$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft File: w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json) Hash identifier: WAxnrJaWsdh2lWsmbdLrXHjsAA/k4MIisrNR0L6W4NM= Subject key identifier: 9E:40:F1:F7:27:14:93:18:D6:2D:19:78:21:2D:10:E5:97:51:B7:50 Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 Certificate issuer: /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft Manifest number: 040E Signing time: Fri 05 Sep 2025 00:14:26 +0000 Manifest this update: Fri 05 Sep 2025 00:14:26 +0000 Manifest next update: Fri 12 Sep 2025 00:14:26 +0000 Files and hashes: 1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: VEztDaGQ48ufJOr01GLm0GpxG3W+lODzeP47VGPeODw=) 2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643 Validity Not Before: Sep 5 00:14:26 2025 GMT Not After : Sep 12 00:14:26 2025 GMT Subject: CN=68ba2b62-fd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:45:a7:db:b0:d1:02:25:57:66:37:65:5c: eb:5c:9a:e3:73:38:11:a7:88:8f:50:bc:ee:ff:6e: 09:79:45:b5:c9:cb:16:ee:0a:26:77:be:6d:5a:8d: 14:db:97:e3:f7:4c:f3:8b:30:e8:b5:58:9a:b0:e5: e2:20:3b:c6:5d:fa:0c:b5:d2:29:9e:00:a8:06:80: 40:ef:6b:12:d5:cd:69:1c:bc:ec:af:7e:d4:d3:fa: 58:f9:aa:6f:26:fb:b1:11:c4:1e:14:49:ee:1f:f6: 1d:81:23:23:92:52:51:2d:a3:0c:3c:ea:df:e9:07: 52:de:99:5c:f9:e1:27:3b:cc:d4:c3:18:3f:ea:2d: d4:c7:97:0d:34:01:20:0a:a0:1a:82:b0:c1:1f:b9: e4:23:4f:bb:00:83:08:45:dd:80:d2:89:22:5b:ff: ee:a5:e8:b1:dc:49:b9:01:46:04:39:c8:50:d0:c7: 0c:3a:bd:c2:50:50:03:b3:35:75:3c:27:a7:5a:e5: b5:8e:69:dd:61:38:9d:4b:a3:f9:57:9f:46:1e:ef: 47:bd:f1:b9:b6:77:33:9a:f2:3f:ac:9d:34:25:be: 24:ed:d7:8a:44:4b:5c:5e:0f:a9:fc:9d:b6:9a:f7: ce:2f:b3:0c:57:a7:ed:71:fb:ec:a0:49:f1:2e:54: ec:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:F1:F7:27:14:93:18:D6:2D:19:78:21:2D:10:E5:97:51:B7:50 X509v3 Authority Key Identifier: keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:8b:58:8a:18:a0:d9:ed:27:b9:fe:d3:5b:a3:f0:e0:ea:3c: 40:62:55:ed:3f:9b:29:4d:43:5b:15:24:61:98:fc:53:b2:6c: 08:4f:5e:ec:c0:76:11:a5:b5:2f:48:5d:9d:0b:6e:90:36:ca: 60:b2:f1:a9:6d:3e:d6:57:96:22:f4:f5:7f:a5:3e:cb:46:5a: 65:54:b3:d0:e7:bf:c8:c1:de:6e:72:3f:ad:61:4f:a8:fe:3e: b6:5d:01:31:21:1d:d6:71:e9:c3:ca:12:7b:38:c3:c9:c4:a5: 8f:aa:e4:01:79:05:07:bb:29:f3:73:44:65:50:07:ba:90:4c: 4a:7f:dd:13:97:16:15:a0:1a:18:98:cc:7f:eb:00:c9:09:fc: 5f:25:19:11:f1:01:2c:8f:16:ad:c8:e2:dc:e7:d0:04:15:50: 97:c5:34:ce:8f:f6:54:6e:41:b0:78:52:a6:ab:77:dc:40:ea: 06:ce:08:6e:f5:59:70:16:61:33:61:57:c3:d5:4f:82:89:35: a3:e7:11:0a:bb:0b:e9:2d:75:f7:c7:a8:38:f8:c4:e7:c7:cf: 36:99:d6:1a:f6:2a:ab:f5:9c:f3:1d:69:70:81:ad:ec:e9:52: b2:04:85:67:c2:2c:70:af:04:de:29:4d:70:39:ed:f9:90:bf: 3f:b7:5f:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5 MDVCRkU2NDMwHhcNMjUwOTA1MDAxNDI2WhcNMjUwOTEyMDAxNDI2WjAYMRYwFAYD VQQDEw02OGJhMmI2Mi1mZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmhFp9uw0QIlV2Y3ZVzrXJrjczgRp4iPULzu/24JeUW1ycsW7gomd75tWo0U 25fj90zzizDotViasOXiIDvGXfoMtdIpngCoBoBA72sS1c1pHLzsr37U0/pY+apv JvuxEcQeFEnuH/YdgSMjklJRLaMMPOrf6QdS3plc+eEnO8zUwxg/6i3Ux5cNNAEg CqAagrDBH7nkI0+7AIMIRd2A0okiW//upeix3Em5AUYEOchQ0McMOr3CUFADszV1 PCenWuW1jmndYTidS6P5V59GHu9HvfG5tnczmvI/rJ00Jb4k7deKREtcXg+p/J22 mvfOL7MMV6ftcfvsoEnxLlTsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5A8fcn FJMY1i0ZeCEtEOWXUbdQMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1 NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181 a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW M2xtakN6WGZ4aFNRV181a00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYi1iKGKDZ7Se5/tNbo/Dg6jxAYlXtP5spTUNbFSRhmPxTsmwIT17s wHYRpbUvSF2dC26QNspgsvGpbT7WV5Yi9PV/pT7LRlplVLPQ57/Iwd5ucj+tYU+o /j62XQExIR3WcenDyhJ7OMPJxKWPquQBeQUHuynzc0RlUAe6kExKf90TlxYVoBoY mMx/6wDJCfxfJRkR8QEsjxatyOLc59AEFVCXxTTOj/ZUbkGweFKmq3fcQOoGzghu 9VlwFmEzYVfD1U+CiTWj5xEKuwvpLXX3x6g4+MTnx882mdYa9iqr9ZzzHWlwga3s 6VKyBIVnwixwrwTeKU1wOe35kL8/t1+W -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:59 2025 by rpki-client