$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json) Hash identifier: L3LPNFVrlMquKq0bMSicT3STjU3xTL1745rLCg6Ijl4= Subject key identifier: E7:7F:0C:80:3F:A1:EB:25:ED:7B:47:0B:5A:99:93:A3:6E:5D:0D:8E Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft Manifest number: 0A3A Signing time: Sun 24 Aug 2025 19:43:56 +0000 Manifest this update: Sun 24 Aug 2025 19:43:55 +0000 Manifest next update: Sun 31 Aug 2025 19:43:55 +0000 Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: gDC79ehpMRnsyJB+UD6cBy+pYoJF2kc5n47F9po7w+k=) 2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: 05sTqgo+Z4rvsk50BgwNBJM+KFLlXu8LZA40jZLQRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C Validity Not Before: Aug 24 19:43:55 2025 GMT Not After : Aug 31 19:43:55 2025 GMT Subject: CN=68ab6b7c-57d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:02:ce:8d:d3:fc:1d:34:ea:33:71:18:df: b8:d8:d3:5e:9d:c2:3a:20:7e:c5:84:69:89:ee:a8: bc:78:2a:ed:ef:3d:4b:a0:87:cd:73:c6:16:02:c7: 62:cb:a8:3b:20:c2:69:cf:17:f3:09:04:86:99:e0: f3:e2:df:cb:71:73:d8:0d:cd:01:38:28:76:84:0f: 71:b0:8f:bb:b0:36:d6:e8:3a:48:72:cf:78:16:9b: 21:74:80:4b:b1:7a:6c:58:7e:34:a5:0f:5d:53:d2: 9c:c4:97:83:e1:b9:77:99:0d:69:75:21:32:eb:ac: 62:b9:c0:e2:2b:34:a8:05:92:f2:5a:93:e8:7d:2a: 39:24:76:8a:60:37:06:bd:3a:26:f5:24:83:d8:50: 0b:9f:be:65:d4:3a:3f:b7:87:44:74:b8:cc:5f:f5: be:b1:ca:63:45:1b:ec:cf:7f:02:2d:e3:ca:cf:fe: c4:41:1d:09:69:24:54:f2:1c:6a:f3:0c:bb:a9:94: 88:cc:b5:f3:f7:da:a3:55:cf:55:2a:19:ab:91:b0: 2d:ab:5d:48:9f:8f:ad:56:18:05:ff:bc:c4:1f:f1: 2c:9c:63:0d:90:a1:4e:8e:d9:a0:82:b8:ed:f6:8d: 4e:4f:68:f6:6c:f7:bd:55:01:9f:8b:d3:c1:e2:c4: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7F:0C:80:3F:A1:EB:25:ED:7B:47:0B:5A:99:93:A3:6E:5D:0D:8E X509v3 Authority Key Identifier: keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:af:bc:cb:21:09:39:0e:51:80:59:3b:ce:ee:6e:89:22:f1: 33:a1:a4:6a:45:72:22:f0:4e:4e:8d:2c:3f:e3:9a:9e:4e:d9: 87:08:88:a5:ee:61:59:33:9b:dc:f7:e1:ef:cf:2d:2a:5a:39: 87:d6:c3:e2:7d:67:2e:c7:5f:d7:fc:cb:36:01:64:c8:d6:db: 4e:e1:c5:82:65:14:42:f6:58:f1:1b:b9:63:75:ea:b4:b5:00: 89:fd:1d:5d:ce:a4:c4:3d:6b:1a:6e:bf:6f:36:43:18:4d:87: b1:50:f9:20:42:93:9b:9f:08:9b:54:ff:92:89:0a:67:5f:57: 4d:e5:1d:44:63:2c:f5:1d:26:b9:85:9e:6f:9c:fe:47:5f:6f: d3:e4:a0:bc:0a:f5:78:fe:df:ae:9c:c0:59:84:a3:6a:80:58: 31:00:d4:17:78:71:79:a7:8d:9c:cf:48:f5:46:26:a3:10:ec: 1b:9c:d9:ea:6e:fe:fa:7f:6d:16:89:ff:da:c1:0b:6f:0b:1f: 5c:33:37:2e:25:ae:c7:f2:f4:2b:52:e3:b9:3c:5f:c4:47:23: 54:4d:11:a1:8f:9c:b9:9c:f5:4e:33:85:99:30:98:71:66:5c: d6:99:df:79:fe:2d:8d:8f:a4:b5:8a:40:0f:b4:7e:d8:88:3d: 19:34:d6:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC QkFCOUM4MUMwHhcNMjUwODI0MTk0MzU1WhcNMjUwODMxMTk0MzU1WjAYMRYwFAYD VQQDEw02OGFiNmI3Yy01N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw98Czo3T/B006jNxGN+42NNencI6IH7FhGmJ7qi8eCrt7z1LoIfNc8YWAsdi y6g7IMJpzxfzCQSGmeDz4t/LcXPYDc0BOCh2hA9xsI+7sDbW6DpIcs94FpshdIBL sXpsWH40pQ9dU9KcxJeD4bl3mQ1pdSEy66xiucDiKzSoBZLyWpPofSo5JHaKYDcG vTom9SSD2FALn75l1Do/t4dEdLjMX/W+scpjRRvsz38CLePKz/7EQR0JaSRU8hxq 8wy7qZSIzLXz99qjVc9VKhmrkbAtq11In4+tVhgF/7zEH/EsnGMNkKFOjtmggrjt 9o1OT2j2bPe9VQGfi9PB4sRvNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd/DIA/ oesl7XtHC1qZk6NuXQ2OMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf cWNaSk1PWkJteS03cTV5QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRr7zLIQk5DlGAWTvO7m6JIvEzoaRqRXIi8E5OjSw/45qeTtmHCIil 7mFZM5vc9+Hvzy0qWjmH1sPifWcux1/X/Ms2AWTI1ttO4cWCZRRC9ljxG7ljdeq0 tQCJ/R1dzqTEPWsabr9vNkMYTYexUPkgQpObnwibVP+SiQpnX1dN5R1EYyz1HSa5 hZ5vnP5HX2/T5KC8CvV4/t+unMBZhKNqgFgxANQXeHF5p42cz0j1RiajEOwbnNnq bv76f20Wif/awQtvCx9cMzcuJa7H8vQrUuO5PF/ERyNUTRGhj5y5nPVOM4WZMJhx ZlzWmd95/i2Nj6S1ikAPtH7YiD0ZNNbC -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:12 2025 by rpki-client