$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft File: p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json) Hash identifier: b0R1jVnHDSrQ1BGm6nLlLribdzmvwBDs6UG4WreOCpY= Subject key identifier: EC:6F:7C:31:A2:3D:06:E9:CE:D3:77:7B:AC:D0:4E:45:4B:C9:5D:58 Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft Manifest number: 0988 Signing time: Fri 22 Aug 2025 22:57:55 +0000 Manifest this update: Fri 22 Aug 2025 22:57:55 +0000 Manifest next update: Fri 29 Aug 2025 22:57:55 +0000 Files and hashes: 1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: nRdUxnhqeqqrTCozsMWv3LL3adKPBhxuMk/mMjGOavI=) 2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1 Validity Not Before: Aug 22 22:57:55 2025 GMT Not After : Aug 29 22:57:55 2025 GMT Subject: CN=68a8f5f3-9361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:04:85:04:ab:74:a8:0f:6e:57:e3:bc:75: 3c:3d:0d:97:f6:c3:06:0d:71:12:ad:64:06:1b:0e: 06:7a:7b:fa:48:01:9d:ad:ee:8b:e9:57:c5:30:1b: f9:99:d9:d9:48:df:39:dc:ef:41:36:d9:2d:19:a7: 27:53:92:45:9f:fc:51:e7:36:f3:90:5a:1e:6a:ec: 29:2e:13:8d:aa:4f:ea:05:9c:49:72:09:7b:ab:cf: f1:ff:16:3e:a9:c8:e1:ee:13:ad:13:58:54:1f:3a: 2e:2a:a9:14:2a:13:8b:75:bc:74:c9:fd:02:be:47: 2e:e1:31:fc:69:cf:74:68:44:32:9f:4d:6e:ca:d0: 40:d8:fd:4f:34:a8:17:73:61:3b:31:66:4a:2a:ac: 85:33:99:f6:2a:50:4d:c0:62:45:29:47:6f:c5:4c: 3e:2d:30:1b:b1:67:4e:2a:07:bd:5b:c0:22:8b:8c: 61:9e:d5:f8:5a:33:31:9b:30:89:46:d8:9e:b2:35: 86:67:67:29:fc:44:ae:74:f3:f6:0c:8f:87:8a:65: da:1a:b3:0d:60:43:64:41:5b:53:65:f6:14:2f:2b: d9:84:4d:47:6f:6e:6c:ed:ad:bc:2c:a0:4c:15:bd: a9:ac:87:aa:ac:f7:7c:2e:2c:90:cd:3d:01:c6:b7: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6F:7C:31:A2:3D:06:E9:CE:D3:77:7B:AC:D0:4E:45:4B:C9:5D:58 X509v3 Authority Key Identifier: keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5b:64:db:1c:15:79:c3:a8:88:b5:df:0b:46:ed:40:db:ee: 0e:64:a3:e8:ed:ea:41:8f:03:1a:9b:20:c5:ba:bc:ba:fc:8e: 48:6d:04:05:4c:05:aa:32:d8:cd:c4:ac:50:ff:61:96:e5:3c: db:52:e2:b4:f2:5f:9f:7a:56:a3:2f:06:ae:00:db:7c:aa:09: 5d:9d:75:a5:e2:01:b9:14:a4:97:fc:40:a0:f5:ca:5d:29:69: f6:1c:b2:e6:63:0c:2a:66:38:e8:97:cf:cc:ea:f4:4b:bb:1c: 4d:81:9d:34:fd:a4:e0:90:13:db:3a:eb:64:fb:11:53:94:5c: 8b:67:48:1b:49:3a:b4:1a:4a:ab:b9:af:85:6b:fc:40:bd:b9: 92:d2:95:40:70:e3:24:44:5d:15:f7:91:30:51:ae:51:4e:2c: 3c:0d:36:df:0b:99:b6:3e:fa:d7:38:4f:c5:41:b4:24:72:58: 5a:68:64:68:9b:43:92:81:e0:d5:51:c5:7b:7c:c5:01:ba:02: d3:ec:c9:ef:dd:8e:71:3c:96:eb:81:68:df:2c:0a:0a:5d:7e: ff:19:a3:49:18:e7:2d:c6:27:07:43:08:46:12:1b:86:76:5c: fe:e9:b8:4e:06:02:38:f8:35:68:6b:9a:be:b1:5b:6d:3d:23: be:99:ff:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQTc2RTA1QjgzNDU0RUQxQTIwOTAyNUU4M0Q3NUU0MDU3 OTE4OTJDMTAeFw0yNTA4MjIyMjU3NTVaFw0yNTA4MjkyMjU3NTVaMBgxFjAUBgNV BAMTDTY4YThmNWYzLTkzNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoFgSFBKt0qA9uV+O8dTw9DZf2wwYNcRKtZAYbDgZ6e/pIAZ2t7ovpV8UwG/mZ 2dlI3znc70E22S0ZpydTkkWf/FHnNvOQWh5q7CkuE42qT+oFnElyCXurz/H/Fj6p yOHuE60TWFQfOi4qqRQqE4t1vHTJ/QK+Ry7hMfxpz3RoRDKfTW7K0EDY/U80qBdz YTsxZkoqrIUzmfYqUE3AYkUpR2/FTD4tMBuxZ04qB71bwCKLjGGe1fhaMzGbMIlG 2J6yNYZnZyn8RK508/YMj4eKZdoasw1gQ2RBW1Nl9hQvK9mETUdvbmztrbwsoEwV vamsh6qs93wuLJDNPQHGt6SvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7G98MaI9 BunO03d7rNBORUvJXVgwHwYDVR0jBBgwFoAUp24FuDRU7RogkCXoPXXkBXkYksEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDI0RnVEUlU3Um9na0NYb1BYWGtCWGtZa3NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3AyNEZ1RFJVN1Jv Z2tDWG9QWFhrQlhrWWtzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABxbZNscFXnDqIi13wtG7UDb7g5ko+jt6kGPAxqbIMW6vLr8jkhtBAVM Baoy2M3ErFD/YZblPNtS4rTyX596VqMvBq4A23yqCV2ddaXiAbkUpJf8QKD1yl0p afYcsuZjDCpmOOiXz8zq9Eu7HE2BnTT9pOCQE9s662T7EVOUXItnSBtJOrQaSqu5 r4Vr/EC9uZLSlUBw4yREXRX3kTBRrlFOLDwNNt8LmbY++tc4T8VBtCRyWFpoZGib Q5KB4NVRxXt8xQG6AtPsye/djnE8luuBaN8sCgpdfv8Zo0kY5y3GJwdDCEYSG4Z2 XP7puE4GAjj4NWhrmr6xW209I76Z/4M= -----END CERTIFICATE-----Generated at Sat Aug 23 21:27:03 2025 by rpki-client