$ rpki-client -vvf rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft File: ReDCzhRgM0N0_BWzcEXXajTd7l0.mft (raw, json) Hash identifier: V1c9S/h712jWewmbNj5f9/kwpSvdX/V3xmNkIkvWhsE= Subject key identifier: 3E:CD:99:09:02:59:D5:7C:C5:2D:36:DD:FD:15:5B:DE:94:9C:D1:69 Authority key identifier: 45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D Certificate issuer: /CN=A911465D/serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft Manifest number: 49 Signing time: Sun 07 Sep 2025 07:54:46 +0000 Manifest this update: Sun 07 Sep 2025 07:54:45 +0000 Manifest next update: Sun 14 Sep 2025 07:54:45 +0000 Files and hashes: 1: ReDCzhRgM0N0_BWzcEXXajTd7l0.crl (hash: RYXzFPWTRwg2vfsZM7RIfndqIAjEqTQhs9Ub913CZ44=) 2: 8494A0A8202211F091667E59C4F9AE02.roa (hash: 0td0rYY1sI6ZCcrPq8Ekycn5CSJTuG2FeaNe5fiVsgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911465D, serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D Validity Not Before: Sep 7 07:54:45 2025 GMT Not After : Sep 14 07:54:45 2025 GMT Subject: CN=68bd3a46-67d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:04:51:e7:be:17:c8:3a:fd:a7:41:b7:86: f7:e0:c2:69:54:9a:16:3d:ed:f0:1e:14:1b:cb:ab: ec:a4:eb:47:59:8f:91:f1:6b:70:63:22:a4:be:84: bf:06:f5:3d:56:e0:ed:dc:34:7e:10:e7:89:d1:a1: f9:2a:fc:1f:18:30:6d:fc:d6:a8:c1:7b:78:eb:14: 7c:61:be:0b:24:b8:c3:76:3b:de:e4:56:3f:ff:b5: 4e:49:f7:fe:51:23:5c:ef:a7:49:52:2f:9e:21:76: e6:57:42:97:21:f0:f4:5f:c2:02:b4:a5:ce:72:5a: 9b:cb:e4:56:4c:22:68:fb:2c:d6:97:1e:66:a4:79: b0:1d:a2:14:46:d3:bd:46:9b:2c:46:a8:ae:b0:0f: b0:e0:c3:ef:8a:02:e5:79:33:73:0d:a5:4d:8e:31: 04:73:7a:c0:f4:83:c4:91:88:ef:c4:27:ec:c2:de: bb:61:6b:8e:7e:8f:74:91:1a:3e:78:06:4f:c9:8c: c8:0f:3b:c8:53:04:ab:74:20:bf:27:33:65:1e:47: 28:8d:63:bb:bf:68:2d:13:42:06:b4:6c:e2:b8:23: 3e:b6:e9:8e:54:b6:29:7b:f2:ea:e5:d0:28:4f:12: 42:07:30:cc:0b:8d:10:e5:05:0b:21:f9:a4:26:c7: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CD:99:09:02:59:D5:7C:C5:2D:36:DD:FD:15:5B:DE:94:9C:D1:69 X509v3 Authority Key Identifier: keyid:45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:cd:87:f7:a8:c5:b9:e7:d5:86:38:21:2d:a0:d7:ef:55:5b: d3:f4:d2:12:1f:a1:b6:0e:f5:a0:3f:c2:3c:29:ff:4c:07:49: 39:c0:b2:31:9b:88:57:05:61:4d:ec:9f:75:f1:12:23:0a:bf: 95:98:2a:18:39:00:53:66:6b:e8:3a:bd:3b:13:c9:f0:ca:ca: 8e:72:18:b6:82:d0:14:30:59:15:e0:86:6f:4c:fb:dd:25:70: 4c:43:49:3a:f2:30:9e:e0:cc:90:3a:95:cc:b2:e4:75:9c:e9: e2:22:36:90:ce:37:83:87:83:8d:d3:db:f5:30:80:11:e4:9a: ba:e6:52:87:11:d6:e3:64:91:e1:87:cf:e1:4f:b4:ea:d4:3a: 1d:22:8b:e1:01:9e:06:d2:d2:47:0a:c1:0f:79:04:6c:23:46: 06:0d:81:2d:ba:60:bb:d7:14:b3:c6:58:ac:f1:12:89:5b:73: 38:ca:e0:77:b0:24:d7:68:b8:64:c9:5c:41:00:e7:b0:96:25: 78:08:1d:aa:39:41:cb:db:c3:97:e1:83:d5:14:e7:80:f3:38: fd:73:f9:16:45:8c:bd:5d:18:27:01:cd:63:85:56:b3:b7:31: d2:16:53:e4:97:dd:c9:95:1d:40:04:60:7f:40:2c:8c:bb:33: a1:de:9b:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDY1RDExMC8GA1UEBRMoNDVFMEMyQ0UxNDYwMzM0Mzc0RkMxNUIzNzA0NUQ3NkEz NERERUU1RDAeFw0yNTA5MDcwNzU0NDVaFw0yNTA5MTQwNzU0NDVaMBgxFjAUBgNV BAMTDTY4YmQzYTQ2LTY3ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNCQRR574XyDr9p0G3hvfgwmlUmhY97fAeFBvLq+yk60dZj5Hxa3BjIqS+hL8G 9T1W4O3cNH4Q54nRofkq/B8YMG381qjBe3jrFHxhvgskuMN2O97kVj//tU5J9/5R I1zvp0lSL54hduZXQpch8PRfwgK0pc5yWpvL5FZMImj7LNaXHmakebAdohRG071G myxGqK6wD7Dgw++KAuV5M3MNpU2OMQRzesD0g8SRiO/EJ+zC3rtha45+j3SRGj54 Bk/JjMgPO8hTBKt0IL8nM2UeRyiNY7u/aC0TQga0bOK4Iz626Y5Util78url0ChP EkIHMMwLjRDlBQsh+aQmxxrjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPs2ZCQJZ 1XzFLTbd/RVb3pSc0WkwHwYDVR0jBBgwFoAUReDCzhRgM0N0/BWzcEXXajTd7l0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NjVEL0Q0MTlEQzRBMjAx QTExRjBBNDAyRjYzQkM0RjlBRTAyL1JlREN6aFJnTTBOMF9CV3pjRVhYYWpUZDds MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUmVEQ3poUmdNME4wX0JXemNFWFhhalRkN2wwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NjVEL0Q0MTlEQzRBMjAxQTExRjBBNDAyRjYzQkM0RjlBRTAyL1JlREN6aFJnTTBO MF9CV3pjRVhYYWpUZDdsMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDNh/eoxbnn1YY4IS2g1+9VW9P00hIfobYO9aA/wjwp/0wHSTnAsjGb iFcFYU3sn3XxEiMKv5WYKhg5AFNma+g6vTsTyfDKyo5yGLaC0BQwWRXghm9M+90l cExDSTryMJ7gzJA6lcyy5HWc6eIiNpDON4OHg43T2/UwgBHkmrrmUocR1uNkkeGH z+FPtOrUOh0ii+EBngbS0kcKwQ95BGwjRgYNgS26YLvXFLPGWKzxEolbczjK4Hew JNdouGTJXEEA57CWJXgIHao5Qcvbw5fhg9UU54DzOP1z+RZFjL1dGCcBzWOFVrO3 MdIWU+SX3cmVHUAEYH9ALIy7M6Hem9M= -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:28 2025 by rpki-client