$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: AJVscWnDk5xe+KGwYvXHbHFhb2VBrCo0qrNQjAtZTrI= Subject key identifier: F0:18:44:46:D8:68:07:E3:4D:07:80:31:B2:9E:22:A7:D7:7B:46:E2 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: 71 Signing time: Sat 23 Aug 2025 07:07:41 +0000 Manifest this update: Sat 23 Aug 2025 07:07:40 +0000 Manifest next update: Sat 30 Aug 2025 07:07:40 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: ZCUDz9DPuKPY4kED1nBeDDO/xFPTXJizllZ+T5N0KKk=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: Q8ipP3E5cVxqpK+wwh4P32pECYgAwVU6B1+eB8QC8yE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Aug 23 07:07:40 2025 GMT Not After : Aug 30 07:07:40 2025 GMT Subject: CN=68a968bc-5017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:a8:7e:4b:b7:af:7f:b5:1b:90:18:01:9b: 0e:9d:a1:30:fb:c8:92:8e:21:fe:13:c1:a2:d0:94: a8:d0:94:e4:9d:e9:80:76:23:36:9e:07:45:bb:8d: 89:53:41:4e:fb:2f:dd:ab:16:99:04:bd:c6:5d:12: d2:cb:e6:e2:34:9c:54:49:aa:52:e8:1d:1a:6e:16: 24:1d:fc:3e:6d:6d:e0:cd:dd:e3:12:77:22:0a:38: c1:c3:68:1a:5a:8f:a7:17:46:0a:40:32:47:39:62: 32:05:13:ed:c8:34:c1:c1:36:31:18:60:42:86:b8: 3c:03:10:c0:a4:7b:5a:75:15:73:2e:aa:ce:2a:a1: 12:24:57:ee:ff:bb:de:00:88:82:8a:9f:ce:e9:1b: 73:2e:94:a6:d1:9b:5d:44:e2:da:d7:8a:fc:f5:08: db:03:3d:b4:40:71:b0:d2:cc:f7:5e:17:d6:5c:55: 23:ae:ce:19:53:ac:dd:f2:bf:fd:c4:7f:cf:8f:51: ab:91:ae:1a:59:92:0c:7e:a7:9a:7e:15:2f:02:be: 7a:32:4e:09:d9:88:ac:eb:f0:32:aa:22:99:8d:a6: 95:1d:31:08:12:1c:41:bc:1f:1d:3e:85:4e:0d:42: a3:a9:55:5f:de:38:57:64:8c:3a:8c:ed:f8:75:9f: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:18:44:46:D8:68:07:E3:4D:07:80:31:B2:9E:22:A7:D7:7B:46:E2 X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:85:2e:3b:02:7a:d7:bb:ae:be:e5:50:fb:3e:3f:8f:63:f5: 37:a9:6d:f2:06:41:6d:e0:14:50:81:b7:89:38:20:8a:4a:36: 9e:e9:39:57:ae:16:49:3d:2f:f7:c0:30:9d:71:a4:b2:c0:ac: 4b:16:27:76:f1:d4:c4:f6:be:ad:99:78:6c:41:86:3c:19:6e: 56:1e:81:ac:10:be:7f:f4:15:44:c8:63:b6:7c:b2:21:17:a8: 4c:59:20:ad:30:0b:0d:03:af:4e:44:bc:d1:09:92:12:54:a4: 4a:6d:a8:86:a0:60:95:89:d1:b4:33:43:5a:93:f0:3b:60:88: 2d:92:dd:6f:70:6f:17:3b:a9:90:6d:a8:42:88:d9:dd:86:39: ad:ca:df:d2:20:b6:a4:1c:e3:b8:a3:f6:2c:17:07:e9:ee:2e: b6:51:d1:a5:4b:e7:30:ef:37:25:ec:4c:f0:af:9f:44:18:1c: 1b:56:54:1a:b2:5b:d1:4c:8a:7e:e2:e6:2c:48:0d:bf:b9:84: 70:52:6a:19:47:80:7f:a4:d1:a3:11:05:13:71:6b:29:29:3a: 28:aa:46:36:e6:ec:38:a3:5f:bf:7d:b0:34:17:8c:eb:ad:5d: 06:56:c4:e5:f6:cf:23:cb:2f:88:b8:d2:ff:81:b3:cd:82:1e: b4:ce:b6:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDU5RDExMC8GA1UEBRMoRkI0ODg1NjhFNzUyMEJDNzgyQTExOTg5NzYyOTAzMEVE MDY5NUNEQjAeFw0yNTA4MjMwNzA3NDBaFw0yNTA4MzAwNzA3NDBaMBgxFjAUBgNV BAMTDTY4YTk2OGJjLTUwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0t6h+S7evf7UbkBgBmw6doTD7yJKOIf4TwaLQlKjQlOSd6YB2IzaeB0W7jYlT QU77L92rFpkEvcZdEtLL5uI0nFRJqlLoHRpuFiQd/D5tbeDN3eMSdyIKOMHDaBpa j6cXRgpAMkc5YjIFE+3INMHBNjEYYEKGuDwDEMCke1p1FXMuqs4qoRIkV+7/u94A iIKKn87pG3MulKbRm11E4trXivz1CNsDPbRAcbDSzPdeF9ZcVSOuzhlTrN3yv/3E f8+PUauRrhpZkgx+p5p+FS8CvnoyTgnZiKzr8DKqIpmNppUdMQgSHEG8Hx0+hU4N QqOpVV/eOFdkjDqM7fh1n5UnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8BhERtho B+NNB4Axsp4ip9d7RuIwHwYDVR0jBBgwFoAU+0iFaOdSC8eCoRmJdikDDtBpXNsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0NTlELzBCM0Y2NjVBRDYw RjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhO cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBpRmFPZFNDOGVDb1JtSmRpa0REdEJwWE5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 NTlELzBCM0Y2NjVBRDYwRjExRUZCMEZBNTMzRkM0RjlBRTAyLy0waUZhT2RTQzhl Q29SbUpkaWtERHRCcFhOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGFLjsCete7rr7lUPs+P49j9TepbfIGQW3gFFCBt4k4IIpKNp7pOVeu Fkk9L/fAMJ1xpLLArEsWJ3bx1MT2vq2ZeGxBhjwZblYegawQvn/0FUTIY7Z8siEX qExZIK0wCw0Dr05EvNEJkhJUpEptqIagYJWJ0bQzQ1qT8DtgiC2S3W9wbxc7qZBt qEKI2d2GOa3K39IgtqQc47ij9iwXB+nuLrZR0aVL5zDvNyXsTPCvn0QYHBtWVBqy W9FMin7i5ixIDb+5hHBSahlHgH+k0aMRBRNxaykpOiiqRjbm7DijX799sDQXjOut XQZWxOX2zyPLL4i40v+Bs82CHrTOtnU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:54 2025 by rpki-client