$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft File: rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json) Hash identifier: 3HhZESJZKZeeK7sy/TZJgFHyGlDSHj18thPCA3SuJaY= Subject key identifier: B2:6D:ED:A2:40:E2:72:73:B3:F7:2F:A3:D1:26:09:FE:DA:5C:FF:D3 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 24D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft Manifest number: 24B7 Signing time: Sun 24 Aug 2025 15:45:01 +0000 Manifest this update: Sun 24 Aug 2025 15:45:00 +0000 Manifest next update: Sun 31 Aug 2025 15:45:00 +0000 Files and hashes: 1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: f5UD5HiJNH64wwCgiimkYfvzgxlWxQXHrJhtDPoIyYM=) 2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=) 3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9428 (0x24d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: Aug 24 15:45:00 2025 GMT Not After : Aug 31 15:45:00 2025 GMT Subject: CN=68ab337d-3032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:8e:f4:e2:ca:67:7b:97:cd:62:8d:63:83: fb:cb:fa:6a:1f:d9:d2:33:8f:c1:9a:f9:4a:65:5e: 51:e0:be:9d:4c:45:28:16:be:25:92:23:01:9f:ba: 2b:7f:0e:43:55:de:df:3f:f3:d3:73:e7:42:dd:13: d9:57:a3:8e:b2:4f:57:60:06:df:24:1a:f9:f1:9f: ef:87:70:c2:54:6c:b4:f2:b7:ee:31:e6:0a:a2:7b: 6f:db:64:a7:a9:78:dd:c8:cd:70:9c:19:50:b0:a6: c4:88:25:3a:83:17:2e:8c:08:dc:24:35:f4:5b:7e: 0e:96:15:4c:17:91:bd:21:4b:d5:99:33:52:4d:05: cc:90:64:87:91:b9:3a:48:4f:de:da:91:a7:d7:f2: 2b:87:e5:3d:87:ba:a9:c2:b7:ee:6b:00:e8:c5:20: fc:2d:35:cc:30:bd:90:88:e2:a1:bd:a0:21:70:16: 16:d5:51:f8:c1:30:5a:11:3b:de:ae:47:7c:ef:f3: 7f:a3:e6:8a:ed:d6:a9:a8:9c:d9:22:a7:40:fa:d9: 2e:37:31:24:3e:7b:cb:23:05:5d:2f:28:c3:66:8b: 26:2c:7e:10:c9:ed:2b:2a:e8:ad:35:51:6b:d0:e3: a6:ea:bf:bc:74:0f:1b:12:7c:ed:38:da:41:07:5d: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:ED:A2:40:E2:72:73:B3:F7:2F:A3:D1:26:09:FE:DA:5C:FF:D3 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a4:83:57:c4:a4:53:01:5f:63:1d:71:ad:c4:03:b1:e7:5b: e6:b9:53:a6:10:1e:24:3b:9a:bd:dd:c2:f0:d7:6f:3f:bf:e8: 20:10:59:83:58:81:76:d7:0f:dc:4e:16:5b:2d:9b:00:24:49: 37:53:d9:d0:79:04:83:14:d2:4e:21:15:48:1d:4c:46:bb:c7: 6b:76:59:60:83:ed:23:6e:85:01:db:e7:43:ba:9a:e6:0f:7b: e6:a1:ae:f6:d3:77:43:96:41:90:d6:67:e5:e3:6e:11:21:f2: 5a:d0:7e:51:d6:d5:2b:df:7c:8f:34:e2:c4:5f:3f:63:ac:6a: 88:20:fc:c7:df:e8:18:7d:8b:e7:2f:68:8b:5a:bb:b5:03:c4: 3c:d6:4b:25:2f:6f:2c:c4:e9:95:41:f6:cc:f8:e0:de:7b:c9: fe:8d:5e:82:18:3b:59:fe:7d:fb:55:1c:75:3f:46:a7:fe:88: e9:ed:3c:af:02:6f:0e:d3:d0:f6:97:55:b5:6e:df:57:52:55: 09:5a:59:b8:06:40:27:62:b9:8b:52:00:91:be:56:1d:dd:65: 37:ec:7e:ad:a3:79:ae:53:9b:c7:56:73:34:1a:e5:a8:19:37: 0c:27:6f:54:91:83:6d:e9:f9:06:df:8b:ae:64:a4:b4:cb:2e: 1b:dc:f7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjUwODI0MTU0NTAwWhcNMjUwODMxMTU0NTAwWjAYMRYwFAYD VQQDEw02OGFiMzM3ZC0zMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NCO9OLKZ3uXzWKNY4P7y/pqH9nSM4/BmvlKZV5R4L6dTEUoFr4lkiMBn7or fw5DVd7fP/PTc+dC3RPZV6OOsk9XYAbfJBr58Z/vh3DCVGy08rfuMeYKontv22Sn qXjdyM1wnBlQsKbEiCU6gxcujAjcJDX0W34OlhVMF5G9IUvVmTNSTQXMkGSHkbk6 SE/e2pGn1/Irh+U9h7qpwrfuawDoxSD8LTXMML2QiOKhvaAhcBYW1VH4wTBaETve rkd87/N/o+aK7dapqJzZIqdA+tkuNzEkPnvLIwVdLyjDZosmLH4Qye0rKuitNVFr 0OOm6r+8dA8bEnztONpBB12ANQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJt7aJA 4nJzs/cvo9EmCf7aXP/TMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1 Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMpINXxKRTAV9jHXGtxAOx51vmuVOmEB4kO5q93cLw128/v+ggEFmD WIF21w/cThZbLZsAJEk3U9nQeQSDFNJOIRVIHUxGu8drdllgg+0jboUB2+dDuprm D3vmoa7203dDlkGQ1mfl424RIfJa0H5R1tUr33yPNOLEXz9jrGqIIPzH3+gYfYvn L2iLWru1A8Q81kslL28sxOmVQfbM+ODee8n+jV6CGDtZ/n37VRx1P0an/ojp7Tyv Am8O09D2l1W1bt9XUlUJWlm4BkAnYrmLUgCRvlYd3WU37H6to3muU5vHVnM0GuWo GTcMJ29UkYNt6fkG34uuZKS0yy4b3PcP -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:25 2025 by rpki-client