$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json) Hash identifier: DVvOraGMaeQCTVuxvffsWZWsnPOEaFZ4KGlx6kNoxXs= Subject key identifier: DA:1F:E9:90:AB:62:90:75:FC:3A:F8:02:CF:2C:86:2A:67:C9:B4:7C Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft Manifest number: 069A Signing time: Wed 20 Aug 2025 23:33:06 +0000 Manifest this update: Wed 20 Aug 2025 23:33:06 +0000 Manifest next update: Wed 27 Aug 2025 23:33:06 +0000 Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: 79WuwK3d2NaJ2Rsb1Q2ZcgWxKmt9/h9O+nOM2aOqKXE=) 2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Aug 20 23:33:06 2025 GMT Not After : Aug 27 23:33:06 2025 GMT Subject: CN=68a65b32-fea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:33:a7:c8:d8:79:64:4d:ff:02:4c:57:f9: 2d:97:5c:50:d4:ad:85:f3:99:22:d2:b4:60:30:5a: 01:de:99:16:23:ac:ac:a4:06:59:2c:0c:26:4e:bc: b5:09:ae:70:33:20:1f:58:eb:0d:90:4c:fb:b5:4b: fc:79:fd:dc:b1:a2:df:05:bc:3c:48:2f:81:b1:55: 69:7c:9a:85:3e:15:e9:d0:b3:ec:86:d2:42:51:fc: 76:db:c4:8b:fb:2e:f3:96:83:62:13:2b:ad:f3:a8: cd:28:91:19:18:12:c4:bb:ba:7b:66:0d:73:65:57: a4:1d:b5:f8:92:f9:8f:1c:e7:fb:7c:b4:53:3e:25: 27:c7:e4:a7:dd:78:64:83:b1:61:eb:0f:93:d4:bb: c9:29:21:8e:44:57:f0:f4:5d:d2:4c:8d:ff:67:65: 6c:c7:a5:b2:66:f4:c4:7f:98:c6:a9:19:48:98:aa: 2e:53:89:c6:c3:9d:29:dc:ce:4d:da:61:47:28:10: e8:d4:42:dc:50:63:bd:23:1e:f8:3f:6f:24:2d:43: 22:a7:8e:5c:e6:03:de:84:c4:fa:66:f8:d8:dd:c3: 7c:de:8d:38:d7:20:e3:2e:6a:a2:8b:6b:46:26:97: e0:ac:74:3a:23:f1:a3:25:46:0d:1a:f4:20:a3:56: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1F:E9:90:AB:62:90:75:FC:3A:F8:02:CF:2C:86:2A:67:C9:B4:7C X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:12:d2:61:3f:22:57:9c:b0:91:11:fd:5f:72:b5:6a:40:10: b8:bd:96:5a:11:5c:5f:fb:17:8a:8e:93:4a:1b:74:13:de:ca: f3:55:aa:ba:6e:9b:a7:0c:1b:62:fa:51:b7:4c:d3:30:42:e6: 6c:89:63:e3:9e:7e:f0:88:79:63:39:6e:b5:5f:24:b1:93:61: 53:22:74:1e:15:86:7a:8d:e6:b6:4e:10:74:a7:3a:be:e9:ec: 3d:11:fc:0a:fe:1c:3b:b6:57:b1:eb:f3:81:3a:17:1c:46:92: bd:bb:e2:8f:66:5f:20:0e:23:87:4e:2c:8a:20:b4:c7:f9:18: d2:e0:a6:0d:4f:02:7e:18:76:7a:6c:17:92:af:18:7a:bb:89: 13:a7:d9:fc:9f:e9:03:b0:23:5a:b4:22:11:f5:12:3c:d9:a1: 2a:68:33:b9:95:27:a1:46:25:9c:c9:7d:4e:c1:e2:27:49:95: a9:26:46:4c:35:ae:53:ed:30:61:99:bd:28:5c:b5:97:05:6e: 3c:ed:c8:5c:e6:31:8d:45:80:4d:9d:08:87:d7:55:7c:f5:be: a8:51:76:e8:e2:18:cf:d0:13:91:fe:ca:dc:9d:de:19:ad:50: 48:27:6b:25:6c:56:e3:2d:f3:66:de:d8:8a:92:57:f9:04:5d: ff:11:36:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwODIwMjMzMzA2WhcNMjUwODI3MjMzMzA2WjAYMRYwFAYD VQQDEw02OGE2NWIzMi1mZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxIzp8jYeWRN/wJMV/ktl1xQ1K2F85ki0rRgMFoB3pkWI6yspAZZLAwmTry1 Ca5wMyAfWOsNkEz7tUv8ef3csaLfBbw8SC+BsVVpfJqFPhXp0LPshtJCUfx228SL +y7zloNiEyut86jNKJEZGBLEu7p7Zg1zZVekHbX4kvmPHOf7fLRTPiUnx+Sn3Xhk g7Fh6w+T1LvJKSGORFfw9F3STI3/Z2Vsx6WyZvTEf5jGqRlImKouU4nGw50p3M5N 2mFHKBDo1ELcUGO9Ix74P28kLUMip45c5gPehMT6ZvjY3cN83o041yDjLmqii2tG JpfgrHQ6I/GjJUYNGvQgo1aRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNof6ZCr YpB1/Dr4As8shipnybR8MB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUYyMS9FQURCQjQxMjAxODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFds aTFUc0FzRUVsekxzaW5Dc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqEtJhPyJXnLCREf1fcrVqQBC4vZZaEVxf+xeKjpNKG3QT3srzVaq6 bpunDBti+lG3TNMwQuZsiWPjnn7wiHljOW61XySxk2FTInQeFYZ6jea2ThB0pzq+ 6ew9EfwK/hw7tlex6/OBOhccRpK9u+KPZl8gDiOHTiyKILTH+RjS4KYNTwJ+GHZ6 bBeSrxh6u4kTp9n8n+kDsCNatCIR9RI82aEqaDO5lSehRiWcyX1OweInSZWpJkZM Na5T7TBhmb0oXLWXBW487chc5jGNRYBNnQiH11V89b6oUXbo4hjP0BOR/srcnd4Z rVBIJ2slbFbjLfNm3tiKklf5BF3/ETYJ -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client