$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: cGPlpb4mswu+JsRh8cDLYcW/ZSoiAvlseZ2q082B8wo= Subject key identifier: 98:4A:71:82:17:0A:DB:13:31:C0:EC:83:E8:BC:EF:86:C3:69:4E:DE Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 025F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 025C Signing time: Thu 21 Aug 2025 01:58:45 +0000 Manifest this update: Thu 21 Aug 2025 01:58:44 +0000 Manifest next update: Thu 28 Aug 2025 01:58:44 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: TA8ohotRlUsnp98BrM5P3g4KL28YMZ0w21ThwAXQ5A8=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 607 (0x25f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Aug 21 01:58:44 2025 GMT Not After : Aug 28 01:58:44 2025 GMT Subject: CN=68a67d55-03c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:4a:39:57:a0:69:00:60:e1:12:63:b6:97: 35:3c:e8:84:18:10:57:77:07:26:05:f4:97:2c:1f: d8:5e:4a:01:97:cc:20:e1:02:12:f9:e2:af:3a:0c: f4:cd:b7:c3:47:4d:fa:1a:85:c7:c0:60:7a:76:bc: 32:49:ab:d9:4f:14:31:ad:d7:ac:1e:a8:91:52:98: 96:96:74:ee:6d:77:5f:e8:aa:df:15:e5:78:72:2d: 84:e0:b4:ce:5e:14:fb:a8:6b:1b:ee:8a:8a:98:d7: 3c:07:b2:38:70:36:25:18:68:4e:5e:25:a8:bd:4b: d9:8e:11:77:d3:e1:92:33:36:8c:01:b9:7d:90:31: 4e:1f:ce:73:93:9b:c5:f3:1f:2c:79:57:2d:d3:fa: 8e:b9:b2:eb:2e:c2:d1:ec:de:57:9e:67:54:f0:ef: 47:e5:9d:05:2f:23:74:2a:a6:24:92:2a:1b:99:4d: 2c:17:3c:30:f1:05:c1:1a:d7:7e:29:f0:ed:22:53: 6b:b8:57:48:01:24:2a:88:5e:92:d9:6d:fd:d8:c9: b3:57:50:85:5d:c3:48:65:fa:48:da:67:00:e7:e1: 76:f3:f0:d8:29:ea:84:23:fb:db:5e:a3:57:37:ad: cd:51:d7:f4:6d:6d:65:39:36:8e:30:01:c7:ea:08: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4A:71:82:17:0A:DB:13:31:C0:EC:83:E8:BC:EF:86:C3:69:4E:DE X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c1:8e:ce:2f:74:ff:b1:c3:0b:b8:13:ba:09:74:3f:fa:53: 38:54:30:65:7a:d2:19:c6:12:54:5d:27:b5:ba:ed:37:de:c8: fb:21:08:27:98:35:55:9c:ff:a1:69:6f:e8:4d:06:f0:e2:0f: b0:d2:8e:83:2a:23:c9:bd:76:60:2a:c4:59:9f:43:ad:7e:51: fb:11:86:c8:ad:1e:73:17:36:94:51:cc:aa:f6:59:01:5c:d4: 92:f8:2b:ce:d7:cb:7c:cb:7e:2f:a4:f1:d1:e3:c9:56:9f:c4: 25:88:44:fb:e4:97:25:6e:b5:dc:8c:72:e1:b2:2f:af:93:91: 2e:06:7b:1a:a0:49:2a:da:41:85:34:17:2b:2a:60:97:76:49: 81:65:08:9a:a2:dc:7f:8b:f1:40:7e:6a:44:8f:be:ae:e7:cf: ea:68:22:a5:87:80:b4:ea:88:aa:92:a8:dc:44:5a:f4:20:6e: 1b:6f:e2:e9:25:ad:21:66:e4:59:75:0e:e1:be:9b:28:99:dd: 60:02:a5:26:de:ef:0a:e8:6a:33:7e:c0:fc:0a:d7:40:35:76: 19:2a:a7:a1:29:02:0b:bf:42:ce:ad:a8:49:b3:6d:26:41:6e: c1:6f:59:58:b0:cc:b9:28:03:b3:15:0f:5e:ff:c7:3d:ae:1e: e6:d4:4f:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwODIxMDE1ODQ0WhcNMjUwODI4MDE1ODQ0WjAYMRYwFAYD VQQDEw02OGE2N2Q1NS0wM2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbtKOVegaQBg4RJjtpc1POiEGBBXdwcmBfSXLB/YXkoBl8wg4QIS+eKvOgz0 zbfDR036GoXHwGB6drwySavZTxQxrdesHqiRUpiWlnTubXdf6KrfFeV4ci2E4LTO XhT7qGsb7oqKmNc8B7I4cDYlGGhOXiWovUvZjhF30+GSMzaMAbl9kDFOH85zk5vF 8x8seVct0/qOubLrLsLR7N5XnmdU8O9H5Z0FLyN0KqYkkiobmU0sFzww8QXBGtd+ KfDtIlNruFdIASQqiF6S2W392MmzV1CFXcNIZfpI2mcA5+F28/DYKeqEI/vbXqNX N63NUdf0bW1lOTaOMAHH6gh7ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhKcYIX CtsTMcDsg+i874bDaU7eMB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiwY7OL3T/scMLuBO6CXQ/+lM4VDBletIZxhJUXSe1uu033sj7IQgn mDVVnP+haW/oTQbw4g+w0o6DKiPJvXZgKsRZn0OtflH7EYbIrR5zFzaUUcyq9lkB XNSS+CvO18t8y34vpPHR48lWn8QliET75JclbrXcjHLhsi+vk5EuBnsaoEkq2kGF NBcrKmCXdkmBZQiaotx/i/FAfmpEj76u58/qaCKlh4C06oiqkqjcRFr0IG4bb+Lp Ja0hZuRZdQ7hvpsomd1gAqUm3u8K6GozfsD8CtdANXYZKqehKQILv0LOrahJs20m QW7Bb1lYsMy5KAOzFQ9e/8c9rh7m1E/G -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:41 2025 by rpki-client