$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: ifeOjVmy5on0SxRdzFL6YuZGMFl+oOMUQjDFfpuWW24= Subject key identifier: BB:54:E1:0F:0A:70:A2:34:E3:44:AF:1F:A0:AE:C7:8B:58:D9:2B:F6 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A38 Signing time: Mon 08 Sep 2025 19:46:16 +0000 Manifest this update: Mon 08 Sep 2025 19:46:16 +0000 Manifest next update: Mon 15 Sep 2025 19:46:16 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: JLrsXf8BDws11Yo4BGDrv0ePmQ40X8pmGwSOxkNEFV4=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Sep 8 19:46:16 2025 GMT Not After : Sep 15 19:46:16 2025 GMT Subject: CN=68bf3288-ceaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:55:bf:cc:7c:0f:14:a7:0c:05:7a:75:24: 1d:75:43:ee:a7:25:7d:1f:3b:6c:65:23:0d:b8:7b: d3:74:55:66:01:17:49:b9:36:65:13:ae:47:fa:47: 8b:5d:a2:5c:6e:fe:f3:63:1d:2d:a5:91:19:44:f8: 30:b9:a5:30:71:36:0e:a3:5d:7d:cd:0c:d7:51:f8: a1:1f:8b:11:64:e5:89:28:1f:67:8e:80:5c:fe:46: 24:08:f6:b6:f8:93:85:a8:5a:7e:94:c2:aa:cd:2f: f3:e1:fb:bb:fe:39:b6:f5:15:83:7c:49:67:44:2c: 55:b3:f4:a7:3e:f6:df:d8:6c:6c:21:8d:99:82:84: 94:fc:38:e2:12:af:72:e9:dc:39:9c:d9:0c:10:8f: f3:63:03:af:e4:4b:51:c7:8c:4b:0b:4e:e1:f9:32: a4:cd:fa:1b:72:ca:91:21:f2:5c:18:a8:55:f7:30: cc:85:18:73:ef:e8:58:81:98:32:d8:87:ee:69:4e: a9:a9:c8:e0:0b:40:3c:e2:c6:47:d1:8c:d5:34:ba: 88:01:d6:02:9c:c2:21:d3:32:2f:a9:55:c9:5c:3e: 37:fe:31:4d:0b:24:d3:39:b2:f8:c8:13:0e:06:36: 07:f0:35:a9:23:34:ce:80:de:48:2e:2b:af:0d:2a: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:E1:0F:0A:70:A2:34:E3:44:AF:1F:A0:AE:C7:8B:58:D9:2B:F6 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c4:54:5e:fc:9c:6c:53:48:c5:d4:6a:9e:72:c3:6d:13:64: b7:c6:16:74:38:b3:38:58:dc:f7:d5:99:f0:a6:00:b5:0c:0c: 2f:cd:73:35:ac:ef:d7:36:ec:9a:69:e6:61:33:3c:50:5c:d6: 13:58:7d:5d:5f:e5:b6:51:0a:e7:62:dd:0f:16:1c:59:f4:2a: 8b:3f:30:f5:f8:53:fb:91:b5:2d:66:6b:fb:d1:6b:9e:c8:b2: d8:bc:ec:03:de:8f:b8:4f:6d:c6:55:58:63:0b:70:eb:81:82: 62:67:1d:27:96:52:a4:4d:22:c2:80:ea:a0:fc:8f:e4:c9:71: 77:ba:3d:67:ca:f0:1f:43:38:d5:d1:d3:e7:5c:08:0f:d8:15: d2:9c:7b:b3:67:b0:3e:4e:8f:10:6f:ab:9a:4d:31:0a:63:dc: df:25:2e:be:cf:07:6f:c2:b8:f4:3a:4c:cd:c8:a6:59:0d:15: 73:2b:8a:d8:c9:12:f3:2a:2e:a1:0d:17:6b:8f:4f:9c:28:19: ed:44:99:a9:06:5e:12:7a:34:fa:8e:f2:a8:ad:da:cd:a2:34: 36:c3:a6:e3:6f:08:1d:b7:ff:4a:82:b2:a1:25:d1:a3:29:1c: d3:43:fb:7c:b5:a8:e3:5a:c6:5d:7e:f6:b2:72:2a:6b:6e:97: e1:a6:e2:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwOTA4MTk0NjE2WhcNMjUwOTE1MTk0NjE2WjAYMRYwFAYD VQQDEw02OGJmMzI4OC1jZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvJVv8x8DxSnDAV6dSQddUPupyV9HztsZSMNuHvTdFVmARdJuTZlE65H+keL XaJcbv7zYx0tpZEZRPgwuaUwcTYOo119zQzXUfihH4sRZOWJKB9njoBc/kYkCPa2 +JOFqFp+lMKqzS/z4fu7/jm29RWDfElnRCxVs/SnPvbf2GxsIY2ZgoSU/DjiEq9y 6dw5nNkMEI/zYwOv5EtRx4xLC07h+TKkzfobcsqRIfJcGKhV9zDMhRhz7+hYgZgy 2IfuaU6pqcjgC0A84sZH0YzVNLqIAdYCnMIh0zIvqVXJXD43/jFNCyTTObL4yBMO BjYH8DWpIzTOgN5ILiuvDSoyXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtU4Q8K cKI040SvH6Cux4tY2Sv2MB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcxFRe/JxsU0jF1GqecsNtE2S3xhZ0OLM4WNz31ZnwpgC1DAwvzXM1 rO/XNuyaaeZhMzxQXNYTWH1dX+W2UQrnYt0PFhxZ9CqLPzD1+FP7kbUtZmv70Wue yLLYvOwD3o+4T23GVVhjC3DrgYJiZx0nllKkTSLCgOqg/I/kyXF3uj1nyvAfQzjV 0dPnXAgP2BXSnHuzZ7A+To8Qb6uaTTEKY9zfJS6+zwdvwrj0OkzNyKZZDRVzK4rY yRLzKi6hDRdrj0+cKBntRJmpBl4SejT6jvKordrNojQ2w6bjbwgdt/9KgrKhJdGj KRzTQ/t8tajjWsZdfvayciprbpfhpuK5 -----END CERTIFICATE-----Generated at Tue Sep 9 17:40:01 2025 by rpki-client