$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: mJlFBRM+/Aja7e6F3A8Ux3kGHp/7XtrPc9W/Sac0OoU= Subject key identifier: 97:E3:58:0E:A8:73:4A:01:ED:A0:2F:03:70:18:E8:01:30:A9:C1:55 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0562 Signing time: Fri 22 Aug 2025 23:37:49 +0000 Manifest this update: Fri 22 Aug 2025 23:37:48 +0000 Manifest next update: Fri 29 Aug 2025 23:37:48 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: Y/QpzPuVKZIeF1wYQYET/3YZCfdaEyZ6JASWJDsNowk=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 2jt6Xm58KXfWaDCwoL1QNNF6hftEV3g4TXU+Cro75w8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: bppqSZ8PSCotLg3otrjVRqyexBIsOl6v9mc32VyO/nY=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: mLHQ8FPso+ZmAaHO2o/MCAMgyAvNWTYy5WsKEiwbpt0=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: osBPg0SLfRG0eb1YC88FnRgXyZmnCWV1UAz6jQOFPa8=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 22 23:37:48 2025 GMT Not After : Aug 29 23:37:48 2025 GMT Subject: CN=68a8ff4c-88c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:09:20:bb:a5:65:26:8a:a2:2d:2a:c7:87: a1:5c:42:ce:14:bf:7e:1d:b6:54:66:f0:48:5e:af: 56:ec:ab:e0:8b:e7:bc:e7:be:aa:f0:07:60:db:27: 94:b0:13:3c:2f:04:cd:3d:b3:5c:88:78:3b:61:18: 49:5a:10:56:c1:57:98:21:30:6b:a0:90:0e:73:cd: 56:b7:6c:69:bc:a4:f0:af:7b:2e:c6:43:47:59:99: 30:1f:9b:43:ee:59:4b:ea:84:aa:bc:72:82:81:1b: 2d:dd:25:73:10:fb:71:65:95:8f:3b:66:06:e5:3c: ae:87:31:bf:e0:83:50:36:8f:63:0c:cc:12:dd:4e: 20:fd:31:25:52:72:03:c0:19:67:d2:29:86:1e:f6: 96:53:0a:f3:1e:3b:d9:6a:ef:f9:60:4f:47:3c:9c: ba:c4:4a:24:bd:5a:cd:0e:39:48:72:03:7c:28:de: f5:24:c8:f5:48:e7:9b:2a:15:8f:60:fb:6e:3a:cf: 53:1e:c1:36:94:23:f9:94:eb:65:d5:07:82:5e:7f: a0:2d:87:fe:55:42:78:f4:fb:70:80:dc:b7:a8:c0: 3b:2d:16:c0:57:f8:9c:c1:a2:72:5e:19:ae:f3:c9: c4:ec:a8:4f:ce:07:52:88:16:86:07:24:6a:ae:c5: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E3:58:0E:A8:73:4A:01:ED:A0:2F:03:70:18:E8:01:30:A9:C1:55 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:04:c1:ca:9f:67:bf:16:52:a2:b1:a3:eb:41:de:45:15:2e: f7:f3:ad:c6:c5:4d:fe:cc:f7:05:1b:91:e5:79:54:d8:76:23: 3f:31:97:74:90:38:21:44:f2:4e:bd:7b:17:86:f2:5b:38:d2: 61:0d:6d:41:bc:9e:2c:62:d8:70:78:d7:c4:49:c1:20:eb:2d: eb:c0:97:6f:bc:df:a7:18:7e:7a:0f:df:a4:2c:8e:e6:a8:3b: 81:7f:92:36:a3:61:ab:69:95:c4:81:1e:6d:d1:70:96:2d:12: 28:63:e7:da:a9:50:ba:77:91:3c:19:41:49:70:08:e4:78:bf: 3a:9e:a2:b0:c0:e4:43:eb:5b:54:08:e2:43:10:c8:9b:9b:8a: fe:29:d1:94:67:06:a0:6d:d1:6b:c6:d3:11:32:96:71:75:33: be:1a:21:3a:9d:7b:50:d3:bd:ca:ae:ba:7a:6c:73:5b:5a:6f: 5f:fc:c9:20:8e:41:7f:60:b0:05:b9:b8:bf:aa:1f:d2:df:03: 2d:00:7b:91:2a:33:78:22:ae:91:05:90:14:b6:c9:40:88:1f: 27:a7:c7:f3:f5:b1:57:19:3b:56:03:0b:5d:21:98:fd:f6:bd: 20:d9:7b:90:9c:95:cb:50:e5:d0:63:42:b8:20:61:e7:a9:36: 79:a2:b8:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwODIyMjMzNzQ4WhcNMjUwODI5MjMzNzQ4WjAYMRYwFAYD VQQDEw02OGE4ZmY0Yy04OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNEJILulZSaKoi0qx4ehXELOFL9+HbZUZvBIXq9W7Kvgi+e8576q8Adg2yeU sBM8LwTNPbNciHg7YRhJWhBWwVeYITBroJAOc81Wt2xpvKTwr3suxkNHWZkwH5tD 7llL6oSqvHKCgRst3SVzEPtxZZWPO2YG5TyuhzG/4INQNo9jDMwS3U4g/TElUnID wBln0imGHvaWUwrzHjvZau/5YE9HPJy6xEokvVrNDjlIcgN8KN71JMj1SOebKhWP YPtuOs9THsE2lCP5lOtl1QeCXn+gLYf+VUJ49PtwgNy3qMA7LRbAV/icwaJyXhmu 88nE7KhPzgdSiBaGByRqrsXXvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfjWA6o c0oB7aAvA3AY6AEwqcFVMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvBMHKn2e/FlKisaPrQd5FFS73863GxU3+zPcFG5HleVTYdiM/MZd0 kDghRPJOvXsXhvJbONJhDW1BvJ4sYthweNfEScEg6y3rwJdvvN+nGH56D9+kLI7m qDuBf5I2o2GraZXEgR5t0XCWLRIoY+faqVC6d5E8GUFJcAjkeL86nqKwwORD61tU COJDEMibm4r+KdGUZwagbdFrxtMRMpZxdTO+GiE6nXtQ073Krrp6bHNbWm9f/Mkg jkF/YLAFubi/qh/S3wMtAHuRKjN4Iq6RBZAUtslAiB8np8fz9bFXGTtWAwtdIZj9 9r0g2XuQnJXLUOXQY0K4IGHnqTZ5oriA -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:00 2025 by rpki-client