$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft File: ah5W1f4mxr0uywRXgX3GujwN5H0.mft (raw, json) Hash identifier: Q08P5IVRT1pNicKiGCzjxg80krKqnPqm5Tq8GiccPfo= Subject key identifier: F1:B7:DA:EB:8C:DD:D9:A3:D9:3D:5B:5A:4A:BD:DC:C9:BF:A9:1F:74 Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft Manifest number: 025D Signing time: Sat 23 Aug 2025 02:01:56 +0000 Manifest this update: Sat 23 Aug 2025 02:01:56 +0000 Manifest next update: Sat 30 Aug 2025 02:01:56 +0000 Files and hashes: 1: ah5W1f4mxr0uywRXgX3GujwN5H0.crl (hash: a30Xv0/MFFB1MHxdH6/LoYwqpWvMjy/u8WLgupmz1JU=) 2: 3B0E8BD2292211ED93341915C4F9AE02.roa (hash: nIc0DzbDh/PwNmfiEtRIcpTiu7BnHHbJ2kvWsihcckg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D Validity Not Before: Aug 23 02:01:56 2025 GMT Not After : Aug 30 02:01:56 2025 GMT Subject: CN=68a92114-20bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:d9:45:61:51:45:b8:30:b1:da:ec:1a:9e: 77:4b:77:6c:9c:77:98:01:b8:d9:b5:b9:dd:f3:be: cf:bc:db:cb:7e:ad:56:56:c1:be:0e:29:4d:e8:16: df:93:bd:8c:c7:56:e7:2c:f4:95:6c:b5:47:fd:a9: 78:8a:70:76:40:80:3d:a5:4c:f4:2a:be:3a:64:de: 85:59:2c:17:e8:1d:6d:63:2f:74:55:b9:f4:ee:1e: f6:c7:c1:12:19:48:6e:2a:a9:dc:c0:7a:63:54:2f: 01:6b:01:28:a9:b5:13:36:d7:f0:0c:36:0f:6c:9f: ad:4d:c3:e0:66:a9:12:f7:08:3f:23:2c:0c:70:48: 4f:8f:27:a2:ab:21:24:ed:5d:b8:27:25:04:40:09: 62:8a:0e:75:2a:a3:aa:32:32:ea:db:9f:84:89:84: 3e:c9:54:f0:b7:f5:81:e7:1b:d8:74:75:22:70:3a: 55:2f:be:bc:33:ce:76:1d:37:2f:74:de:49:de:d8: 15:db:73:be:0f:50:80:cf:91:2a:cf:05:11:a5:91: 2c:b9:e1:1c:11:71:e2:6f:05:de:87:65:11:a6:7f: 10:72:1c:f3:a9:fb:fd:14:c7:ed:bd:0c:94:85:c9: a7:51:c4:f7:3a:8e:3f:03:a3:36:54:4e:d3:8e:78: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B7:DA:EB:8C:DD:D9:A3:D9:3D:5B:5A:4A:BD:DC:C9:BF:A9:1F:74 X509v3 Authority Key Identifier: keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f7:9a:11:96:ca:33:d9:a6:df:01:71:a0:c6:a8:5d:b0:9f: 7e:da:51:c2:59:a6:ad:fe:9d:23:d8:9a:9e:14:25:c2:32:87: 3a:08:ab:2d:3c:b1:64:b8:d5:7c:16:17:83:c7:24:ff:6e:93: 63:8b:ff:a2:8f:ec:b8:f5:d2:02:be:0f:4a:b9:72:85:eb:ec: ae:0c:bb:61:8c:c3:28:25:96:2f:6a:f7:54:42:80:f2:e2:b6: 76:b1:f2:9b:fc:4c:1e:f0:e5:7f:45:33:5c:65:68:9d:0d:b3: 7a:b3:76:37:16:fa:85:5f:57:6f:14:18:40:50:95:92:de:5c: 41:69:6a:f2:d1:58:13:1b:95:62:45:01:8b:86:e5:93:c5:4a: 41:b9:c8:83:1a:88:29:d6:66:7c:3c:45:cc:fb:ef:fa:01:23: c8:f9:0e:16:2b:60:0b:a3:ef:4d:49:bc:ac:0d:53:1a:4a:ae: e5:6c:de:dc:c4:09:13:75:34:d7:b5:af:02:af:5d:58:3e:c6: 49:7e:6e:d1:b2:b9:a1:14:3a:19:61:b0:18:e8:c9:df:57:06: d9:d7:6e:92:33:d1:72:c8:ca:a6:3a:43:d1:17:f7:1d:c5:86: 95:a6:81:f2:fd:c4:86:e9:09:c8:6a:bc:48:f2:41:d6:f2:ce: 07:f7:42:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGNjkxMTAvBgNVBAUTKDZBMUU1NkQ1RkUyNkM2QkQyRUNCMDQ1NzgxN0RDNkJB M0MwREU0N0QwHhcNMjUwODIzMDIwMTU2WhcNMjUwODMwMDIwMTU2WjAYMRYwFAYD VQQDEw02OGE5MjExNC0yMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC7ZRWFRRbgwsdrsGp53S3dsnHeYAbjZtbnd877PvNvLfq1WVsG+DilN6Bbf k72Mx1bnLPSVbLVH/al4inB2QIA9pUz0Kr46ZN6FWSwX6B1tYy90Vbn07h72x8ES GUhuKqncwHpjVC8BawEoqbUTNtfwDDYPbJ+tTcPgZqkS9wg/IywMcEhPjyeiqyEk 7V24JyUEQAliig51KqOqMjLq25+EiYQ+yVTwt/WB5xvYdHUicDpVL768M852HTcv dN5J3tgV23O+D1CAz5EqzwURpZEsueEcEXHibwXeh2URpn8Qchzzqfv9FMftvQyU hcmnUcT3Oo4/A6M2VE7Tjng4iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPG32uuM 3dmj2T1bWkq93Mm/qR90MB8GA1UdIwQYMBaAFGoeVtX+Jsa9LssEV4F9xro8DeR9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEY2OS9COTk4REQzQzI5 MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhyMHV5d1JYZ1gzR3Vqd041 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVcxZjRteHIwdXl3UlhnWDNHdWp3TjVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEY2OS9COTk4REQzQzI5MDgxMUVEQkQyNjJCMjhDNEY5QUUwMi9haDVXMWY0bXhy MHV5d1JYZ1gzR3Vqd041SDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT95oRlsoz2abfAXGgxqhdsJ9+2lHCWaat/p0j2JqeFCXCMoc6CKst PLFkuNV8FheDxyT/bpNji/+ij+y49dICvg9KuXKF6+yuDLthjMMoJZYvavdUQoDy 4rZ2sfKb/Ewe8OV/RTNcZWidDbN6s3Y3FvqFX1dvFBhAUJWS3lxBaWry0VgTG5Vi RQGLhuWTxUpBuciDGogp1mZ8PEXM++/6ASPI+Q4WK2ALo+9NSbysDVMaSq7lbN7c xAkTdTTXta8Cr11YPsZJfm7RsrmhFDoZYbAY6MnfVwbZ126SM9FyyMqmOkPRF/cd xYaVpoHy/cSG6QnIarxI8kHW8s4H90Kk -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:55 2025 by rpki-client