$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: YITtJxkWbZ475jKAqSB0JMU6uatSPkqpz0DJvjQT/PQ= Subject key identifier: 14:E5:68:7F:C4:0E:F0:23:93:7E:17:D7:65:25:39:30:9D:FC:F6:F4 Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 0331 Signing time: Sat 23 Aug 2025 01:22:07 +0000 Manifest this update: Sat 23 Aug 2025 01:22:07 +0000 Manifest next update: Sat 30 Aug 2025 01:22:07 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: R8QCYfMCqtULfMS2OdcMK1aSQ4yg2bdKAw3t34bpEQ0=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: 4q86TaevYN4wi8FIhE98uWT6GCxVtXHFfpTKfJMTYtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Aug 23 01:22:07 2025 GMT Not After : Aug 30 01:22:07 2025 GMT Subject: CN=68a917bf-d8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:50:2f:57:2d:16:bc:6b:fc:9a:d8:75:0e: be:40:de:e0:10:a9:6a:91:e1:e6:c1:72:8b:a0:78: 03:54:a4:0c:41:61:7e:07:b1:24:c6:70:a5:4d:71: 69:f6:14:d0:80:7c:8a:5d:48:4c:19:9b:65:cc:b9: 22:f7:2a:a3:95:cd:84:7d:a0:e1:53:27:aa:90:06: 31:02:7a:d8:96:30:5f:6d:d2:bf:64:b4:e5:ba:0c: bd:43:5a:d3:36:0d:9d:fe:29:43:7b:61:a8:8c:49: 22:c5:cd:b4:4e:1e:64:27:a8:58:eb:b0:17:e6:1f: 26:26:09:de:91:69:fa:3c:a3:71:d6:60:5a:7c:b5: 7f:a8:94:33:0c:c5:d7:16:ab:ac:e9:51:08:d7:25: ed:e9:76:08:e2:de:d0:bc:33:a4:72:4c:1d:9c:22: 18:17:4a:ab:47:ca:09:67:1b:22:3b:ef:f4:23:bb: 5b:16:a4:ba:44:33:40:28:02:00:d8:45:bd:63:4c: cb:dd:9a:66:3a:96:55:b9:37:bf:28:e4:9a:21:b8: 1b:c7:8e:df:1d:b1:f3:db:bc:db:a2:80:12:ee:5f: d7:33:76:70:ca:43:07:17:c7:61:f2:48:d7:12:87: 95:ef:94:fd:3f:01:33:f2:47:20:c7:6f:d6:16:4e: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E5:68:7F:C4:0E:F0:23:93:7E:17:D7:65:25:39:30:9D:FC:F6:F4 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:70:96:ec:e3:80:d8:2f:38:ff:19:13:bc:31:b7:7b:f2: 73:4b:01:a6:f3:e1:fa:10:84:db:a2:53:db:7a:dc:4e:58:51: ef:af:34:6f:6d:8e:c2:bd:61:a7:df:72:c3:49:36:61:0f:4f: 45:d5:7e:68:aa:36:91:ac:6e:bb:fd:ed:54:22:e5:36:f3:47: 46:7e:d1:bb:9d:7d:ac:9a:b6:8b:38:9c:d7:42:2b:e9:e7:16: 14:d4:04:e4:20:5d:0e:1e:6c:ff:04:98:56:a7:56:9e:9b:c9: 40:88:96:bc:91:52:eb:09:4d:ba:e8:b6:e3:1e:2f:60:d1:7e: 64:b0:3e:5f:82:72:ce:8b:9d:7b:e5:42:d1:6c:30:62:2d:ed: 06:a4:9b:a5:27:1e:9b:a2:ca:d2:71:6d:e0:af:df:89:c5:ba: 74:99:35:60:7c:61:7b:73:62:a6:a7:64:81:ab:4f:33:2e:84: 85:9d:c3:81:33:71:e7:a8:d9:8a:8d:88:09:b9:96:88:04:77: 76:f9:4c:54:46:2f:6c:36:66:81:0d:a3:84:4c:b4:73:c4:78: 28:bb:69:e7:88:91:03:f8:00:af:bc:be:ae:5c:48:64:de:46: 18:63:95:f0:73:c4:b7:3c:c7:06:20:21:2d:d2:73:87:ef:91: e8:9e:ba:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwODIzMDEyMjA3WhcNMjUwODMwMDEyMjA3WjAYMRYwFAYD VQQDEw02OGE5MTdiZi1kOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NpQL1ctFrxr/JrYdQ6+QN7gEKlqkeHmwXKLoHgDVKQMQWF+B7EkxnClTXFp 9hTQgHyKXUhMGZtlzLki9yqjlc2EfaDhUyeqkAYxAnrYljBfbdK/ZLTlugy9Q1rT Ng2d/ilDe2GojEkixc20Th5kJ6hY67AX5h8mJgnekWn6PKNx1mBafLV/qJQzDMXX Fqus6VEI1yXt6XYI4t7QvDOkckwdnCIYF0qrR8oJZxsiO+/0I7tbFqS6RDNAKAIA 2EW9Y0zL3ZpmOpZVuTe/KOSaIbgbx47fHbHz27zbooAS7l/XM3ZwykMHF8dh8kjX EoeV75T9PwEz8kcgx2/WFk6PNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTlaH/E DvAjk34X12UlOTCd/Pb0MB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs0XCW7OOA2C84/xkTvDG3e/JzSwGm8+H6EITbolPbetxOWFHvrzRv bY7CvWGn33LDSTZhD09F1X5oqjaRrG67/e1UIuU280dGftG7nX2smraLOJzXQivp 5xYU1ATkIF0OHmz/BJhWp1aem8lAiJa8kVLrCU266LbjHi9g0X5ksD5fgnLOi517 5ULRbDBiLe0GpJulJx6bosrScW3gr9+Jxbp0mTVgfGF7c2Kmp2SBq08zLoSFncOB M3HnqNmKjYgJuZaIBHd2+UxURi9sNmaBDaOETLRzxHgou2nniJED+ACvvL6uXEhk 3kYYY5Xwc8S3PMcGICEt0nOH75HonrqQ -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:44 2025 by rpki-client