$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: 3OloRp/yX7Jd2MuDKGSCvo6DDSdI12THGfJ0PMxDlRg= Subject key identifier: 5C:21:E2:6B:81:EB:23:73:85:8B:1D:87:79:80:25:F5:99:BC:0C:3F Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B38 Signing time: Fri 22 Aug 2025 16:22:27 +0000 Manifest this update: Fri 22 Aug 2025 16:22:26 +0000 Manifest next update: Fri 29 Aug 2025 16:22:26 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: P0qKaFFNTXmSsIZTTKPn4dDhp6C0Qw3LkrWfGTcIysE=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6992 (0x1b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: Aug 22 16:22:26 2025 GMT Not After : Aug 29 16:22:26 2025 GMT Subject: CN=68a89943-c929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:fd:9b:a2:c5:cf:4b:25:95:0f:ec:ed:b9: 64:4d:ba:4d:22:37:cf:10:82:25:55:18:fa:36:d5: 8a:d3:1d:34:cd:17:87:71:0c:a7:81:b3:fb:5b:8f: 45:08:1a:75:7e:4e:66:59:a6:82:7e:95:78:6f:25: ca:36:72:ec:50:fc:e6:14:9c:27:4d:44:f5:d8:e7: 64:eb:eb:f2:ab:92:cf:36:7d:f1:bf:68:e6:5e:97: 59:d7:b0:91:79:91:f3:32:a8:57:a8:e3:fa:e8:c2: 6a:a9:11:a8:9b:6e:c9:93:55:23:6c:e0:9d:de:e6: 2f:6d:ca:42:a1:6a:9c:ce:c6:3c:10:04:fd:39:65: 81:3f:f4:f3:fd:59:a9:fa:0a:15:f1:a8:16:5b:71: 6f:3a:bd:16:b2:59:d9:84:6e:d1:10:06:0d:4b:56: ec:7d:0b:43:a5:55:11:71:04:c2:de:b2:a9:bb:6a: c6:45:75:e8:93:77:2f:bc:04:13:96:78:aa:b4:04: 44:45:db:d9:86:63:7c:81:2d:0e:a0:12:95:b1:61: fc:91:11:68:77:f0:cf:d7:16:fa:8d:39:68:01:58: 40:40:cf:ba:af:c9:25:46:75:bb:bd:ca:45:f1:08: 75:de:a7:73:3c:8b:75:d1:93:67:6c:cb:20:61:e2: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:21:E2:6B:81:EB:23:73:85:8B:1D:87:79:80:25:F5:99:BC:0C:3F X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:e6:6a:00:8b:2b:1f:45:ea:08:a4:4b:e2:e1:12:68:90:de: 6b:c9:58:81:05:5b:8e:6a:e2:4a:b5:ab:8c:c2:fa:a4:8b:86: 53:78:14:e2:aa:f3:9d:96:92:0a:48:39:43:27:50:ec:52:1f: 80:9d:18:a1:f1:1d:8f:de:aa:f8:27:5e:30:5d:26:94:fb:fb: 09:d3:ee:e4:26:a0:e1:c9:c1:de:0a:5d:54:eb:ad:a3:9c:ae: 86:2a:61:38:76:59:7d:c7:7d:bf:4e:d0:1b:cf:98:2b:28:16: e7:5e:4b:2e:0d:0e:b4:3f:2f:79:6f:f5:7d:29:bf:41:04:d5: a7:94:0f:ff:c1:19:62:9e:98:42:ea:37:60:ef:3b:54:e1:7d: fc:a1:42:db:84:d4:19:21:80:00:b4:7e:6f:9c:7e:86:54:65: 2c:62:a8:ae:09:73:28:ee:e1:dd:b0:a0:50:01:4a:3d:6c:d4: 97:b9:0f:9a:be:f1:52:be:45:de:9c:57:dd:52:58:55:06:73: ab:18:fc:8c:53:ce:2c:72:a4:48:80:a3:a5:87:81:6e:71:2e: b1:92:2f:78:7f:a8:ce:0f:32:90:bc:79:a7:97:0f:54:97:ee: fa:76:d3:bc:b8:61:42:67:d9:61:fb:d7:91:a6:90:4a:cd:c5: 28:e6:84:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwODIyMTYyMjI2WhcNMjUwODI5MTYyMjI2WjAYMRYwFAYD VQQDEw02OGE4OTk0My1jOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpD9m6LFz0sllQ/s7blkTbpNIjfPEIIlVRj6NtWK0x00zReHcQyngbP7W49F CBp1fk5mWaaCfpV4byXKNnLsUPzmFJwnTUT12Odk6+vyq5LPNn3xv2jmXpdZ17CR eZHzMqhXqOP66MJqqRGom27Jk1UjbOCd3uYvbcpCoWqczsY8EAT9OWWBP/Tz/Vmp +goV8agWW3FvOr0WslnZhG7REAYNS1bsfQtDpVURcQTC3rKpu2rGRXXok3cvvAQT lniqtARERdvZhmN8gS0OoBKVsWH8kRFod/DP1xb6jTloAVhAQM+6r8klRnW7vcpF 8Qh13qdzPIt10ZNnbMsgYeJdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwh4muB 6yNzhYsdh3mAJfWZvAw/MB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE5moAiysfReoIpEvi4RJokN5ryViBBVuOauJKtauMwvqki4ZTeBTi qvOdlpIKSDlDJ1DsUh+AnRih8R2P3qr4J14wXSaU+/sJ0+7kJqDhycHeCl1U662j nK6GKmE4dll9x32/TtAbz5grKBbnXksuDQ60Py95b/V9Kb9BBNWnlA//wRlinphC 6jdg7ztU4X38oULbhNQZIYAAtH5vnH6GVGUsYqiuCXMo7uHdsKBQAUo9bNSXuQ+a vvFSvkXenFfdUlhVBnOrGPyMU84scqRIgKOlh4FucS6xki94f6jODzKQvHmnlw9U l+76dtO8uGFCZ9lh+9eRppBKzcUo5oSE -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:15 2025 by rpki-client