$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: 54gl/aqhlb0eRc87sJDAOEQ0zoh4Ig/1ZGxdIof/lus= Subject key identifier: B4:CA:E9:88:13:D9:45:B6:C4:0B:25:C2:0E:0B:5F:7F:6A:9A:DB:27 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 0849 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 083E Signing time: Fri 22 Aug 2025 20:53:41 +0000 Manifest this update: Fri 22 Aug 2025 20:53:41 +0000 Manifest next update: Fri 29 Aug 2025 20:53:41 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: VwmYuQpGI/uRianlPeNd+jR5BPvRkS5Z8TwTwhyRT0g=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2121 (0x849) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Aug 22 20:53:41 2025 GMT Not After : Aug 29 20:53:41 2025 GMT Subject: CN=68a8d8d5-5d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:36:08:93:8f:d3:78:f2:5d:61:e6:90:e4: 75:7b:4e:14:df:59:5c:15:c8:54:a2:6e:8b:69:f5: fa:05:0f:5a:44:3e:ab:82:f2:6d:f9:a9:f8:10:79: 81:9a:9a:05:2c:72:b7:a1:2d:c8:14:d9:ad:39:6f: 4a:7a:88:32:ae:a6:e1:c6:37:81:74:80:de:e8:e8: 57:e7:c5:35:9f:7e:61:0a:0f:9b:65:34:e4:f2:f5: 60:45:5f:7c:5e:b6:92:1c:e1:69:87:f2:54:97:69: ee:37:2e:b0:e0:19:ff:97:89:6f:c6:97:8c:4e:ad: e5:4a:ca:cc:7c:1a:15:ec:67:3a:68:fe:bf:28:89: 9a:71:17:9a:37:80:3f:08:2e:85:eb:81:4c:70:11: 60:cf:80:d6:e6:41:58:7c:8f:88:23:72:b6:2c:dc: f7:d9:50:ce:1e:f1:b1:1b:0b:a7:46:53:4b:3e:7a: 3c:36:f4:85:7a:ef:56:e3:74:4a:43:ca:db:72:90: 68:be:e8:e7:e5:59:a7:4b:d3:cd:b7:b4:67:e3:a4: 5a:59:38:63:8a:fb:8c:ab:cf:c9:22:b8:e6:9c:bc: b8:88:f0:28:c2:32:e3:fb:95:a5:03:45:98:01:e0: b8:50:64:fe:03:d9:29:d6:a1:9a:0e:02:78:0d:5f: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CA:E9:88:13:D9:45:B6:C4:0B:25:C2:0E:0B:5F:7F:6A:9A:DB:27 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8f:f7:29:6c:53:02:7e:2f:f0:2f:06:b8:db:5b:06:96:b4: 4d:37:ce:47:12:a1:c0:86:c0:b3:23:60:90:85:49:68:88:00: 3e:2e:ad:d1:28:31:fb:98:04:af:40:8c:4f:04:ab:b9:1c:b3: 29:7f:a1:fc:d6:a4:80:95:c7:b1:b3:2c:da:b4:c7:1a:c8:0a: 5e:37:7b:29:d3:e2:6e:0b:dd:04:2c:09:63:c9:bb:e3:3b:17: fe:bd:87:fa:f5:4c:c9:40:3f:77:d9:b5:27:c1:57:7f:69:b0: d2:8c:61:fb:6f:25:ee:ec:2d:3d:80:6f:3f:a1:71:65:12:86: 5e:30:3c:e3:0e:ff:ac:d8:06:37:4d:63:27:9e:c9:d8:c0:a2: d4:33:f3:78:96:6f:9e:95:0b:7c:c7:7b:26:dc:87:ea:ac:60: 67:b0:3a:19:d6:f2:b2:b9:15:de:e9:83:53:6a:28:de:f5:05: a8:69:da:57:aa:98:7f:65:dc:7d:d1:30:bd:06:f6:e8:ff:97: 9a:ad:e3:70:d5:09:f9:f4:7d:4d:79:35:9e:7b:ec:b6:fe:83: 96:25:c8:04:56:ae:94:35:51:a0:4e:04:84:b9:cb:ce:ca:18: 35:7c:76:86:8c:48:24:15:0a:c5:7d:36:6a:f1:5e:e2:59:76: 37:9a:9e:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjUwODIyMjA1MzQxWhcNMjUwODI5MjA1MzQxWjAYMRYwFAYD VQQDEw02OGE4ZDhkNS01ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bI2CJOP03jyXWHmkOR1e04U31lcFchUom6LafX6BQ9aRD6rgvJt+an4EHmB mpoFLHK3oS3IFNmtOW9KeogyrqbhxjeBdIDe6OhX58U1n35hCg+bZTTk8vVgRV98 XraSHOFph/JUl2nuNy6w4Bn/l4lvxpeMTq3lSsrMfBoV7Gc6aP6/KImacReaN4A/ CC6F64FMcBFgz4DW5kFYfI+II3K2LNz32VDOHvGxGwunRlNLPno8NvSFeu9W43RK Q8rbcpBovujn5VmnS9PNt7Rn46RaWThjivuMq8/JIrjmnLy4iPAowjLj+5WlA0WY AeC4UGT+A9kp1qGaDgJ4DV8bgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTK6YgT 2UW2xAslwg4LX39qmtsnMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkj/cpbFMCfi/wLwa421sGlrRNN85HEqHAhsCzI2CQhUloiAA+Lq3R KDH7mASvQIxPBKu5HLMpf6H81qSAlcexsyzatMcayApeN3sp0+JuC90ELAljybvj Oxf+vYf69UzJQD932bUnwVd/abDSjGH7byXu7C09gG8/oXFlEoZeMDzjDv+s2AY3 TWMnnsnYwKLUM/N4lm+elQt8x3sm3IfqrGBnsDoZ1vKyuRXe6YNTaije9QWoadpX qph/Zdx90TC9Bvbo/5eareNw1Qn59H1NeTWee+y2/oOWJcgEVq6UNVGgTgSEucvO yhg1fHaGjEgkFQrFfTZq8V7iWXY3mp6S -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:17 2025 by rpki-client