$ rpki-client -vvf rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft File: rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft (raw, json) Hash identifier: AXYLzP1iKrwM6+B2y3zdwew0ubFffbfoN/Fiz9N/6Ns= Subject key identifier: 64:AB:C7:B8:37:69:8F:10:57:C4:D3:90:C2:BB:7E:AC:8E:87:2E:82 Authority key identifier: AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD Certificate issuer: /CN=A9164E50/serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft Manifest number: 0691 Signing time: Fri 22 Aug 2025 22:26:15 +0000 Manifest this update: Fri 22 Aug 2025 22:26:15 +0000 Manifest next update: Fri 29 Aug 2025 22:26:14 +0000 Files and hashes: 1: rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl (hash: 0M78XuAp189KaU+XplyzbX64tN+g1OYTatxJnLAPe38=) 2: D18881E6807A11EBB44A0A58C4F9AE02.roa (hash: 9X7s4Zr8J67+2NJv1oqimpUYFSW3VJpeiZEh6uYKUO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164E50, serialNumber=ADF0F5ABAFFB9845B55CB361A092F56D4E4005DD Validity Not Before: Aug 22 22:26:15 2025 GMT Not After : Aug 29 22:26:14 2025 GMT Subject: CN=68a8ee87-699e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:10:9c:84:09:14:41:bc:36:57:ea:54:e3: ad:00:15:da:cd:a8:48:97:47:99:ec:1f:9c:56:de: cf:dc:66:a4:08:2a:ab:5e:aa:f3:d7:f9:60:3d:58: 7b:48:5b:63:02:05:46:93:43:5b:bc:a4:5c:e3:5a: d0:5a:27:63:e7:80:86:1c:e8:ab:12:b6:51:f8:d2: b2:54:e9:b2:a3:94:c5:b9:98:c1:9e:64:0f:72:8d: 7d:b3:24:5b:49:8c:7e:5d:bd:ce:55:ba:7a:16:3b: 07:44:e4:57:32:be:a3:95:f9:23:06:08:a7:19:37: 7d:42:d6:96:3d:07:01:8f:10:be:c4:05:95:c3:8f: 4d:d6:8d:7c:d5:8e:83:60:8d:52:be:7c:f1:d2:5f: 15:50:ff:ec:bc:59:71:e8:cc:60:59:e3:44:5c:59: 20:8c:3c:c3:1b:85:75:f1:2b:2a:dd:a8:1a:b4:4a: c9:d4:3e:7e:5f:2f:02:f9:2c:0d:ff:c3:c8:0d:da: 0b:d1:72:ab:51:8c:4f:a3:37:2f:a9:44:9b:d4:16: 08:77:7e:76:94:8d:50:ec:42:01:ca:d2:c6:b2:87: 0e:31:45:c1:35:2d:7b:98:eb:57:07:d8:50:3a:16: af:2c:c6:2f:e1:cc:f6:27:fa:39:41:4b:39:88:df: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AB:C7:B8:37:69:8F:10:57:C4:D3:90:C2:BB:7E:AC:8E:87:2E:82 X509v3 Authority Key Identifier: keyid:AD:F0:F5:AB:AF:FB:98:45:B5:5C:B3:61:A0:92:F5:6D:4E:40:05:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfD1q6_7mEW1XLNhoJL1bU5ABd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164E50/A40A2420806D11EBA8BF9976C4F9AE02/rfD1q6_7mEW1XLNhoJL1bU5ABd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c9:a8:dd:03:d6:87:be:30:c4:e1:5d:b3:65:79:62:62:7a: 1a:07:a8:f0:08:f4:51:29:e5:3b:be:36:c3:c4:8a:a0:ae:76: 0c:0f:9a:07:18:19:ce:0d:0f:4b:4a:b1:aa:c4:77:d1:f1:66: dc:91:b6:ea:12:f7:ba:30:19:3d:24:40:0b:91:c4:25:e7:dd: 2d:61:fe:be:b8:4b:40:26:0f:8a:ff:85:f1:75:fb:1e:71:59: 74:55:5c:0e:64:3f:c7:7c:d4:12:09:42:fd:97:46:98:58:93: 79:c1:74:c7:b2:52:26:ca:cb:c3:b6:a0:23:d3:f1:17:ca:a3: b1:e6:cb:f9:26:80:31:25:1f:71:56:1c:44:57:57:b3:55:f8: fd:4d:ca:47:38:81:59:17:85:d1:50:7d:d4:8b:16:02:bc:79: ef:38:87:fa:e2:2b:af:83:66:f2:b1:aa:08:cc:38:9e:1d:4f: 16:05:d0:62:d1:a5:cd:e5:8b:35:b2:76:8a:ef:e7:29:29:2c: 54:f3:18:0f:7c:f4:da:6f:c1:89:83:6b:e4:63:c0:e1:2c:aa: 01:58:79:9f:f3:ad:75:b4:0b:05:ef:6d:2c:be:d7:d5:10:7f: 7d:ec:91:ef:b1:c3:d3:a8:d8:51:ac:b0:94:2f:f1:98:0e:d9: 5f:8f:b7:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRFNTAxMTAvBgNVBAUTKEFERjBGNUFCQUZGQjk4NDVCNTVDQjM2MUEwOTJGNTZE NEU0MDA1REQwHhcNMjUwODIyMjIyNjE1WhcNMjUwODI5MjIyNjE0WjAYMRYwFAYD VQQDEw02OGE4ZWU4Ny02OTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+cQnIQJFEG8NlfqVOOtABXazahIl0eZ7B+cVt7P3GakCCqrXqrz1/lgPVh7 SFtjAgVGk0NbvKRc41rQWidj54CGHOirErZR+NKyVOmyo5TFuZjBnmQPco19syRb SYx+Xb3OVbp6FjsHRORXMr6jlfkjBginGTd9QtaWPQcBjxC+xAWVw49N1o181Y6D YI1Svnzx0l8VUP/svFlx6MxgWeNEXFkgjDzDG4V18Ssq3agatErJ1D5+Xy8C+SwN /8PIDdoL0XKrUYxPozcvqUSb1BYId352lI1Q7EIBytLGsocOMUXBNS17mOtXB9hQ OhavLMYv4cz2J/o5QUs5iN/W3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSrx7g3 aY8QV8TTkMK7fqyOhy6CMB8GA1UdIwQYMBaAFK3w9auv+5hFtVyzYaCS9W1OQAXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEU1MC9BNDBBMjQyMDgw NkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21FVzFYTE5ob0pMMWJVNUFC ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmRDFxNl83bUVXMVhMTmhvSkwxYlU1QUJkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEU1MC9BNDBBMjQyMDgwNkQxMUVCQThCRjk5NzZDNEY5QUUwMi9yZkQxcTZfN21F VzFYTE5ob0pMMWJVNUFCZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yajdA9aHvjDE4V2zZXliYnoaB6jwCPRRKeU7vjbDxIqgrnYMD5oH GBnODQ9LSrGqxHfR8WbckbbqEve6MBk9JEALkcQl590tYf6+uEtAJg+K/4Xxdfse cVl0VVwOZD/HfNQSCUL9l0aYWJN5wXTHslImysvDtqAj0/EXyqOx5sv5JoAxJR9x VhxEV1ezVfj9TcpHOIFZF4XRUH3UixYCvHnvOIf64iuvg2bysaoIzDieHU8WBdBi 0aXN5Ys1snaK7+cpKSxU8xgPfPTab8GJg2vkY8DhLKoBWHmf8611tAsF720svtfV EH997JHvscPTqNhRrLCUL/GYDtlfj7dC -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:12 2025 by rpki-client