$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: v/W6Spmonk5B67Y+/FJOCQJFIGEC4AEc7Fs/1ThBJpo= Subject key identifier: A5:23:46:1A:26:26:53:09:28:B8:FF:D2:3B:03:AE:48:5F:55:A7:AE Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: B3 Signing time: Wed 17 Sep 2025 06:44:59 +0000 Manifest this update: Wed 17 Sep 2025 06:44:59 +0000 Manifest next update: Wed 24 Sep 2025 06:44:59 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: KEIlsLRBGWIjmb3BgMC7r8D8fK5WF+O+3Q7YObUjyTY=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Sep 17 06:44:59 2025 GMT Not After : Sep 24 06:44:59 2025 GMT Subject: CN=68ca58eb-ec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:c1:d3:4a:60:a0:3b:e3:a1:8a:2f:69:a2: ec:96:5f:75:a2:4b:00:11:57:19:25:ee:6d:d9:56: 94:56:ef:bf:e2:d3:81:62:b9:ee:d2:46:42:53:9e: fd:a8:d7:55:cd:bf:34:77:62:f8:e4:d0:5f:67:f9: 62:a6:38:3c:f8:d4:29:85:8c:0f:c5:b5:67:27:40: 8c:13:aa:91:55:9d:19:5c:05:96:e7:7e:ef:a5:a5: 17:ce:18:3c:0f:f9:0a:44:58:73:4a:e4:ec:6f:f9: 51:b3:40:a9:37:d6:88:a0:51:90:44:a4:a6:ce:98: 5a:f2:80:4e:c2:b1:77:ea:25:6e:9d:7b:50:81:f6: 2e:e8:a9:77:ac:e4:22:5c:bf:42:69:64:c6:55:4b: ea:7c:21:d8:4e:99:93:43:f9:92:32:7a:10:d0:87: 66:c9:ab:ba:f9:e1:e4:0a:bd:6e:0a:24:ed:9c:f8: 73:75:3e:27:37:39:a8:fd:f0:59:a6:83:c7:b3:f7: 71:cb:a0:25:3c:34:97:5a:4c:d1:bb:ac:0b:c5:fc: 57:a1:c2:2d:b0:52:97:e9:64:dd:ac:7e:6c:e2:48: 1b:fa:ac:26:7a:5f:74:5c:b3:69:ef:08:10:d9:c2: 50:7e:dc:1a:01:4f:4c:e4:aa:c7:6b:82:d1:d0:9c: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:23:46:1A:26:26:53:09:28:B8:FF:D2:3B:03:AE:48:5F:55:A7:AE X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:56:e5:4b:b6:17:48:60:54:76:a0:45:ac:39:77:02:9c:e8: 4e:58:8a:1a:72:58:ed:67:35:b9:27:3c:07:b6:ab:c3:77:bc: 5e:84:4f:d5:94:6b:17:89:6e:25:83:cc:3f:9b:ce:84:6b:9a: 88:46:e6:aa:99:ff:75:9a:cf:43:8c:28:fd:28:c4:55:97:a3: 33:01:53:51:f9:7d:7d:9b:72:0a:07:28:f2:d5:59:fb:c6:c6: db:2c:b1:f7:cc:56:68:73:84:46:f4:b9:aa:e5:bd:74:43:44: b4:1f:72:c1:bb:1c:58:98:de:ad:86:10:89:bd:78:c5:7b:3b: a3:30:03:d4:81:7a:18:f0:38:a7:b3:87:0e:8e:d6:7d:d2:2c: 77:f1:95:a9:a2:cc:c5:5b:d2:c4:d5:56:5d:62:74:63:ff:63: 91:2f:30:9c:6b:9d:f8:73:23:8e:5c:8b:03:46:f7:6e:6a:c5: c3:25:d9:9b:b8:fd:7d:3b:63:1c:2e:f3:12:cc:95:fc:bb:1b: 0e:9f:28:3a:f3:3f:7b:f4:97:75:34:55:ef:d6:71:c1:ba:80: a3:36:74:e2:7a:e3:b7:2a:3c:f6:56:63:fe:f0:fa:86:8e:0f: ef:80:9d:2f:3b:5d:dd:7c:64:16:b7:90:f4:8f:aa:02:81:a3: 75:33:83:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUwOTE3MDY0NDU5WhcNMjUwOTI0MDY0NDU5WjAYMRYwFAYD VQQDEw02OGNhNThlYi1lYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0XB00pgoDvjoYovaaLsll91oksAEVcZJe5t2VaUVu+/4tOBYrnu0kZCU579 qNdVzb80d2L45NBfZ/lipjg8+NQphYwPxbVnJ0CME6qRVZ0ZXAWW537vpaUXzhg8 D/kKRFhzSuTsb/lRs0CpN9aIoFGQRKSmzpha8oBOwrF36iVunXtQgfYu6Kl3rOQi XL9CaWTGVUvqfCHYTpmTQ/mSMnoQ0Idmyau6+eHkCr1uCiTtnPhzdT4nNzmo/fBZ poPHs/dxy6AlPDSXWkzRu6wLxfxXocItsFKX6WTdrH5s4kgb+qwmel90XLNp7wgQ 2cJQftwaAU9M5KrHa4LR0JxX2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUjRhom JlMJKLj/0jsDrkhfVaeuMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQVuVLthdIYFR2oEWsOXcCnOhOWIoacljtZzW5JzwHtqvDd7xehE/V lGsXiW4lg8w/m86Ea5qIRuaqmf91ms9DjCj9KMRVl6MzAVNR+X19m3IKByjy1Vn7 xsbbLLH3zFZoc4RG9Lmq5b10Q0S0H3LBuxxYmN6thhCJvXjFezujMAPUgXoY8Din s4cOjtZ90ix38ZWposzFW9LE1VZdYnRj/2ORLzCca534cyOOXIsDRvduasXDJdmb uP19O2McLvMSzJX8uxsOnyg68z979Jd1NFXv1nHBuoCjNnTieuO3Kjz2VmP+8PqG jg/vgJ0vO13dfGQWt5D0j6oCgaN1M4Mr -----END CERTIFICATE-----Generated at Fri Sep 19 04:23:43 2025 by rpki-client