$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: 4M2GEcaNq9NIDcG+5zWl3nhL5UTX6QCEW/H+OkN6/ps= Subject key identifier: 24:87:31:8D:98:13:4F:22:9E:29:90:AC:76:0C:C6:37:3E:A7:6C:66 Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1BFE Signing time: Wed 20 Aug 2025 16:16:55 +0000 Manifest this update: Wed 20 Aug 2025 16:16:55 +0000 Manifest next update: Wed 27 Aug 2025 16:16:55 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: BYxMzOtjGRu0BJgINJhDRUFRL/VHCpwTU891aHVrfKM=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7178 (0x1c0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Aug 20 16:16:55 2025 GMT Not After : Aug 27 16:16:55 2025 GMT Subject: CN=68a5f4f7-4b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:8d:9e:b0:c8:9d:78:15:89:9f:7d:bd:76: cd:e4:20:ef:b4:ac:21:6f:26:cc:0f:8b:7a:6b:dd: 21:ce:81:55:95:76:43:cd:63:59:f5:f7:93:51:35: df:fc:d4:cd:8c:e4:f0:62:ae:42:e3:d5:ac:7c:a8: 38:a5:c7:67:39:50:c9:7c:2f:4a:52:13:77:f0:c1: d1:ba:38:40:a4:bc:82:73:0c:a9:99:31:10:55:b3: f9:35:43:2c:17:fe:3f:01:02:e1:34:6b:00:80:01: b7:73:31:5e:11:30:5d:ee:95:1b:b4:3c:92:4b:bf: 39:6a:72:70:ca:2f:20:17:f4:13:42:78:96:f9:08: 2d:e3:7a:f1:00:30:e5:c5:7c:da:f0:62:61:12:f9: 4d:a1:2e:a0:a3:c6:e5:5f:0a:fb:aa:9b:7f:eb:66: 7a:25:09:67:10:84:9e:1e:0b:a7:d2:95:d3:84:e2: 04:58:0f:3d:38:6c:f1:11:cf:f6:d7:ae:b3:03:76: 34:2a:d6:3a:64:f2:ad:6b:bc:47:79:79:e4:59:ce: e3:84:ea:74:81:7c:58:46:90:9a:cb:98:79:11:25: da:1f:af:73:f2:0c:fa:04:51:fc:46:51:dd:52:10: 52:8d:c7:34:57:51:30:7c:60:73:50:4d:bf:08:ee: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:87:31:8D:98:13:4F:22:9E:29:90:AC:76:0C:C6:37:3E:A7:6C:66 X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:09:07:c1:0a:78:ce:11:4d:34:71:ae:9d:09:62:1e:42:49: 9e:72:f5:43:eb:06:74:28:9d:f6:21:8e:97:80:e8:3d:17:05: 54:3c:1b:b4:53:9d:9a:94:e5:02:5a:c8:75:b9:10:c2:8a:8b: d5:4f:7d:06:fd:93:bc:91:ad:0b:36:d0:31:bc:06:36:aa:bf: cb:15:9c:79:0a:74:a0:7d:73:2c:32:6b:71:a1:72:6b:07:4c: 82:5f:74:5e:a9:22:2a:72:74:28:5e:02:7e:57:bd:4f:32:e3: 81:41:b4:3a:34:a6:f8:8c:3d:e5:62:c1:cb:c2:3a:21:2f:30: ac:af:89:7d:d3:ae:87:be:cd:c0:1f:ac:19:32:56:9b:2a:9a: 39:63:9c:91:1c:80:e6:d9:e6:12:67:15:a7:32:69:fb:81:27: 73:f9:31:4e:4f:46:30:ef:20:39:66:06:07:1c:65:cd:21:4c: 1a:e7:2a:1d:d6:b1:7e:f4:4f:b9:4c:68:27:7a:e8:45:c3:a9: 32:53:20:d1:6f:74:fd:45:0b:a5:f1:42:4b:53:8c:99:1d:7e: 0e:c9:87:ff:84:9a:7b:73:a0:3c:b1:7e:e2:74:54:cc:a0:d7: 91:cc:c0:ce:cd:af:f9:b9:5f:79:a8:2b:56:a2:62:9e:dd:7e: 2b:4d:33:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUwODIwMTYxNjU1WhcNMjUwODI3MTYxNjU1WjAYMRYwFAYD VQQDEw02OGE1ZjRmNy00YjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqeNnrDInXgViZ99vXbN5CDvtKwhbybMD4t6a90hzoFVlXZDzWNZ9feTUTXf /NTNjOTwYq5C49WsfKg4pcdnOVDJfC9KUhN38MHRujhApLyCcwypmTEQVbP5NUMs F/4/AQLhNGsAgAG3czFeETBd7pUbtDySS785anJwyi8gF/QTQniW+Qgt43rxADDl xXza8GJhEvlNoS6go8blXwr7qpt/62Z6JQlnEISeHgun0pXThOIEWA89OGzxEc/2 166zA3Y0KtY6ZPKta7xHeXnkWc7jhOp0gXxYRpCay5h5ESXaH69z8gz6BFH8RlHd UhBSjcc0V1EwfGBzUE2/CO66pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSHMY2Y E08inimQrHYMxjc+p2xmMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwCQfBCnjOEU00ca6dCWIeQkmecvVD6wZ0KJ32IY6XgOg9FwVUPBu0 U52alOUCWsh1uRDCiovVT30G/ZO8ka0LNtAxvAY2qr/LFZx5CnSgfXMsMmtxoXJr B0yCX3ReqSIqcnQoXgJ+V71PMuOBQbQ6NKb4jD3lYsHLwjohLzCsr4l9066Hvs3A H6wZMlabKpo5Y5yRHIDm2eYSZxWnMmn7gSdz+TFOT0Yw7yA5ZgYHHGXNIUwa5yod 1rF+9E+5TGgneuhFw6kyUyDRb3T9RQul8UJLU4yZHX4OyYf/hJp7c6A8sX7idFTM oNeRzMDOza/5uV95qCtWomKe3X4rTTMM -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:16 2025 by rpki-client