$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: jTLOOJM0FWKJ96Wu0snQX3BW07WVjnFSqUgdnOJfdqo= Subject key identifier: FC:25:D5:A1:82:53:06:C3:C5:E7:4C:C0:AE:4D:02:ED:3C:D6:AE:D8 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 05:58:02 +0000 Manifest this update: Sat 23 Aug 2025 05:58:01 +0000 Manifest next update: Sat 30 Aug 2025 05:58:01 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: ip2Ub/Ud2az6dBuFz1fBUfU2grpo133ycrLrtYSqWTU=) 2: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: FQoFMhaO39gGEcc2pn8CyPB8yz5sPKJ5LS8scOVr+nU=) 3: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: UGCPOMHQWDHdKMVZEIClF1yCBQsAp0GOZkBRwsHoCKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Aug 23 05:58:01 2025 GMT Not After : Aug 30 05:58:01 2025 GMT Subject: CN=68a9586a-cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:ea:d4:12:5a:28:e1:81:59:2d:33:fe:2d: bd:72:01:7b:0f:bd:b9:1a:bd:64:11:10:1c:6f:73: aa:54:29:52:42:91:61:38:b6:2a:d2:bd:92:aa:28: ef:ab:a3:4c:1d:08:99:ce:d0:02:ff:ed:3e:14:f7: 23:2e:5e:c5:9a:6e:75:fd:d6:08:05:58:75:d8:aa: 83:09:4c:db:d8:5e:cb:0b:b0:a0:a2:0e:82:90:e9: 7e:99:be:91:09:3a:55:66:a0:9d:bf:f5:31:3d:06: 82:b5:0c:f9:54:08:34:f4:09:5a:62:83:0f:90:a2: 99:b7:2a:f4:00:2a:59:bf:1b:14:9d:e6:e5:4c:43: 3d:45:aa:bf:98:20:b3:1e:2a:c8:5c:70:d7:e1:2c: b1:84:1a:7d:c0:01:fe:1a:6f:b5:7e:35:da:c0:e4: 77:47:cb:7d:ab:7c:90:33:69:b6:d4:9a:4c:b2:b0: f7:a1:98:a3:c7:ff:40:3b:f1:b1:05:28:de:17:14: 55:5c:6d:0f:da:55:c2:fa:22:83:ae:a9:92:1c:1f: f3:5d:ea:b7:45:fe:6c:d8:9c:17:4c:5e:44:c4:c0: d8:2b:f3:94:dc:99:a7:df:00:a0:64:fe:91:ff:77: 32:40:bc:0c:a8:58:60:dc:55:79:5e:ad:7d:eb:3b: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:D5:A1:82:53:06:C3:C5:E7:4C:C0:AE:4D:02:ED:3C:D6:AE:D8 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:5c:4c:68:a7:1e:ff:43:14:6c:56:92:29:57:86:c9:00: 26:4e:50:79:86:1c:85:a1:d6:8d:eb:dc:4d:94:ad:0b:99:4f: 6a:83:85:e7:67:a7:b3:88:eb:b5:c8:40:4d:91:44:ab:e9:a8: 23:e8:70:b8:f7:4c:76:40:d3:ae:81:44:24:3d:81:70:14:9b: 51:7e:20:f7:d4:3c:57:d3:fc:27:7a:ea:85:45:82:0c:e5:d0: f9:4b:54:89:d1:ae:83:1b:e7:f0:9b:c0:c1:d8:d9:bf:9a:a9: e8:99:c4:13:33:b4:95:62:01:17:9f:75:1c:13:8c:b4:cf:ad: 2a:83:b7:39:84:b4:0a:d7:e2:f1:da:91:25:57:82:9f:fd:c4: 45:93:2b:f5:09:da:53:d6:86:52:57:d3:22:9b:0a:9f:0a:45: 8c:46:89:67:cc:db:a9:e4:f7:cd:6b:d9:84:49:92:25:9a:71: af:6e:d8:a1:f5:4a:92:cd:bf:7a:53:07:48:b6:51:69:3d:72: c1:32:47:2b:f5:4f:70:36:e2:09:c2:0b:07:72:aa:4c:66:13: 55:05:b9:f3:83:18:11:ad:12:c6:ea:39:8f:11:7d:a2:a9:dd: 88:f9:fa:8a:3d:d9:8e:0c:06:43:0f:3c:8c:56:2a:c8:a8:c6: 0d:97:b8:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjUwODIzMDU1ODAxWhcNMjUwODMwMDU1ODAxWjAYMRYwFAYD VQQDEw02OGE5NTg2YS1jYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyofq1BJaKOGBWS0z/i29cgF7D725Gr1kERAcb3OqVClSQpFhOLYq0r2Sqijv q6NMHQiZztAC/+0+FPcjLl7Fmm51/dYIBVh12KqDCUzb2F7LC7Cgog6CkOl+mb6R CTpVZqCdv/UxPQaCtQz5VAg09AlaYoMPkKKZtyr0ACpZvxsUneblTEM9Raq/mCCz HirIXHDX4SyxhBp9wAH+Gm+1fjXawOR3R8t9q3yQM2m21JpMsrD3oZijx/9AO/Gx BSjeFxRVXG0P2lXC+iKDrqmSHB/zXeq3Rf5s2JwXTF5ExMDYK/OU3Jmn3wCgZP6R /3cyQLwMqFhg3FV5Xq196zurxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwl1aGC UwbDxedMwK5NAu081q7YMB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5UVxMaKce/0MUbFaSKVeGyQAmTlB5hhyFodaN69xNlK0LmU9qg4Xn Z6eziOu1yEBNkUSr6agj6HC490x2QNOugUQkPYFwFJtRfiD31DxX0/wneuqFRYIM 5dD5S1SJ0a6DG+fwm8DB2Nm/mqnomcQTM7SVYgEXn3UcE4y0z60qg7c5hLQK1+Lx 2pElV4Kf/cRFkyv1CdpT1oZSV9MimwqfCkWMRolnzNup5PfNa9mESZIlmnGvbtih 9UqSzb96UwdItlFpPXLBMkcr9U9wNuIJwgsHcqpMZhNVBbnzgxgRrRLG6jmPEX2i qd2I+fqKPdmODAZDDzyMVirIqMYNl7hM -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:56 2025 by rpki-client