$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json) Hash identifier: u0z0QuEa+IhleoK+8D32W3AHwVVK8N49A2g166XST1Y= Subject key identifier: 16:DE:F2:7B:DD:3A:49:B1:E9:E0:11:B4:37:A1:AA:3E:AE:4C:F1:17 Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Certificate serial: 0484 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft Manifest number: 0474 Signing time: Sat 23 Aug 2025 00:25:33 +0000 Manifest this update: Sat 23 Aug 2025 00:25:33 +0000 Manifest next update: Sat 30 Aug 2025 00:25:33 +0000 Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: TjFAZHGZgG/wkxr3aTeWHr+0gDyM8+qAMhjc9kgaGk8=) 2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=) 3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1156 (0x484) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Validity Not Before: Aug 23 00:25:33 2025 GMT Not After : Aug 30 00:25:33 2025 GMT Subject: CN=68a90a7d-3b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:3e:43:95:54:ab:9c:74:56:d7:c9:22:04: 76:33:c4:e0:02:21:d0:ab:4a:27:e2:71:d8:77:c0: a7:f9:db:c9:58:13:e7:ad:40:9c:02:12:2b:2a:c5: 75:9d:7c:4f:08:2e:1c:fc:e2:f1:07:d9:bb:c2:e8: 8f:c7:45:75:58:f6:05:1d:6a:6f:8c:4f:bc:41:76: 88:4b:95:11:51:3a:c0:c1:dd:eb:57:57:87:71:dc: 53:c9:a1:98:cd:f4:16:af:97:be:1c:48:f9:5e:3c: 57:9c:13:6f:4a:0e:97:ed:cb:f9:53:f9:12:12:78: 99:99:d2:63:bd:73:35:ff:2f:be:40:11:46:60:5c: d6:2f:6f:d5:db:05:17:8e:1a:70:e7:3f:24:28:3f: ae:fe:e5:fa:e2:8c:61:eb:37:54:fd:e8:6e:a1:06: 34:74:e9:4b:8e:6a:c6:7c:c3:69:33:1b:d8:fb:8a: d7:cf:c2:8d:50:ec:a8:9c:42:63:5a:7d:71:52:2f: 06:dd:e1:35:a9:fb:db:d8:13:53:56:27:cd:f2:8a: 20:b4:88:97:da:aa:4d:6d:cc:29:83:88:d8:0c:f7: 98:eb:06:ff:a0:9c:d9:b8:10:1a:0b:4e:2c:8b:a8: ce:d3:2d:8e:c0:63:e3:6e:e8:e1:d4:76:7c:97:33: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DE:F2:7B:DD:3A:49:B1:E9:E0:11:B4:37:A1:AA:3E:AE:4C:F1:17 X509v3 Authority Key Identifier: keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:c8:df:99:b9:60:4e:36:d8:91:02:8c:a2:3c:df:27:72:40: 2e:91:e1:98:29:ec:3c:48:60:4f:52:b2:72:1e:e2:4d:f5:34: b7:97:6d:80:95:bd:1b:ef:e5:20:00:29:74:33:ea:97:98:35: d1:31:29:94:75:f3:fb:56:f8:52:a3:cf:3f:db:af:45:3f:95: ed:c2:4e:b7:c3:80:66:dc:04:3b:f1:22:bd:ce:36:06:9c:5c: a1:3f:5b:54:a4:2c:c8:39:36:04:a2:c2:14:c6:4f:3a:ff:e6: f3:7b:70:0b:98:1b:68:af:cb:fc:0e:11:40:df:ce:25:2f:6a: e6:b9:29:6c:9c:b3:84:4b:d2:ed:cd:3b:ad:cd:f1:01:28:5a: b5:38:59:04:5e:bb:86:d6:21:56:b1:88:f7:60:f6:1f:6c:d4: ff:5c:09:8a:3d:65:ee:0c:bc:a2:85:21:27:83:02:c5:f2:30: f6:d9:d5:70:13:2b:ec:3f:a1:e3:6f:ad:ea:d0:aa:a1:87:f7: 09:ca:51:6d:09:15:f9:f9:89:cb:31:76:81:82:2a:f9:ec:67: 56:b5:ca:5e:e0:c5:4f:76:10:4b:aa:69:40:03:04:ee:2d:ca: 0b:8f:61:9e:51:27:43:b9:8b:da:c6:0d:f0:93:df:40:cc:a6: ec:45:f8:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZGMkMxMTAvBgNVBAUTKEZFM0RBMTdCNTRBNEQ0MkY3QzVDOUE4QTY3RDM3OTA2 N0E3NjA4MEUwHhcNMjUwODIzMDAyNTMzWhcNMjUwODMwMDAyNTMzWjAYMRYwFAYD VQQDEw02OGE5MGE3ZC0zYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5U+Q5VUq5x0VtfJIgR2M8TgAiHQq0on4nHYd8Cn+dvJWBPnrUCcAhIrKsV1 nXxPCC4c/OLxB9m7wuiPx0V1WPYFHWpvjE+8QXaIS5URUTrAwd3rV1eHcdxTyaGY zfQWr5e+HEj5XjxXnBNvSg6X7cv5U/kSEniZmdJjvXM1/y++QBFGYFzWL2/V2wUX jhpw5z8kKD+u/uX64oxh6zdU/ehuoQY0dOlLjmrGfMNpMxvY+4rXz8KNUOyonEJj Wn1xUi8G3eE1qfvb2BNTVifN8oogtIiX2qpNbcwpg4jYDPeY6wb/oJzZuBAaC04s i6jO0y2OwGPjbujh1HZ8lzP4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbe8nvd Okmx6eARtDehqj6uTPEXMB8GA1UdIwQYMBaAFP49oXtUpNQvfFyaimfTeQZ6dggO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkYyQy9FRDM1NTZEQTVG MzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFDOThYSnFLWjlONUJucDJD QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qMmhlMVNrMUM5OFhKcUtaOU41Qm5wMkNBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkYyQy9FRDM1NTZEQTVGMzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFD OThYSnFLWjlONUJucDJDQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUyN+ZuWBONtiRAoyiPN8nckAukeGYKew8SGBPUrJyHuJN9TS3l22A lb0b7+UgACl0M+qXmDXRMSmUdfP7VvhSo88/269FP5Xtwk63w4Bm3AQ78SK9zjYG nFyhP1tUpCzIOTYEosIUxk86/+bze3ALmBtor8v8DhFA384lL2rmuSlsnLOES9Lt zTutzfEBKFq1OFkEXruG1iFWsYj3YPYfbNT/XAmKPWXuDLyihSEngwLF8jD22dVw EyvsP6Hjb63q0Kqhh/cJylFtCRX5+YnLMXaBgir57GdWtcpe4MVPdhBLqmlAAwTu LcoLj2GeUSdDuYvaxg3wk99AzKbsRfh9 -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:45 2025 by rpki-client