$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: fLneoZiNUZaWoxURL1jNrqilz2UILoV/bT9l7MgdGyg= Subject key identifier: 9F:DD:D1:D2:18:83:51:FE:67:BD:92:16:BB:54:B8:64:FA:7C:CF:D4 Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: 0192 Signing time: Tue 09 Sep 2025 03:42:22 +0000 Manifest this update: Tue 09 Sep 2025 03:42:21 +0000 Manifest next update: Tue 16 Sep 2025 03:42:21 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: YZkxHxKiY4KrJNg0cUe9dSpc2D24IEq0kj8y662clvQ=) 2: D060B5C4B9EA11EFBB71A952C4F9AE02.roa (hash: tJ6Byo5Jv7jHUOBzE7UJDTPgVb+D+6p5b3oXIC1Sny4=) 3: C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (hash: 3kIZNaCvH1jAxA6r2doyH/+gjNV/unkpe7Xtulk/aVw=) 4: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (hash: 2B9M6Do3yPaVSo2nSu7dpxy53nQb48sMXjuDHm1rO08=) 5: A16CA728B9EA11EFACF35552C4F9AE02.roa (hash: Il/g0HxoiMWM5qTW5HJgcyomv0xWgk1G/hwjG0Ua8NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Sep 9 03:42:21 2025 GMT Not After : Sep 16 03:42:21 2025 GMT Subject: CN=68bfa21d-4846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:de:84:f5:ef:05:dc:6a:76:23:83:29:77: 45:a5:5d:18:8a:31:3b:88:1f:46:db:b9:fc:80:fd: 50:f5:fb:2f:0f:8b:d9:7b:34:f8:ff:6a:fa:bf:6f: 2b:b6:72:48:4b:d4:d1:5e:66:4b:89:2f:82:0e:31: d6:50:b2:34:05:85:22:b7:7f:65:9c:0e:72:fc:f6: 93:00:b7:df:3e:6d:80:52:28:fd:ce:84:bb:c0:3a: 6d:e7:7b:b6:6e:cd:bf:93:02:9c:48:43:5c:9d:33: c1:b2:58:92:1e:e2:a8:71:20:e1:bc:44:00:f9:80: 31:1e:ec:4e:91:a6:5b:f0:b1:ff:4d:67:e2:05:e4: 24:66:e8:3c:a2:42:f5:8f:ec:9c:46:09:cd:af:fa: 45:25:90:3f:53:db:92:ab:ea:04:0a:05:5b:00:58: 81:22:c2:2d:bf:80:ba:08:d9:18:41:a9:c0:9e:38: 25:9d:cd:eb:b0:36:e8:d2:d6:fe:11:76:16:1b:d2: 06:e5:a8:45:34:83:00:9b:30:9f:73:db:87:4b:6f: c4:1d:40:db:07:2c:35:ad:23:84:ae:0b:e6:55:65: 49:14:8f:2b:0b:6d:25:c9:54:2f:cd:5c:fa:7c:4d: ff:37:4c:f8:e3:87:cb:8d:cf:7c:6c:4a:54:dc:d4: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:D1:D2:18:83:51:FE:67:BD:92:16:BB:54:B8:64:FA:7C:CF:D4 X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4e:b2:a4:6b:ee:d7:e4:e0:38:bf:3e:6c:85:b7:74:5e:17: ec:80:b8:70:59:6c:86:1e:42:5d:a6:53:e8:ac:24:80:83:48: 22:f2:9e:e8:b5:98:38:fd:c1:cb:c9:9d:3d:d3:71:97:b1:f7: d9:40:89:41:e2:80:95:8f:8d:3b:47:f3:11:d6:45:1b:fd:49: d7:7c:44:a2:a2:40:96:8e:53:4b:ea:01:b3:de:a8:29:58:3c: 9e:b1:6f:87:91:39:d0:22:1e:b5:35:be:ee:6d:6f:5a:88:23: f7:1a:74:31:28:c9:d1:68:98:b8:46:1b:cc:46:26:04:29:90: 88:59:dd:5b:14:0e:22:73:37:55:9e:03:10:c4:1f:65:f1:15: 39:6e:d9:fa:1a:9d:14:18:2b:be:6a:ea:a0:2e:40:13:68:ca: 8f:11:9f:e7:31:4e:30:28:70:47:0a:b4:67:6b:04:d3:4f:90: e4:c1:00:41:24:22:9a:77:f2:51:92:b1:0c:e8:70:ed:66:ca: 55:af:a4:52:9a:fa:33:78:67:2b:d6:38:83:09:6e:c2:63:fa: 1c:d3:b5:48:9d:d0:86:c8:9a:fd:b9:99:29:76:4d:c8:6a:10: b5:6b:e4:91:b6:f5:02:9f:39:e5:be:af:ec:9c:24:6f:d0:f2: 25:e4:9f:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjUwOTA5MDM0MjIxWhcNMjUwOTE2MDM0MjIxWjAYMRYwFAYD VQQDEw02OGJmYTIxZC00ODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx83ehPXvBdxqdiODKXdFpV0YijE7iB9G27n8gP1Q9fsvD4vZezT4/2r6v28r tnJIS9TRXmZLiS+CDjHWULI0BYUit39lnA5y/PaTALffPm2AUij9zoS7wDpt53u2 bs2/kwKcSENcnTPBsliSHuKocSDhvEQA+YAxHuxOkaZb8LH/TWfiBeQkZug8okL1 j+ycRgnNr/pFJZA/U9uSq+oECgVbAFiBIsItv4C6CNkYQanAnjglnc3rsDbo0tb+ EXYWG9IG5ahFNIMAmzCfc9uHS2/EHUDbByw1rSOErgvmVWVJFI8rC20lyVQvzVz6 fE3/N0z444fLjc98bEpU3NQWGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/d0dIY g1H+Z72SFrtUuGT6fM/UMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2TrKka+7X5OA4vz5shbd0XhfsgLhwWWyGHkJdplPorCSAg0gi8p7o tZg4/cHLyZ0903GXsffZQIlB4oCVj407R/MR1kUb/UnXfESiokCWjlNL6gGz3qgp WDyesW+HkTnQIh61Nb7ubW9aiCP3GnQxKMnRaJi4RhvMRiYEKZCIWd1bFA4iczdV ngMQxB9l8RU5btn6Gp0UGCu+auqgLkATaMqPEZ/nMU4wKHBHCrRnawTTT5DkwQBB JCKad/JRkrEM6HDtZspVr6RSmvozeGcr1jiDCW7CY/oc07VIndCGyJr9uZkpdk3I ahC1a+SRtvUCnznlvq/snCRv0PIl5J8U -----END CERTIFICATE-----Generated at Tue Sep 9 08:16:56 2025 by rpki-client