$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: LO+hvSweIDhfdpNFQp+sODYY+AHbR4jT1D4oe4V30V8= Subject key identifier: 98:11:7D:99:21:1B:84:A7:04:26:B9:78:3C:BB:9D:C7:8A:F4:6E:0B Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 032A Signing time: Fri 05 Sep 2025 01:06:42 +0000 Manifest this update: Fri 05 Sep 2025 01:06:42 +0000 Manifest next update: Fri 12 Sep 2025 01:06:42 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: 2v4JO80Ct7eCWFIl8pwWjKjcv17cbEAFuzPJN7fzLso=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: X05nJ1j9oFxXKovC7MyWIX4IdW9s4NwJbF0XevapeM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Sep 5 01:06:42 2025 GMT Not After : Sep 12 01:06:42 2025 GMT Subject: CN=68ba37a2-c1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:eb:54:f5:37:19:ac:90:ac:26:43:63:ae: 60:f3:03:16:2c:1e:60:1b:8e:e1:bf:69:4e:08:86: 41:78:a8:c1:fe:21:e0:a5:d6:ea:79:a7:b4:d4:6f: ca:23:07:36:c6:6e:71:01:5a:e0:77:6a:b4:f6:ed: 6e:49:e3:d6:3c:be:61:f7:39:6a:04:6f:27:45:30: c2:19:56:23:4b:af:c7:0e:10:1c:5e:14:aa:dc:03: cd:c4:fb:a1:88:20:c0:0e:dd:5b:65:b3:a8:ce:49: 63:8b:c6:03:d7:89:92:fa:2e:e4:05:29:59:ed:d4: 5a:2a:1f:0e:2c:49:db:b3:9f:17:4d:42:fa:d7:f3: 82:e9:5a:88:7e:33:bd:ef:86:00:66:67:82:93:25: c8:6e:6d:70:3e:af:e1:c2:37:bd:2c:53:93:26:8c: da:f3:a2:cb:49:dc:e6:7e:50:24:42:2d:59:84:89: 83:46:25:1d:78:b5:c8:06:8f:b7:42:9d:cc:f5:07: 4c:8d:53:49:64:0e:ef:b6:5a:bf:63:7c:17:ff:c9: a8:a9:77:2a:30:e7:99:01:bb:eb:bf:3b:8e:7c:d3: be:97:b7:fa:8c:ca:97:3f:df:37:0f:d0:42:c1:8f: a5:ad:76:da:72:f0:d6:7d:d1:d7:4e:af:86:1c:e8: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:11:7D:99:21:1B:84:A7:04:26:B9:78:3C:BB:9D:C7:8A:F4:6E:0B X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:db:d5:e6:8e:a5:2a:45:f7:9f:2f:17:07:5c:4f:ce:dd: 96:5a:3b:25:1c:96:41:0e:9c:8b:65:6b:59:33:83:9b:9f:df: 83:9c:81:2f:ea:56:01:c4:1c:2f:fc:66:71:40:16:d6:3b:91: 17:a4:3a:44:5f:8b:9b:c6:d2:97:4e:d7:05:fb:e4:18:3e:f4: 85:26:bc:4f:af:cb:44:b5:26:58:b0:50:60:53:b5:15:6f:f4: 4b:9e:01:1b:64:86:5f:9d:93:f3:f7:4c:4e:28:65:06:d2:fc: a2:71:03:d1:f2:8b:3e:f0:02:0a:cf:01:e1:70:85:f1:08:0e: 2f:2e:3c:2f:64:76:b0:93:4d:cd:a5:64:ac:97:fe:b7:a1:9b: 5d:91:66:bf:f3:5e:2a:05:eb:e5:d5:c2:cf:e9:ac:e6:7c:e5: 7c:a0:92:24:8d:5f:5e:70:23:ca:e2:b8:6a:d1:06:23:12:15: d0:21:39:49:1c:6b:5d:03:2e:f3:40:31:6d:38:42:7e:61:c7: 57:c5:40:05:18:fa:07:01:9b:f0:b5:98:05:f4:f0:5e:3a:5e: 63:85:7e:e7:2f:cf:89:86:1e:3b:45:e5:9f:93:18:8d:dd:7f: 7c:fc:a3:10:e8:b2:c4:21:72:37:14:d0:bc:5a:66:49:d4:10: 17:00:5b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjUwOTA1MDEwNjQyWhcNMjUwOTEyMDEwNjQyWjAYMRYwFAYD VQQDEw02OGJhMzdhMi1jMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNrrVPU3GayQrCZDY65g8wMWLB5gG47hv2lOCIZBeKjB/iHgpdbqeae01G/K Iwc2xm5xAVrgd2q09u1uSePWPL5h9zlqBG8nRTDCGVYjS6/HDhAcXhSq3APNxPuh iCDADt1bZbOozklji8YD14mS+i7kBSlZ7dRaKh8OLEnbs58XTUL61/OC6VqIfjO9 74YAZmeCkyXIbm1wPq/hwje9LFOTJoza86LLSdzmflAkQi1ZhImDRiUdeLXIBo+3 Qp3M9QdMjVNJZA7vtlq/Y3wX/8moqXcqMOeZAbvrvzuOfNO+l7f6jMqXP983D9BC wY+lrXbacvDWfdHXTq+GHOhXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgRfZkh G4SnBCa5eDy7nceK9G4LMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgwtvV5o6lKkX3ny8XB1xPzt2WWjslHJZBDpyLZWtZM4Obn9+DnIEv 6lYBxBwv/GZxQBbWO5EXpDpEX4ubxtKXTtcF++QYPvSFJrxPr8tEtSZYsFBgU7UV b/RLngEbZIZfnZPz90xOKGUG0vyicQPR8os+8AIKzwHhcIXxCA4vLjwvZHawk03N pWSsl/63oZtdkWa/814qBevl1cLP6azmfOV8oJIkjV9ecCPK4rhq0QYjEhXQITlJ HGtdAy7zQDFtOEJ+YcdXxUAFGPoHAZvwtZgF9PBeOl5jhX7nL8+Jhh47ReWfkxiN 3X98/KMQ6LLEIXI3FNC8WmZJ1BAXAFvW -----END CERTIFICATE-----Generated at Sat Sep 6 06:01:53 2025 by rpki-client