$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: KxTDBMrzy6SJmScsVpTg9HkwhRe8q8yKWBjmftXMwc0= Subject key identifier: 00:F4:CC:55:2D:A0:45:15:8D:BA:A3:F4:BE:D8:BE:29:CF:5B:ED:A5 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BCE Signing time: Thu 18 Sep 2025 19:06:49 +0000 Manifest this update: Thu 18 Sep 2025 19:06:49 +0000 Manifest next update: Thu 25 Sep 2025 19:06:49 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: IGJBDQecBrc4TCTc3lKgViqM2gSIFKesCRsr2JsFnBw=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Sep 18 19:06:49 2025 GMT Not After : Sep 25 19:06:49 2025 GMT Subject: CN=68cc5849-c0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:22:c5:9f:c3:1f:b4:15:9a:af:7e:ad:13:c7: 09:da:b7:c7:4c:a5:87:21:fa:e6:23:c0:b5:3c:88: ba:b0:df:21:cb:c8:27:6e:52:7d:bd:dc:1a:fe:e0: 82:d0:c9:eb:fb:62:e9:c6:cf:97:b6:a3:81:1f:a8: d1:31:f1:95:ab:59:4d:9e:a7:a2:23:04:c0:11:3b: 12:d6:f5:8a:0b:be:60:b8:af:ea:a5:7f:06:a3:0a: b7:71:67:9e:af:36:ff:b5:bd:ee:dc:6e:3f:8e:35: 98:58:42:4b:49:63:b2:c3:81:d0:43:43:91:35:83: 67:99:37:7b:fd:5f:a0:8e:9f:06:29:8c:8e:2f:f7: cb:20:f5:3c:1a:9d:6c:03:a6:b2:26:b3:3a:75:d4: 56:8d:90:24:fc:46:f4:5a:48:65:c1:90:03:4c:f2: a4:b4:2a:43:fb:c4:27:83:da:9d:ad:e8:bc:eb:b3: 12:11:5e:f7:b5:49:73:6c:f0:bb:e4:95:e6:fc:b9: f5:7b:c5:be:db:60:c0:45:e1:77:a0:07:07:e2:d4: f8:07:1f:55:0e:46:08:84:cc:a9:0f:c0:61:71:6c: 1c:95:b3:26:e8:04:ad:34:8d:a9:d5:e8:2e:fe:a1: e8:b6:4a:58:45:15:cf:3c:a6:a4:9b:7f:45:b6:e4: 05:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:CC:55:2D:A0:45:15:8D:BA:A3:F4:BE:D8:BE:29:CF:5B:ED:A5 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:53:7b:a3:be:a4:5f:6d:e6:d5:b9:1a:93:aa:eb:b2:27:ea: 40:10:f6:c2:05:b2:48:ba:8f:e1:93:12:27:a5:b9:6f:0a:20: 6b:88:bb:a0:30:1f:2d:48:7b:d5:fe:09:a4:98:cf:99:95:3e: 23:fd:f6:8f:bc:2c:1b:fd:c0:64:f7:91:ff:88:7e:6d:a6:c0: 20:af:1c:22:24:f2:4c:e5:ac:89:a2:91:fb:6f:58:79:e9:8a: 27:c5:09:62:14:45:25:cc:8f:2e:8a:af:ef:21:55:a8:30:f7: 0a:4c:85:d6:0d:11:34:5c:93:9c:48:d3:35:01:4a:3f:bc:17: c5:ed:02:3d:dc:ba:73:37:c1:7a:6e:d9:b6:5a:b5:fd:b2:c6: d6:e4:46:14:5a:dd:5a:9f:76:c5:6a:5e:f7:09:5b:77:28:c4: 5c:9a:10:84:10:e6:63:aa:a6:af:5e:2b:2f:6a:ae:85:13:01: 55:68:e6:8b:71:fd:10:d9:b2:a3:bb:1d:c1:b5:96:85:70:43: 3f:11:5c:4e:30:fd:a1:34:78:df:74:5b:6d:86:4f:6a:04:1d: 25:fa:9b:f2:2c:cd:82:7e:b6:e9:23:bb:31:ad:89:d6:d6:3c: 8a:39:4b:d7:86:5d:3b:57:b2:00:79:f5:d9:62:44:72:af:bf: 02:79:01:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUwOTE4MTkwNjQ5WhcNMjUwOTI1MTkwNjQ5WjAYMRYwFAYD VQQDEw02OGNjNTg0OS1jMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCLFn8MftBWar36tE8cJ2rfHTKWHIfrmI8C1PIi6sN8hy8gnblJ9vdwa/uCC 0Mnr+2Lpxs+XtqOBH6jRMfGVq1lNnqeiIwTAETsS1vWKC75guK/qpX8Gowq3cWee rzb/tb3u3G4/jjWYWEJLSWOyw4HQQ0ORNYNnmTd7/V+gjp8GKYyOL/fLIPU8Gp1s A6ayJrM6ddRWjZAk/Eb0WkhlwZADTPKktCpD+8Qng9qdrei867MSEV73tUlzbPC7 5JXm/Ln1e8W+22DAReF3oAcH4tT4Bx9VDkYIhMypD8BhcWwclbMm6AStNI2p1egu /qHotkpYRRXPPKakm39FtuQFqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAD0zFUt oEUVjbqj9L7YvinPW+2lMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYU3ujvqRfbebVuRqTquuyJ+pAEPbCBbJIuo/hkxInpblvCiBriLug MB8tSHvV/gmkmM+ZlT4j/faPvCwb/cBk95H/iH5tpsAgrxwiJPJM5ayJopH7b1h5 6YonxQliFEUlzI8uiq/vIVWoMPcKTIXWDRE0XJOcSNM1AUo/vBfF7QI93LpzN8F6 btm2WrX9ssbW5EYUWt1an3bFal73CVt3KMRcmhCEEOZjqqavXisvaq6FEwFVaOaL cf0Q2bKjux3BtZaFcEM/EVxOMP2hNHjfdFtthk9qBB0l+pvyLM2CfrbpI7sxrYnW 1jyKOUvXhl07V7IAefXZYkRyr78CeQHs -----END CERTIFICATE-----Generated at Fri Sep 19 13:43:06 2025 by rpki-client