$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: 2eFu0XGnZYb6kANU0uzjlzRn5xc+IcgTrfCjvr9ZfFA= Subject key identifier: 76:3D:1E:CE:41:81:E3:A1:F8:75:8A:0C:0D:C8:88:32:47:72:F5:16 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 0102 Signing time: Sat 23 Aug 2025 05:17:11 +0000 Manifest this update: Sat 23 Aug 2025 05:17:10 +0000 Manifest next update: Sat 30 Aug 2025 05:17:10 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: NeEHLXbDFt2V8Kf+h9qyllK8YDJ0Pj5DOBv6kDnFcak=) 2: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: FfibVY4AdNKhMbSEBaw99KBLtkKfPl/2AqaJCYU/zos=) 3: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: woeu7XDsXkTZOep9hCIYKtafROlT5xrNkiMnmBVJg4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Aug 23 05:17:10 2025 GMT Not After : Aug 30 05:17:10 2025 GMT Subject: CN=68a94ed7-6528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:2e:4d:da:67:23:75:7f:cd:45:59:36:a2: ab:60:bd:42:24:1f:fc:0c:57:a2:b7:ca:32:7b:6f: df:5f:1f:c1:ac:38:61:8f:0d:e6:58:25:b5:9d:71: f8:07:0b:55:29:24:a9:0e:00:cf:82:14:5c:e3:8e: 0e:60:db:3a:ed:59:71:0f:fd:8c:b4:ab:1e:25:c6: 5d:07:e6:bf:1c:bb:fb:93:e2:e8:f0:40:23:e8:16: 42:bf:43:09:c0:0e:16:e5:ba:b7:95:e4:b1:99:a4: d8:e8:93:26:45:69:e1:6d:1b:a0:9e:ae:9e:62:d2: 62:8d:c1:d2:61:51:b9:74:10:84:cb:ed:42:1f:87: b5:c4:e1:8b:0b:ee:b3:8e:cf:5a:82:5e:71:c5:e9: 9e:2c:e6:45:8f:62:cb:74:31:6a:9a:3e:f8:e5:d5: a1:34:6e:4f:82:58:5d:a3:d7:e9:cb:72:57:c2:a7: 8e:05:c9:a7:64:75:a2:4e:9e:ca:42:38:6f:7b:6f: bb:de:20:08:b2:ab:6a:7b:f2:c3:4d:60:af:c5:89: 95:8a:0a:9d:98:d5:6a:49:8e:79:30:51:af:8f:1b: 2a:9d:59:82:f4:eb:2d:34:04:2a:31:d7:2b:89:bc: 89:ab:dd:89:ef:ce:3d:4d:63:89:20:d9:b5:cf:31: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:1E:CE:41:81:E3:A1:F8:75:8A:0C:0D:C8:88:32:47:72:F5:16 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:45:90:37:f7:2a:de:bb:51:e0:db:da:b4:bc:e3:ed:e6:90: 46:dd:bc:8d:1b:ab:f9:75:a4:b4:b2:c2:dd:eb:b0:68:9a:ed: 8d:ab:4b:8f:5c:b0:d1:e4:fe:22:82:bb:fb:eb:14:60:b7:06: df:1e:63:b8:32:6e:9f:02:fe:52:09:d4:76:5e:33:fa:03:ed: 21:16:71:25:56:fb:ed:66:ed:a7:46:03:18:12:6c:51:fb:48: 64:82:43:e2:60:28:da:b0:df:15:a5:69:cc:0f:64:32:5a:07: a8:02:a9:8c:27:39:41:ea:4a:55:d4:10:c6:f7:84:e0:68:98: 44:62:e3:51:7b:02:76:b6:62:5f:87:c2:2f:37:73:13:44:47: b8:d4:c2:0f:7d:3b:03:7a:18:de:02:be:99:b4:e2:cd:67:bf: b5:ca:07:eb:39:1b:1b:62:45:c1:da:b1:ed:78:ad:53:aa:25: b7:7c:07:4c:32:09:1c:8d:67:7a:f8:0e:b6:64:ca:a4:3e:8f: be:f9:9c:44:92:72:0e:c0:72:3e:2a:76:7b:a9:28:f8:83:8a: 3f:98:8f:e9:9c:f4:5c:ea:aa:d7:70:4b:88:14:3e:d3:b1:6d: 25:2e:45:1f:7a:3a:34:74:9d:0a:84:2a:19:79:3f:29:54:dd: 3a:e1:c9:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjUwODIzMDUxNzEwWhcNMjUwODMwMDUxNzEwWjAYMRYwFAYD VQQDEw02OGE5NGVkNy02NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09kuTdpnI3V/zUVZNqKrYL1CJB/8DFeit8oye2/fXx/BrDhhjw3mWCW1nXH4 BwtVKSSpDgDPghRc444OYNs67VlxD/2MtKseJcZdB+a/HLv7k+Lo8EAj6BZCv0MJ wA4W5bq3leSxmaTY6JMmRWnhbRugnq6eYtJijcHSYVG5dBCEy+1CH4e1xOGLC+6z js9agl5xxemeLOZFj2LLdDFqmj745dWhNG5Pglhdo9fpy3JXwqeOBcmnZHWiTp7K Qjhve2+73iAIsqtqe/LDTWCvxYmVigqdmNVqSY55MFGvjxsqnVmC9OstNAQqMdcr ibyJq92J7849TWOJINm1zzFjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY9Hs5B geOh+HWKDA3IiDJHcvUWMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRRZA39yreu1Hg29q0vOPt5pBG3byNG6v5daS0ssLd67Bomu2Nq0uP XLDR5P4igrv76xRgtwbfHmO4Mm6fAv5SCdR2XjP6A+0hFnElVvvtZu2nRgMYEmxR +0hkgkPiYCjasN8VpWnMD2QyWgeoAqmMJzlB6kpV1BDG94TgaJhEYuNRewJ2tmJf h8IvN3MTREe41MIPfTsDehjeAr6ZtOLNZ7+1ygfrORsbYkXB2rHteK1TqiW3fAdM MgkcjWd6+A62ZMqkPo+++ZxEknIOwHI+KnZ7qSj4g4o/mI/pnPRc6qrXcEuIFD7T sW0lLkUfejo0dJ0KhCoZeT8pVN064cmM -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:31 2025 by rpki-client