$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: LYzZbX9BL+iGQbBq+M7dfoOIm38X4TCkSnLWKEG73IE= Subject key identifier: 00:E1:90:32:7A:B2:6B:42:3A:C3:10:68:85:90:98:4C:D5:F0:B0:CC Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: C8 Signing time: Tue 09 Sep 2025 05:52:26 +0000 Manifest this update: Tue 09 Sep 2025 05:52:25 +0000 Manifest next update: Tue 16 Sep 2025 05:52:25 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: qlTpZMFVx5bqxHaHg5856lBVDSKpK9TgzOZlc2/nJME=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Sep 9 05:52:25 2025 GMT Not After : Sep 16 05:52:25 2025 GMT Subject: CN=68bfc09a-ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:07:90:f0:d2:11:93:51:b3:42:41:1f:c3:6d: c4:3c:ae:73:cd:cc:8d:e5:e9:b2:e8:cc:60:a3:e5: b3:98:5a:ab:47:ae:62:26:4a:d0:bd:5c:dd:d9:8c: 59:af:61:27:67:25:86:ed:4e:20:f6:26:9a:b6:e9: f8:d9:22:76:02:0b:da:69:4c:d8:91:cf:e1:a7:fa: fa:51:65:da:c6:54:e1:d9:61:97:aa:1f:91:a1:4b: 7e:34:d0:88:93:61:13:05:55:9f:fa:bf:7a:2f:3b: 0b:72:69:4a:6c:d4:98:50:70:cf:31:29:a3:5b:81: 78:18:0e:da:2a:a3:bd:87:77:b4:0a:32:ce:29:bc: c9:49:d3:16:4f:ec:ec:dc:c4:14:7b:e5:c5:e3:05: bf:a9:74:a8:38:a9:7f:36:a2:eb:45:27:9a:35:1e: 1c:83:d8:f4:5b:5b:ce:4a:83:ec:e3:3a:dc:86:f8: 0b:ec:af:d5:bc:bf:56:2f:8f:e0:de:80:54:ab:b8: 57:6b:99:4a:a3:8c:f8:2c:54:ce:41:14:fd:d0:7d: 18:33:fb:65:5b:16:80:69:98:5b:57:3f:46:1a:a6: 9e:79:8a:6d:40:57:72:83:7f:46:c2:e2:e8:be:0f: 8a:5e:cf:2c:db:76:50:96:50:5d:5a:7c:5d:ea:2c: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:90:32:7A:B2:6B:42:3A:C3:10:68:85:90:98:4C:D5:F0:B0:CC X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:35:f4:4d:56:47:46:43:83:a4:32:7e:3d:4a:4c:51:08: bd:94:de:18:8c:af:64:86:c3:67:83:dc:e8:b9:43:9f:99:03: af:58:21:13:e7:f3:12:aa:9b:a9:c5:0d:31:91:f0:05:82:bf: 2f:40:0c:48:94:40:ca:f7:7d:70:03:fe:7a:54:05:f4:0a:41: ce:db:3b:32:2a:44:08:75:e1:19:f3:99:64:b8:21:60:c3:83: 3f:dd:b1:c9:75:8b:05:09:b0:d3:2e:c2:b3:33:c4:00:ec:a9: f6:0f:92:93:e1:6f:69:3d:78:7e:71:ad:ed:d4:c1:a4:31:40: 61:73:82:75:a0:cc:17:1f:3b:e0:d4:c7:f4:0d:da:16:49:fc: d9:32:c3:ce:39:a2:a5:ff:3f:1e:a4:ec:f4:cc:3d:6e:47:36: e3:3b:e1:7b:ac:45:7c:03:1d:33:75:34:28:cc:87:76:67:c9: f5:71:9e:fa:22:03:22:6e:9e:d2:c9:6b:78:5e:2b:c2:b2:fc: e7:83:1d:8a:f8:f6:fc:f4:5f:c8:df:72:79:57:1b:cf:1b:78: 44:6c:b3:98:9a:45:ec:78:1b:a2:89:62:72:c9:05:89:3a:76: ca:e2:77:38:42:7b:34:32:35:e9:df:17:33:ac:e5:61:c0:e8: 3c:94:f3:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjUwOTA5MDU1MjI1WhcNMjUwOTE2MDU1MjI1WjAYMRYwFAYD VQQDEw02OGJmYzA5YS1hYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgeQ8NIRk1GzQkEfw23EPK5zzcyN5emy6Mxgo+WzmFqrR65iJkrQvVzd2YxZ r2EnZyWG7U4g9iaatun42SJ2AgvaaUzYkc/hp/r6UWXaxlTh2WGXqh+RoUt+NNCI k2ETBVWf+r96LzsLcmlKbNSYUHDPMSmjW4F4GA7aKqO9h3e0CjLOKbzJSdMWT+zs 3MQUe+XF4wW/qXSoOKl/NqLrRSeaNR4cg9j0W1vOSoPs4zrchvgL7K/VvL9WL4/g 3oBUq7hXa5lKo4z4LFTOQRT90H0YM/tlWxaAaZhbVz9GGqaeeYptQFdyg39GwuLo vg+KXs8s23ZQllBdWnxd6iwjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADhkDJ6 smtCOsMQaIWQmEzV8LDMMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5FDX0TVZHRkODpDJ+PUpMUQi9lN4YjK9khsNng9zouUOfmQOvWCET 5/MSqpupxQ0xkfAFgr8vQAxIlEDK931wA/56VAX0CkHO2zsyKkQIdeEZ85lkuCFg w4M/3bHJdYsFCbDTLsKzM8QA7Kn2D5KT4W9pPXh+ca3t1MGkMUBhc4J1oMwXHzvg 1Mf0DdoWSfzZMsPOOaKl/z8epOz0zD1uRzbjO+F7rEV8Ax0zdTQozId2Z8n1cZ76 IgMibp7SyWt4XivCsvzngx2K+Pb89F/I33J5VxvPG3hEbLOYmkXseBuiiWJyyQWJ OnbK4nc4Qns0MjXp3xczrOVhwOg8lPOg -----END CERTIFICATE-----Generated at Tue Sep 9 14:08:06 2025 by rpki-client