$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft File: j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json) Hash identifier: Cgcz0HCrMgeHUXDK9d0qu6liD3sRBlD6c14iYFtUQdw= Subject key identifier: A6:FD:43:04:E4:6C:71:40:83:C6:94:E7:55:10:67:13:78:01:B5:A0 Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft Manifest number: 0107 Signing time: Thu 21 Aug 2025 05:12:48 +0000 Manifest this update: Thu 21 Aug 2025 05:12:48 +0000 Manifest next update: Thu 28 Aug 2025 05:12:48 +0000 Files and hashes: 1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: AWgaBsByx552hWoFmlEpMO4KLBDCCI9+7gAoJyGMClM=) 2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Validity Not Before: Aug 21 05:12:48 2025 GMT Not After : Aug 28 05:12:48 2025 GMT Subject: CN=68a6aad0-5672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:63:7a:52:9b:8e:f5:77:34:11:e2:5f:9e: d5:83:cb:fe:d9:68:59:49:43:aa:2f:4e:3a:57:5f: 25:b9:49:70:3a:74:5c:ec:57:7f:76:05:7c:d0:8d: f1:0c:29:32:08:0e:d2:fe:30:d8:5e:dc:92:83:d3: e4:3f:1b:2d:07:d9:86:e4:72:d7:32:cd:c6:ac:01: cd:d5:0c:2b:36:b8:c7:f8:d8:e3:84:d6:08:3b:dc: d3:d1:9c:0c:e4:3f:b1:60:ee:6b:6b:14:b7:61:75: 54:e2:6a:b0:a2:0d:ab:13:25:59:b0:ae:cb:59:8c: f0:0c:93:4f:aa:3c:94:ab:82:7a:d6:c2:92:9d:7d: bd:1c:52:a9:5c:8e:b5:d9:aa:75:64:7d:d3:5c:79: 72:31:a1:26:22:df:9e:6b:4f:0a:53:a5:ae:c8:17: 58:76:2e:d3:2f:a9:f4:c9:79:b1:93:8f:0a:2f:98: 05:d2:52:98:e2:f0:2f:03:6e:e6:e6:57:ab:68:4b: e2:91:59:9e:98:be:30:1d:d4:b8:24:7e:f2:1a:6b: b4:0d:3d:90:ae:0b:8f:72:c1:e8:e1:2d:86:ce:2a: c4:fd:14:2a:54:f9:2f:b2:84:bc:99:1a:2c:a8:61: f2:3a:f3:4f:55:35:41:7e:a6:db:8f:73:fa:e1:12: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FD:43:04:E4:6C:71:40:83:C6:94:E7:55:10:67:13:78:01:B5:A0 X509v3 Authority Key Identifier: keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c1:6e:56:8a:13:52:d5:b3:70:e2:20:51:af:8e:b0:c0:bd: 39:7b:06:f2:2d:90:4f:e0:fa:4c:be:76:6a:c8:2f:96:a4:78: 95:08:89:cb:af:d0:2b:e6:d9:09:07:4e:13:82:28:fc:6b:de: e9:12:5b:3c:44:2b:6b:e4:da:b7:a2:98:27:1b:9d:42:f7:54: d8:43:85:67:5b:67:9d:aa:64:37:9c:83:a8:fc:e8:4f:80:8d: e4:3a:98:c6:e5:64:bd:8f:17:51:6b:21:3f:db:71:3d:1b:5d: 9f:a1:b2:17:44:39:95:c3:78:d5:b1:8c:02:fa:d2:ab:0d:d9: 0a:93:49:29:25:75:d4:82:23:6e:47:de:a3:84:de:cf:8e:20: 56:b1:c4:be:19:05:c1:17:b5:25:3e:56:28:2b:c3:54:96:29: 4b:4a:90:c7:1c:92:39:c7:d8:cd:c5:46:f8:e8:be:38:93:81: 9b:38:09:f8:ed:35:1a:28:61:8f:59:3b:92:97:de:73:b3:51: f6:99:2a:a7:a4:92:63:07:af:dd:6b:23:de:21:dc:d8:c9:bd: 3c:f4:7d:6b:36:e5:11:5b:d8:d0:b3:a9:f1:32:90:c9:cc:42: 2b:80:6c:32:88:41:28:b4:f1:1a:86:59:d5:d1:5b:aa:0b:30: 16:0d:13:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2 MjNFRTNDOUUwHhcNMjUwODIxMDUxMjQ4WhcNMjUwODI4MDUxMjQ4WjAYMRYwFAYD VQQDEw02OGE2YWFkMC01NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0U5jelKbjvV3NBHiX57Vg8v+2WhZSUOqL046V18luUlwOnRc7Fd/dgV80I3x DCkyCA7S/jDYXtySg9PkPxstB9mG5HLXMs3GrAHN1QwrNrjH+NjjhNYIO9zT0ZwM 5D+xYO5raxS3YXVU4mqwog2rEyVZsK7LWYzwDJNPqjyUq4J61sKSnX29HFKpXI61 2ap1ZH3TXHlyMaEmIt+ea08KU6WuyBdYdi7TL6n0yXmxk48KL5gF0lKY4vAvA27m 5leraEvikVmemL4wHdS4JH7yGmu0DT2QrguPcsHo4S2GzirE/RQqVPkvsoS8mRos qGHyOvNPVTVBfqbbj3P64RICOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKb9QwTk bHFAg8aU51UQZxN4AbWgMB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUYxRC9CQTlDRDhBQ0VDRTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kz aXNNeDZ1Zzd3WGhpUHVQSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADwW5WihNS1bNw4iBRr46wwL05ewbyLZBP4PpMvnZqyC+WpHiVCInL r9Ar5tkJB04Tgij8a97pEls8RCtr5Nq3opgnG51C91TYQ4VnW2edqmQ3nIOo/OhP gI3kOpjG5WS9jxdRayE/23E9G12fobIXRDmVw3jVsYwC+tKrDdkKk0kpJXXUgiNu R96jhN7PjiBWscS+GQXBF7UlPlYoK8NUlilLSpDHHJI5x9jNxUb46L44k4GbOAn4 7TUaKGGPWTuSl95zs1H2mSqnpJJjB6/dayPeIdzYyb089H1rNuURW9jQs6nxMpDJ zEIrgGwyiEEotPEahlnV0VuqCzAWDRN4 -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:50 2025 by rpki-client