$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft File: rSHioIh9gBBYg2nxR4WWAoR3zb4.mft (raw, json) Hash identifier: jntz1qXyk/Sa9ESex0hMByDDx/DmM7w4BO/yapTZ2Fc= Subject key identifier: D2:F1:2E:AF:8A:9E:1C:F9:24:72:76:19:B3:32:23:C2:63:D2:F5:18 Authority key identifier: AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE Certificate issuer: /CN=A913344F/serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Certificate serial: 10EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft Manifest number: 10E2 Signing time: Fri 22 Aug 2025 17:25:16 +0000 Manifest this update: Fri 22 Aug 2025 17:25:16 +0000 Manifest next update: Fri 29 Aug 2025 17:25:16 +0000 Files and hashes: 1: rSHioIh9gBBYg2nxR4WWAoR3zb4.crl (hash: z2Gaz4D4AkkDMzkDhAJu9qjqbvgouts157odICmV4h4=) 2: 2CDBC1B0251111E997B74770C4F9AE02.roa (hash: CkHze899oLtDE8NmW64bq/+8jNoI8+T8tB+dRDVhSSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4330 (0x10ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F, serialNumber=AD21E2A0887D8010588369F1478596028477CDBE Validity Not Before: Aug 22 17:25:16 2025 GMT Not After : Aug 29 17:25:16 2025 GMT Subject: CN=68a8a7fc-6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:60:d8:ad:42:22:55:55:36:4a:75:bc:6a:9f: b7:49:a0:c4:3a:d4:29:8a:07:6c:98:dd:3f:51:c6: 7a:7e:e7:b7:73:3e:34:2d:58:9a:a7:81:49:71:15: 68:90:2c:ee:1c:2a:3c:ee:09:fc:77:7a:3c:37:e6: 6a:f4:cb:57:08:78:ba:58:ae:a5:d7:0e:9f:cb:89: 8b:39:8c:54:1e:72:38:3f:ed:e9:93:a1:5a:4d:03: 47:a8:4b:7f:a4:bb:39:7c:c2:da:d1:a7:5b:57:60: db:bb:6f:ef:72:0d:db:b0:a4:34:9c:11:cb:b4:28: a7:ee:bb:b7:a2:46:72:b8:cc:0b:01:07:37:20:be: 29:07:db:14:83:a2:bb:23:c9:8b:d2:97:d8:6c:6a: 4e:f2:61:93:2f:af:7d:cc:b3:67:56:ac:b8:28:80: 8b:0d:6f:62:37:ad:dc:b9:50:03:77:6b:fd:f5:a1: 39:8f:68:f7:04:be:df:42:6d:4b:b6:aa:95:a8:d5: 0c:1b:45:81:1b:f1:4b:53:eb:64:43:cf:c5:df:30: 0b:3d:14:c0:4f:18:96:6c:7a:e6:a5:3a:4f:14:81: 3f:47:3b:69:0d:43:50:d6:df:3e:3a:aa:f9:94:02: 58:7a:4c:9e:12:89:c4:c1:0c:20:c3:43:91:39:2c: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:2E:AF:8A:9E:1C:F9:24:72:76:19:B3:32:23:C2:63:D2:F5:18 X509v3 Authority Key Identifier: keyid:AD:21:E2:A0:88:7D:80:10:58:83:69:F1:47:85:96:02:84:77:CD:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHioIh9gBBYg2nxR4WWAoR3zb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/94FFBAA0250F11E990DDE36CC4F9AE02/rSHioIh9gBBYg2nxR4WWAoR3zb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:26:dc:6d:2d:2e:b3:13:80:fd:14:a0:bc:5b:be:18:52:be: 72:14:9d:ea:2f:c8:4b:9e:23:6c:03:07:e3:be:4c:63:d1:02: f9:1a:5d:d2:90:9e:40:38:f4:76:03:b5:98:21:4e:4b:e5:26: 5e:f9:8a:7e:1d:15:24:02:39:e6:b6:d2:05:87:51:a9:92:61: de:03:4d:9e:37:96:5a:bc:02:25:c6:4c:51:ab:3e:36:1f:78: 8d:df:8b:6d:55:c1:d9:21:68:35:cb:c8:c5:e9:c7:b6:15:af: aa:9b:8c:67:fd:b9:b6:52:80:a5:93:ec:40:d1:a5:13:1e:44: 89:f5:10:27:11:8e:ef:40:10:1c:74:96:e4:b7:20:d1:f5:2f: 2b:8e:2a:19:b8:6d:0a:85:63:c7:80:39:37:42:a9:a3:1d:8a: fc:b9:01:8f:85:91:23:0f:20:88:14:dd:f7:e9:72:b7:b3:f1: eb:31:37:f0:cb:70:9b:bb:42:9f:00:33:3b:ac:0c:24:06:71: 87:87:17:f1:1a:4f:8a:2f:f4:dc:62:ca:5c:81:9a:59:cb:7f: e3:8a:10:9f:3a:b4:8d:fe:9e:ea:60:f5:7d:eb:bb:35:04:d2: ec:46:4d:48:3b:e0:1a:1b:e9:98:fd:ec:e0:37:f8:93:ca:55: 4e:7d:c9:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKEFEMjFFMkEwODg3RDgwMTA1ODgzNjlGMTQ3ODU5NjAy ODQ3N0NEQkUwHhcNMjUwODIyMTcyNTE2WhcNMjUwODI5MTcyNTE2WjAYMRYwFAYD VQQDEw02OGE4YTdmYy02ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72DYrUIiVVU2SnW8ap+3SaDEOtQpigdsmN0/UcZ6fue3cz40LViap4FJcRVo kCzuHCo87gn8d3o8N+Zq9MtXCHi6WK6l1w6fy4mLOYxUHnI4P+3pk6FaTQNHqEt/ pLs5fMLa0adbV2Dbu2/vcg3bsKQ0nBHLtCin7ru3okZyuMwLAQc3IL4pB9sUg6K7 I8mL0pfYbGpO8mGTL699zLNnVqy4KICLDW9iN63cuVADd2v99aE5j2j3BL7fQm1L tqqVqNUMG0WBG/FLU+tkQ8/F3zALPRTATxiWbHrmpTpPFIE/RztpDUNQ1t8+Oqr5 lAJYekyeEonEwQwgw0OROSzr4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLxLq+K nhz5JHJ2GbMyI8Jj0vUYMB8GA1UdIwQYMBaAFK0h4qCIfYAQWINp8UeFlgKEd82+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri85NEZGQkFBMDI1 MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdCQllnMm54UjRXV0FvUjN6 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSGlvSWg5Z0JCWWcybnhSNFdXQW9SM3piNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ0Ri85NEZGQkFBMDI1MEYxMUU5OTBEREUzNkNDNEY5QUUwMi9yU0hpb0loOWdC QllnMm54UjRXV0FvUjN6YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHJtxtLS6zE4D9FKC8W74YUr5yFJ3qL8hLniNsAwfjvkxj0QL5Gl3S kJ5AOPR2A7WYIU5L5SZe+Yp+HRUkAjnmttIFh1GpkmHeA02eN5ZavAIlxkxRqz42 H3iN34ttVcHZIWg1y8jF6ce2Fa+qm4xn/bm2UoClk+xA0aUTHkSJ9RAnEY7vQBAc dJbktyDR9S8rjioZuG0KhWPHgDk3QqmjHYr8uQGPhZEjDyCIFN336XK3s/HrMTfw y3Cbu0KfADM7rAwkBnGHhxfxGk+KL/TcYspcgZpZy3/jihCfOrSN/p7qYPV967s1 BNLsRk1IO+AaG+mY/ezgN/iTylVOfckP -----END CERTIFICATE-----Generated at Sat Aug 23 22:38:22 2025 by rpki-client