$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: Oi1hvicSgF338WziFzfJb9tDHM/hUZcigGNh2dZj00M= Subject key identifier: 0D:D4:62:78:33:1F:E0:2A:BC:60:FB:0A:E8:7F:24:73:10:E6:26:3E Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0D8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0D4E Signing time: Fri 22 Aug 2025 18:10:48 +0000 Manifest this update: Fri 22 Aug 2025 18:10:47 +0000 Manifest next update: Fri 29 Aug 2025 18:10:47 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: kIp75yqu7a0BTzYSg+9frPWJT2Z+bPFYixuwqRv2/lo=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=) 4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=) 6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=) 7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Aug 22 18:10:47 2025 GMT Not After : Aug 29 18:10:47 2025 GMT Subject: CN=68a8b2a8-f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:f3:da:ba:1a:5d:5f:af:1e:d5:63:14:6e: 8a:2f:8c:ee:99:b0:39:38:c8:79:69:7a:c0:c5:ea: 66:e2:16:13:d4:44:68:db:54:1f:24:08:b8:0f:37: 03:b9:de:83:5e:f5:aa:44:01:86:5d:2e:51:a2:d1: e7:44:d4:3a:92:c0:b8:71:9a:ba:3d:71:4e:b2:81: fa:38:ed:76:e5:f5:1a:5c:8f:a9:1b:b8:47:8d:c8: b7:d9:51:46:df:db:72:d9:b4:43:cc:eb:88:0d:9b: 13:10:fd:5c:fb:57:78:a4:b2:5c:39:b9:b6:2c:95: be:5c:5f:73:94:b8:c9:83:ba:e5:3e:d7:e9:6a:44: 07:45:0a:70:8a:bf:60:41:00:19:f3:87:8b:df:32: 9b:f0:ed:82:75:33:d3:41:ae:f9:5f:eb:95:4b:8e: 4c:3b:c2:aa:03:fa:87:f1:d0:f3:82:ed:ae:c0:ba: 36:a6:7a:c2:eb:30:f1:17:92:b3:ad:cb:06:3f:2b: c3:3f:5d:b5:0d:73:08:be:1b:47:73:5c:40:13:72: 75:ab:a3:50:d8:04:04:89:2d:1b:e3:56:5f:06:0c: ed:c6:28:96:f0:ea:0b:fe:47:a8:f3:49:cb:e6:3c: 2d:f0:5a:27:11:31:c8:8f:35:41:05:f8:ef:88:aa: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D4:62:78:33:1F:E0:2A:BC:60:FB:0A:E8:7F:24:73:10:E6:26:3E X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:10:11:19:da:19:31:4c:db:ee:c2:16:13:e6:d9:f1:42:22: 73:bd:d2:e2:56:6e:c6:0d:c5:8d:df:1c:e2:3d:9b:23:0a:6a: 58:ec:74:d4:7b:12:5c:90:6f:b9:75:a2:38:1d:66:ce:db:40: fb:46:65:8c:eb:fe:f9:36:7b:45:77:69:63:f8:c5:0f:f3:7e: c7:26:d4:0f:12:1f:a7:ae:b6:f5:90:ec:4d:e2:4d:2f:51:6e: 53:93:88:26:9c:31:dc:23:0d:7e:c6:e4:6a:4e:24:83:17:b3: 49:00:78:db:d8:09:95:d1:04:0c:96:2a:8f:4d:12:6f:a0:87: ba:ce:0e:d0:55:eb:c5:65:84:d0:77:e1:05:f9:d9:b5:bf:95: 17:9b:a4:eb:87:46:b4:81:23:4f:b3:e6:4c:ca:9b:2a:08:d8: e0:aa:08:30:20:e3:49:ee:ce:08:ec:24:14:7f:77:ca:67:3c: 31:80:55:71:40:d1:d9:8f:25:af:09:4c:fd:da:2e:be:2d:f5: 0d:54:da:d0:dd:e1:e3:80:8a:6c:f3:36:fd:f1:da:46:29:f7: 04:b8:77:9d:0e:ec:44:b0:c5:b4:69:63:49:ce:c3:a3:ba:e5: e0:a8:3d:53:c5:a6:12:1d:6b:50:a5:80:46:fb:77:49:06:1b: 06:0d:e3:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjUwODIyMTgxMDQ3WhcNMjUwODI5MTgxMDQ3WjAYMRYwFAYD VQQDEw02OGE4YjJhOC1mMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshnz2roaXV+vHtVjFG6KL4zumbA5OMh5aXrAxepm4hYT1ERo21QfJAi4DzcD ud6DXvWqRAGGXS5RotHnRNQ6ksC4cZq6PXFOsoH6OO125fUaXI+pG7hHjci32VFG 39ty2bRDzOuIDZsTEP1c+1d4pLJcObm2LJW+XF9zlLjJg7rlPtfpakQHRQpwir9g QQAZ84eL3zKb8O2CdTPTQa75X+uVS45MO8KqA/qH8dDzgu2uwLo2pnrC6zDxF5Kz rcsGPyvDP121DXMIvhtHc1xAE3J1q6NQ2AQEiS0b41ZfBgztxiiW8OoL/keo80nL 5jwt8FonETHIjzVBBfjviKp7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3UYngz H+AqvGD7Cuh/JHMQ5iY+MB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFEBEZ2hkxTNvuwhYT5tnxQiJzvdLiVm7GDcWN3xziPZsjCmpY7HTU exJckG+5daI4HWbO20D7RmWM6/75NntFd2lj+MUP837HJtQPEh+nrrb1kOxN4k0v UW5Tk4gmnDHcIw1+xuRqTiSDF7NJAHjb2AmV0QQMliqPTRJvoIe6zg7QVevFZYTQ d+EF+dm1v5UXm6Trh0a0gSNPs+ZMypsqCNjgqggwIONJ7s4I7CQUf3fKZzwxgFVx QNHZjyWvCUz92i6+LfUNVNrQ3eHjgIps8zb98dpGKfcEuHedDuxEsMW0aWNJzsOj uuXgqD1TxaYSHWtQpYBG+3dJBhsGDeOC -----END CERTIFICATE-----Generated at Sun Aug 24 07:14:44 2025 by rpki-client