$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json) Hash identifier: JKxNTz/31GXyLuRR10JjhgbXNFrVz+d+Sfi1oQGY+Ko= Subject key identifier: 37:0D:DD:22:11:BA:55:42:D1:92:5A:E9:99:1B:F9:7A:AD:1C:08:3D Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft Manifest number: 0381 Signing time: Sat 23 Aug 2025 01:05:48 +0000 Manifest this update: Sat 23 Aug 2025 01:05:47 +0000 Manifest next update: Sat 30 Aug 2025 01:05:47 +0000 Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: +mjR4Z25/YOtEH3ExbZcsZHIAm6tb3HGjA3uS5NbgJo=) 2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: 3vF76S8iWJW8vHG1MAht+7FYZNQsdje1uuqCEx57cyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37 Validity Not Before: Aug 23 01:05:47 2025 GMT Not After : Aug 30 01:05:47 2025 GMT Subject: CN=68a913ec-656f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:67:a2:0b:bf:fd:e4:2f:fe:6c:d8:09:e4: 69:77:9a:e8:4b:82:7a:fb:c5:a1:48:08:8a:a2:e3: 96:89:75:31:11:36:e4:79:76:97:85:d8:df:0e:24: 42:99:a9:0d:e0:f4:53:50:91:49:ba:56:a3:f4:60: 89:05:66:62:eb:fc:33:a9:f2:67:14:c0:7e:15:49: 70:33:b3:7c:07:0b:3d:f4:7e:e0:91:c8:bd:f4:83: 7c:f1:44:88:b1:16:09:03:4b:bd:25:bc:d9:6c:11: ff:90:f1:92:04:ce:8f:e4:ce:21:42:86:0e:e1:a7: d5:5d:80:33:89:14:ba:01:d2:37:97:2e:ea:24:f8: 22:39:8f:14:10:16:4e:27:36:7c:0b:b4:50:85:0d: c7:b9:40:99:c5:a9:56:93:e9:15:b1:0a:3e:f8:12: 90:1a:10:78:5c:68:97:d3:7f:5a:c5:be:4d:33:e3: 55:cc:c8:b6:c7:d9:ad:94:09:f3:25:21:90:34:83: 94:e1:11:bb:4e:d5:94:35:76:28:bb:c3:a9:48:d9: 3d:c2:11:1d:a8:38:69:1a:2c:17:d5:23:8b:01:7c: 21:49:37:f3:78:7b:68:bb:c9:e3:2a:53:41:80:8d: 5f:f7:25:2d:d6:5b:8a:7e:b2:4e:2f:9f:ba:eb:7e: d3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0D:DD:22:11:BA:55:42:D1:92:5A:E9:99:1B:F9:7A:AD:1C:08:3D X509v3 Authority Key Identifier: keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:91:9c:47:03:59:71:33:1e:44:a2:0b:34:29:42:6e:4e:3c: 45:ed:0a:b0:19:f8:dd:c6:27:a3:b1:55:55:06:0e:78:16:f4: 95:4b:22:02:76:07:b3:86:64:f3:ba:01:87:8c:ae:62:53:35: c6:36:63:d4:85:44:c3:7d:02:ae:d2:2b:77:b9:77:7b:15:db: 87:5c:44:10:08:f1:90:4e:9c:ce:14:37:82:f6:6b:b9:2d:93: 14:e8:d7:87:29:28:8c:e6:6f:ee:27:fc:67:e7:11:ea:ca:e2: dd:56:dd:cf:1e:39:e6:9b:60:7c:20:74:11:54:ab:a7:3e:a3: 88:92:0b:d0:06:8a:89:46:4e:07:6e:13:c8:44:26:c8:f2:ba: 60:56:ad:99:7b:ac:f5:27:bd:36:0a:95:44:4d:33:31:b4:d2: 5c:bb:78:ab:ae:40:9c:ba:9f:86:06:7d:59:a4:e2:3c:1d:ca: bd:a8:4d:67:d2:5b:ef:af:4a:c2:82:6c:5a:49:97:da:18:56: 4a:0e:74:6b:2a:66:1e:80:6d:01:59:ae:a2:60:c3:8f:4a:6f: d0:5d:4f:36:b9:a1:6f:be:39:68:a3:00:08:52:1c:41:bf:ea: 01:e7:15:16:a2:16:6a:9a:6f:e9:03:59:63:6d:c7:48:30:be: 08:a4:45:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxQUUxMTAvBgNVBAUTKEU3NjhGQ0M4Qjk2N0Q2RjFDODgxRTBENDlBMEM0MjA4 REYwN0ZCMzcwHhcNMjUwODIzMDEwNTQ3WhcNMjUwODMwMDEwNTQ3WjAYMRYwFAYD VQQDEw02OGE5MTNlYy02NTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbJnogu//eQv/mzYCeRpd5roS4J6+8WhSAiKouOWiXUxETbkeXaXhdjfDiRC makN4PRTUJFJulaj9GCJBWZi6/wzqfJnFMB+FUlwM7N8Bws99H7gkci99IN88USI sRYJA0u9JbzZbBH/kPGSBM6P5M4hQoYO4afVXYAziRS6AdI3ly7qJPgiOY8UEBZO JzZ8C7RQhQ3HuUCZxalWk+kVsQo++BKQGhB4XGiX039axb5NM+NVzMi2x9mtlAnz JSGQNIOU4RG7TtWUNXYou8OpSNk9whEdqDhpGiwX1SOLAXwhSTfzeHtou8njKlNB gI1f9yUt1luKfrJOL5+6637TMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcN3SIR ulVC0ZJa6Zkb+XqtHAg9MB8GA1UdIwQYMBaAFOdo/Mi5Z9bxyIHg1JoMQgjfB/s3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzFBRS81OEQ5OTJERUI2 NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2SElnZURVbWd4Q0NOOEgt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyajh5TGxuMXZISWdlRFVtZ3hDQ044SC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzFBRS81OEQ5OTJERUI2NzYxMUVDOEY1Mzc4NDdDNEY5QUUwMi81Mmo4eUxsbjF2 SElnZURVbWd4Q0NOOEgtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvkZxHA1lxMx5Eogs0KUJuTjxF7QqwGfjdxiejsVVVBg54FvSVSyIC dgezhmTzugGHjK5iUzXGNmPUhUTDfQKu0it3uXd7FduHXEQQCPGQTpzOFDeC9mu5 LZMU6NeHKSiM5m/uJ/xn5xHqyuLdVt3PHjnmm2B8IHQRVKunPqOIkgvQBoqJRk4H bhPIRCbI8rpgVq2Ze6z1J702CpVETTMxtNJcu3irrkCcup+GBn1ZpOI8Hcq9qE1n 0lvvr0rCgmxaSZfaGFZKDnRrKmYegG0BWa6iYMOPSm/QXU82uaFvvjloowAIUhxB v+oB5xUWohZqmm/pA1ljbcdIML4IpEUz -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:20 2025 by rpki-client