc:eb: 63:9e:4c:ec:b6:d6:9c:35:77:8c:f7:bf:e2:bf:61:71:67:20: 46:2b:a6:2b:5c:7f:40:36:39:6f:b1:99:f1:fb:7f:41:0e:a3: da:b9:bf:41:b4:a9:f9:6f:73:89:ca:a4:d0:16:c6:78:36:7f: f4:12:eb:e0:64:15:5e:e4:6c:a6:d4:f9:d1:17:91:f3:75:55: 06:45:97:9d:9e:39:20:56:bd:c3:d2:fa:f3:fa:73:2f:ef:cc: 48:ab:0a:57:e1:8d:da:e2:2a:74:c0:ca:1b:e2:54:1b:78:5a: 93:0e:01:b4:f9:7f:84:8e:b2:fd:62:6c:7e:7e:1c:4d:e9:36: 99:a6:4c:4a:4e:1a:ea:bf:bf:23:fb:78:39:00:7f:69:a1:9e: f7:97:75:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwODIzMDEzMTQwWhcNMjUwODMwMDEzMTQwWjAYMRYwFAYD VQQDEw02OGE5MTlmZC05NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqek0Cjy+8IPTQZC9ZnIfifXiQnj0V3/AliafRVqBvJwu84j6iOnVlsN2eG6 OrVivBiRJG/7UWnl7CRUigQ5b3J93AWpYv+fv4+/F2bxwfNmri3DdNex6cOm/z0Y Ci6+y4n2u7L5ZZFrJ04HE9dSkhCP6jP3D4wEQU0NOuSgR/j1M0/GbBweF/tzOdU5 kZOsuWw1m+IOGtYWryEzGo/p/yHVZUz2HyvCs7d2AjB8bT0vQ/iQ0rehxa0aXmrs mm0yckehYdqOiiPrppOXt9TCVhTHjx0B+0zHISjQRaOEPCE8Co+qO7Hmu+o479WC 5PTSLGWjt5oXsljHoajMoMVwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjtPWpL FrdeKG72TS9vv8pOksTgMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDP8BAEpUxl2I/5PdJlf/fgZ14vIBwnQKNGNE0lSPI9pL/odquxFvme PwerC0fsEVq5z13uQtZmUFQH0q7ZteKZdRwerENC6mSzEZM+jQwGgS21JlPsIicW 7YTJvybctP84u21dxxqUSVC0zOtjnkzsttacNXeM97/iv2FxZyBGK6YrXH9ANjlv sZnx+39BDqPaub9BtKn5b3OJyqTQFsZ4Nn/0EuvgZBVe5Gym1PnRF5HzdVUGRZed njkgVr3D0vrz+nMv78xIqwpX4Y3a4ip0wMob4lQbeFqTDgG0+X+EjrL9Ymx+fhxN 6TaZpkxKThrqv78j+3g5AH9poZ73l3V/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:42 2025 by rpki-client