$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft File: C-qOMYe9SY0l8kldarDunkU0p_E.mft (raw, json) Hash identifier: 1jaJqHecrc+LS/7AcdSv3ZIFRRnQsW4WMcPPcOuKtPU= Subject key identifier: 96:08:AE:CD:E7:3F:52:98:53:F7:7D:D8:B6:F8:F7:BA:E0:17:EB:4C Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 Certificate issuer: /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft Manifest number: 0804 Signing time: Wed 20 Aug 2025 20:57:41 +0000 Manifest this update: Wed 20 Aug 2025 20:57:41 +0000 Manifest next update: Wed 27 Aug 2025 20:57:40 +0000 Files and hashes: 1: C-qOMYe9SY0l8kldarDunkU0p_E.crl (hash: vJfyawxkxHFUFovphbfrnt9KzK/N+dt7fV0lfAuYmio=) 2: B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (hash: NrRaGTGhuuOTZ4sgZcXvRyo7s7nlCIeG2H0kiEu0fzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1 Validity Not Before: Aug 20 20:57:41 2025 GMT Not After : Aug 27 20:57:40 2025 GMT Subject: CN=68a636c5-2c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:b2:66:36:15:d6:14:fc:81:8e:32:18:c7: f6:24:e3:b3:80:9c:61:2d:2d:6c:8d:0b:93:8f:e7: 31:ba:d1:7a:16:1c:af:f8:6f:9e:f5:47:37:e6:4c: 6f:54:3a:ce:c2:12:a6:bc:1a:9f:74:39:66:bd:b0: 4e:12:d3:80:e6:92:d4:00:d2:05:0c:e2:18:3a:5b: 4f:e9:26:00:96:3b:76:ab:28:21:ba:32:31:c7:d6: fa:6e:da:d8:5f:d1:cc:5d:ed:80:a5:83:72:aa:e9: 37:31:8c:67:71:77:3b:bc:e2:1d:18:47:52:03:03: 09:73:c8:d7:23:53:53:a9:e8:16:c4:d6:54:5f:3f: 43:6b:00:ec:79:52:0f:78:0c:ca:4f:d7:ac:b9:a3: 21:24:95:06:00:58:1a:3b:c2:08:57:98:67:9e:d5: ac:ba:b5:51:8c:83:39:e3:9c:0d:45:b3:59:ca:47: ae:78:d0:3d:5a:0d:37:cb:58:53:0b:a2:17:44:eb: 4b:08:8b:39:03:85:16:dc:05:80:30:64:34:e5:e6: 66:b0:7b:0d:d8:ff:70:35:9f:c3:78:4b:49:9c:5a: 0c:9e:3b:77:d6:f0:ff:4d:f5:b9:f7:8c:54:83:ba: a7:0c:a7:4d:2b:48:4b:34:b3:37:78:0b:f4:92:0f: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:08:AE:CD:E7:3F:52:98:53:F7:7D:D8:B6:F8:F7:BA:E0:17:EB:4C X509v3 Authority Key Identifier: keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:29:b2:78:6f:86:4f:98:e4:86:a9:05:a6:a0:fe:c1:0e: 44:12:ba:53:9b:91:25:70:ae:ab:f8:68:23:3e:d2:43:15:4d: ec:23:c9:ab:fb:11:b4:be:8f:d3:51:95:58:5d:66:64:1a:35: 49:73:cd:39:35:4a:6b:b7:1d:87:82:f2:79:13:22:9d:d4:0b: 6c:60:11:48:ac:ed:74:9f:55:ce:06:93:f4:29:b5:38:04:8b: 30:4a:31:ed:1c:cc:ce:93:16:ee:ca:36:bb:5f:17:09:37:0e: 5d:af:eb:18:61:a2:1d:23:33:d7:59:0d:9c:bc:d2:5b:bb:ba: 51:05:af:1a:43:c6:fc:0b:9f:35:fd:da:d2:90:f9:9f:95:ce: 2c:e5:91:8b:d8:65:56:4e:08:fc:2b:43:f6:55:ce:c2:82:7f: 62:51:7d:13:04:e8:38:42:20:13:46:57:e0:67:c5:4f:62:c3: 16:82:3a:d1:5a:6b:61:7d:c9:d9:a8:2d:a9:78:bc:f3:f8:e0: 59:e3:a1:95:44:68:c0:f2:50:b2:58:9d:a4:16:d6:c1:2a:9d: 1f:c0:a9:c0:5f:37:c1:69:ad:3f:b9:83:2d:5a:03:35:fd:42: 73:eb:da:3f:dc:b3:a9:f5:15:b0:92:e2:f6:0c:85:63:0c:a2: d4:31:3f:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NEQxMTAvBgNVBAUTKDBCRUE4RTMxODdCRDQ5OEQyNUYyNDk1RDZBQjBFRTlF NDUzNEE3RjEwHhcNMjUwODIwMjA1NzQxWhcNMjUwODI3MjA1NzQwWjAYMRYwFAYD VQQDEw02OGE2MzZjNS0yYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9SyZjYV1hT8gY4yGMf2JOOzgJxhLS1sjQuTj+cxutF6Fhyv+G+e9Uc35kxv VDrOwhKmvBqfdDlmvbBOEtOA5pLUANIFDOIYOltP6SYAljt2qyghujIxx9b6btrY X9HMXe2ApYNyquk3MYxncXc7vOIdGEdSAwMJc8jXI1NTqegWxNZUXz9DawDseVIP eAzKT9esuaMhJJUGAFgaO8IIV5hnntWsurVRjIM545wNRbNZykeueNA9Wg03y1hT C6IXROtLCIs5A4UW3AWAMGQ05eZmsHsN2P9wNZ/DeEtJnFoMnjt31vD/TfW594xU g7qnDKdNK0hLNLM3eAv0kg/hLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYIrs3n P1KYU/d92Lb497rgF+tMMB8GA1UdIwQYMBaAFAvqjjGHvUmNJfJJXWqw7p5FNKfx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY0RC9EQUQ0NTg2QUVE QzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZMGw4a2xkYXJEdW5rVTBw X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtcU9NWWU5U1kwbDhrbGRhckR1bmtVMHBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY0RC9EQUQ0NTg2QUVEQzcxMUVBQkJBMTM3NDZDNEY5QUUwMi9DLXFPTVllOVNZ MGw4a2xkYXJEdW5rVTBwX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGoymyeG+GT5jkhqkFpqD+wQ5EErpTm5ElcK6r+GgjPtJDFU3sI8mr +xG0vo/TUZVYXWZkGjVJc805NUprtx2HgvJ5EyKd1AtsYBFIrO10n1XOBpP0KbU4 BIswSjHtHMzOkxbuyja7XxcJNw5dr+sYYaIdIzPXWQ2cvNJbu7pRBa8aQ8b8C581 /drSkPmflc4s5ZGL2GVWTgj8K0P2Vc7Cgn9iUX0TBOg4QiATRlfgZ8VPYsMWgjrR WmthfcnZqC2peLzz+OBZ46GVRGjA8lCyWJ2kFtbBKp0fwKnAXzfBaa0/uYMtWgM1 /UJz69o/3LOp9RWwkuL2DIVjDKLUMT8J -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:46 2025 by rpki-client