$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: VGJY9/2h20dKRczyE5yZ+MuHJM3PyDTMToJzmvoET/8= Subject key identifier: C9:CA:96:A4:E3:5F:7D:AC:4F:1E:7B:1E:63:08:E2:D1:E8:3E:10:C8 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: A6 Signing time: Sat 23 Aug 2025 06:27:38 +0000 Manifest this update: Sat 23 Aug 2025 06:27:37 +0000 Manifest next update: Sat 30 Aug 2025 06:27:37 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: ytvwPFvDerUWiKdVdSg8iFxLS2NUAmZ77genrR5ebE8=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Aug 23 06:27:37 2025 GMT Not After : Aug 30 06:27:37 2025 GMT Subject: CN=68a95f59-10de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:d3:1d:23:12:78:63:49:3a:d1:27:b8:06: 3f:02:79:31:00:a3:13:d7:1d:43:58:00:52:46:0e: 75:b6:ea:b5:14:7c:2f:cf:15:a9:58:9f:8a:d5:df: b8:f0:bc:2a:a4:bb:25:78:9b:62:fa:9f:6f:9f:52: e0:90:d8:d5:a0:d4:da:c4:77:d0:f9:c2:92:3e:2b: e7:fa:8c:36:84:42:5f:47:d3:aa:12:45:a7:21:cc: 7b:37:49:80:6c:7d:50:d1:b1:0f:81:f2:19:69:6f: 61:bc:08:d0:d8:dc:6f:4d:1b:9a:03:5a:8a:f0:09: 4e:a3:50:dc:ef:47:0e:a6:cf:d7:26:51:51:d5:c7: 46:6d:11:ea:0b:6b:4b:07:50:7b:38:6b:97:a0:15: 3b:19:7a:eb:49:57:c4:40:2a:3d:91:3e:3c:0a:b3: 0e:54:f4:03:2b:07:aa:8e:5c:9b:df:83:ed:d4:e9: d0:2d:03:e3:e4:bf:b4:55:83:4e:5e:8f:16:85:35: 8b:b3:1b:8e:90:91:ec:e0:00:86:df:38:ac:18:99: 05:22:22:ff:f8:cd:ab:74:ad:a0:8e:34:99:e9:9c: bb:d9:61:5c:b0:9a:30:1c:ad:d2:03:d7:b9:54:76: c9:1e:39:ed:49:e8:a8:00:90:a9:e2:98:b3:9a:b8: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CA:96:A4:E3:5F:7D:AC:4F:1E:7B:1E:63:08:E2:D1:E8:3E:10:C8 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:da:08:08:ae:6d:ba:6e:3c:d0:e5:0a:02:33:a7:d4:2a:b4: e6:99:7e:77:85:ea:4e:7d:ab:36:9e:63:e7:d4:9c:05:55:15: 41:b6:2d:1d:5b:fc:c0:8d:6a:72:51:5c:8b:8c:ef:79:99:e6: fc:5d:47:fa:99:01:c8:ea:7e:c0:3f:85:5f:74:10:e9:bd:cf: be:6e:b3:66:dd:e2:19:f6:53:4e:72:66:58:1e:2c:39:34:32: b8:6a:3b:9c:d8:93:06:19:b3:a6:b5:35:95:2b:1d:22:63:4c: 5e:1f:21:3b:43:ea:72:b4:bc:07:be:c4:e5:f0:7d:f0:7a:d9: 70:34:d9:e2:ea:54:e2:03:a6:a2:9c:46:3e:0b:7c:05:cd:a0: 2e:42:f9:47:05:fc:f3:e6:8d:f4:51:3b:2b:5e:88:fc:ef:99: e1:23:81:5c:8e:1f:8a:cc:27:de:96:e5:50:8c:a4:02:b8:52: f6:fa:8b:ea:55:27:67:2f:b9:bd:6a:b6:28:70:7b:29:52:18: fe:3f:57:34:35:e6:2d:1e:e8:10:c2:5b:82:2c:a6:37:f2:2f: 88:a5:8b:86:df:20:8b:34:04:b6:07:35:17:8c:40:e8:0b:d7: 65:dc:eb:79:bd:ed:a6:d1:3d:92:fa:60:15:66:07:8c:4d:05: f9:21:11:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjUwODIzMDYyNzM3WhcNMjUwODMwMDYyNzM3WjAYMRYwFAYD VQQDEw02OGE5NWY1OS0xMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnDTHSMSeGNJOtEnuAY/AnkxAKMT1x1DWABSRg51tuq1FHwvzxWpWJ+K1d+4 8LwqpLsleJti+p9vn1LgkNjVoNTaxHfQ+cKSPivn+ow2hEJfR9OqEkWnIcx7N0mA bH1Q0bEPgfIZaW9hvAjQ2NxvTRuaA1qK8AlOo1Dc70cOps/XJlFR1cdGbRHqC2tL B1B7OGuXoBU7GXrrSVfEQCo9kT48CrMOVPQDKweqjlyb34Pt1OnQLQPj5L+0VYNO Xo8WhTWLsxuOkJHs4ACG3zisGJkFIiL/+M2rdK2gjjSZ6Zy72WFcsJowHK3SA9e5 VHbJHjntSeioAJCp4pizmriR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnKlqTj X32sTx57HmMI4tHoPhDIMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo2ggIrm26bjzQ5QoCM6fUKrTmmX53hepOfas2nmPn1JwFVRVBti0d W/zAjWpyUVyLjO95meb8XUf6mQHI6n7AP4VfdBDpvc++brNm3eIZ9lNOcmZYHiw5 NDK4ajuc2JMGGbOmtTWVKx0iY0xeHyE7Q+pytLwHvsTl8H3wetlwNNni6lTiA6ai nEY+C3wFzaAuQvlHBfzz5o30UTsrXoj875nhI4Fcjh+KzCfeluVQjKQCuFL2+ovq VSdnL7m9arYocHspUhj+P1c0NeYtHugQwluCLKY38i+IpYuG3yCLNAS2BzUXjEDo C9dl3Ot5ve2m0T2S+mAVZgeMTQX5IREA -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:37 2025 by rpki-client