$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: OcreGnyQl2CU5eYSlBy0ubWRr+9q0RXp/T8NQS3AHXo= Subject key identifier: 12:5F:9C:28:0B:3C:1E:47:24:CB:84:F1:2E:A2:56:3A:29:BB:7E:FA Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:13:44 +0000 Manifest this update: Sat 23 Aug 2025 02:13:44 +0000 Manifest next update: Sat 30 Aug 2025 02:13:44 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: amyMkeD7SOLY9bXvKY7AaOLVqnW8eXgTNud19mThf3M=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: QhihCyN5bbG8v0q4aS9nZCy8ZGeOjrQ8K/ICbkjXPrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Aug 23 02:13:44 2025 GMT Not After : Aug 30 02:13:44 2025 GMT Subject: CN=68a923d8-96f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:4f:03:3d:2a:7c:55:a5:41:87:6b:28:3f: 04:6a:f9:1e:1b:9a:2a:99:8e:66:eb:de:e3:a5:6a: 7d:81:22:73:24:85:50:21:4c:1a:a9:d8:04:dc:77: 0b:c4:52:fd:2c:f6:c5:a7:76:ea:49:dc:e8:cb:b1: 3b:1e:d0:89:8b:61:e8:a7:6a:8e:d9:5f:e4:7e:ea: aa:86:2f:56:33:63:c3:32:35:e4:69:08:cc:77:9b: 51:a5:79:67:1c:28:83:b1:7d:ee:ce:13:b9:c4:2b: 65:4d:8a:1e:a8:e8:46:ee:af:bf:39:ec:c3:e7:e8: 50:88:7d:1c:58:86:1a:fc:05:08:cb:3e:2b:98:ad: 3e:fa:49:84:06:9f:5e:58:9e:2d:d6:ef:7a:5c:97: 0a:21:be:67:d5:15:e8:2b:34:32:4d:51:1b:e1:8c: ee:9c:b5:04:d6:2e:a8:87:1c:c8:04:2c:c2:f6:dd: 95:ac:e5:bf:b4:11:1e:fb:5a:96:05:3c:00:da:c8: 2c:77:7c:5a:c0:0a:87:47:2d:fc:98:b7:06:4a:7c: 3a:36:f0:f7:3f:ac:16:46:04:6c:fa:ae:31:40:f1: 30:5d:17:af:07:cb:6b:40:7a:74:7c:99:5e:1b:3b: 5f:9f:6d:5d:2f:1e:53:30:06:0f:d5:b3:2d:98:c7: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:9C:28:0B:3C:1E:47:24:CB:84:F1:2E:A2:56:3A:29:BB:7E:FA X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:26:d9:ee:2d:09:f5:f3:8b:67:9e:b1:5c:d5:01:4f:de:50: c9:7e:42:91:29:ce:dc:92:c8:a6:8d:e1:07:e6:4a:ed:c6:b7: e4:13:9e:1a:9b:c0:73:94:fa:b2:28:11:f7:d3:37:bd:d6:32: 4c:92:cc:d3:a1:37:e4:b9:e8:b3:54:02:35:40:a4:8a:7c:88: c6:6d:df:fe:a6:1e:1f:5b:cb:fb:87:f7:40:a3:a3:29:17:92: 0e:d9:e5:c4:3d:61:db:10:1c:c3:fa:73:0e:23:e8:5d:10:13: ee:a9:44:7e:92:13:14:36:b6:3a:64:cd:12:38:19:5f:1d:ca: a7:5c:ad:8d:b5:b0:73:a5:d3:a4:df:12:14:57:36:a6:c9:53: 26:7c:c5:b8:ad:52:ac:1e:94:46:01:f0:fd:71:2e:a9:60:7a: ba:f4:41:bc:a8:da:6b:f0:59:6a:17:2a:75:55:63:8e:8f:db: e5:4d:35:d1:78:7a:b5:03:31:79:22:c6:85:08:a4:1f:bf:8e: 18:59:c6:55:a2:15:dd:37:9e:e8:42:d8:70:97:a5:67:33:dc: c3:18:29:a7:c1:8a:47:f2:c8:96:0a:b1:1b:07:22:63:7b:8c: 7b:19:71:93:06:5f:73:23:44:d0:f2:41:06:b3:91:21:6f:70: dd:36:38:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUwODIzMDIxMzQ0WhcNMjUwODMwMDIxMzQ0WjAYMRYwFAYD VQQDEw02OGE5MjNkOC05NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvatPAz0qfFWlQYdrKD8EavkeG5oqmY5m697jpWp9gSJzJIVQIUwaqdgE3HcL xFL9LPbFp3bqSdzoy7E7HtCJi2Hop2qO2V/kfuqqhi9WM2PDMjXkaQjMd5tRpXln HCiDsX3uzhO5xCtlTYoeqOhG7q+/OezD5+hQiH0cWIYa/AUIyz4rmK0++kmEBp9e WJ4t1u96XJcKIb5n1RXoKzQyTVEb4YzunLUE1i6ohxzIBCzC9t2VrOW/tBEe+1qW BTwA2sgsd3xawAqHRy38mLcGSnw6NvD3P6wWRgRs+q4xQPEwXRevB8trQHp0fJle Gztfn21dLx5TMAYP1bMtmMcl/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJfnCgL PB5HJMuE8S6iVjopu376MB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQJtnuLQn184tnnrFc1QFP3lDJfkKRKc7cksimjeEH5krtxrfkE54a m8BzlPqyKBH30ze91jJMkszToTfkueizVAI1QKSKfIjGbd/+ph4fW8v7h/dAo6Mp F5IO2eXEPWHbEBzD+nMOI+hdEBPuqUR+khMUNrY6ZM0SOBlfHcqnXK2NtbBzpdOk 3xIUVzamyVMmfMW4rVKsHpRGAfD9cS6pYHq69EG8qNpr8FlqFyp1VWOOj9vlTTXR eHq1AzF5IsaFCKQfv44YWcZVohXdN57oQthwl6VnM9zDGCmnwYpH8siWCrEbByJj e4x7GXGTBl9zI0TQ8kEGs5Ehb3DdNjgs -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:38 2025 by rpki-client