$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft File: C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json) Hash identifier: XBOsr39JPktnpQ5M08u1wD0ciFbXIpFi7Am53BJo3bI= Subject key identifier: E4:C9:CE:44:D1:E4:B7:19:7A:05:D2:3E:DD:5D:78:53:D7:D7:47:6F Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 Certificate issuer: /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft Manifest number: 01BF Signing time: Fri 05 Sep 2025 03:39:09 +0000 Manifest this update: Fri 05 Sep 2025 03:39:08 +0000 Manifest next update: Fri 12 Sep 2025 03:39:08 +0000 Files and hashes: 1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: ENLgZ4T1+80t+rLPYkn63qAuz90Vg5xQ7aMZzByumag=) 2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: TD7salmLrRM34euIo8G4Ct9yO9PS+fagaxM6vGI2MEw=) 3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: fSxpUr+WUEiMsQuXQ14Z3BJW2UDp3SS+KK2DrcMSuYE=) 4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: ihXElke8srSYYptYUqBX48/+59ysvth9EZ73na0o1PM=) 5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: uvhIRu3Zl3QRrUhy2ZG8t4bZnlI9E1gwDxFwYKld2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5 Validity Not Before: Sep 5 03:39:08 2025 GMT Not After : Sep 12 03:39:08 2025 GMT Subject: CN=68ba5b5d-1f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:af:9c:0c:81:1f:60:e9:bb:d9:b3:99:45: aa:fd:4d:69:66:9a:09:f8:53:27:94:8a:97:0b:bf: 40:0f:ec:0c:77:74:9f:e1:0e:80:ae:37:40:0c:de: c6:9f:69:c5:c0:1b:42:cf:f4:b1:b8:30:06:0f:a0: cd:08:48:d9:ed:ac:52:e7:f5:b0:23:a9:b3:f9:4b: 14:38:e3:56:37:f4:e5:ea:38:43:e8:62:23:f7:72: 87:27:0a:c4:25:f0:7b:54:f1:62:12:88:e4:24:2f: 90:37:20:a0:3d:f9:a1:87:26:c5:40:f9:01:ca:53: b9:98:06:ca:ef:8a:0b:f8:10:7e:27:20:b2:fa:6f: bf:13:39:c8:b3:4d:3a:84:53:e7:c1:27:d2:72:3f: 20:e0:35:52:5a:f1:b0:a8:c6:da:5f:56:3e:2d:1d: c4:d7:28:40:3d:e7:17:02:d6:db:a0:82:4d:a5:d9: a6:b1:21:b3:f3:28:81:a3:6d:67:45:55:a5:b2:5e: 71:40:02:30:5f:58:36:c2:3d:63:02:08:0b:e1:2d: 8c:d3:1f:09:64:e2:b3:2b:40:c3:1b:e3:36:dc:9e: 87:3a:b1:dc:53:ed:63:0d:d0:8d:b1:22:af:aa:b1: 68:ef:7c:82:1a:51:0d:dd:03:61:f4:50:34:8b:33: 04:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C9:CE:44:D1:E4:B7:19:7A:05:D2:3E:DD:5D:78:53:D7:D7:47:6F X509v3 Authority Key Identifier: keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f8:29:04:02:22:7e:c1:d0:b7:a2:26:fd:3c:3a:70:06:83: 78:00:b1:4f:9a:76:fc:c7:dd:7b:3c:bc:ef:b9:99:a7:70:17: 90:9e:ee:22:cf:80:4b:f1:a0:4e:eb:f4:33:46:f3:d8:b8:77: f1:3f:1c:20:ce:75:2f:f8:42:2f:c4:fe:34:16:6a:7b:13:d2: ed:21:f9:df:a3:34:7a:1d:e1:bd:25:0a:96:c5:b9:05:0f:1b: 95:bd:33:53:64:f1:1f:69:bd:46:c5:23:25:b1:95:4e:92:34: 79:37:f5:26:64:62:21:1f:93:ee:74:6e:6d:10:b6:f4:d8:07: 24:4d:8a:3c:dc:07:4c:ef:85:66:88:b1:e7:d7:1d:59:0f:fc: 36:fa:16:40:73:5f:ae:4d:14:e5:1f:80:87:c0:5d:72:57:d1: 1d:da:36:c6:ca:ee:a5:25:19:52:e2:59:54:3d:c4:c9:21:1e: 00:c1:c8:54:bd:cd:2b:a4:90:a2:83:f4:bb:c9:da:30:d9:59: dc:e1:f8:34:10:ca:e1:0c:11:4c:fe:c0:89:b5:a3:1a:aa:f9: e2:9e:fb:e1:64:32:9d:9f:c8:96:57:a6:cc:0d:f3:df:80:e8: 20:fc:88:b1:4a:6b:2f:8a:8f:23:b0:97:20:aa:4c:da:30:5d: aa:1e:11:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5 Q0U3RDc4QjUwHhcNMjUwOTA1MDMzOTA4WhcNMjUwOTEyMDMzOTA4WjAYMRYwFAYD VQQDEw02OGJhNWI1ZC0xZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09avnAyBH2Dpu9mzmUWq/U1pZpoJ+FMnlIqXC79AD+wMd3Sf4Q6ArjdADN7G n2nFwBtCz/SxuDAGD6DNCEjZ7axS5/WwI6mz+UsUOONWN/Tl6jhD6GIj93KHJwrE JfB7VPFiEojkJC+QNyCgPfmhhybFQPkBylO5mAbK74oL+BB+JyCy+m+/EznIs006 hFPnwSfScj8g4DVSWvGwqMbaX1Y+LR3E1yhAPecXAtbboIJNpdmmsSGz8yiBo21n RVWlsl5xQAIwX1g2wj1jAggL4S2M0x8JZOKzK0DDG+M23J6HOrHcU+1jDdCNsSKv qrFo73yCGlEN3QNh9FA0izMEswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTJzkTR 5LcZegXSPt1deFPX10dvMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+CkEAiJ+wdC3oib9PDpwBoN4ALFPmnb8x917PLzvuZmncBeQnu4i z4BL8aBO6/QzRvPYuHfxPxwgznUv+EIvxP40Fmp7E9LtIfnfozR6HeG9JQqWxbkF DxuVvTNTZPEfab1GxSMlsZVOkjR5N/UmZGIhH5PudG5tELb02AckTYo83AdM74Vm iLHn1x1ZD/w2+hZAc1+uTRTlH4CHwF1yV9Ed2jbGyu6lJRlS4llUPcTJIR4AwchU vc0rpJCig/S7ydow2Vnc4fg0EMrhDBFM/sCJtaMaqvninvvhZDKdn8iWV6bMDfPf gOgg/IixSmsvio8jsJcgqkzaMF2qHhHz -----END CERTIFICATE-----Generated at Sat Sep 6 15:38:02 2025 by rpki-client