$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: jpKC5MQcVOfvhatvpa3JD4HjK/lxGTZwDmc3v8P3NhQ= Subject key identifier: C0:0D:21:52:3A:40:4C:91:0C:82:FA:71:C9:6E:10:5F:15:69:7B:F2 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 0163 Signing time: Thu 21 Aug 2025 04:04:55 +0000 Manifest this update: Thu 21 Aug 2025 04:04:55 +0000 Manifest next update: Thu 28 Aug 2025 04:04:55 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: bumZoHUAe/VCABYQaVzTvI9lgJlUbDsw2q/jEurbuaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Aug 21 04:04:55 2025 GMT Not After : Aug 28 04:04:55 2025 GMT Subject: CN=68a69ae7-4d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:ea:cf:4f:cd:72:a4:cb:9d:9e:b4:59:b4: c1:ac:1d:b4:c4:76:5c:a5:11:1f:7b:8d:37:60:9d: 89:f3:ac:a4:08:e9:27:36:28:6c:2e:17:4b:8b:4f: ef:c2:27:7a:e1:65:00:3d:ba:6f:48:d5:7f:72:2a: b6:32:40:77:d2:4e:68:4e:90:86:2b:79:b8:19:51: ac:ed:cc:51:2c:9c:22:2c:b6:02:22:6b:e9:fb:d4: 20:00:dd:24:8b:da:94:d7:2a:e5:3b:11:1c:d9:77: 25:4a:80:a3:2f:80:a6:18:02:7c:71:8d:59:ff:ee: 8b:62:86:a3:a3:50:3b:76:05:96:5c:b7:b2:5f:7f: 2f:a3:85:7d:36:f7:a9:c3:a5:0a:d4:05:b3:98:79: 6b:3a:ed:08:96:84:f4:28:2b:d3:49:b7:0a:fc:0e: c2:28:17:40:d9:f3:ac:38:ee:2f:fd:e1:a2:e7:7a: a8:1f:c8:3f:20:ff:b9:a0:d5:6a:51:47:49:19:dd: 99:1c:26:3e:3c:e0:ba:77:d3:db:c5:f8:9c:ef:95: 56:b3:e3:32:c9:c1:fd:b9:6c:23:cc:bd:89:dd:5b: e2:8a:dc:44:ae:23:dd:e8:85:f2:13:a0:03:62:8a: 43:a3:36:b6:be:13:2e:ca:27:82:8d:29:47:a8:a3: a6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:21:52:3A:40:4C:91:0C:82:FA:71:C9:6E:10:5F:15:69:7B:F2 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4e:73:bb:ae:a2:01:a3:6f:ee:7c:4e:0a:b4:36:0f:76:c4: cb:3f:49:2c:25:63:43:b0:5a:52:c6:47:be:08:05:1e:d9:cc: ce:3d:e1:50:75:d3:9f:52:68:b5:6e:65:92:6e:df:56:73:7e: d0:fa:22:af:85:7b:75:17:86:aa:be:a3:7a:26:40:89:f7:03: 2b:a0:ea:bc:fd:9a:d7:7c:60:a5:12:bf:1d:55:cb:21:94:92: 02:f0:e5:b0:81:37:48:ef:fb:5a:e8:c5:96:0b:de:a3:a0:65: 48:4f:86:85:52:76:7b:77:74:82:aa:4f:a9:bc:42:30:87:c0: 28:0d:03:d4:88:3f:42:a6:0d:58:d1:12:f0:25:64:1b:30:2f: f8:17:5f:2a:d9:57:a1:76:68:9f:83:94:14:00:a5:b8:21:a3: 9a:e3:74:15:21:58:de:c5:93:19:6b:8c:56:41:8b:9c:a7:13: 71:c5:2c:d0:68:ff:55:f6:12:5c:3f:18:bf:80:6e:91:70:d6: 3e:ce:6c:eb:f0:4b:af:50:65:8c:fc:8e:88:b5:81:dc:82:d3: 68:ca:5a:87:7e:1b:a2:0e:f9:cd:70:b4:03:a5:5d:ec:2f:9c: fb:ec:ee:d1:9f:99:b4:ed:0d:6c:36:d2:90:6a:43:d6:d8:12: 91:a3:a5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjUwODIxMDQwNDU1WhcNMjUwODI4MDQwNDU1WjAYMRYwFAYD VQQDEw02OGE2OWFlNy00ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxi3qz0/NcqTLnZ60WbTBrB20xHZcpREfe403YJ2J86ykCOknNihsLhdLi0/v wid64WUAPbpvSNV/ciq2MkB30k5oTpCGK3m4GVGs7cxRLJwiLLYCImvp+9QgAN0k i9qU1yrlOxEc2XclSoCjL4CmGAJ8cY1Z/+6LYoajo1A7dgWWXLeyX38vo4V9Nvep w6UK1AWzmHlrOu0IloT0KCvTSbcK/A7CKBdA2fOsOO4v/eGi53qoH8g/IP+5oNVq UUdJGd2ZHCY+POC6d9Pbxfic75VWs+MyycH9uWwjzL2J3VviitxEriPd6IXyE6AD YopDoza2vhMuyieCjSlHqKOm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMANIVI6 QEyRDIL6ccluEF8VaXvyMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMTnO7rqIBo2/ufE4KtDYPdsTLP0ksJWNDsFpSxke+CAUe2czOPeFQ ddOfUmi1bmWSbt9Wc37Q+iKvhXt1F4aqvqN6JkCJ9wMroOq8/ZrXfGClEr8dVcsh lJIC8OWwgTdI7/ta6MWWC96joGVIT4aFUnZ7d3SCqk+pvEIwh8AoDQPUiD9Cpg1Y 0RLwJWQbMC/4F18q2Vehdmifg5QUAKW4IaOa43QVIVjexZMZa4xWQYucpxNxxSzQ aP9V9hJcPxi/gG6RcNY+zmzr8EuvUGWM/I6ItYHcgtNoylqHfhuiDvnNcLQDpV3s L5z77O7Rn5m07Q1sNtKQakPW2BKRo6Ux -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:52 2025 by rpki-client