$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: Mv8+/4/kMa5t6hQGQN5S9uZ0kM6QAWBbUQaFPEj9XaU= Subject key identifier: 0C:E8:26:BC:49:4F:13:08:E9:B6:10:46:85:1D:E4:64:7D:76:62:45 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 34FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 34D4 Signing time: Fri 22 Aug 2025 14:37:58 +0000 Manifest this update: Fri 22 Aug 2025 14:37:57 +0000 Manifest next update: Fri 29 Aug 2025 14:37:57 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: jUD1h6o4eNwdPj79KM9hVxO7z3/SBOeWloEPo0/vj0I=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Aug 22 14:37:57 2025 GMT Not After : Aug 29 14:37:57 2025 GMT Subject: CN=68a880c5-8f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1c:35:1d:d4:2b:75:52:0d:fc:30:da:6a:cd: 82:b1:d1:e7:30:ff:37:49:f1:ee:7c:f7:63:80:f9: cc:2a:3b:f7:88:7a:c1:65:95:98:e3:68:ad:24:bd: 94:e1:16:a4:aa:8a:d9:53:f3:ee:e5:88:71:8d:0f: f2:a8:55:0f:49:76:5f:f3:09:78:2d:8e:a3:92:94: 65:1f:82:69:a3:0d:b1:e2:f3:1d:b4:c1:09:4d:6c: d1:67:fb:5c:e7:49:d8:57:f5:c9:af:dc:33:d7:87: a1:d3:87:18:5f:3e:81:ba:16:3c:d5:d7:24:4d:00: 67:f3:7f:43:05:8d:5b:56:1b:be:a6:e8:fb:ba:5d: ed:dc:1a:31:81:09:00:45:77:bc:76:01:b0:3f:81: ed:0b:bb:ff:e8:b8:c3:1f:a4:10:75:0b:3b:57:68: dc:36:22:08:4a:72:56:69:2c:4f:96:e1:eb:de:fe: d6:02:f2:5c:47:d6:ac:2a:7e:f8:34:35:b5:a9:27: 5e:87:98:6b:02:be:c9:5b:64:76:a4:13:e5:39:5f: c6:2b:4b:60:c4:91:75:bc:c9:d7:b9:32:fa:86:20: 6e:b1:b6:0c:60:16:86:5f:13:77:70:c5:10:cb:1c: 49:85:57:5d:ce:17:74:49:1b:c3:17:43:7f:cf:97: 4f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:26:BC:49:4F:13:08:E9:B6:10:46:85:1D:E4:64:7D:76:62:45 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:7e:a2:d2:fe:aa:80:16:23:2a:28:b8:db:94:0d:71:0f:d2: 2d:19:32:61:a9:2d:f5:b4:a5:89:0a:dc:20:7c:d9:90:53:32: 79:7b:c5:85:1d:f2:9b:4f:95:7e:4e:74:ad:f7:45:34:a7:3b: 8a:52:35:9d:23:f9:b5:f2:5e:2f:4a:56:3b:ba:3c:f6:98:4c: e6:27:30:a9:08:35:e8:76:90:08:88:21:2f:96:48:a1:d8:ed: a5:33:e7:68:21:f2:c1:54:80:af:2a:7b:fd:97:4d:2f:f0:3b: 16:ae:83:0e:13:4c:40:56:7b:2e:fb:db:d3:23:4a:3f:df:0b: ab:08:8a:9a:54:bf:92:96:69:68:3a:62:d6:a8:1a:bc:b2:47: af:4f:9b:77:11:3f:69:d6:f1:f6:2b:ee:21:d9:fd:21:66:74: 16:94:2e:aa:bb:db:5b:ae:33:06:5f:92:de:29:1d:7f:8a:8c: 99:d6:e5:2d:14:1f:07:b5:8e:19:b6:42:64:95:5a:d7:01:93: 0a:4d:6d:19:61:51:99:e0:55:a5:df:6e:27:8a:e7:b6:1e:a2: a8:f8:32:65:6d:b1:6c:53:85:de:8b:74:dc:ea:f0:27:7e:6d: 26:5e:4d:ab:be:17:59:62:38:e5:05:b0:a0:9e:82:ea:2e:ca: 57:21:21:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjUwODIyMTQzNzU3WhcNMjUwODI5MTQzNzU3WjAYMRYwFAYD VQQDEw02OGE4ODBjNS04Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hw1HdQrdVIN/DDaas2CsdHnMP83SfHufPdjgPnMKjv3iHrBZZWY42itJL2U 4RakqorZU/Pu5YhxjQ/yqFUPSXZf8wl4LY6jkpRlH4Jpow2x4vMdtMEJTWzRZ/tc 50nYV/XJr9wz14eh04cYXz6BuhY81dckTQBn839DBY1bVhu+puj7ul3t3BoxgQkA RXe8dgGwP4HtC7v/6LjDH6QQdQs7V2jcNiIISnJWaSxPluHr3v7WAvJcR9asKn74 NDW1qSdeh5hrAr7JW2R2pBPlOV/GK0tgxJF1vMnXuTL6hiBusbYMYBaGXxN3cMUQ yxxJhVddzhd0SRvDF0N/z5dPDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzoJrxJ TxMI6bYQRoUd5GR9dmJFMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHfqLS/qqAFiMqKLjblA1xD9ItGTJhqS31tKWJCtwgfNmQUzJ5e8WF HfKbT5V+TnSt90U0pzuKUjWdI/m18l4vSlY7ujz2mEzmJzCpCDXodpAIiCEvlkih 2O2lM+doIfLBVICvKnv9l00v8DsWroMOE0xAVnsu+9vTI0o/3wurCIqaVL+Slmlo OmLWqBq8skevT5t3ET9p1vH2K+4h2f0hZnQWlC6qu9tbrjMGX5LeKR1/ioyZ1uUt FB8HtY4ZtkJklVrXAZMKTW0ZYVGZ4FWl324niue2HqKo+DJlbbFsU4Xei3Tc6vAn fm0mXk2rvhdZYjjlBbCgnoLqLspXISHC -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:50 2025 by rpki-client