$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: cYD34UY+ds5e6LDnho5ePJsmP7l7s/1jnvuNR+wyQHM= Subject key identifier: 89:05:6A:1E:C7:11:D7:35:B6:8E:34:84:B1:3F:C9:F0:29:A2:38:80 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: EC Signing time: Sat 23 Aug 2025 05:33:06 +0000 Manifest this update: Sat 23 Aug 2025 05:33:06 +0000 Manifest next update: Sat 30 Aug 2025 05:33:06 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: reGqNBLdtujvUqJdSbtHYbSgGRtG3a7BudDsEhgXhMg=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: TnSpnLe7j6/9wTqsNRxeaAfjz8zUewbXt/4PsMyvpP4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: hgy+s41tW18ZsoIITX25VfjzDwvg0uuSJ0bvy5UWIIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Aug 23 05:33:06 2025 GMT Not After : Aug 30 05:33:06 2025 GMT Subject: CN=68a95292-d1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:e1:f0:a0:7f:f5:f9:44:c5:6b:d1:66:50: e5:b9:70:36:b9:7b:f0:3a:a7:df:28:bb:e4:76:e4: 88:eb:0e:26:7b:5c:11:af:90:2e:df:b0:db:be:5f: 69:92:c7:18:4f:6e:f6:d6:97:0e:27:e9:41:1a:b5: 6f:5d:fd:a4:48:62:d8:4f:24:bd:41:d2:28:33:4f: 36:c3:4c:76:98:9c:25:73:50:e0:1f:e7:3c:17:9b: e6:77:f2:ac:27:bf:85:b2:42:93:7a:80:fb:7e:07: ad:a8:38:b9:db:6b:7b:63:45:d6:7f:80:25:56:f5: 0b:5d:60:c8:af:92:47:02:b8:26:d6:c4:04:76:a4: 57:9f:7b:d2:10:d5:66:9e:eb:6c:44:2d:62:78:da: 58:33:b9:5d:fa:d8:32:79:af:93:96:14:44:27:8b: 09:d8:db:07:24:11:da:1f:54:55:a1:fc:97:82:3a: 1e:9b:3a:c0:af:01:f7:a0:74:00:f3:c3:fd:34:0b: 94:9a:f3:4b:6d:cd:b7:c5:6d:be:64:5e:47:d9:df: 42:bf:bf:ae:ce:27:e8:05:15:fd:db:18:02:d2:f2: e8:0e:93:c3:98:81:b8:32:08:96:23:0d:2d:c6:b5: 8b:b3:d0:c1:03:44:ba:ec:75:21:f7:34:f2:4d:78: b2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:6A:1E:C7:11:D7:35:B6:8E:34:84:B1:3F:C9:F0:29:A2:38:80 X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:8c:61:29:3d:3e:61:48:59:22:24:e5:1b:a7:9e:25:bd:94: 77:7f:fe:6f:eb:62:c2:ac:ae:45:8c:4e:84:5e:80:68:4a:48: 2e:d5:c6:c8:aa:0b:31:6c:15:ec:d8:16:49:e3:f9:f9:fd:8c: 18:52:20:de:39:a3:50:83:c8:d0:fe:b7:9f:92:f5:10:72:7d: 61:5d:8d:71:c9:df:44:15:16:62:58:87:89:60:19:fa:37:72: fc:84:9d:d4:bf:d1:d2:49:71:f7:44:ca:51:b0:0f:53:16:8c: 8c:cf:84:c7:cf:47:75:e0:16:e3:6e:f4:89:7d:2c:9d:fe:51: 99:86:d9:05:25:ae:e6:e6:35:30:b3:c9:2c:40:4b:bd:95:70: 69:7b:56:11:a9:07:e9:96:7e:53:26:6a:8b:74:6d:6d:e8:70: 22:9c:f5:68:01:45:36:28:65:e9:ea:cf:e1:2d:1a:cf:34:40: b8:5e:95:f0:18:e0:e1:23:f1:d3:1e:98:c0:0f:fd:98:c8:02: e0:04:08:80:cf:53:6f:c7:e9:81:a0:90:02:c2:64:a2:20:52: 79:a6:24:1b:9f:b4:b9:52:0c:3f:a0:46:7e:3d:07:b1:fa:6c: 41:4b:72:60:8d:14:0c:49:9d:cd:66:5d:a1:71:db:a9:d9:ff: a8:0f:7a:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjUwODIzMDUzMzA2WhcNMjUwODMwMDUzMzA2WjAYMRYwFAYD VQQDEw02OGE5NTI5Mi1kMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Nnh8KB/9flExWvRZlDluXA2uXvwOqffKLvkduSI6w4me1wRr5Au37Dbvl9p kscYT2721pcOJ+lBGrVvXf2kSGLYTyS9QdIoM082w0x2mJwlc1DgH+c8F5vmd/Ks J7+FskKTeoD7fgetqDi522t7Y0XWf4AlVvULXWDIr5JHArgm1sQEdqRXn3vSENVm nutsRC1ieNpYM7ld+tgyea+TlhREJ4sJ2NsHJBHaH1RVofyXgjoemzrArwH3oHQA 88P9NAuUmvNLbc23xW2+ZF5H2d9Cv7+uzifoBRX92xgC0vLoDpPDmIG4MgiWIw0t xrWLs9DBA0S67HUh9zTyTXiyTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkFah7H Edc1to40hLE/yfApojiAMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgjGEpPT5hSFkiJOUbp54lvZR3f/5v62LCrK5FjE6EXoBoSkgu1cbI qgsxbBXs2BZJ4/n5/YwYUiDeOaNQg8jQ/refkvUQcn1hXY1xyd9EFRZiWIeJYBn6 N3L8hJ3Uv9HSSXH3RMpRsA9TFoyMz4THz0d14BbjbvSJfSyd/lGZhtkFJa7m5jUw s8ksQEu9lXBpe1YRqQfpln5TJmqLdG1t6HAinPVoAUU2KGXp6s/hLRrPNEC4XpXw GODhI/HTHpjAD/2YyALgBAiAz1Nvx+mBoJACwmSiIFJ5piQbn7S5Ugw/oEZ+PQex +mxBS3JgjRQMSZ3NZl2hcdup2f+oD3ox -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:05 2025 by rpki-client