$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: bjTwsWv86NBikq1sY1sKITt0g7CD7DzPkMELXmpcLgQ= Subject key identifier: 15:6F:AB:0A:41:BC:72:FE:B8:1B:83:D0:6A:DD:D6:C1:84:11:F8:CF Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:16:44 +0000 Manifest this update: Sat 23 Aug 2025 02:16:43 +0000 Manifest next update: Sat 30 Aug 2025 02:16:43 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: MyqKE8rPy71VOG5HwQseffCcrdGiqFfsHZL8VPcGy6o=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: uRdIMNdIglfdteGkf069/isP402avOmjbNb7y/lUw5k=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: N73Qn6fYVAUW9KUPlhOzNYAivlJPaPply2UAI5lOlWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Aug 23 02:16:43 2025 GMT Not After : Aug 30 02:16:43 2025 GMT Subject: CN=68a9248b-2b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:ea:f4:9c:ec:ed:ea:50:1f:89:c7:c4:aa: 92:e3:06:b0:85:4a:ad:1a:ad:ee:5c:27:87:29:a9: 95:ff:53:d3:cd:94:24:63:9c:c0:27:58:4a:18:bd: 7f:cf:f3:41:34:37:cc:0b:4f:74:00:2b:14:22:28: d1:43:8d:53:60:ae:fd:50:8e:f2:16:eb:6c:6f:87: ec:dd:94:b8:04:dd:2d:e7:d8:dc:8c:3c:bd:cb:72: 2d:9a:42:35:6e:42:fd:94:65:70:e1:ae:d4:de:24: 02:cb:9e:67:a3:c5:7b:12:3a:a4:63:bf:ed:85:cd: 61:ee:88:06:7f:96:4a:ee:52:de:35:89:f1:c9:87: 13:96:da:4d:93:3d:ba:eb:0d:1b:cf:be:9f:23:4c: c6:ed:33:48:93:d4:36:88:8a:3d:fe:9f:68:05:f0: 43:41:31:63:b4:57:ee:b1:33:a4:53:c0:34:78:a0: 99:e6:d9:63:91:84:e2:1a:39:7f:6a:e2:c7:cd:cf: ce:be:af:af:0a:af:f7:d2:81:0a:2b:2d:4e:8e:03: f7:66:52:05:8c:c4:8f:64:7d:d6:57:bd:b4:1e:1d: 1e:73:30:7b:e8:a5:38:fe:28:83:c8:98:bd:d3:e0: 44:9b:da:02:de:09:3f:11:04:da:17:8f:e9:75:6a: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6F:AB:0A:41:BC:72:FE:B8:1B:83:D0:6A:DD:D6:C1:84:11:F8:CF X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:a0:be:00:16:04:a8:53:92:9a:db:94:c4:40:b4:d1:d0: dc:05:48:1d:dc:1f:ff:0e:b7:5b:21:49:ed:49:2e:22:dd:89: fb:d4:66:d2:e3:41:d2:5f:87:91:f0:b3:2a:cc:5c:c2:da:e7: 49:8a:91:93:a5:15:f3:76:db:97:d6:ad:25:dd:03:d9:38:cd: 6f:fd:38:4f:64:c3:a9:79:b0:1c:76:a2:be:da:c6:a1:1a:7b: 33:9f:e2:43:da:a4:a3:ee:0f:f0:0f:81:72:1d:63:4e:30:80: 38:f1:55:3b:39:e1:3f:77:90:66:1a:0f:cc:0d:34:6a:d9:13: b7:b4:29:29:42:9d:e0:73:4d:6f:07:09:3d:35:f3:7e:a5:c7: 12:a3:ac:e3:74:ce:ed:04:4c:a9:8e:27:0e:d7:88:e1:1c:0a: 8e:40:c4:b8:50:03:ea:ac:5a:03:8a:1c:d5:d5:ed:92:0b:94: 7a:59:11:83:04:57:e2:66:10:84:90:d4:b7:45:7f:cd:4b:f7: 3a:e8:87:be:6b:0d:61:d7:41:cb:17:58:75:a8:67:55:8a:3c: e2:ce:40:64:ab:f1:32:ac:15:29:60:4d:d9:1d:fa:fc:53:a3: 90:94:57:9a:94:d0:7f:a9:6e:6e:32:3c:07:2e:d3:68:0f:69: 63:93:a7:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjUwODIzMDIxNjQzWhcNMjUwODMwMDIxNjQzWjAYMRYwFAYD VQQDEw02OGE5MjQ4Yi0yYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueTq9Jzs7epQH4nHxKqS4wawhUqtGq3uXCeHKamV/1PTzZQkY5zAJ1hKGL1/ z/NBNDfMC090ACsUIijRQ41TYK79UI7yFutsb4fs3ZS4BN0t59jcjDy9y3ItmkI1 bkL9lGVw4a7U3iQCy55no8V7EjqkY7/thc1h7ogGf5ZK7lLeNYnxyYcTltpNkz26 6w0bz76fI0zG7TNIk9Q2iIo9/p9oBfBDQTFjtFfusTOkU8A0eKCZ5tljkYTiGjl/ auLHzc/Ovq+vCq/30oEKKy1OjgP3ZlIFjMSPZH3WV720Hh0eczB76KU4/iiDyJi9 0+BEm9oC3gk/EQTaF4/pdWps4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVvqwpB vHL+uBuD0Grd1sGEEfjPMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu+aC+ABYEqFOSmtuUxEC00dDcBUgd3B//DrdbIUntSS4i3Yn71GbS 40HSX4eR8LMqzFzC2udJipGTpRXzdtuX1q0l3QPZOM1v/ThPZMOpebAcdqK+2sah Gnszn+JD2qSj7g/wD4FyHWNOMIA48VU7OeE/d5BmGg/MDTRq2RO3tCkpQp3gc01v Bwk9NfN+pccSo6zjdM7tBEypjicO14jhHAqOQMS4UAPqrFoDihzV1e2SC5R6WRGD BFfiZhCEkNS3RX/NS/c66Ie+aw1h10HLF1h1qGdVijzizkBkq/EyrBUpYE3ZHfr8 U6OQlFealNB/qW5uMjwHLtNoD2ljk6f3 -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:40 2025 by rpki-client