$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft File: fWozDw0BJJQnx_yd3dz0qCh2CwY.mft (raw, json) Hash identifier: 9RrQRoXJHbby+qP6TyoNnM97zLo86bd7Oj/JBOtRnnA= Subject key identifier: FF:30:0B:AE:99:2A:9E:65:34:0D:1E:FC:B4:D4:C4:F5:DF:A0:A2:50 Authority key identifier: 7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 Certificate issuer: /CN=A9145519/serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Certificate serial: 1C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft Manifest number: 1C6F Signing time: Mon 08 Sep 2025 16:11:17 +0000 Manifest this update: Mon 08 Sep 2025 16:11:17 +0000 Manifest next update: Mon 15 Sep 2025 16:11:17 +0000 Files and hashes: 1: fWozDw0BJJQnx_yd3dz0qCh2CwY.crl (hash: sbAcUY+lZMasf+uToEm/8bbMw6Y1b83qu1YDHy9P6E0=) 2: 78D1DAC8E45E11E681F82341C4F9AE02.roa (hash: 3Dm5ElwPB3NMJf/bLLX77VdgpNnL/LPrpw6YAX3+x3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7296 (0x1c80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519, serialNumber=7D6A330F0D01249427C7FC9DDDDCF4A828760B06 Validity Not Before: Sep 8 16:11:17 2025 GMT Not After : Sep 15 16:11:17 2025 GMT Subject: CN=68bf0025-e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:96:7e:6f:82:fa:85:87:28:87:73:6d:32: 80:91:c3:bf:37:4f:c8:d7:b4:0d:da:7f:47:4d:d1: a2:88:c2:5a:2d:e7:c8:90:81:81:82:58:87:36:1a: 8b:c1:d8:2f:53:f6:87:dc:bc:f9:9e:1f:d5:0e:c0: fb:01:f1:08:83:87:af:42:a8:b8:9e:1b:b0:37:e6: 85:8d:e3:54:6f:a9:42:ef:af:ca:4b:99:5f:2e:45: 6e:c0:06:29:1a:54:77:65:a0:3b:8c:98:7a:83:29: ac:04:63:dc:99:18:bd:dc:eb:16:d9:8a:0b:1f:ea: 17:40:b4:ad:64:17:fe:50:59:9a:fb:25:27:93:a2: 25:46:9d:d6:37:c7:b8:e4:cd:dc:b9:48:2d:83:95: 32:f1:e6:d4:0b:93:88:c8:69:3a:d8:cb:ea:ef:2f: e2:4a:c6:ba:43:be:a2:c8:f6:bd:77:59:79:88:47: 84:f3:54:ab:a9:76:06:c0:7e:52:09:ca:e2:94:53: e0:7e:9a:d7:14:3e:59:d6:8a:e0:fe:b5:97:ff:d8: 20:91:51:db:fb:d3:01:ec:21:32:da:cb:3c:0d:1d: a8:d9:42:1e:02:81:52:c1:08:82:67:32:90:31:e6: 7a:7c:e1:e7:ab:13:9c:b1:b0:34:b5:ce:35:ac:eb: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:30:0B:AE:99:2A:9E:65:34:0D:1E:FC:B4:D4:C4:F5:DF:A0:A2:50 X509v3 Authority Key Identifier: keyid:7D:6A:33:0F:0D:01:24:94:27:C7:FC:9D:DD:DC:F4:A8:28:76:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWozDw0BJJQnx_yd3dz0qCh2CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/AD08AF26E45C11E68CEDFA3EC4F9AE02/fWozDw0BJJQnx_yd3dz0qCh2CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:68:d1:24:3f:c4:2d:b8:e2:7f:2b:9c:85:3b:80:a1:49:f6: b8:2b:f6:5e:97:5c:10:b0:f5:31:fa:f3:14:2d:74:c5:5e:dc: 71:40:bb:1d:56:6a:12:2f:ca:5d:44:d5:ff:b1:2a:a7:74:8e: 1e:f7:20:3a:78:e5:51:de:08:91:6f:06:3d:1f:09:d3:3c:38: 21:12:3d:0e:b6:9f:83:08:44:50:0c:be:19:e5:23:21:46:bb: 44:51:7b:62:f2:7f:d6:30:89:0e:a3:9a:1a:93:e5:b3:3a:cb: 23:e3:55:f8:78:0a:2f:16:b0:f0:c5:7c:c7:ed:32:2a:4f:2c: 62:b9:f6:ea:3b:17:ae:90:f2:74:5f:ed:f6:c8:02:6e:29:7d: ec:74:96:9b:a8:3d:aa:5b:19:6c:ea:c3:28:45:05:e1:52:68: 3c:ea:59:96:d3:cf:32:36:a3:91:c1:dd:4f:d4:80:d1:b1:93: 14:9f:02:84:74:5d:e0:a7:37:01:e8:13:a3:71:f0:0e:6e:ec: 4f:28:2d:1e:eb:b5:95:f3:6d:53:c1:49:c4:d1:d5:08:e3:81: aa:a5:6e:5c:b8:8e:8a:fd:7c:aa:3b:1c:45:b3:92:26:2a:6b: a8:ad:a3:43:8b:88:c3:bf:b4:2a:25:b8:6f:be:2d:e9:55:55: 51:3b:9a:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDdENkEzMzBGMEQwMTI0OTQyN0M3RkM5RERERENGNEE4 Mjg3NjBCMDYwHhcNMjUwOTA4MTYxMTE3WhcNMjUwOTE1MTYxMTE3WjAYMRYwFAYD VQQDEw02OGJmMDAyNS1lMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRuWfm+C+oWHKIdzbTKAkcO/N0/I17QN2n9HTdGiiMJaLefIkIGBgliHNhqL wdgvU/aH3Lz5nh/VDsD7AfEIg4evQqi4nhuwN+aFjeNUb6lC76/KS5lfLkVuwAYp GlR3ZaA7jJh6gymsBGPcmRi93OsW2YoLH+oXQLStZBf+UFma+yUnk6IlRp3WN8e4 5M3cuUgtg5Uy8ebUC5OIyGk62Mvq7y/iSsa6Q76iyPa9d1l5iEeE81SrqXYGwH5S CcrilFPgfprXFD5Z1org/rWX/9ggkVHb+9MB7CEy2ss8DR2o2UIeAoFSwQiCZzKQ MeZ6fOHnqxOcsbA0tc41rOs3hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8wC66Z Kp5lNA0e/LTUxPXfoKJQMB8GA1UdIwQYMBaAFH1qMw8NASSUJ8f8nd3c9KgodgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BRDA4QUYyNkU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpKUW54X3lkM2R6MHFDaDJD d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXb3pEdzBCSkpRbnhfeWQzZHowcUNoMkN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BRDA4QUYyNkU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9mV296RHcwQkpK UW54X3lkM2R6MHFDaDJDd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYaNEkP8QtuOJ/K5yFO4ChSfa4K/Zel1wQsPUx+vMULXTFXtxxQLsd VmoSL8pdRNX/sSqndI4e9yA6eOVR3giRbwY9HwnTPDghEj0Otp+DCERQDL4Z5SMh RrtEUXti8n/WMIkOo5oak+WzOssj41X4eAovFrDwxXzH7TIqTyxiufbqOxeukPJ0 X+32yAJuKX3sdJabqD2qWxls6sMoRQXhUmg86lmW088yNqORwd1P1IDRsZMUnwKE dF3gpzcB6BOjcfAObuxPKC0e67WV821TwUnE0dUI44GqpW5cuI6K/XyqOxxFs5Im KmuoraNDi4jDv7QqJbhvvi3pVVVRO5qD -----END CERTIFICATE-----Generated at Tue Sep 9 13:10:13 2025 by rpki-client