$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: +ebfIlC/JYarIiOH35rffKgeolANSd5/nSKweliiwNM= Subject key identifier: ED:BF:29:55:DD:CB:16:40:03:FB:1C:6F:8D:52:11:07:C1:E8:8C:FB Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 0350 Signing time: Sat 19 Jul 2025 01:24:23 +0000 Manifest this update: Sat 19 Jul 2025 01:24:22 +0000 Manifest next update: Sat 26 Jul 2025 01:24:22 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: Vg4fZYasSqvXa3663EdbdiX6MgaqvQfxsi0tMOxW5gk=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: fD9tz1Cxj0LH2YQosk7eVSKaAn/WfIdEtafahpCOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Jul 19 01:24:22 2025 GMT Not After : Jul 26 01:24:22 2025 GMT Subject: CN=687af3c6-9761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:cf:52:a4:a4:4c:b7:44:2c:83:88:0e:26: 88:6b:2c:66:e6:5c:b1:76:3d:79:67:ba:a1:ac:1c: 55:26:6f:81:f8:7b:f0:68:ce:a5:d5:85:21:9e:d3: c8:70:23:d9:78:70:9d:86:70:52:ca:ee:4b:2e:b2: ec:8a:70:b9:81:dc:2b:7d:92:dd:3e:ea:dc:a1:25: f8:ba:2a:1b:31:eb:60:93:29:74:29:a7:11:01:d1: 30:d5:3c:fc:f2:50:28:a9:3b:5c:70:06:49:40:12: e3:dd:98:6a:a2:1a:07:04:a8:7b:34:08:5f:2e:bf: 50:30:73:f6:9f:85:98:b3:1e:85:9f:a8:06:4d:12: 33:ce:3e:b9:da:c5:31:dc:06:9a:dd:d7:de:c9:9c: c2:3f:8f:c1:c9:28:09:62:d7:2e:6c:b1:4a:86:e6: 00:07:c2:39:da:ba:9b:21:e6:31:8f:e3:ef:eb:c5: 31:3a:d1:25:bc:a7:52:08:f7:76:e8:73:ea:9f:f9: 3c:70:cf:f8:36:2f:42:43:60:a5:41:04:e9:e9:7f: 49:14:da:74:98:1c:73:95:74:53:f8:30:36:f2:74: 08:ff:16:2f:31:01:ea:65:a3:5b:36:ea:bf:9d:3b: 90:ca:af:20:c2:c2:d1:18:fa:ec:00:e8:7e:1a:d8: e7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:29:55:DD:CB:16:40:03:FB:1C:6F:8D:52:11:07:C1:E8:8C:FB X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3a:55:de:b8:f6:ae:8e:c4:71:4c:14:31:65:d5:2e:36:ba: 05:46:90:09:7c:2e:b7:52:f2:2b:93:83:a2:5b:89:4c:82:7e: 0c:61:ae:fd:78:c5:87:f7:b1:78:c9:fc:b5:ab:a8:a8:3d:fd: 96:2c:fe:c4:5f:39:6a:a8:a9:58:14:f3:c7:a0:e8:c2:d3:0e: 44:f5:f2:64:08:da:7b:c9:ed:16:5b:25:c6:df:ea:cb:5e:41: fd:d6:31:aa:c2:41:d8:e6:ef:2a:02:19:14:92:7d:c8:eb:30: 2a:b6:2e:8f:6b:60:9c:b0:41:c7:78:79:63:9b:d0:58:c7:64: 32:af:b0:2f:33:8e:90:6e:14:4b:3d:43:35:13:ce:93:19:bb: dd:ed:53:56:ff:17:9f:5d:9b:18:53:36:7a:d5:cc:2f:ce:58: f1:e4:29:77:ad:58:e6:61:a1:43:70:d0:35:66:2a:1d:ae:27: 68:02:8d:ce:4f:2a:01:7f:6d:08:ef:4a:50:a8:cd:ec:b1:ed: f2:d8:fa:59:f4:2d:a0:37:dc:48:3f:1b:f0:50:2c:31:8e:9c: a0:e2:ba:04:46:1a:5d:75:ec:bb:b3:66:b1:51:aa:9e:8a:6c: 90:a8:57:9e:51:fb:1d:c4:9c:59:12:92:48:54:cf:ab:85:19: 35:e8:5f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUwNzE5MDEyNDIyWhcNMjUwNzI2MDEyNDIyWjAYMRYwFAYD VQQDEw02ODdhZjNjNi05NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypLPUqSkTLdELIOIDiaIayxm5lyxdj15Z7qhrBxVJm+B+HvwaM6l1YUhntPI cCPZeHCdhnBSyu5LLrLsinC5gdwrfZLdPurcoSX4uiobMetgkyl0KacRAdEw1Tz8 8lAoqTtccAZJQBLj3ZhqohoHBKh7NAhfLr9QMHP2n4WYsx6Fn6gGTRIzzj652sUx 3Aaa3dfeyZzCP4/BySgJYtcubLFKhuYAB8I52rqbIeYxj+Pv68UxOtElvKdSCPd2 6HPqn/k8cM/4Ni9CQ2ClQQTp6X9JFNp0mBxzlXRT+DA28nQI/xYvMQHqZaNbNuq/ nTuQyq8gwsLRGPrsAOh+GtjnwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2/KVXd yxZAA/scb41SEQfB6Iz7MB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqOlXeuPaujsRxTBQxZdUuNroFRpAJfC63UvIrk4OiW4lMgn4MYa79 eMWH97F4yfy1q6ioPf2WLP7EXzlqqKlYFPPHoOjC0w5E9fJkCNp7ye0WWyXG3+rL XkH91jGqwkHY5u8qAhkUkn3I6zAqti6Pa2CcsEHHeHljm9BYx2Qyr7AvM46QbhRL PUM1E86TGbvd7VNW/xefXZsYUzZ61cwvzljx5Cl3rVjmYaFDcNA1ZiodridoAo3O TyoBf20I70pQqM3sse3y2PpZ9C2gN9xIPxvwUCwxjpyg4roERhpddey7s2axUaqe imyQqFeeUfsdxJxZEpJIVM+rhRk16F8K -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:26 2025 by rpki-client