$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: MBrFq5mcM1J6BoJC0TAS5PRc31JzSIdmkllFpdkflSg= Subject key identifier: 9A:19:88:D8:3D:61:BA:87:34:24:D1:35:0C:70:3A:0C:29:5A:A1:E9 Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0CDF Signing time: Mon 08 Sep 2025 18:10:38 +0000 Manifest this update: Mon 08 Sep 2025 18:10:37 +0000 Manifest next update: Mon 15 Sep 2025 18:10:37 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: 0L4z6ZRUzv8lpMsjo1zEiWlwGw1FvzG9B4iZvJyfRUY=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: wRhoUuLabNYzTY9DDaSK06ADTxBJOvjSTEtu7/sVqes=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: oryogDp90ntm5yVUpzztlYtF7rrid4whBN5vK7HfINE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Sep 8 18:10:37 2025 GMT Not After : Sep 15 18:10:37 2025 GMT Subject: CN=68bf1c1e-2aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:91:59:11:30:05:e1:b0:d8:f6:5e:89:2f:e0: dd:43:ec:df:24:fe:8e:4d:8f:35:aa:6d:3b:01:4d: 0a:45:2d:9b:cf:0c:94:b9:f1:a6:77:55:e3:26:1c: 7c:61:66:52:64:9f:78:4a:6e:a4:eb:51:c7:84:6c: ee:e3:7b:7e:b1:55:a3:9c:91:0a:8b:b4:86:e2:4f: 85:da:0b:fd:bc:e7:43:cb:cf:cd:05:58:09:7b:ec: fb:b0:e4:6c:8b:22:b8:ad:06:f2:3d:84:06:56:05: 61:4a:d2:17:5a:59:7f:30:be:70:9b:20:de:a4:42: 05:64:1e:41:c1:75:52:b3:79:c8:f0:a0:ab:7c:b7: 77:cc:e4:f5:a4:68:35:88:eb:45:e1:01:f3:90:2b: 4e:0d:db:5a:df:e3:db:3f:cd:e5:bb:5d:61:af:e9: ff:93:a5:c2:8e:0b:7d:b8:16:b3:b2:ac:de:5d:80: bc:9e:5b:24:c7:b8:5b:eb:5d:fb:4e:09:c4:89:86: a0:5e:4f:84:e2:f5:51:93:1a:01:68:4e:50:d7:e9: a3:61:ae:c1:f5:5d:10:57:a3:92:8d:bb:8d:77:a6: 71:16:2d:6a:fc:43:8d:a4:57:a9:84:b0:ab:60:32: 16:87:7c:7b:d6:c9:bc:11:a8:a1:09:c1:e6:c2:2e: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:19:88:D8:3D:61:BA:87:34:24:D1:35:0C:70:3A:0C:29:5A:A1:E9 X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:17:fd:8b:20:43:96:60:c0:d6:cb:98:22:11:43:f5:64:aa: 4f:6c:60:3b:0d:49:41:ec:71:6d:34:51:b7:e5:0e:28:9e:3c: c6:64:44:97:95:6e:f8:5c:27:db:69:10:10:e1:e0:2e:fd:dd: d8:fa:94:3b:ba:4a:5b:09:77:bb:a4:53:44:47:c3:63:07:1b: 1f:38:3e:88:8d:fe:89:6e:1c:bd:1c:fb:75:e3:85:b3:35:f9: 44:15:78:3f:8c:df:a6:42:2f:12:33:06:00:54:ce:82:57:3a: 64:3b:01:7e:33:ed:8c:35:39:07:7d:d1:91:b4:81:1b:23:91: 84:3c:81:26:ea:99:3e:87:13:d7:04:ea:03:3a:28:ab:8f:7c: 1e:11:5a:0b:17:a9:af:56:4f:db:6c:05:84:87:c6:a5:7d:07: 80:36:b3:fa:e3:19:ab:e2:ab:62:af:53:19:49:2b:bf:eb:8f: 48:c1:b5:72:71:9f:e7:ea:fd:14:1e:bf:11:02:e0:ad:14:78: 2a:1f:36:9b:0f:de:f6:8f:9b:ae:88:14:3c:4e:6c:26:c9:1f: a8:e8:9c:18:cc:c1:44:37:2a:83:18:42:cf:2e:70:d0:47:a4: ea:51:a7:c3:0e:d5:46:96:03:ca:7d:4b:16:da:db:cb:25:37: 90:96:a0:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjUwOTA4MTgxMDM3WhcNMjUwOTE1MTgxMDM3WjAYMRYwFAYD VQQDEw02OGJmMWMxZS0yYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JFZETAF4bDY9l6JL+DdQ+zfJP6OTY81qm07AU0KRS2bzwyUufGmd1XjJhx8 YWZSZJ94Sm6k61HHhGzu43t+sVWjnJEKi7SG4k+F2gv9vOdDy8/NBVgJe+z7sORs iyK4rQbyPYQGVgVhStIXWll/ML5wmyDepEIFZB5BwXVSs3nI8KCrfLd3zOT1pGg1 iOtF4QHzkCtODdta3+PbP83lu11hr+n/k6XCjgt9uBazsqzeXYC8nlskx7hb6137 TgnEiYagXk+E4vVRkxoBaE5Q1+mjYa7B9V0QV6OSjbuNd6ZxFi1q/EONpFephLCr YDIWh3x71sm8EaihCcHmwi6tnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoZiNg9 YbqHNCTRNQxwOgwpWqHpMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVF/2LIEOWYMDWy5giEUP1ZKpPbGA7DUlB7HFtNFG35Q4onjzGZESX lW74XCfbaRAQ4eAu/d3Y+pQ7ukpbCXe7pFNER8NjBxsfOD6Ijf6Jbhy9HPt144Wz NflEFXg/jN+mQi8SMwYAVM6CVzpkOwF+M+2MNTkHfdGRtIEbI5GEPIEm6pk+hxPX BOoDOiirj3weEVoLF6mvVk/bbAWEh8alfQeANrP64xmr4qtir1MZSSu/649IwbVy cZ/n6v0UHr8RAuCtFHgqHzabD972j5uuiBQ8TmwmyR+o6JwYzMFENyqDGELPLnDQ R6TqUafDDtVGlgPKfUsW2tvLJTeQlqBX -----END CERTIFICATE-----Generated at Wed Sep 10 07:04:36 2025 by rpki-client