$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: PovI+ALeMPkvn3vHZO4wBCMqbo7qevts3Z99Hq21pQk= Subject key identifier: E0:5E:87:F8:06:FC:63:A0:8B:8E:DC:B4:24:33:D3:AE:6C:AB:15:6D Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 084C Signing time: Thu 18 Sep 2025 20:58:36 +0000 Manifest this update: Thu 18 Sep 2025 20:58:35 +0000 Manifest next update: Thu 25 Sep 2025 20:58:35 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: 7oEczKFiyUEaCSEbfDTCvBE6TPUHkVj39Uo3N5u71Ww=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Sep 18 20:58:35 2025 GMT Not After : Sep 25 20:58:35 2025 GMT Subject: CN=68cc727c-ba73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:3d:64:a4:a4:96:53:bc:0e:29:0e:31:b4: f4:c3:8b:35:7e:ef:1e:29:8c:64:8b:45:13:bb:93: b1:48:9e:0f:c7:e8:c4:ae:fe:20:45:23:2e:44:fc: 66:a8:03:3a:85:11:37:2f:04:25:aa:14:8b:25:94: 4b:21:46:47:b8:82:cb:4c:da:f9:92:14:62:53:fe: b0:49:74:c2:59:dd:71:a6:38:eb:63:f5:d0:69:e1: ad:37:e5:d3:8f:d3:f6:ce:78:89:cb:23:3c:4c:32: 91:22:13:8e:60:d1:88:b9:4f:5a:25:c6:cd:6d:45: 3c:97:e6:4a:d7:31:ed:16:0a:17:38:54:e9:ce:d5: d9:71:af:5a:4b:ab:4b:d3:44:59:a7:dd:db:e1:8a: 18:43:f5:bd:15:3c:ff:53:df:62:5d:0d:c6:e3:50: 8c:02:ab:14:7e:a2:39:b6:68:c0:e6:e2:17:a6:93: 03:d4:53:54:fc:61:ff:de:e5:d3:39:c2:c7:0e:92: 34:88:80:31:69:ed:db:db:d9:a8:21:3d:44:b6:2c: e1:bc:f5:99:ba:09:ef:14:30:30:bd:11:a4:7c:41: 95:e5:66:52:4d:b5:73:26:0f:a1:0a:bf:5c:c7:22: 24:5f:d5:13:04:04:ae:f1:44:83:52:9d:e8:d4:1e: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:87:F8:06:FC:63:A0:8B:8E:DC:B4:24:33:D3:AE:6C:AB:15:6D X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:1a:6a:66:5b:d0:47:14:d8:10:5e:a6:c4:8f:35:12:0f: cb:4f:dc:a6:0f:04:22:f7:0a:5f:e9:7f:27:b5:27:d6:86:bb: e4:8b:e7:c1:80:30:41:a8:1e:58:e2:98:13:c3:bb:af:b0:d8: 62:c6:2f:f5:b5:5a:01:5e:5c:7f:81:97:94:9e:b4:97:69:89: 17:ce:e1:7a:95:be:3b:2c:e4:8f:89:90:93:77:cf:52:f8:5a: 6f:84:31:6e:b0:50:30:57:1d:64:0f:5c:fa:90:ff:e4:ff:0b: 52:1e:f2:02:53:73:c0:3d:36:7c:5d:11:d5:8a:7a:a5:f9:80: be:27:33:c9:db:a3:4b:cc:82:0f:f9:96:1a:bd:5d:30:28:f3: 6e:ca:ad:35:04:6f:f1:76:a2:9c:35:ce:5d:c1:01:44:30:db: 53:c9:d9:fb:40:15:73:06:0a:13:26:58:6a:24:d3:d2:4b:be: 59:ee:21:43:ba:3d:2b:f2:af:78:6f:37:e9:5b:bf:7d:e2:76: fe:70:f4:2f:59:e7:9c:c0:6f:24:2c:5c:c5:f7:0d:7b:71:ed: 34:8d:dd:78:fd:d8:4e:70:51:e6:38:22:29:d8:b6:7b:d9:5f: 9c:0f:27:a8:66:89:e6:8c:3e:ae:36:55:39:0f:b5:23:35:8f: dd:02:7b:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwOTE4MjA1ODM1WhcNMjUwOTI1MjA1ODM1WjAYMRYwFAYD VQQDEw02OGNjNzI3Yy1iYTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B09ZKSkllO8DikOMbT0w4s1fu8eKYxki0UTu5OxSJ4Px+jErv4gRSMuRPxm qAM6hRE3LwQlqhSLJZRLIUZHuILLTNr5khRiU/6wSXTCWd1xpjjrY/XQaeGtN+XT j9P2zniJyyM8TDKRIhOOYNGIuU9aJcbNbUU8l+ZK1zHtFgoXOFTpztXZca9aS6tL 00RZp93b4YoYQ/W9FTz/U99iXQ3G41CMAqsUfqI5tmjA5uIXppMD1FNU/GH/3uXT OcLHDpI0iIAxae3b29moIT1EtizhvPWZugnvFDAwvRGkfEGV5WZSTbVzJg+hCr9c xyIkX9UTBASu8USDUp3o1B6x5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBeh/gG /GOgi47ctCQz065sqxVtMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0hhpqZlvQRxTYEF6mxI81Eg/LT9ymDwQi9wpf6X8ntSfWhrvki+fB gDBBqB5Y4pgTw7uvsNhixi/1tVoBXlx/gZeUnrSXaYkXzuF6lb47LOSPiZCTd89S +FpvhDFusFAwVx1kD1z6kP/k/wtSHvICU3PAPTZ8XRHVinql+YC+JzPJ26NLzIIP +ZYavV0wKPNuyq01BG/xdqKcNc5dwQFEMNtTydn7QBVzBgoTJlhqJNPSS75Z7iFD uj0r8q94bzfpW7994nb+cPQvWeecwG8kLFzF9w17ce00jd14/dhOcFHmOCIp2LZ7 2V+cDyeoZonmjD6uNlU5D7UjNY/dAnva -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:57 2025 by rpki-client