$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft File: MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json) Hash identifier: 790jIONjze4jKEcP1ji6bO7eFv0bsZ18jWf4vQ27nJM= Subject key identifier: DF:B5:62:C2:B2:2D:0B:B3:D1:96:27:AC:6E:4E:2B:4F:C7:03:C7:C3 Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft Manifest number: 016C Signing time: Sat 23 Aug 2025 04:02:14 +0000 Manifest this update: Sat 23 Aug 2025 04:02:14 +0000 Manifest next update: Sat 30 Aug 2025 04:02:14 +0000 Files and hashes: 1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: YK3CsMRz46zPs6XZtNFSGC1g5w7pS5gnZCe2rjzHwrw=) 2: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: /eRQukOTRoCvRThMcH9XwUAJIcceCRwYKwwMbY6uF7g=) 3: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: 2vNMz8bsWYuC9H/vzhdbGUA1HfH3KNf6jV9tK3X2cTM=) 4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: qlqqEk+ktO9kWepPw94741l8FovGv8c1l/1ZfvzH37I=) 5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: za2Ui3WUL1KtJyaUb1Afwi6LYp342P/Dlv/IorKk6Y8=) 6: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: /trQaf5mAYLhUwtPoYNSiRtn86zeNkrUACHp5ubxqmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20 Validity Not Before: Aug 23 04:02:14 2025 GMT Not After : Aug 30 04:02:14 2025 GMT Subject: CN=68a93d46-89d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:7f:c9:7c:17:de:df:bb:3f:56:68:89:63: c9:a6:65:a5:10:6f:ba:42:16:60:f4:c4:98:47:c0: 4e:bd:34:63:08:68:b8:8f:3b:96:29:ab:61:a4:b0: 14:2e:23:a9:77:fc:95:6a:e9:28:c7:12:0f:77:93: ae:61:37:ca:00:93:87:e4:76:d5:6c:20:de:9d:60: 4b:4f:97:47:7c:25:7a:cf:d7:b7:69:f1:07:94:95: 1e:df:c3:b7:eb:05:e0:bb:5b:aa:da:8c:f6:52:b5: d8:77:e1:0d:3c:da:66:04:17:d7:3a:1b:34:ac:d3: 36:81:93:ae:1e:27:fa:3f:c7:2b:48:7e:2c:c2:87: cd:4a:10:9e:f4:24:25:9d:24:48:39:ef:3b:ae:e1: a7:2a:aa:15:cd:97:8a:64:43:2b:ce:f2:05:49:3b: df:4e:1d:5b:0f:d7:65:04:b4:fa:65:e0:8e:67:0a: 05:65:18:0c:3b:4b:0d:a9:5e:77:3c:df:89:6c:c3: 1d:e6:b8:3d:d1:26:18:29:60:1b:f2:7d:d5:10:51: 2e:c3:67:9d:c9:ff:aa:75:62:e4:51:9b:45:3b:12: f0:47:15:b2:a2:50:50:c3:81:52:8e:7c:86:ca:59: d3:3c:f5:98:64:31:c6:c4:0c:5f:c7:9c:a8:10:87: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:62:C2:B2:2D:0B:B3:D1:96:27:AC:6E:4E:2B:4F:C7:03:C7:C3 X509v3 Authority Key Identifier: keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:1b:8e:14:1c:47:13:3e:5c:b5:d3:97:ee:a2:15:99:1e:c0: 07:63:64:b4:48:9c:66:86:a0:4f:ed:9b:54:63:34:33:81:b5: a6:ff:63:ca:4a:ac:4f:4e:af:9e:22:ef:ba:fa:25:9a:a0:0e: 38:37:ac:09:64:51:a1:51:a1:ff:41:5e:07:df:39:79:87:77: 61:f2:ac:b3:d8:45:c1:fb:31:54:b0:9a:a0:8e:b2:3f:b2:37: 40:6a:aa:14:ec:16:24:69:ef:d5:77:3d:bd:d7:60:72:9e:98: e2:5f:d4:64:6d:a4:14:13:9c:27:4c:6f:56:da:db:5e:eb:b3: aa:1b:f5:0a:b9:c3:2e:2b:bc:d6:af:f0:1b:f8:54:7a:e5:d6: a4:43:66:17:91:1c:ef:9f:46:cb:72:d7:af:c8:d2:61:90:0c: 88:15:cc:75:61:d8:ec:74:32:5f:d5:f2:97:db:33:de:90:23: 9d:1a:26:52:50:c9:2b:65:d5:bf:42:4d:dc:1e:a0:37:ee:b2: 94:de:09:31:14:0e:88:b8:da:d9:a2:b0:67:d3:ab:c8:69:43: 20:ef:53:84:b2:73:ec:cd:2a:22:f9:80:36:82:0d:e6:6b:4c: b7:22:f2:1a:62:62:c5:43:29:f7:7b:16:cf:73:88:9e:fe:31: 9f:eb:a4:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5 NUI5MDJBMjAwHhcNMjUwODIzMDQwMjE0WhcNMjUwODMwMDQwMjE0WjAYMRYwFAYD VQQDEw02OGE5M2Q0Ni04OWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm5/yXwX3t+7P1ZoiWPJpmWlEG+6QhZg9MSYR8BOvTRjCGi4jzuWKathpLAU LiOpd/yVaukoxxIPd5OuYTfKAJOH5HbVbCDenWBLT5dHfCV6z9e3afEHlJUe38O3 6wXgu1uq2oz2UrXYd+ENPNpmBBfXOhs0rNM2gZOuHif6P8crSH4swofNShCe9CQl nSRIOe87ruGnKqoVzZeKZEMrzvIFSTvfTh1bD9dlBLT6ZeCOZwoFZRgMO0sNqV53 PN+JbMMd5rg90SYYKWAb8n3VEFEuw2edyf+qdWLkUZtFOxLwRxWyolBQw4FSjnyG ylnTPPWYZDHGxAxfx5yoEIcnIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+1YsKy LQuz0ZYnrG5OK0/HA8fDMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3 REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1 U2QyQ3lDOS16ckNWdVFLaUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXG44UHEcTPly105fuohWZHsAHY2S0SJxmhqBP7ZtUYzQzgbWm/2PK SqxPTq+eIu+6+iWaoA44N6wJZFGhUaH/QV4H3zl5h3dh8qyz2EXB+zFUsJqgjrI/ sjdAaqoU7BYkae/Vdz2912BynpjiX9RkbaQUE5wnTG9W2tte67OqG/UKucMuK7zW r/Ab+FR65dakQ2YXkRzvn0bLctevyNJhkAyIFcx1YdjsdDJf1fKX2zPekCOdGiZS UMkrZdW/Qk3cHqA37rKU3gkxFA6IuNrZorBn06vIaUMg71OEsnPszSoi+YA2gg3m a0y3IvIaYmLFQyn3exbPc4ie/jGf66Q9 -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:19 2025 by rpki-client