$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: y1TghFXpk/9z/fOJR7/FVqz5SJIpACNfqDKS2ftC6sU= Subject key identifier: B0:60:71:96:20:01:E3:CF:AF:B7:2D:28:6A:D9:29:43:91:CF:1A:0D Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 0128 Signing time: Fri 15 Aug 2025 05:09:07 +0000 Manifest this update: Fri 15 Aug 2025 05:09:07 +0000 Manifest next update: Fri 22 Aug 2025 05:09:07 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: GdkmYl7mSQD3pHS55sbeBlNUeIc3hacKxzG2paePt94=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: 5qovDHOan50hnf/FjfnVrN4jiM2XyUgRA/JNpM3f5Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 05:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Aug 15 05:09:07 2025 GMT Not After : Aug 22 05:09:07 2025 GMT Subject: CN=689ec0f3-de07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:74:be:b9:a4:7b:a6:c1:85:28:e3:1c:49: 44:76:38:a3:2a:c3:51:51:74:de:a0:c4:a5:b1:71: c1:63:7b:35:3e:c4:75:74:de:47:65:23:33:76:29: 14:b6:d0:b0:30:b2:0a:98:60:cd:5c:f5:95:2f:bb: 03:9f:ef:70:c3:c9:3c:c8:f3:89:aa:5f:a6:4e:d6: ec:ee:b0:52:f0:dc:31:e9:e2:04:a4:f6:cf:bc:f6: f8:8c:03:38:87:cd:75:c9:39:e7:45:40:c8:60:95: ad:d4:e4:bf:1c:f8:81:86:68:1a:37:6c:1a:f2:e2: 06:33:18:6c:e4:4f:63:8e:c4:f5:46:8f:88:3c:44: bf:59:2e:80:59:f2:5f:f0:fb:d6:90:3b:92:b7:ec: 3c:e5:5c:ca:5e:62:87:40:3d:29:b4:28:09:cb:74: 7c:11:34:37:be:e3:e9:cc:0b:9d:0b:26:6c:92:cb: b3:1d:7e:8e:d2:3a:b7:b2:18:e3:1a:1e:9a:e2:a0: f9:72:ab:ce:7b:54:37:c5:90:69:2e:df:76:8a:2e: 4c:51:39:9f:11:e1:bb:26:63:e4:ae:07:75:93:e6: ea:ac:75:71:e1:91:9f:2b:61:c2:14:3f:21:67:eb: 33:1f:5d:23:66:29:29:31:24:9f:df:59:07:d1:ab: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:71:96:20:01:E3:CF:AF:B7:2D:28:6A:D9:29:43:91:CF:1A:0D X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:dd:e5:de:b6:9a:13:39:c2:f3:c9:8f:56:a5:8f:4b:41:31: bd:fb:92:15:14:a9:92:03:20:0d:82:6e:0e:ef:9c:09:9e:f5: 15:d6:1b:09:a5:6d:a5:b6:40:86:9e:83:45:21:67:55:4a:1a: 41:61:53:62:f6:62:99:ad:28:b1:a4:72:07:d7:ac:22:80:fe: 88:3e:9e:94:ce:d8:1e:3b:98:9a:0a:36:02:69:64:dd:ca:f7: eb:66:8e:00:44:2d:f5:d1:e4:74:fe:05:2a:71:68:10:61:6e: b6:e2:84:5e:19:b4:bb:97:d5:ea:5d:93:64:47:08:c1:9d:43: 34:d7:fc:c8:3d:eb:b0:97:cd:83:a7:95:4b:a9:bf:ed:5f:ee: 79:02:b4:95:85:79:30:58:15:f2:04:ee:e5:68:65:30:87:82: 40:94:91:6c:51:48:89:04:3e:81:af:0b:fa:bb:e2:12:4d:13: bb:ed:6d:5a:1c:96:50:5c:27:65:4f:25:2c:40:f1:5a:b8:48: 91:93:db:d1:b4:d5:0b:d6:83:bd:ed:b1:75:ab:8e:2a:bd:e8: ff:77:35:58:3c:5a:c9:1b:19:ea:21:ca:6d:97:68:92:5e:b0: 1c:d4:a2:8b:67:43:26:be:64:a9:60:70:68:5f:5f:07:d7:9c: fc:0f:2c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjUwODE1MDUwOTA3WhcNMjUwODIyMDUwOTA3WjAYMRYwFAYD VQQDEw02ODllYzBmMy1kZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQV0vrmke6bBhSjjHElEdjijKsNRUXTeoMSlsXHBY3s1PsR1dN5HZSMzdikU ttCwMLIKmGDNXPWVL7sDn+9ww8k8yPOJql+mTtbs7rBS8Nwx6eIEpPbPvPb4jAM4 h811yTnnRUDIYJWt1OS/HPiBhmgaN2wa8uIGMxhs5E9jjsT1Ro+IPES/WS6AWfJf 8PvWkDuSt+w85VzKXmKHQD0ptCgJy3R8ETQ3vuPpzAudCyZsksuzHX6O0jq3shjj Gh6a4qD5cqvOe1Q3xZBpLt92ii5MUTmfEeG7JmPkrgd1k+bqrHVx4ZGfK2HCFD8h Z+szH10jZikpMSSf31kH0asQQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBgcZYg AePPr7ctKGrZKUORzxoNMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC93eXetpoTOcLzyY9WpY9LQTG9+5IVFKmSAyANgm4O75wJnvUV1hsJ pW2ltkCGnoNFIWdVShpBYVNi9mKZrSixpHIH16wigP6IPp6UztgeO5iaCjYCaWTd yvfrZo4ARC310eR0/gUqcWgQYW624oReGbS7l9XqXZNkRwjBnUM01/zIPeuwl82D p5VLqb/tX+55ArSVhXkwWBXyBO7laGUwh4JAlJFsUUiJBD6Brwv6u+ISTRO77W1a HJZQXCdlTyUsQPFauEiRk9vRtNUL1oO97bF1q44qvej/dzVYPFrJGxnqIcptl2iS XrAc1KKLZ0MmvmSpYHBoX18H15z8Dyw+ -----END CERTIFICATE-----Generated at Sun Aug 17 02:03:42 2025 by rpki-client