$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft File: _MSmV91TDZU6LW8_FZMv_gHykdY.mft (raw, json) Hash identifier: Etcpr3ZKP07t2XwAv4XeTrCGgVgViQ4DQN2jkMUs9Lo= Subject key identifier: 46:40:DC:8A:99:D2:5B:67:8D:F3:7B:73:F8:49:55:D9:FD:2E:02:71 Authority key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 Certificate issuer: /CN=A916BF2B/serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft Manifest number: 8F Signing time: Wed 03 Sep 2025 07:13:17 +0000 Manifest this update: Wed 03 Sep 2025 07:13:16 +0000 Manifest next update: Wed 10 Sep 2025 07:13:16 +0000 Files and hashes: 1: _MSmV91TDZU6LW8_FZMv_gHykdY.crl (hash: jreEtNCLBeigLGRi/CRPx6/ZRMBYRj8VmMX9SRYvf0U=) 2: 8AD1FCF8BBBF11EF87907310C4F9AE02.roa (hash: Rt4bwv9SSiv+XiRqx1M1+YBUJXfxko335m5/WVQTRcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BF2B, serialNumber=FCC4A657DD530D953A2D6F3F15932FFE01F291D6 Validity Not Before: Sep 3 07:13:16 2025 GMT Not After : Sep 10 07:13:16 2025 GMT Subject: CN=68b7ea8c-2f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:85:b8:19:1f:5a:14:8a:85:de:0b:c9:77: 45:9e:36:df:62:73:90:81:4e:1e:97:af:5f:1f:9f: e2:0f:6f:ef:6c:73:07:c0:b2:f5:99:ec:1a:ae:b1: a2:f4:00:ee:6f:7a:94:0f:b3:94:4c:f7:a4:e6:31: 5d:86:4d:13:ad:27:c1:83:41:0d:d3:97:5a:1b:eb: d0:1c:47:5b:d2:d1:18:ad:17:c9:f4:26:fc:74:c2: 76:43:cb:71:30:1b:63:7d:5e:f2:ca:5f:1b:84:1c: 89:af:ea:ff:58:7a:a4:d6:15:83:18:bc:e0:ad:64: d4:4c:67:54:13:a5:fc:21:59:c8:c6:2b:9c:61:6d: dd:03:04:b0:5f:49:c0:5f:41:31:91:50:4a:7b:0d: a4:1e:9d:37:f8:98:d4:37:64:b0:62:06:31:9a:20: f0:c3:67:bf:a5:da:f0:23:52:67:61:1b:5d:51:d0: 54:f6:63:bf:83:3a:a4:63:f2:69:2c:26:6b:24:29: 61:89:a9:b6:78:d3:81:83:0e:52:ff:e6:c2:b3:93: 45:41:40:7e:8f:73:2f:c9:de:c9:ef:c7:0e:46:12: 48:a5:8e:cd:5e:03:f5:a2:ae:5e:9e:72:1e:a3:2c: 09:68:85:1d:50:1f:7c:55:eb:7e:12:20:f2:36:5d: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:40:DC:8A:99:D2:5B:67:8D:F3:7B:73:F8:49:55:D9:FD:2E:02:71 X509v3 Authority Key Identifier: keyid:FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:19:49:bf:6f:5e:0b:59:6e:61:1c:22:84:e3:80:93:d5:5e: 2e:c4:15:20:9c:7b:6a:ec:e3:bc:c2:93:d5:1a:d8:15:d6:8e: 89:6d:18:d7:6f:79:27:24:58:f0:79:ed:21:57:ca:ed:84:c3: 46:ab:51:8a:76:88:37:f8:3d:b0:34:ce:b3:1c:96:90:74:e9: 50:b5:a5:f4:1c:3f:3c:f4:e6:71:8d:c9:a5:8c:44:58:b7:44: dc:31:c5:4f:6e:74:30:8e:59:c6:d8:e7:2c:c2:d1:a1:52:8a: 0e:fd:f1:bd:6d:c3:df:0d:fa:1c:73:da:cc:bd:af:49:62:0c: 54:91:5f:d4:68:2c:fe:ec:59:c2:65:fd:13:af:75:17:46:e2: 79:fa:93:aa:99:09:48:f5:f5:1d:5e:6e:fd:3e:e6:9a:42:8d: 91:fc:c6:20:45:35:18:b6:1c:f3:ff:42:c6:d8:9c:a1:0d:13: f1:35:50:0f:6a:b0:c5:f6:11:ee:cc:2f:93:c9:1f:b9:56:0f: 28:81:95:68:15:dd:91:1d:ef:4b:d6:79:25:82:3f:95:85:68: 18:48:03:50:63:22:46:c2:be:ff:22:db:8a:de:07:02:83:5d: ca:5d:de:47:b7:b8:91:2d:4b:a8:bd:9b:04:42:ba:e5:b5:5c: 34:01:de:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJGMkIxMTAvBgNVBAUTKEZDQzRBNjU3REQ1MzBEOTUzQTJENkYzRjE1OTMyRkZF MDFGMjkxRDYwHhcNMjUwOTAzMDcxMzE2WhcNMjUwOTEwMDcxMzE2WjAYMRYwFAYD VQQDEw02OGI3ZWE4Yy0yZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27qFuBkfWhSKhd4LyXdFnjbfYnOQgU4el69fH5/iD2/vbHMHwLL1mewarrGi 9ADub3qUD7OUTPek5jFdhk0TrSfBg0EN05daG+vQHEdb0tEYrRfJ9Cb8dMJ2Q8tx MBtjfV7yyl8bhByJr+r/WHqk1hWDGLzgrWTUTGdUE6X8IVnIxiucYW3dAwSwX0nA X0ExkVBKew2kHp03+JjUN2SwYgYxmiDww2e/pdrwI1JnYRtdUdBU9mO/gzqkY/Jp LCZrJClhiam2eNOBgw5S/+bCs5NFQUB+j3Mvyd7J78cORhJIpY7NXgP1oq5ennIe oywJaIUdUB98Vet+EiDyNl2nHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZA3IqZ 0ltnjfN7c/hJVdn9LgJxMB8GA1UdIwQYMBaAFPzEplfdUw2VOi1vPxWTL/4B8pHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkYyQi80NTlFNjY2RUI3 OEExMUVGQjg3NDI3NkVDNEY5QUUwMi9fTVNtVjkxVERaVTZMVzhfRlpNdl9nSHlr ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19NU21WOTFURFpVNkxXOF9GWk12X2dIeWtkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkYyQi80NTlFNjY2RUI3OEExMUVGQjg3NDI3NkVDNEY5QUUwMi9fTVNtVjkxVERa VTZMVzhfRlpNdl9nSHlrZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/GUm/b14LWW5hHCKE44CT1V4uxBUgnHtq7OO8wpPVGtgV1o6JbRjX b3knJFjwee0hV8rthMNGq1GKdog3+D2wNM6zHJaQdOlQtaX0HD889OZxjcmljERY t0TcMcVPbnQwjlnG2OcswtGhUooO/fG9bcPfDfocc9rMva9JYgxUkV/UaCz+7FnC Zf0Tr3UXRuJ5+pOqmQlI9fUdXm79PuaaQo2R/MYgRTUYthzz/0LG2JyhDRPxNVAP arDF9hHuzC+TyR+5Vg8ogZVoFd2RHe9L1nklgj+VhWgYSANQYyJGwr7/ItuK3gcC g13KXd5Ht7iRLUuovZsEQrrltVw0Ad69 -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client