$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: uanSqlOQAlx1Vgb+eeqOvocate6c2C4HlDyftHjT5Ts= Subject key identifier: 30:63:46:8B:5D:B7:C6:E8:FB:BA:F9:9B:72:A3:C7:C4:CF:CF:70:FC Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0C78 Signing time: Fri 22 Aug 2025 18:37:23 +0000 Manifest this update: Fri 22 Aug 2025 18:37:22 +0000 Manifest next update: Fri 29 Aug 2025 18:37:22 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: 2asAkRdSa4yQXI0dEQt4DsDhd79Utv/N2eqYvGwM9QI=) 2: 2C1A71D81A9B11EFA4886942C4F9AE02.roa (hash: U6YXVJRAyKVKOBp9fvM3MDDPghC49iE+40CZRqzPtNo=) 3: 82054BC05A5211F0BBE5D43EC4F9AE02.roa (hash: PeGjSUoxfFhFQ0C87K9ThPEDCalU5hsYJY8EJY1qm7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Aug 22 18:37:22 2025 GMT Not After : Aug 29 18:37:22 2025 GMT Subject: CN=68a8b8e2-e014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:41:87:46:78:b4:fb:34:a9:d1:1d:92:ce:c5: 78:69:b8:1a:b0:92:ba:c2:5e:1a:6b:43:e9:00:98: ed:67:56:c2:39:0e:06:b1:cf:9c:1e:a5:a4:98:1f: ca:86:8f:9a:c2:52:34:f2:27:82:d0:4e:9f:b7:c7: 60:98:89:ef:42:1f:3a:c6:9a:ee:72:9c:66:52:87: 3c:e4:91:93:33:4b:a1:e9:22:5c:d3:66:ef:f8:f8: 1c:dc:f0:c4:ce:ab:67:9a:42:7b:c5:d8:fd:0b:4b: 08:a1:3d:ff:43:91:8e:f2:fe:75:86:1f:15:af:62: 77:fc:51:b1:34:35:39:fd:7a:01:8b:17:a8:25:9c: 41:4d:a5:e9:bb:f3:06:6c:5e:47:7a:4b:ad:bf:46: db:c7:5a:1d:a4:ee:a9:2f:0e:ba:0f:65:92:3e:7a: 93:6e:14:6b:71:cf:17:f1:b4:f2:65:27:f1:58:6e: 10:65:ba:7d:20:11:a1:3d:bf:3a:8b:b6:4b:01:06: 38:d6:07:91:b8:cf:16:7d:35:be:62:fd:63:d3:8c: 41:36:0b:37:41:e6:52:40:4c:cb:d1:2a:54:a6:82: 59:05:9d:84:51:7e:f2:2d:6e:79:26:ae:7f:1d:53: 4d:b5:d2:88:57:00:bb:dc:ba:06:a2:8a:a8:9b:fd: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:46:8B:5D:B7:C6:E8:FB:BA:F9:9B:72:A3:C7:C4:CF:CF:70:FC X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:04:ff:74:79:79:32:71:be:b9:f3:ff:7a:a1:bb:7c:c8:2d: 70:d5:9e:fb:78:d6:3b:28:f7:65:17:72:95:30:b3:11:5f:c0: ce:e5:3b:a0:b8:60:01:53:7f:aa:fa:c9:6c:5a:ca:ff:f0:46: 44:af:3b:11:fb:ad:56:46:2a:c1:5d:9a:99:18:61:e0:9c:22: 96:a3:9a:a8:5a:1b:79:3f:d8:ba:0f:56:2f:4a:77:e1:cd:10: eb:59:8c:3c:b9:cf:f8:7f:3c:b1:01:7a:f9:41:2b:07:83:a4: 99:c5:d2:1d:5f:c2:1f:3c:de:76:db:8d:cd:d2:0f:30:44:3f: 17:89:a8:fd:e0:02:22:f6:a9:ad:4e:54:4b:eb:9b:91:2e:01: 43:6b:df:75:2b:84:0f:91:40:b5:7e:88:53:51:50:c6:76:fc: 38:71:1a:46:7b:c0:f2:dc:cc:10:b0:23:6e:99:63:69:7e:1e: 7d:be:bc:1f:77:ee:4a:12:1e:8a:51:7b:b0:76:10:53:7e:9d: 4a:17:4f:04:9d:4c:a5:d6:09:03:f2:87:3e:e8:51:c4:ef:9a: 4e:bf:d4:dc:2f:ae:b0:e4:69:4e:a8:89:d0:7a:b1:a3:b0:30: 40:f6:48:0e:48:48:13:2d:e9:ed:c3:e0:15:62:b5:56:c2:4b: bf:5b:34:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUwODIyMTgzNzIyWhcNMjUwODI5MTgzNzIyWjAYMRYwFAYD VQQDEw02OGE4YjhlMi1lMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEGHRni0+zSp0R2SzsV4abgasJK6wl4aa0PpAJjtZ1bCOQ4Gsc+cHqWkmB/K ho+awlI08ieC0E6ft8dgmInvQh86xprucpxmUoc85JGTM0uh6SJc02bv+Pgc3PDE zqtnmkJ7xdj9C0sIoT3/Q5GO8v51hh8Vr2J3/FGxNDU5/XoBixeoJZxBTaXpu/MG bF5Hekutv0bbx1odpO6pLw66D2WSPnqTbhRrcc8X8bTyZSfxWG4QZbp9IBGhPb86 i7ZLAQY41geRuM8WfTW+Yv1j04xBNgs3QeZSQEzL0SpUpoJZBZ2EUX7yLW55Jq5/ HVNNtdKIVwC73LoGooqom/2lxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBjRotd t8bo+7r5m3Kjx8TPz3D8MB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcBP90eXkycb658/96obt8yC1w1Z77eNY7KPdlF3KVMLMRX8DO5Tug uGABU3+q+slsWsr/8EZErzsR+61WRirBXZqZGGHgnCKWo5qoWht5P9i6D1YvSnfh zRDrWYw8uc/4fzyxAXr5QSsHg6SZxdIdX8IfPN52243N0g8wRD8Xiaj94AIi9qmt TlRL65uRLgFDa991K4QPkUC1fohTUVDGdvw4cRpGe8Dy3MwQsCNumWNpfh59vrwf d+5KEh6KUXuwdhBTfp1KF08EnUyl1gkD8oc+6FHE75pOv9TcL66w5GlOqInQerGj sDBA9kgOSEgTLentw+AVYrVWwku/WzRS -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:18 2025 by rpki-client