$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: zr9BGE6ALZqI0nr6dKvf8rpUoGqUf6RR++xkoLWNjao= Subject key identifier: 30:F8:FF:F7:C6:DD:E5:E1:DC:5F:FC:DA:79:90:D3:45:1C:68:A0:3B Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0CC6 Signing time: Mon 08 Sep 2025 18:12:31 +0000 Manifest this update: Mon 08 Sep 2025 18:12:31 +0000 Manifest next update: Mon 15 Sep 2025 18:12:31 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: YVBA1dTBQNXV7o6OJt18We57A9i+hdDQuRbK5gKgSPM=) 2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=) 3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=) 4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Sep 8 18:12:31 2025 GMT Not After : Sep 15 18:12:31 2025 GMT Subject: CN=68bf1c8f-c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:7b:7d:d5:fb:b1:de:48:09:5a:ae:b8:6a: 74:40:02:29:07:15:53:e5:33:44:cf:48:c7:3c:c3: ca:0b:50:76:21:f0:52:85:8f:61:11:00:64:a0:6c: a4:ad:7c:e3:a0:18:1c:e7:93:7f:06:be:83:96:f8: 04:d9:05:4f:8a:f1:a4:9d:9c:0c:6f:7f:a6:23:3b: 41:17:84:f1:5d:bc:10:8c:b6:e8:3c:fb:58:92:a1: fd:f5:f8:38:8b:f4:cf:cf:01:35:7d:d7:06:f8:e6: 07:51:1e:7b:46:93:35:95:7e:24:2b:82:6b:44:1c: 85:29:15:89:52:01:15:71:23:45:67:ef:04:c3:7c: 2f:81:0b:54:5f:7e:a7:da:ec:57:28:56:07:1f:a2: d4:5e:aa:61:f0:b6:42:d5:49:53:a0:82:ba:95:67: da:c8:7c:71:76:14:66:d9:73:52:1b:36:a9:ff:01: a8:19:63:41:d8:43:69:f9:25:79:8c:ec:82:09:b8: 05:51:3e:b4:18:df:8a:2c:07:71:8f:cd:50:66:53: 95:7f:a3:4d:63:cf:01:6e:c5:67:6b:88:86:5c:26: c0:12:0f:e5:0d:33:07:b2:8b:5f:fa:eb:cc:1d:4b: d0:68:ae:cf:2e:fe:0c:ad:1f:31:e2:de:c2:f3:69: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F8:FF:F7:C6:DD:E5:E1:DC:5F:FC:DA:79:90:D3:45:1C:68:A0:3B X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:69:4e:bb:fa:e9:9f:3d:63:ab:db:44:26:af:19:bf:19:4e: 1e:c3:f2:9e:03:db:aa:60:9f:d9:13:58:51:a9:b7:f9:b5:43: f6:f2:24:1d:ac:ea:6d:cb:5e:01:cf:6e:76:88:77:d3:78:b0: 6f:2c:5b:52:e9:ce:8c:96:66:cc:71:77:71:04:58:bb:9d:26: 16:1a:87:ca:47:b1:2d:f6:ea:ea:68:4b:34:87:f0:4f:6a:7b: ef:80:2d:0d:ad:6a:df:66:ce:6d:35:d7:7b:d9:b7:1c:93:e2: 3f:6b:b8:04:25:9d:d5:01:f8:04:97:45:15:a5:ea:23:41:52: 1f:13:00:03:d2:ff:5c:49:f6:5b:a7:0b:8d:cc:76:2a:49:67: 89:14:9d:b9:72:25:24:6d:c3:94:ac:64:5a:7f:4d:77:01:20: 42:26:cd:d2:0b:39:74:0d:9d:80:35:61:ef:e6:49:2a:8e:b6: e1:33:e2:f6:13:cc:15:55:1c:3f:72:ed:44:89:b3:39:2d:51: cd:d2:a5:dd:78:56:7a:fa:cb:71:70:33:ce:f3:98:a6:c8:f0: dd:88:07:3f:b6:50:7e:62:4d:16:e8:87:4e:f2:53:0a:0c:da: a8:53:83:c8:eb:df:c2:63:1e:c6:c1:21:89:e3:0d:0e:1d:f1: b5:4a:ee:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjUwOTA4MTgxMjMxWhcNMjUwOTE1MTgxMjMxWjAYMRYwFAYD VQQDEw02OGJmMWM4Zi1jNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ml7fdX7sd5ICVquuGp0QAIpBxVT5TNEz0jHPMPKC1B2IfBShY9hEQBkoGyk rXzjoBgc55N/Br6DlvgE2QVPivGknZwMb3+mIztBF4TxXbwQjLboPPtYkqH99fg4 i/TPzwE1fdcG+OYHUR57RpM1lX4kK4JrRByFKRWJUgEVcSNFZ+8Ew3wvgQtUX36n 2uxXKFYHH6LUXqph8LZC1UlToIK6lWfayHxxdhRm2XNSGzap/wGoGWNB2ENp+SV5 jOyCCbgFUT60GN+KLAdxj81QZlOVf6NNY88BbsVna4iGXCbAEg/lDTMHsotf+uvM HUvQaK7PLv4MrR8x4t7C82l0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD4//fG 3eXh3F/82nmQ00UcaKA7MB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtaU67+umfPWOr20Qmrxm/GU4ew/KeA9uqYJ/ZE1hRqbf5tUP28iQd rOpty14Bz252iHfTeLBvLFtS6c6MlmbMcXdxBFi7nSYWGofKR7Et9urqaEs0h/BP anvvgC0NrWrfZs5tNdd72bcck+I/a7gEJZ3VAfgEl0UVpeojQVIfEwAD0v9cSfZb pwuNzHYqSWeJFJ25ciUkbcOUrGRaf013ASBCJs3SCzl0DZ2ANWHv5kkqjrbhM+L2 E8wVVRw/cu1EibM5LVHN0qXdeFZ6+stxcDPO85imyPDdiAc/tlB+Yk0W6IdO8lMK DNqoU4PI69/CYx7GwSGJ4w0OHfG1Su6V -----END CERTIFICATE-----Generated at Tue Sep 9 17:45:00 2025 by rpki-client