$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: AywGf3OpZWe78Zw2J7xNftj/9sVjr3SW3Taufaujawc= Subject key identifier: 7C:EC:1B:86:4E:BF:5A:AD:82:50:3D:79:66:4E:0D:77:6F:6B:DB:92 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0C5A Signing time: Thu 18 Sep 2025 18:44:47 +0000 Manifest this update: Thu 18 Sep 2025 18:44:46 +0000 Manifest next update: Thu 25 Sep 2025 18:44:46 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: wCIXMGHjyPW9d9upAINW4mJYbLrmUuNxknswWbi/aA0=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: pTtLtXiP6+lMZs1IbS5QyauPkH+CLmMvProexjSKJSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Sep 18 18:44:46 2025 GMT Not After : Sep 25 18:44:46 2025 GMT Subject: CN=68cc531f-bf47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:95:0d:7c:f7:d3:d8:fc:44:97:3c:c9:c4:5a: d6:03:3f:81:57:c9:b3:c5:04:d0:45:ca:3b:58:62: 19:12:49:c1:6d:03:c8:42:89:57:53:6b:13:1d:eb: 89:53:b6:f2:03:aa:34:a8:e0:7e:23:fc:31:81:a3: c3:93:bc:58:d9:9c:8d:e2:ce:f9:52:25:72:e4:fd: 6b:00:28:17:17:ef:47:73:11:4f:f0:34:fa:aa:9e: 9c:88:b9:84:46:8b:ac:9d:48:ae:fc:f0:6f:e8:30: e1:c8:3b:b2:6e:b3:67:f6:68:8b:59:7f:91:30:1a: 01:b9:da:07:b4:10:87:72:1d:e2:0b:5c:b8:86:2c: 00:af:1b:02:de:c4:b9:b8:18:c5:6c:b5:57:9b:26: 08:ed:64:b4:04:c5:f5:4b:f5:f1:5f:36:2d:87:8b: 65:0f:07:b7:c4:19:f6:f6:02:4f:34:46:47:cf:49: 57:c9:d6:b2:55:7b:7e:cf:c2:8e:e6:43:70:a8:08: d4:52:00:50:9c:da:02:4f:c6:ca:ce:ad:7d:eb:59: ef:36:33:2c:ac:fd:e9:75:b4:22:3d:d0:62:73:69: 9b:2a:a5:d8:c5:b2:b7:5c:c6:4b:56:52:58:43:9c: 6f:05:c9:48:84:40:10:50:fa:75:44:f8:63:f2:03: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:1B:86:4E:BF:5A:AD:82:50:3D:79:66:4E:0D:77:6F:6B:DB:92 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ab:e8:1c:fc:34:bb:b5:1b:b2:d9:c6:60:84:75:34:f7:6e: f5:78:ea:f9:53:c1:dd:75:dd:d1:fe:12:7c:fd:33:79:24:82: 5d:fe:3d:28:71:a5:41:13:bf:99:44:e7:cd:e1:5e:3f:a1:c2: e6:f7:98:b6:63:7e:13:77:fd:5d:b2:25:34:af:9c:23:ed:ed: 86:55:38:81:14:3c:24:d2:28:61:b4:9c:29:0e:13:0e:20:d1: f6:26:99:82:c0:cd:c4:db:e6:bf:ad:ab:da:ad:75:7f:69:b9: 51:8b:12:67:cc:12:82:0e:f2:d2:b0:f8:32:0f:e5:16:6d:88: 21:a1:9d:3d:f4:27:f7:c3:7d:88:72:9a:e5:c1:f3:6b:16:08: 56:2e:06:be:09:fb:ea:07:3e:97:23:38:3a:e5:0f:d4:6f:6e: d2:e3:fe:26:bf:4a:87:9f:29:70:10:2b:23:18:fd:68:e3:e3: 78:b9:7b:12:b1:04:38:c1:a7:e6:c9:29:75:61:cf:ff:13:c9: e4:1c:c8:b5:1f:12:16:9b:19:a3:10:58:57:48:ee:8c:25:a0: e3:28:95:45:d8:f5:86:52:d2:da:97:79:ed:35:78:40:47:12: eb:f8:fa:6a:80:b8:4e:45:b5:84:82:e1:0b:aa:a0:0b:05:b7: 2f:52:22:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjUwOTE4MTg0NDQ2WhcNMjUwOTI1MTg0NDQ2WjAYMRYwFAYD VQQDEw02OGNjNTMxZi1iZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JUNfPfT2PxElzzJxFrWAz+BV8mzxQTQRco7WGIZEknBbQPIQolXU2sTHeuJ U7byA6o0qOB+I/wxgaPDk7xY2ZyN4s75UiVy5P1rACgXF+9HcxFP8DT6qp6ciLmE RousnUiu/PBv6DDhyDuybrNn9miLWX+RMBoBudoHtBCHch3iC1y4hiwArxsC3sS5 uBjFbLVXmyYI7WS0BMX1S/XxXzYth4tlDwe3xBn29gJPNEZHz0lXydayVXt+z8KO 5kNwqAjUUgBQnNoCT8bKzq1961nvNjMsrP3pdbQiPdBic2mbKqXYxbK3XMZLVlJY Q5xvBclIhEAQUPp1RPhj8gNXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzsG4ZO v1qtglA9eWZODXdva9uSMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzq+gc/DS7tRuy2cZghHU09271eOr5U8Hddd3R/hJ8/TN5JIJd/j0o caVBE7+ZROfN4V4/ocLm95i2Y34Td/1dsiU0r5wj7e2GVTiBFDwk0ihhtJwpDhMO INH2JpmCwM3E2+a/ravarXV/ablRixJnzBKCDvLSsPgyD+UWbYghoZ099Cf3w32I cprlwfNrFghWLga+CfvqBz6XIzg65Q/Ub27S4/4mv0qHnylwECsjGP1o4+N4uXsS sQQ4wafmySl1Yc//E8nkHMi1HxIWmxmjEFhXSO6MJaDjKJVF2PWGUtLal3ntNXhA RxLr+PpqgLhORbWEguELqqALBbcvUiLD -----END CERTIFICATE-----Generated at Fri Sep 19 09:07:50 2025 by rpki-client