$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: gLFTZG8NL1Z2J91tccV31V3oBjMWWJBFK50xYOvyPQY= Subject key identifier: DA:C5:3B:25:2B:D5:32:08:13:5F:72:03:89:F8:8A:2F:9D:2E:67:C6 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 0551 Signing time: Sat 06 Sep 2025 23:49:45 +0000 Manifest this update: Sat 06 Sep 2025 23:49:44 +0000 Manifest next update: Sat 13 Sep 2025 23:49:44 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: EcJWOq5B54MtglyhbWJwN+T0NInBo+Hrm/7WPSrVX4s=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Sep 6 23:49:44 2025 GMT Not After : Sep 13 23:49:44 2025 GMT Subject: CN=68bcc898-cdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:f2:bb:a2:40:1a:2c:52:8b:e3:6b:9f:9e: 31:5f:6d:bd:ee:d5:b9:ce:22:d6:92:57:3d:c1:79: 18:e8:49:da:9f:c2:a0:e5:f9:62:16:3e:b3:68:a8: 3a:d5:a9:b8:e3:fc:2b:80:15:aa:81:0d:f2:6e:e4: a7:1d:f6:30:8f:3f:fe:d5:5a:be:6b:c4:20:68:1f: 53:17:71:5b:c3:5b:28:77:a6:49:e6:52:b9:34:4e: 78:0a:85:d8:d6:37:46:f6:ca:79:d9:f4:44:bd:6c: d1:9f:44:35:e0:cd:d9:6b:6b:8d:df:95:12:80:5d: 94:9d:69:94:21:31:98:9d:7c:58:17:a1:89:c7:21: 78:14:3b:2a:bd:94:d3:a1:38:8d:7f:e1:25:95:fe: 18:13:3e:00:82:d0:46:d1:04:a5:9b:ab:5e:3d:e2: 9c:ad:d7:06:b8:6a:52:78:98:27:c4:92:e8:47:38: b1:27:31:b0:87:cf:4a:bf:e8:85:14:9a:11:8b:2d: 63:6c:85:78:c3:85:4e:58:a7:8c:3d:cb:c3:16:b8: 78:bc:77:55:99:dc:c1:c1:e4:c5:72:5c:f0:c6:93: fc:86:be:61:c3:bf:7d:13:7d:ef:2b:5c:c0:74:b7: a8:26:da:b9:31:7e:48:fd:6a:55:ca:c3:48:48:da: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C5:3B:25:2B:D5:32:08:13:5F:72:03:89:F8:8A:2F:9D:2E:67:C6 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:6f:7b:01:23:1e:7f:4b:c3:ef:ab:b9:a6:07:fc:ef:ae: b3:78:99:e5:1b:71:07:51:53:f2:a4:2c:10:ed:9e:5f:69:e0: b7:20:f2:4b:6d:cd:d6:e4:ad:42:32:fd:9b:fc:36:dc:f1:fc: 46:cc:56:ff:73:67:0c:d8:04:5c:73:98:76:4b:0c:28:7c:a3: 56:f6:5a:65:4a:1e:1b:e0:22:11:fa:7d:12:b1:7b:08:be:88: 4f:10:22:8f:77:88:2e:95:26:12:ce:19:c1:35:85:a3:19:2b: 82:78:81:22:0a:2b:1b:80:cf:c5:84:db:fe:4c:74:37:bb:64: 92:8c:61:03:39:2c:4f:bd:2b:74:8b:01:df:a3:14:45:ee:8c: b0:3c:16:7a:54:70:51:9d:80:ac:54:e0:00:17:9a:70:fa:09: da:e8:6e:3f:76:b7:94:30:c9:0b:ac:98:14:b6:95:f3:89:5e: 7d:a5:e1:25:a9:6b:2c:07:29:0f:8e:5e:9c:ef:c9:18:45:06: 9f:c8:18:22:bf:12:8f:9a:f3:d1:9c:4e:b0:94:0e:fd:8f:51: 3e:1d:2c:39:5d:8a:01:2b:9b:f8:2a:c0:ea:2e:da:d0:8e:ab: c4:56:07:85:b6:2b:34:52:ec:7c:34:68:f8:e5:8b:b5:d3:1b: 1f:ce:fd:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjUwOTA2MjM0OTQ0WhcNMjUwOTEzMjM0OTQ0WjAYMRYwFAYD VQQDEw02OGJjYzg5OC1jZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gzyu6JAGixSi+Nrn54xX2297tW5ziLWklc9wXkY6Enan8Kg5fliFj6zaKg6 1am44/wrgBWqgQ3ybuSnHfYwjz/+1Vq+a8QgaB9TF3Fbw1sod6ZJ5lK5NE54CoXY 1jdG9sp52fREvWzRn0Q14M3Za2uN35USgF2UnWmUITGYnXxYF6GJxyF4FDsqvZTT oTiNf+Ellf4YEz4AgtBG0QSlm6tePeKcrdcGuGpSeJgnxJLoRzixJzGwh89Kv+iF FJoRiy1jbIV4w4VOWKeMPcvDFrh4vHdVmdzBweTFclzwxpP8hr5hw799E33vK1zA dLeoJtq5MX5I/WpVysNISNq9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrFOyUr 1TIIE19yA4n4ii+dLmfGMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJY297ASMef0vD76u5pgf8766zeJnlG3EHUVPypCwQ7Z5faeC3IPJL bc3W5K1CMv2b/Dbc8fxGzFb/c2cM2ARcc5h2SwwofKNW9lplSh4b4CIR+n0SsXsI vohPECKPd4gulSYSzhnBNYWjGSuCeIEiCisbgM/FhNv+THQ3u2SSjGEDOSxPvSt0 iwHfoxRF7oywPBZ6VHBRnYCsVOAAF5pw+gna6G4/dreUMMkLrJgUtpXziV59peEl qWssBykPjl6c78kYRQafyBgivxKPmvPRnE6wlA79j1E+HSw5XYoBK5v4KsDqLtrQ jqvEVgeFtis0Uux8NGj45Yu10xsfzv2X -----END CERTIFICATE-----Generated at Mon Sep 8 08:43:30 2025 by rpki-client