$ rpki-client -vvf rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft File: 1iOjklgIuuhMJxThaoeEBOBgSNE.mft (raw, json) Hash identifier: poiuqS52uDGktL2QJ+7KKTqYusOdlCmwNeFOaZfZODE= Subject key identifier: D1:67:5E:5E:3F:02:96:88:A0:A5:A7:6F:4F:E4:34:80:FF:BD:96:2F Authority key identifier: D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 Certificate issuer: /CN=A912A1E7/serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft Manifest number: 0549 Signing time: Fri 22 Aug 2025 23:39:06 +0000 Manifest this update: Fri 22 Aug 2025 23:39:06 +0000 Manifest next update: Fri 29 Aug 2025 23:39:06 +0000 Files and hashes: 1: 1iOjklgIuuhMJxThaoeEBOBgSNE.crl (hash: 4MjCYWxBbhdaKlrO+rOzjoecTLsE2Z7NIiNC1UuhL3U=) 2: C3BF0EF80A5F11EC8EDB0221C4F9AE02.roa (hash: lwH3/LI1XgonY5xgqpT7sakTv0eerZuuX+aDEUruDuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A1E7, serialNumber=D623A3925808BAE84C2714E16A878404E06048D1 Validity Not Before: Aug 22 23:39:06 2025 GMT Not After : Aug 29 23:39:06 2025 GMT Subject: CN=68a8ff9a-7ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d7:16:f0:19:5a:ab:8c:23:0b:ad:38:05:ee: 0b:ba:c8:03:dc:b7:47:01:14:c9:00:2d:b0:98:0f: d7:c7:96:a6:e8:fa:70:96:b1:95:cd:af:67:09:a8: 32:f1:1b:5a:bd:a4:61:65:cf:df:3c:e2:f5:79:a3: 24:5f:1a:af:c8:a8:49:54:d7:3f:7b:6a:db:4a:c0: 1a:ec:00:ce:bf:9e:00:c0:d2:51:96:71:6d:7c:46: a6:5a:d4:23:ab:fa:6b:8b:46:cc:99:96:2f:c6:63: d6:68:16:2f:c5:f6:20:9d:fd:77:26:b8:32:b3:d8: 52:bb:f4:f3:0e:b1:51:18:42:88:be:4d:e9:b3:5c: 19:29:5e:60:18:4c:1d:87:5d:74:90:73:03:ae:ed: 72:f0:11:90:26:21:e3:df:09:23:61:a5:db:3d:7d: c6:99:36:a3:89:8c:ad:31:b4:25:9c:c9:f0:7b:91: 01:80:f9:03:fa:96:f0:bf:81:22:2f:67:9b:17:ce: 47:59:8a:d8:ca:ee:69:c8:ad:e7:70:0b:ec:c0:67: ff:7c:9d:52:d4:bc:3b:7d:de:b3:a1:2b:a9:65:b2: 05:4b:0e:c3:57:cc:b2:19:39:4c:62:f1:9b:35:57: 9c:65:a8:74:b1:31:7c:8f:80:ac:75:10:58:8b:9a: 52:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:67:5E:5E:3F:02:96:88:A0:A5:A7:6F:4F:E4:34:80:FF:BD:96:2F X509v3 Authority Key Identifier: keyid:D6:23:A3:92:58:08:BA:E8:4C:27:14:E1:6A:87:84:04:E0:60:48:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1iOjklgIuuhMJxThaoeEBOBgSNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A1E7/10FABED2025511EC8ED24085C4F9AE02/1iOjklgIuuhMJxThaoeEBOBgSNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:6f:9c:70:b5:29:f6:2d:af:90:24:5b:5f:32:eb:51:5e:5d: 5c:7f:3c:ae:fb:c6:bf:8f:ce:52:be:5f:a1:e5:a4:8a:7c:d1: b4:7a:6f:96:ac:b4:bc:70:38:58:51:ea:6a:bb:e4:ed:24:8b: 89:3d:ff:8f:3c:db:24:e2:ad:83:fc:b4:66:e8:c9:d9:6f:47: 2c:17:e6:a6:21:47:1c:73:e4:cf:1a:99:05:6b:2a:54:b6:73: 76:56:89:5d:4c:49:45:cf:35:70:cd:e2:fc:45:07:c0:d5:f7: 4c:5b:86:4a:75:bc:84:09:2f:83:cf:3b:84:d4:ee:d3:b8:62: 80:a1:23:6d:73:fb:52:c6:96:42:e3:fc:2c:78:66:54:56:f4: d6:a5:06:13:bc:58:2a:2e:0b:11:28:2a:74:7c:df:09:66:c4: dc:bd:66:19:eb:58:f9:1f:cf:df:87:12:c1:57:a4:5e:28:a7: 9c:80:25:76:86:b1:d0:cc:54:7b:ad:2a:ee:fb:ee:e8:d3:1c: a2:58:66:76:da:ed:8b:66:3a:bb:26:31:fa:33:4d:29:87:30: f2:ce:0d:51:47:b0:ed:95:f1:45:5d:ad:79:25:2f:c4:c1:46: 00:bc:0d:97:2d:03:21:84:17:77:5f:ec:a7:1b:60:ec:82:31: de:e9:6e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExRTcxMTAvBgNVBAUTKEQ2MjNBMzkyNTgwOEJBRTg0QzI3MTRFMTZBODc4NDA0 RTA2MDQ4RDEwHhcNMjUwODIyMjMzOTA2WhcNMjUwODI5MjMzOTA2WjAYMRYwFAYD VQQDEw02OGE4ZmY5YS03ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79cW8Blaq4wjC604Be4LusgD3LdHARTJAC2wmA/Xx5am6PpwlrGVza9nCagy 8RtavaRhZc/fPOL1eaMkXxqvyKhJVNc/e2rbSsAa7ADOv54AwNJRlnFtfEamWtQj q/pri0bMmZYvxmPWaBYvxfYgnf13Jrgys9hSu/TzDrFRGEKIvk3ps1wZKV5gGEwd h110kHMDru1y8BGQJiHj3wkjYaXbPX3GmTajiYytMbQlnMnwe5EBgPkD+pbwv4Ei L2ebF85HWYrYyu5pyK3ncAvswGf/fJ1S1Lw7fd6zoSupZbIFSw7DV8yyGTlMYvGb NVecZah0sTF8j4CsdRBYi5pSjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFnXl4/ ApaIoKWnb0/kNID/vZYvMB8GA1UdIwQYMBaAFNYjo5JYCLroTCcU4WqHhATgYEjR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTFFNy8xMEZBQkVEMjAy NTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1aE1KeFRoYW9lRUJPQmdT TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFpT2prbGdJdXVoTUp4VGhhb2VFQk9CZ1NORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTFFNy8xMEZBQkVEMjAyNTUxMUVDOEVEMjQwODVDNEY5QUUwMi8xaU9qa2xnSXV1 aE1KeFRoYW9lRUJPQmdTTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCib5xwtSn2La+QJFtfMutRXl1cfzyu+8a/j85Svl+h5aSKfNG0em+W rLS8cDhYUepqu+TtJIuJPf+PPNsk4q2D/LRm6MnZb0csF+amIUccc+TPGpkFaypU tnN2VoldTElFzzVwzeL8RQfA1fdMW4ZKdbyECS+DzzuE1O7TuGKAoSNtc/tSxpZC 4/wseGZUVvTWpQYTvFgqLgsRKCp0fN8JZsTcvWYZ61j5H8/fhxLBV6ReKKecgCV2 hrHQzFR7rSru++7o0xyiWGZ22u2LZjq7JjH6M00phzDyzg1RR7DtlfFFXa15JS/E wUYAvA2XLQMhhBd3X+ynG2DsgjHe6W6x -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:30 2025 by rpki-client