$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json) Hash identifier: DQTpZ0deLCBSKH6B+XZw6F9zRrv2k7G2+ucNF6a47g4= Subject key identifier: C6:8D:43:4A:44:B2:F7:9F:4B:0C:24:24:B6:CC:5F:99:E8:DE:16:A7 Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft Manifest number: E1 Signing time: Sat 23 Aug 2025 05:37:08 +0000 Manifest this update: Sat 23 Aug 2025 05:37:08 +0000 Manifest next update: Sat 30 Aug 2025 05:37:08 +0000 Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: sTXFYY5OpFme4posFdy/av7cIW5u3gT2LZnuhi0WQMA=) 2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=) 3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Aug 23 05:37:08 2025 GMT Not After : Aug 30 05:37:08 2025 GMT Subject: CN=68a95384-9894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:f9:24:af:f4:88:85:d9:85:2c:1a:fd:26: d8:27:3c:e2:54:63:23:8a:90:68:13:09:df:b4:00: b6:e0:34:6e:63:84:70:6a:39:86:8c:df:4a:ba:3d: 40:3f:5c:6a:9f:44:52:03:7d:7b:d5:6a:c1:bb:fb: f5:92:ba:bb:84:75:d6:bb:db:52:c7:99:6f:a5:a7: ef:56:7f:69:a1:80:ed:8d:86:28:ee:ad:3b:80:59: 15:70:82:ec:9f:56:96:d3:d3:7e:2a:97:84:6d:82: a0:11:ca:37:37:a4:79:cd:fc:0c:2b:d1:be:c0:69: 99:73:84:2d:fa:43:61:6d:c5:d4:09:f1:23:c0:c1: d1:89:0d:e2:56:54:7d:d2:fe:85:33:94:80:1c:ec: 44:63:58:69:70:8e:cd:34:1b:8b:5e:f2:dd:77:a9: 54:2d:07:5e:45:af:65:ce:b8:f1:e9:e6:bd:a6:16: 97:0a:d5:5a:17:2a:03:fd:40:5b:87:55:6c:b0:65: 0f:80:b5:bd:b3:63:6e:91:7b:81:29:54:09:38:4b: 3a:a8:b4:46:4e:89:80:89:86:92:b8:c5:ad:2e:32: 62:85:dd:d5:3f:40:3e:95:49:4d:b1:3a:61:55:8a: b8:6b:bf:5d:4c:9b:34:39:1d:b4:92:70:62:57:02: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8D:43:4A:44:B2:F7:9F:4B:0C:24:24:B6:CC:5F:99:E8:DE:16:A7 X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:da:a4:e3:00:39:43:63:32:32:46:52:c5:60:18:dc:26:25: 23:87:14:a6:3d:86:2e:f8:3a:88:13:1f:e0:ab:ec:ef:c7:1e: c7:95:08:27:d4:d9:ae:e0:60:d6:55:c8:98:81:e9:32:c4:19: e0:59:b4:61:b3:7b:57:75:15:fb:95:88:0d:53:83:bc:a1:ad: a8:8b:2e:96:87:09:cd:9d:89:6f:45:f4:50:ca:76:9b:01:4d: 95:86:56:51:28:7e:ec:b7:61:5d:a0:85:6d:30:2b:02:4f:cc: 90:34:91:83:03:01:02:f0:e5:1e:0f:94:8e:4c:4c:21:0b:5c: e5:4c:d6:b4:1c:b6:05:84:44:da:25:96:c3:f3:0d:c7:dd:71: 30:e5:2b:22:96:4d:bf:47:be:8c:6b:aa:c7:c6:06:f1:3f:29: 96:a1:03:88:b4:a0:b3:3f:9d:10:bd:bb:97:d0:10:db:fb:ef: f2:cb:69:38:51:07:09:35:a6:d3:e2:d7:8c:a4:6e:b6:aa:bf: e7:69:f8:80:08:7b:1d:bd:a8:bd:33:d8:23:a5:01:c1:8c:4e: 36:7d:ff:a8:4e:10:49:7e:40:58:1e:20:b9:01:a6:69:78:e9: e1:f1:ce:cb:05:37:73:1c:f5:d0:68:28:da:83:e1:39:60:8b: 47:60:57:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUwODIzMDUzNzA4WhcNMjUwODMwMDUzNzA4WjAYMRYwFAYD VQQDEw02OGE5NTM4NC05ODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLv5JK/0iIXZhSwa/SbYJzziVGMjipBoEwnftAC24DRuY4RwajmGjN9Kuj1A P1xqn0RSA3171WrBu/v1krq7hHXWu9tSx5lvpafvVn9poYDtjYYo7q07gFkVcILs n1aW09N+KpeEbYKgEco3N6R5zfwMK9G+wGmZc4Qt+kNhbcXUCfEjwMHRiQ3iVlR9 0v6FM5SAHOxEY1hpcI7NNBuLXvLdd6lULQdeRa9lzrjx6ea9phaXCtVaFyoD/UBb h1VssGUPgLW9s2NukXuBKVQJOEs6qLRGTomAiYaSuMWtLjJihd3VP0A+lUlNsTph VYq4a79dTJs0OR20knBiVwKWewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaNQ0pE svefSwwkJLbMX5no3hanMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEZGQS8wNTg2MDY4QTJCN0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJS V3JlLWUwN0U5MUloSlViSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52qTjADlDYzIyRlLFYBjcJiUjhxSmPYYu+DqIEx/gq+zvxx7HlQgn 1Nmu4GDWVciYgekyxBngWbRhs3tXdRX7lYgNU4O8oa2oiy6WhwnNnYlvRfRQynab AU2VhlZRKH7st2FdoIVtMCsCT8yQNJGDAwEC8OUeD5SOTEwhC1zlTNa0HLYFhETa JZbD8w3H3XEw5Ssilk2/R76Ma6rHxgbxPymWoQOItKCzP50QvbuX0BDb++/yy2k4 UQcJNabT4teMpG62qr/nafiACHsdvai9M9gjpQHBjE42ff+oThBJfkBYHiC5AaZp eOnh8c7LBTdzHPXQaCjag+E5YItHYFdt -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:45 2025 by rpki-client