$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: GxgoBF3ua0agaAWPSVHsWVXuu7tMjCTAvgPJIOxkDiE= Subject key identifier: EA:4F:B4:D2:EF:AD:FC:16:39:31:40:DE:D5:19:AE:64:D7:DC:AA:6C Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 03BE Signing time: Sat 23 Aug 2025 00:55:21 +0000 Manifest this update: Sat 23 Aug 2025 00:55:20 +0000 Manifest next update: Sat 30 Aug 2025 00:55:20 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: ki+PZrJdTou4ERASEC0DqQQ2+vTNtPpW0QK4aUpXDFY=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: vAub+gasrAOQ1+asaJIl575xD7KBPecCLw303hY+Tq0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A, serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Aug 23 00:55:20 2025 GMT Not After : Aug 30 00:55:20 2025 GMT Subject: CN=68a91179-fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:92:e9:73:d6:cd:26:4e:c3:88:57:45:b6: 11:b2:8a:80:e0:dd:43:68:a3:06:d6:95:b1:38:e6: 9f:e5:a9:a3:cd:5a:75:12:69:2e:79:ed:0c:df:a4: de:78:16:28:9c:ff:0b:2f:8a:ed:7b:b2:21:da:5a: fd:0d:74:bd:28:f7:86:02:30:b3:48:d0:28:04:0f: cf:1c:8e:c0:98:a1:8b:7b:56:95:62:09:6c:0c:7b: 18:54:bf:4f:78:36:b2:7f:d3:80:f3:58:81:4e:5e: 63:3c:d7:f1:9c:8d:3a:95:35:b0:9a:40:2c:cd:ee: 05:b1:64:4a:e0:79:ce:49:1c:f0:ed:0c:40:e6:b5: 6f:db:da:b4:66:0f:18:af:18:29:10:0f:e9:8f:e4: 1a:d8:6f:9b:72:a1:f3:39:66:a3:c6:e1:c5:b7:36: 5d:94:ad:db:3a:fb:ce:ca:86:a2:8f:96:7e:7b:83: a7:5f:64:eb:a5:23:27:4f:5c:e1:0c:55:35:7c:77: 53:42:1a:a3:8a:0b:2f:8d:9f:11:5b:75:98:1a:1d: 17:e1:85:80:e1:f8:da:80:84:01:00:d8:8f:b9:1f: 19:ca:45:87:fc:18:ee:ad:64:ba:45:03:69:46:12: 7d:fc:00:86:5a:51:83:84:4f:75:a1:18:df:12:e5: df:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:B4:D2:EF:AD:FC:16:39:31:40:DE:D5:19:AE:64:D7:DC:AA:6C X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8a:0e:3a:8f:ac:79:81:6f:0e:48:fb:f9:a3:fa:52:18:fd: b9:86:c9:6e:a6:e6:89:8a:f1:c2:bd:74:04:5e:dc:a5:b3:1e: 01:77:98:83:33:07:fa:3a:8e:bf:92:15:df:b2:80:ec:ab:5a: c8:f0:bc:80:d1:57:64:fb:25:d3:80:44:81:7d:54:c6:1e:5c: d0:26:44:e7:f3:90:25:a9:84:62:91:50:d3:9c:0c:9b:64:60: bf:a1:69:84:f8:e8:0a:d6:0d:37:8b:26:7f:2f:ff:4f:9f:61: 93:b1:ed:98:b1:95:3a:5d:46:17:fc:97:9f:24:61:32:e6:86: 01:f5:01:b6:f6:01:51:1e:4e:6e:dd:55:6b:40:8d:d3:74:b3: b3:88:b5:74:b4:a1:62:21:63:10:5a:39:98:ff:27:83:4b:e7: 4b:dc:b9:a1:e8:73:cc:d6:b8:aa:5e:be:75:3e:9a:36:1d:4e: 12:88:2c:34:7b:1b:b6:cf:a8:2e:45:56:bc:f0:9d:df:6b:96: e1:a2:50:2b:d1:6d:2c:f6:7e:42:3b:26:81:98:ef:b6:7b:da: 33:33:36:42:75:58:07:ba:c9:5b:cb:d4:95:20:46:6a:7f:2c: 41:cb:72:ae:ca:5d:d5:f8:ac:07:e7:49:81:f3:32:cf:28:fb: 71:21:0c:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjUwODIzMDA1NTIwWhcNMjUwODMwMDA1NTIwWjAYMRYwFAYD VQQDEw02OGE5MTE3OS1mYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA392S6XPWzSZOw4hXRbYRsoqA4N1DaKMG1pWxOOaf5amjzVp1Emkuee0M36Te eBYonP8LL4rte7Ih2lr9DXS9KPeGAjCzSNAoBA/PHI7AmKGLe1aVYglsDHsYVL9P eDayf9OA81iBTl5jPNfxnI06lTWwmkAsze4FsWRK4HnOSRzw7QxA5rVv29q0Zg8Y rxgpEA/pj+Qa2G+bcqHzOWajxuHFtzZdlK3bOvvOyoaij5Z+e4OnX2TrpSMnT1zh DFU1fHdTQhqjigsvjZ8RW3WYGh0X4YWA4fjagIQBANiPuR8ZykWH/BjurWS6RQNp RhJ9/ACGWlGDhE91oRjfEuXfxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpPtNLv rfwWOTFA3tUZrmTX3KpsMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMig46j6x5gW8OSPv5o/pSGP25hslupuaJivHCvXQEXtylsx4Bd5iD Mwf6Oo6/khXfsoDsq1rI8LyA0Vdk+yXTgESBfVTGHlzQJkTn85AlqYRikVDTnAyb ZGC/oWmE+OgK1g03iyZ/L/9Pn2GTse2YsZU6XUYX/JefJGEy5oYB9QG29gFRHk5u 3VVrQI3TdLOziLV0tKFiIWMQWjmY/yeDS+dL3Lmh6HPM1riqXr51Ppo2HU4SiCw0 exu2z6guRVa88J3fa5bholAr0W0s9n5COyaBmO+2e9ozMzZCdVgHuslby9SVIEZq fyxBy3Kuyl3V+KwH50mB8zLPKPtxIQzI -----END CERTIFICATE-----Generated at Sat Aug 23 17:21:05 2025 by rpki-client