$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: arSa1+d8Ep+MtC1NuN6u72z7jFpGUkoIpB1hN4kU844= Subject key identifier: 3C:7E:D1:F1:60:1D:ED:6D:35:04:5A:BC:5E:F9:33:DF:22:3B:8C:71 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1ED3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E72 Signing time: Fri 22 Aug 2025 16:07:53 +0000 Manifest this update: Fri 22 Aug 2025 16:07:52 +0000 Manifest next update: Fri 29 Aug 2025 16:07:52 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: IJMs5eVC9cque7dlk/WMUmMjiQhQq9gHlWzwO0nlPrs=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7891 (0x1ed3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Aug 22 16:07:52 2025 GMT Not After : Aug 29 16:07:52 2025 GMT Subject: CN=68a895d8-3bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:99:1d:fe:e7:53:11:d6:12:87:1f:a1:2d: 21:d4:fa:38:3a:7a:39:98:87:5b:f7:65:5f:fa:60: 74:14:b4:fd:6a:0a:14:7d:ba:76:2f:25:c6:a3:01: 3d:00:42:26:41:22:e5:47:64:7f:8f:e4:8b:3d:d9: c0:8f:95:69:ea:ab:91:8b:69:b8:bd:e3:b5:cc:c2: 96:79:b2:97:37:46:cd:79:44:90:58:fb:62:d7:a6: 15:2c:f9:17:50:a3:3d:fb:f0:cc:d5:e8:22:0c:d4: ac:35:e3:b8:de:cc:be:64:80:93:2a:75:d5:71:fd: cd:42:8b:5d:a4:f8:1f:12:90:8e:da:37:10:f4:56: 9f:63:ee:22:39:9a:5b:be:3b:66:04:d4:7a:1e:0c: a1:76:99:29:47:c8:c9:c3:bb:45:32:29:7a:8d:0c: ce:75:bd:25:55:5c:d1:15:0e:ce:20:d0:4f:5a:23: 3a:ed:06:42:56:d7:ca:d2:f2:6d:13:74:0f:f9:2a: 7a:64:49:89:e5:d4:7f:3a:6a:c0:b4:17:48:c7:9e: 46:5b:d5:ea:34:fe:67:86:98:15:39:3a:80:1c:e4: 06:b2:61:fe:c1:f0:72:8b:4d:b5:25:84:78:90:07: 76:c2:92:10:d5:d8:3a:3e:42:68:da:82:34:98:c5: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:D1:F1:60:1D:ED:6D:35:04:5A:BC:5E:F9:33:DF:22:3B:8C:71 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:c0:51:9b:fc:04:c7:1e:c7:03:8f:6a:51:5c:9e:3a:77:61: 46:1d:af:1d:83:17:df:62:40:59:de:d0:41:4a:a8:7f:32:5d: d3:80:6c:01:04:ce:c7:57:28:a1:b6:3a:23:83:2d:0f:8e:5e: 28:75:d0:51:62:0d:55:10:c4:d7:48:da:4b:7d:21:80:64:c4: 4a:9e:7c:90:f0:c4:a6:5c:c4:9e:8f:1e:0f:f4:be:e1:fd:e8: 78:90:e1:0a:a9:28:ec:d9:ea:ac:b1:1d:8b:e6:58:c7:4f:05: bf:6e:2f:d4:b5:bc:ef:59:c3:60:e6:c7:25:2f:a1:1e:22:a5: 80:e4:ba:99:e1:6b:4a:e2:c6:f2:5c:ef:20:6b:fc:dc:b0:52: 35:fb:3d:4c:62:56:84:63:01:5e:2f:34:33:8a:cf:37:c8:34: 88:02:bc:71:58:05:4d:1b:b9:fa:73:a2:36:08:17:31:7d:65: 2b:6d:07:9d:9a:5d:0f:54:6d:d2:72:da:13:5c:76:08:6d:6e: 83:ca:55:e7:02:5c:5c:af:8c:19:bf:a7:3a:bc:13:6c:47:5f: f4:20:d6:2b:a2:e9:84:b2:e9:f5:c3:bc:d3:a5:3e:37:34:70: 4a:30:a2:f6:e8:3a:e4:8e:7c:a9:51:e6:24:1c:ed:24:4e:db: cc:5c:ce:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwODIyMTYwNzUyWhcNMjUwODI5MTYwNzUyWjAYMRYwFAYD VQQDEw02OGE4OTVkOC0zYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliSZHf7nUxHWEocfoS0h1Po4Ono5mIdb92Vf+mB0FLT9agoUfbp2LyXGowE9 AEImQSLlR2R/j+SLPdnAj5Vp6quRi2m4veO1zMKWebKXN0bNeUSQWPti16YVLPkX UKM9+/DM1egiDNSsNeO43sy+ZICTKnXVcf3NQotdpPgfEpCO2jcQ9FafY+4iOZpb vjtmBNR6HgyhdpkpR8jJw7tFMil6jQzOdb0lVVzRFQ7OINBPWiM67QZCVtfK0vJt E3QP+Sp6ZEmJ5dR/OmrAtBdIx55GW9XqNP5nhpgVOTqAHOQGsmH+wfByi021JYR4 kAd2wpIQ1dg6PkJo2oI0mMX50wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx+0fFg He1tNQRavF75M98iO4xxMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUwFGb/ATHHscDj2pRXJ46d2FGHa8dgxffYkBZ3tBBSqh/Ml3TgGwB BM7HVyihtjojgy0Pjl4oddBRYg1VEMTXSNpLfSGAZMRKnnyQ8MSmXMSejx4P9L7h /eh4kOEKqSjs2eqssR2L5ljHTwW/bi/UtbzvWcNg5sclL6EeIqWA5LqZ4WtK4sby XO8ga/zcsFI1+z1MYlaEYwFeLzQzis83yDSIArxxWAVNG7n6c6I2CBcxfWUrbQed ml0PVG3SctoTXHYIbW6DylXnAlxcr4wZv6c6vBNsR1/0INYroumEsun1w7zTpT43 NHBKMKL26DrkjnypUeYkHO0kTtvMXM6z -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:40 2025 by rpki-client