$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: XpMhvqPtA3QXQyzjMO05Ys7EzmHB7aZUKDz/GAfmPzg= Subject key identifier: C0:94:E7:23:7A:77:77:42:3F:D3:4D:3B:D0:8A:AF:16:B1:FD:E3:CA Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: 28 Signing time: Thu 21 Aug 2025 07:59:50 +0000 Manifest this update: Thu 21 Aug 2025 07:59:49 +0000 Manifest next update: Thu 28 Aug 2025 07:59:49 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: Naks/5tRSafyHjD5xLwzm4Ym+PnEi5CB2eipda69+20=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: yl2cL3cHIW46lNiv/5lOmjEF6XN4CiYiCi/4pbPGnEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Aug 21 07:59:49 2025 GMT Not After : Aug 28 07:59:49 2025 GMT Subject: CN=68a6d1f5-4416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:45:3f:28:6d:3a:31:a1:b9:3d:1d:3f:8e: 84:3c:e1:8f:41:e4:79:a2:6a:4e:94:4c:31:97:c6: f5:b9:cc:e6:95:50:1f:b8:a8:62:b7:87:f2:f0:30: 26:e9:04:f9:f1:36:24:82:5e:63:9e:81:f4:df:8d: ce:b1:cc:c2:61:12:d9:f1:c2:36:0d:29:61:7f:cd: dd:35:55:0a:90:84:3a:99:4b:e5:ed:00:95:a9:41: 31:a6:0a:45:6c:a7:1e:73:19:02:0c:06:74:bf:a4: 5f:17:1c:c6:78:ea:a4:d8:de:b5:4c:b3:0e:b3:4a: be:0d:26:d0:b1:8f:00:f4:22:5c:c5:c0:53:e0:49: 2f:da:d9:2c:5b:23:59:32:da:f2:9e:5e:86:3d:ac: 0d:97:02:35:a0:90:8d:1b:92:a4:88:63:c8:87:62: 05:2e:9f:63:c2:c5:21:3a:a8:36:0b:34:19:fb:2b: e0:4e:0a:2e:5f:26:7a:76:47:8b:7d:6f:88:24:c7: b2:91:c4:2d:90:0d:67:b5:4e:ac:8b:d8:86:42:1c: 0d:8b:0d:04:8a:48:bb:ee:52:f8:08:b4:f0:e3:41: bb:29:82:22:71:d7:04:ff:35:96:63:0d:3c:d2:c8: e7:d3:d2:2d:46:d7:9f:b6:e1:2e:08:7d:db:ec:ad: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:E7:23:7A:77:77:42:3F:D3:4D:3B:D0:8A:AF:16:B1:FD:E3:CA X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f1:25:bf:73:f8:9a:1e:fd:09:31:ac:13:a6:23:0d:ac:85: 59:00:08:70:16:5c:67:cb:d5:e6:be:c8:01:4b:ba:2c:3c:ab: e2:19:51:3b:3e:b5:57:d4:f8:4d:82:48:22:a8:df:2f:15:5f: 6c:8d:46:8d:77:73:ad:6b:0e:d1:da:08:c0:74:ee:ea:d2:91: e9:4b:dd:0a:84:42:28:9d:e1:0a:3b:f5:2c:68:5d:f5:54:51: 7f:3d:80:ef:da:0e:d3:11:34:3a:ad:bf:8b:b2:c9:a9:68:59: e1:76:0c:78:10:8f:45:55:40:c7:2e:6a:2c:4d:bc:17:ea:55: 08:73:5c:58:62:08:d9:35:dd:0b:eb:27:32:57:25:f1:9a:5b: a9:db:07:ca:7a:7d:bf:dd:6b:b2:47:e6:b5:10:fc:e4:2c:48: 4a:ba:26:ea:e5:1a:15:a9:47:5c:cf:5d:59:07:36:be:ee:bc: c5:08:41:e0:0f:a9:70:5f:03:08:77:2a:1d:95:68:32:b1:ca: c0:69:ed:bc:07:e4:a3:ed:8a:60:f2:c1:a1:74:e0:ac:5e:83: 1d:c5:8c:df:c2:80:77:79:77:4b:22:de:e6:03:4a:a5:50:2a: 8a:c3:dc:bc:83:9d:e7:26:52:c4:9f:fc:00:02:34:9d:88:43: 95:3a:82:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QkEyNzExMC8GA1UEBRMoNzc3RDU0MEUxNjFGQTY3MUZCMjQ1OEEzM0ZGRTRCRjMz RDZBNzAxNTAeFw0yNTA4MjEwNzU5NDlaFw0yNTA4MjgwNzU5NDlaMBgxFjAUBgNV BAMTDTY4YTZkMWY1LTQ0MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt10U/KG06MaG5PR0/joQ84Y9B5Hmiak6UTDGXxvW5zOaVUB+4qGK3h/LwMCbp BPnxNiSCXmOegfTfjc6xzMJhEtnxwjYNKWF/zd01VQqQhDqZS+XtAJWpQTGmCkVs px5zGQIMBnS/pF8XHMZ46qTY3rVMsw6zSr4NJtCxjwD0IlzFwFPgSS/a2SxbI1ky 2vKeXoY9rA2XAjWgkI0bkqSIY8iHYgUun2PCxSE6qDYLNBn7K+BOCi5fJnp2R4t9 b4gkx7KRxC2QDWe1TqyL2IZCHA2LDQSKSLvuUvgItPDjQbspgiJx1wT/NZZjDTzS yOfT0i1G15+24S4IfdvsrfpfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwJTnI3p3 d0I/00070IqvFrH948owHwYDVR0jBBgwFoAUd31UDhYfpnH7JFijP/5L8z1qcBUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCQTI3L0VBNEU2NjlDNDU4 QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNC VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMxVURoWWZwbkg3SkZpalBfNUw4ejFxY0JVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC QTI3L0VBNEU2NjlDNDU4QzExRjBCMkJFQjY0REM0RjlBRTAyL2QzMVVEaFlmcG5I N0pGaWpQXzVMOHoxcWNCVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACvxJb9z+Joe/QkxrBOmIw2shVkACHAWXGfL1ea+yAFLuiw8q+IZUTs+ tVfU+E2CSCKo3y8VX2yNRo13c61rDtHaCMB07urSkelL3QqEQiid4Qo79SxoXfVU UX89gO/aDtMRNDqtv4uyyaloWeF2DHgQj0VVQMcuaixNvBfqVQhzXFhiCNk13Qvr JzJXJfGaW6nbB8p6fb/da7JH5rUQ/OQsSEq6JurlGhWpR1zPXVkHNr7uvMUIQeAP qXBfAwh3Kh2VaDKxysBp7bwH5KPtimDywaF04Kxegx3FjN/CgHd5d0si3uYDSqVQ KorD3LyDnecmUsSf/AACNJ2IQ5U6gqA= -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:59 2025 by rpki-client