$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: RJQLM2dsOAezxzv2uidRC+aczGhqWPvSsQ4HhxQUZ8k= Subject key identifier: 14:F6:64:C2:42:F3:A0:06:C9:C9:0B:D3:85:61:5C:5B:E1:A3:A9:D4 Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 0825 Signing time: Fri 18 Jul 2025 21:01:07 +0000 Manifest this update: Fri 18 Jul 2025 21:01:06 +0000 Manifest next update: Fri 25 Jul 2025 21:01:06 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: N9gezs7CMwn4gRtIlbKPtBR7ZCrW0WvPAK+EJGnMok4=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Jul 18 21:01:06 2025 GMT Not After : Jul 25 21:01:06 2025 GMT Subject: CN=687ab613-418d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:04:6d:a5:05:f1:eb:cd:7d:d9:9a:1e:c2: da:7f:31:7b:9a:de:91:db:fb:1c:bc:b5:2c:21:f1: f8:b6:c5:92:bb:39:67:9e:5e:01:7a:2c:ca:d0:26: 6c:51:ec:97:f9:81:46:61:b6:84:a4:cd:01:79:f2: 50:a6:a0:1b:13:38:e6:0a:64:c7:47:0f:8a:a9:2a: e2:ff:e1:02:58:74:81:5d:f1:07:97:c5:2f:d8:c0: 68:0f:46:f2:f6:29:b7:f0:f3:dd:0c:f3:db:22:39: 93:c9:05:0b:4b:3f:b4:69:b1:72:66:5a:c0:2f:d0: 21:d3:03:d7:70:5b:6e:91:b6:d8:ab:b3:53:19:72: b6:c9:d3:4a:6d:89:f6:7c:97:27:14:20:47:50:66: 63:fc:d1:d3:85:3b:cc:95:a0:56:c6:0a:e5:1e:0f: 05:db:1a:0e:8b:80:d2:1d:0a:e0:e8:39:44:8d:06: 6c:9e:85:ca:4b:26:4d:8f:5a:59:40:c9:dd:8a:65: 66:72:1d:77:27:5b:18:95:6b:6a:b8:3c:48:2c:d7: db:3e:31:e9:c9:bb:a0:14:92:77:68:fc:ae:4b:2e: a6:1d:5c:82:74:44:76:7c:52:81:90:ca:0f:0c:c8: b5:37:74:37:56:4f:56:01:fa:08:2a:ca:06:5c:6b: 7e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:64:C2:42:F3:A0:06:C9:C9:0B:D3:85:61:5C:5B:E1:A3:A9:D4 X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:1c:e2:7d:de:64:9d:08:55:8a:f5:b3:30:f5:cd:52:a9: d6:49:af:51:3f:48:86:09:c4:db:0b:89:d6:ec:f3:84:10:50: e7:35:08:a3:a0:80:8f:5c:98:8f:bb:d9:24:e8:37:24:12:52: 8d:d2:bf:f2:5c:1d:25:11:9f:a8:30:19:0d:91:84:64:40:71: 01:52:32:62:85:b0:ba:41:01:6d:d1:20:a5:3a:69:77:85:e7: ff:24:9a:8b:6c:50:07:18:b8:f5:8c:a8:f6:38:f7:b4:0c:d4: 55:ad:47:52:1c:44:f3:94:ff:f8:26:0f:5c:14:e1:50:45:45: f9:08:42:c4:23:99:7b:ad:a2:27:ff:aa:29:30:1a:4c:6e:98: f9:fb:d3:b6:a0:57:ca:d4:53:3c:e0:d2:79:c9:26:44:ac:4b: d8:d6:41:49:49:d9:79:5f:10:be:d7:f6:78:c6:12:d0:d9:19: b4:32:ec:f2:e2:8e:a3:05:b9:84:e4:4e:c4:d3:ce:69:88:b6: b9:21:c4:98:a8:98:af:35:e3:83:00:0f:04:9a:5e:9e:2e:dd: 4e:2f:ab:46:a8:be:e3:cb:70:4f:5d:72:1f:42:fa:ba:eb:31: e4:f9:f8:44:78:7d:ac:1d:b4:10:e2:f2:fc:6f:72:0f:67:ec: 67:17:bf:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjUwNzE4MjEwMTA2WhcNMjUwNzI1MjEwMTA2WjAYMRYwFAYD VQQDEw02ODdhYjYxMy00MThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0cEbaUF8evNfdmaHsLafzF7mt6R2/scvLUsIfH4tsWSuzlnnl4BeizK0CZs UeyX+YFGYbaEpM0BefJQpqAbEzjmCmTHRw+KqSri/+ECWHSBXfEHl8Uv2MBoD0by 9im38PPdDPPbIjmTyQULSz+0abFyZlrAL9Ah0wPXcFtukbbYq7NTGXK2ydNKbYn2 fJcnFCBHUGZj/NHThTvMlaBWxgrlHg8F2xoOi4DSHQrg6DlEjQZsnoXKSyZNj1pZ QMndimVmch13J1sYlWtquDxILNfbPjHpybugFJJ3aPyuSy6mHVyCdER2fFKBkMoP DMi1N3Q3Vk9WAfoIKsoGXGt+fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBT2ZMJC 86AGyckL04VhXFvho6nUMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6BBzifd5knQhVivWzMPXNUqnWSa9RP0iGCcTbC4nW7POEEFDnNQij oICPXJiPu9kk6DckElKN0r/yXB0lEZ+oMBkNkYRkQHEBUjJihbC6QQFt0SClOml3 hef/JJqLbFAHGLj1jKj2OPe0DNRVrUdSHETzlP/4Jg9cFOFQRUX5CELEI5l7raIn /6opMBpMbpj5+9O2oFfK1FM84NJ5ySZErEvY1kFJSdl5XxC+1/Z4xhLQ2Rm0Muzy 4o6jBbmE5E7E085piLa5IcSYqJivNeODAA8Eml6eLt1OL6tGqL7jy3BPXXIfQvq6 6zHk+fhEeH2sHbQQ4vL8b3IPZ+xnF78l -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:17 2025 by rpki-client