$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json) Hash identifier: Tb2MUhADEDibnUeHfVjKI3QI9o4dU0C6walWH7YQmgM= Subject key identifier: 16:DC:76:E0:B4:35:56:A9:34:31:07:34:0B:E3:E5:EA:23:48:F1:06 Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft Manifest number: 06E0 Signing time: Fri 22 Aug 2025 22:10:56 +0000 Manifest this update: Fri 22 Aug 2025 22:10:56 +0000 Manifest next update: Fri 29 Aug 2025 22:10:56 +0000 Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: iUt/gVn+GHpdKrqgaULulcNzqGiIxs5WdBCtH9CGbyQ=) 2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: Aug 22 22:10:56 2025 GMT Not After : Aug 29 22:10:56 2025 GMT Subject: CN=68a8eaf0-559c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:2f:b6:3b:18:d2:2f:2f:d2:da:3d:62:b9: 32:74:ce:4c:8a:88:e2:60:82:c6:aa:08:c9:fa:fe: d6:8e:77:ab:fb:bf:43:88:09:da:64:79:5b:43:d4: 81:b7:a4:2e:ce:bb:61:ce:45:74:1b:c6:4b:14:5f: 0e:98:ab:f7:b6:2f:76:df:63:63:59:62:59:b6:41: 49:ed:a5:db:07:b7:1f:5d:00:44:d2:f6:1f:5e:27: 10:d6:df:d4:15:1e:d8:1b:6b:79:e0:3f:d8:3b:78: 80:2a:d2:8f:1b:4a:68:26:c9:a6:61:a0:c0:61:f7: c6:30:0a:4e:a4:3c:5b:64:35:f4:ec:6b:d7:9c:47: de:1b:d9:45:4d:5f:24:fa:5c:c5:9b:12:c7:97:9e: d6:15:14:65:62:c8:5b:16:45:af:9c:1b:04:ca:07: 36:07:f3:c3:d1:d3:b9:2d:63:0c:4f:40:0b:97:6f: 0b:dd:69:7a:2b:43:3e:20:0f:7f:41:27:cf:b3:d6: de:76:50:0b:58:73:d1:7a:99:af:8e:c1:b0:0f:c1: ef:57:08:48:1e:13:a0:82:54:fc:3b:75:3a:9b:17: c8:1d:64:ce:43:13:dd:63:4d:31:d0:58:19:dd:1b: 82:35:ab:73:78:eb:3d:0a:7a:a3:8a:f4:a4:4d:04: 3d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:76:E0:B4:35:56:A9:34:31:07:34:0B:E3:E5:EA:23:48:F1:06 X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:95:08:28:9b:61:db:e6:64:01:aa:e1:c4:b7:90:30:27:f3: 3f:b6:c9:c2:9a:4f:b8:ba:9e:96:61:09:05:02:12:63:91:90: aa:87:39:5f:91:61:07:1c:fe:94:99:d6:14:08:e3:b4:77:b9: 8a:6e:46:8f:66:0d:07:b7:77:3e:39:9f:f3:a2:48:34:9c:e2: 27:17:7a:1e:01:55:d2:a0:89:ef:f8:10:07:89:b0:f8:db:92: 49:43:e6:30:2f:8d:f6:12:bc:60:12:58:e2:c6:a9:f6:9b:07: 11:fb:b9:3e:72:08:da:5c:a3:90:9e:6e:c9:e5:70:dc:f9:9e: 05:27:ef:1f:06:43:af:de:30:d1:7a:16:7b:39:99:50:a4:cf: b0:34:09:20:1a:5f:5f:41:5f:4d:06:4a:43:62:08:95:47:bf: 64:9e:dd:7c:33:a4:8a:b9:d1:09:ee:fd:dc:00:95:62:90:c1: d4:fe:60:2b:32:29:11:3a:f2:52:38:0c:ff:b1:93:57:98:76: f0:b2:a5:45:7c:11:59:61:4f:54:d5:21:9a:bc:e6:5c:cc:32: 00:13:46:47:fb:81:92:03:3e:79:46:8d:be:73:c5:8b:65:ab: 7c:51:25:a3:78:cd:28:04:e4:b5:3f:17:c5:97:94:24:c0:2b: 8f:92:56:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjUwODIyMjIxMDU2WhcNMjUwODI5MjIxMDU2WjAYMRYwFAYD VQQDEw02OGE4ZWFmMC01NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn58vtjsY0i8v0to9YrkydM5MiojiYILGqgjJ+v7Wjner+79DiAnaZHlbQ9SB t6QuzrthzkV0G8ZLFF8OmKv3ti9232NjWWJZtkFJ7aXbB7cfXQBE0vYfXicQ1t/U FR7YG2t54D/YO3iAKtKPG0poJsmmYaDAYffGMApOpDxbZDX07GvXnEfeG9lFTV8k +lzFmxLHl57WFRRlYshbFkWvnBsEygc2B/PD0dO5LWMMT0ALl28L3Wl6K0M+IA9/ QSfPs9bedlALWHPRepmvjsGwD8HvVwhIHhOgglT8O3U6mxfIHWTOQxPdY00x0FgZ 3RuCNatzeOs9CnqjivSkTQQ9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbcduC0 NVapNDEHNAvj5eojSPEGMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTFDQy81RkVGREE4RTYzOUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZn dGI0WFlVQlFaT3lVT3Y0TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQlQgom2Hb5mQBquHEt5AwJ/M/tsnCmk+4up6WYQkFAhJjkZCqhzlf kWEHHP6UmdYUCOO0d7mKbkaPZg0Ht3c+OZ/zokg0nOInF3oeAVXSoInv+BAHibD4 25JJQ+YwL432ErxgEljixqn2mwcR+7k+cgjaXKOQnm7J5XDc+Z4FJ+8fBkOv3jDR ehZ7OZlQpM+wNAkgGl9fQV9NBkpDYgiVR79knt18M6SKudEJ7v3cAJVikMHU/mAr MikROvJSOAz/sZNXmHbwsqVFfBFZYU9U1SGavOZczDIAE0ZH+4GSAz55Ro2+c8WL Zat8USWjeM0oBOS1PxfFl5QkwCuPklYJ -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:13 2025 by rpki-client