$ rpki-client -vvf rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft File: mm0VemfN-P9qHM6gPkPkwtlb-G0.mft (raw, json) Hash identifier: D0YfSJdYEe2wZwMtONA+OjHxS4s96hG4iH4urqjGI0U= Subject key identifier: C1:0E:BB:04:CF:C2:8F:9D:AE:7E:B0:A7:49:97:5D:D6:7B:C3:97:A7 Authority key identifier: 9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D Certificate issuer: /CN=A915E777/serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Certificate serial: 0FCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft Manifest number: 0FCB Signing time: Thu 18 Sep 2025 17:40:02 +0000 Manifest this update: Thu 18 Sep 2025 17:40:01 +0000 Manifest next update: Thu 25 Sep 2025 17:40:01 +0000 Files and hashes: 1: mm0VemfN-P9qHM6gPkPkwtlb-G0.crl (hash: Hoph9QDHLRtFHFS/5wn4q36J2PZej8C7R+zR6XXQ99I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E777, serialNumber=9A6D157A67CDF8FF6A1CCEA03E43E4C2D95BF86D Validity Not Before: Sep 18 17:40:01 2025 GMT Not After : Sep 25 17:40:01 2025 GMT Subject: CN=68cc43f2-2434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:9a:45:db:58:bb:cf:ad:46:80:11:be:1b: 32:35:09:b7:87:36:ef:5f:4f:51:c4:c5:fe:d3:42: 75:06:3c:c5:16:c8:ca:14:aa:5f:5e:85:ff:50:1a: 47:3c:2e:4a:31:a8:9d:6b:8f:fe:d3:99:39:da:98: c9:0f:6e:5f:00:3a:c4:53:3a:0f:20:96:7a:50:83: 47:25:4f:83:ac:66:27:2b:8e:9f:34:da:30:b9:c4: 7a:5e:f2:62:69:55:1b:43:d8:1f:e5:f4:01:e5:87: 75:70:4a:ad:ca:d3:61:35:ef:7f:70:1a:fc:fc:1b: 1c:89:92:77:27:0c:43:44:e8:bb:41:94:f8:9e:24: 44:2b:62:5c:e9:43:1f:4a:ff:6d:24:ce:dd:75:65: 2e:d3:01:50:7f:31:09:d3:1c:94:d5:7b:85:e5:72: da:72:15:02:54:4d:ed:40:9d:23:6d:2f:3a:93:30: 25:68:58:50:22:85:db:ac:0b:69:db:9f:c2:f6:38: 40:b9:e9:98:bd:85:5d:e3:75:4e:7d:c8:51:20:03: ee:01:61:e1:6d:03:6f:b7:3d:9c:14:f3:72:0b:3c: 6e:06:b7:c2:4a:e2:17:a5:45:89:eb:a6:53:0e:9e: e1:1a:77:37:64:60:a7:a9:c5:bb:6f:c4:3c:91:b4: 89:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0E:BB:04:CF:C2:8F:9D:AE:7E:B0:A7:49:97:5D:D6:7B:C3:97:A7 X509v3 Authority Key Identifier: keyid:9A:6D:15:7A:67:CD:F8:FF:6A:1C:CE:A0:3E:43:E4:C2:D9:5B:F8:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mm0VemfN-P9qHM6gPkPkwtlb-G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E777/66A403625CE811E9A2EDF32BC4F9AE02/mm0VemfN-P9qHM6gPkPkwtlb-G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ca:f6:b1:81:36:5f:05:9f:b9:01:14:01:f6:e9:d0:d0:49: 29:c8:06:cb:ec:60:cf:60:9e:59:70:ed:58:c7:81:07:2a:e9: 52:97:ce:21:6e:a4:72:12:be:b6:bc:71:de:f7:ff:b5:2c:06: a6:38:f4:b0:bf:81:bd:d8:ac:dc:bb:e5:db:2b:3f:1f:af:24: 7d:33:a2:ca:cc:5c:81:2f:a3:7f:d3:c0:2b:71:bf:7d:b6:fc: 42:c9:9f:0f:6f:e9:7c:0b:60:c8:d6:dd:23:17:af:e7:9e:74: 47:2f:b8:e3:c9:dd:8d:76:8e:86:7f:d5:71:2b:85:28:e1:56: cf:6a:87:b1:31:5b:45:a1:7e:b7:77:10:6f:0d:7e:78:94:7e: db:3b:28:99:3e:89:05:b9:ce:a1:34:43:79:39:6d:3c:1b:b5: 22:17:8f:d5:e1:54:ae:38:92:24:d3:07:84:45:12:49:46:4f: 02:42:b1:e5:80:b2:3e:94:3e:9a:15:e2:71:55:47:1a:d3:25: 22:92:53:68:69:46:3e:01:22:9e:d8:3a:47:27:62:46:6d:64: 41:98:f8:d3:3f:da:ac:ad:90:61:1b:14:93:c7:ae:be:f0:74: 41:da:31:28:f6:a4:50:5d:9f:51:70:cb:6c:e1:1e:8e:a4:3c: a6:d4:1e:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU3NzcxMTAvBgNVBAUTKDlBNkQxNTdBNjdDREY4RkY2QTFDQ0VBMDNFNDNFNEMy RDk1QkY4NkQwHhcNMjUwOTE4MTc0MDAxWhcNMjUwOTI1MTc0MDAxWjAYMRYwFAYD VQQDEw02OGNjNDNmMi0yNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukOaRdtYu8+tRoARvhsyNQm3hzbvX09RxMX+00J1BjzFFsjKFKpfXoX/UBpH PC5KMaida4/+05k52pjJD25fADrEUzoPIJZ6UINHJU+DrGYnK46fNNowucR6XvJi aVUbQ9gf5fQB5Yd1cEqtytNhNe9/cBr8/BsciZJ3JwxDROi7QZT4niREK2Jc6UMf Sv9tJM7ddWUu0wFQfzEJ0xyU1XuF5XLachUCVE3tQJ0jbS86kzAlaFhQIoXbrAtp 25/C9jhAuemYvYVd43VOfchRIAPuAWHhbQNvtz2cFPNyCzxuBrfCSuIXpUWJ66ZT Dp7hGnc3ZGCnqcW7b8Q8kbSJbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEOuwTP wo+drn6wp0mXXdZ7w5enMB8GA1UdIwQYMBaAFJptFXpnzfj/ahzOoD5D5MLZW/ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Ny82NkE0MDM2MjVD RTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1QOXFITTZnUGtQa3d0bGIt RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21tMFZlbWZOLVA5cUhNNmdQa1Brd3RsYi1HMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTc3Ny82NkE0MDM2MjVDRTgxMUU5QTJFREYzMkJDNEY5QUUwMi9tbTBWZW1mTi1Q OXFITTZnUGtQa3d0bGItRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOyvaxgTZfBZ+5ARQB9unQ0EkpyAbL7GDPYJ5ZcO1Yx4EHKulSl84h bqRyEr62vHHe9/+1LAamOPSwv4G92Kzcu+XbKz8fryR9M6LKzFyBL6N/08Arcb99 tvxCyZ8Pb+l8C2DI1t0jF6/nnnRHL7jjyd2Ndo6Gf9VxK4Uo4VbPaoexMVtFoX63 dxBvDX54lH7bOyiZPokFuc6hNEN5OW08G7UiF4/V4VSuOJIk0weERRJJRk8CQrHl gLI+lD6aFeJxVUca0yUiklNoaUY+ASKe2DpHJ2JGbWRBmPjTP9qsrZBhGxSTx66+ 8HRB2jEo9qRQXZ9RcMts4R6OpDym1B7w -----END CERTIFICATE-----Generated at Fri Sep 19 07:52:06 2025 by rpki-client