$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft File: rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json) Hash identifier: mFHsB/b/uJspnNP0IjkapV3x8P49qLj5MXbjG0FCk2s= Subject key identifier: 2D:57:E4:5A:07:1D:9B:D5:F2:53:03:23:44:BC:B0:8F:04:11:17:58 Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 Certificate issuer: /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Certificate serial: CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft Manifest number: C7 Signing time: Sat 23 Aug 2025 05:56:45 +0000 Manifest this update: Sat 23 Aug 2025 05:56:45 +0000 Manifest next update: Sat 30 Aug 2025 05:56:45 +0000 Files and hashes: 1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: ZxgxhT7IC5DteJPbP8nOP2vQReWMBgonUU7kfxY7xRc=) 2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204 Validity Not Before: Aug 23 05:56:45 2025 GMT Not After : Aug 30 05:56:45 2025 GMT Subject: CN=68a9581d-55a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:99:55:f0:96:00:6d:0f:a1:ae:1b:7d:19: 04:4c:64:0d:6e:75:bc:75:ff:32:91:3e:82:6b:0d: 95:82:02:7b:0b:6a:4e:8f:05:94:d0:df:cd:53:0e: 0d:c4:3f:08:af:44:74:66:fb:75:4b:82:0e:51:9f: 47:c7:64:f8:2e:05:7b:d7:82:95:fa:28:d3:56:29: 10:3e:3c:c7:64:82:b5:1e:66:83:74:eb:0a:d1:aa: 78:47:07:41:19:82:e5:eb:5b:4b:76:fb:79:25:ae: 43:26:80:b3:2d:aa:dc:ee:4e:51:c9:7a:db:23:dd: 06:22:9a:05:24:a2:32:5e:d2:a8:97:7c:37:e7:08: c7:25:7e:ee:40:2c:6d:8b:5f:59:11:8a:35:ca:1c: 05:02:bf:04:6b:a5:7b:01:08:4d:2d:2b:0c:27:42: 6f:c6:ef:35:4f:aa:3b:da:18:af:48:f0:fc:9b:cc: 2e:2d:9a:d7:4b:1d:ad:af:04:d7:71:16:67:8e:05: 7e:b4:32:1e:a1:60:ed:c2:20:ac:16:9f:a3:fc:7b: 91:52:f7:84:b3:cf:79:e3:df:c6:c9:61:60:b8:1b: f3:ef:49:e3:2c:47:85:85:7c:8d:b4:26:3b:fb:6a: 78:06:53:d8:dc:f5:c5:eb:54:c0:23:b5:7f:95:ae: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:E4:5A:07:1D:9B:D5:F2:53:03:23:44:BC:B0:8F:04:11:17:58 X509v3 Authority Key Identifier: keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1d:ce:ef:80:41:e3:d0:6f:f1:bb:dc:2f:24:55:55:4a:87: 12:cd:aa:71:c7:fb:26:f9:68:4a:c5:82:17:56:07:31:89:18: 04:53:75:a0:2c:df:60:36:f6:a5:a2:33:68:62:e9:95:a8:31: d8:40:a7:45:41:51:b8:12:73:73:6a:cb:d0:f4:a1:50:54:89: 7a:bf:d0:f1:73:d7:03:1f:e1:20:2a:7c:d0:87:69:ee:c1:ec: 0e:54:8e:63:d5:23:ab:1b:93:4c:c6:aa:69:10:f5:32:e4:82: 39:56:8a:a8:29:2b:26:ab:af:f4:64:32:dd:1e:7e:8e:65:ca: 89:a0:e2:d8:24:c8:5b:26:83:dc:cb:0d:a0:bf:53:9d:38:fc: bf:07:61:cc:4a:14:f9:3f:84:ca:b0:bc:c1:63:9f:ad:51:35: 98:cc:ff:01:9d:e0:ef:49:23:db:48:80:b5:2b:7a:7b:2b:44: 7d:e4:ec:8e:f9:f3:cf:76:72:c5:1b:1d:15:4f:65:8d:e9:46: 7c:6a:fa:98:11:5d:5c:d6:4d:6d:b8:96:74:0c:7b:9a:71:db: ac:2c:28:d0:bd:88:36:3b:8e:47:ff:e9:0a:61:cc:7f:be:0d: c7:47:2b:45:39:ba:32:01:b6:25:cb:6a:ba:eb:5b:98:c3:f7: 8a:cb:c3:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF OEI2QzUyMDQwHhcNMjUwODIzMDU1NjQ1WhcNMjUwODMwMDU1NjQ1WjAYMRYwFAYD VQQDEw02OGE5NTgxZC01NWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlWZVfCWAG0Poa4bfRkETGQNbnW8df8ykT6Caw2VggJ7C2pOjwWU0N/NUw4N xD8Ir0R0Zvt1S4IOUZ9Hx2T4LgV714KV+ijTVikQPjzHZIK1HmaDdOsK0ap4RwdB GYLl61tLdvt5Ja5DJoCzLarc7k5RyXrbI90GIpoFJKIyXtKol3w35wjHJX7uQCxt i19ZEYo1yhwFAr8Ea6V7AQhNLSsMJ0Jvxu81T6o72hivSPD8m8wuLZrXSx2trwTX cRZnjgV+tDIeoWDtwiCsFp+j/HuRUveEs89549/GyWFguBvz70njLEeFhXyNtCY7 +2p4BlPY3PXF61TAI7V/la643wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1X5FoH HZvV8lMDI0S8sI8EERdYMB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4 OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaHc7vgEHj0G/xu9wvJFVVSocSzapxx/sm+WhKxYIXVgcxiRgEU3Wg LN9gNvalojNoYumVqDHYQKdFQVG4EnNzasvQ9KFQVIl6v9Dxc9cDH+EgKnzQh2nu wewOVI5j1SOrG5NMxqppEPUy5II5VoqoKSsmq6/0ZDLdHn6OZcqJoOLYJMhbJoPc yw2gv1OdOPy/B2HMShT5P4TKsLzBY5+tUTWYzP8BneDvSSPbSIC1K3p7K0R95OyO +fPPdnLFGx0VT2WN6UZ8avqYEV1c1k1tuJZ0DHuacdusLCjQvYg2O45H/+kKYcx/ vg3HRytFOboyAbYly2q661uYw/eKy8Nw -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:33 2025 by rpki-client