$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: VNi/SYntiUS19d8NCFMcVm2DJIJRyp55g0Ob0YlAHxY= Subject key identifier: C8:04:4C:5E:E9:28:6B:21:28:9F:8A:7E:A8:B2:9F:68:0E:9E:5C:E5 Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: 0101 Signing time: Sat 23 Aug 2025 05:13:15 +0000 Manifest this update: Sat 23 Aug 2025 05:13:15 +0000 Manifest next update: Sat 30 Aug 2025 05:13:15 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: IaRJPwS9SZri6gzSYEQKw8y3NBH3EjiEz+atmOM9ySQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: Aug 23 05:13:15 2025 GMT Not After : Aug 30 05:13:15 2025 GMT Subject: CN=68a94deb-f021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:ad:ae:6b:13:8e:05:14:13:59:77:4b:b7: c5:e2:6a:c0:2e:ef:85:a2:84:a4:bd:a0:13:88:b5: 66:48:da:cb:93:4b:20:c7:93:de:54:a3:54:12:c8: ba:99:84:3a:ae:54:58:8c:b1:8a:ab:77:99:8d:c1: 1c:d9:91:f1:31:41:c6:af:8f:cc:60:ca:38:a9:1b: 71:a6:e3:1d:48:59:e2:0a:72:b1:0c:7b:f8:b3:ba: 96:ea:2f:78:3d:33:f2:42:12:f9:59:53:45:f3:c5: e1:ae:73:50:e0:53:ff:7b:6c:7b:60:e6:a1:68:c5: 98:03:4a:43:24:b8:df:ca:64:1d:b5:95:c2:a5:38: 0c:4f:fd:d5:2e:40:3d:3d:5c:f3:1b:ad:c6:41:6a: 03:bd:2d:bd:d1:bc:b3:b9:79:c3:50:62:0e:fa:1e: 0f:e2:f9:01:0f:dd:74:07:c8:e2:4b:49:1b:98:bb: 65:2f:e0:de:71:f4:21:86:ef:ee:1b:73:3f:75:33: 48:a3:e3:2c:8b:69:b2:87:1d:2a:66:52:a0:07:82: d3:0b:07:be:d3:4b:0e:4b:5e:13:64:cd:d4:ee:68: 03:b9:87:6b:73:f0:b3:23:8d:fc:90:1b:b0:f1:3a: 5b:c6:b2:d7:15:3c:73:3b:db:2e:a3:bf:65:fb:94: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:4C:5E:E9:28:6B:21:28:9F:8A:7E:A8:B2:9F:68:0E:9E:5C:E5 X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:52:29:70:bb:b4:23:be:09:57:c6:67:c4:2c:a4:76:80:ad: 08:0e:23:14:43:ff:c0:44:d1:f4:23:93:3e:a7:ac:c2:4f:91: 6e:13:40:e2:b7:4d:bd:81:74:e7:0f:28:b4:05:f7:24:27:de: 4c:31:c4:84:39:92:50:1e:41:38:1d:f1:34:1a:97:82:6a:1e: 4b:f4:2f:26:cf:6c:86:59:1f:3e:56:1c:47:93:78:5b:57:c1: 31:89:2d:85:02:96:52:19:87:23:6f:fd:d8:40:66:f8:b4:f5: 6b:5e:69:f3:ca:ae:5b:10:41:d1:11:81:6e:3c:2f:e9:51:21: 9f:ed:4c:24:76:4e:61:1b:76:8f:ad:9d:34:f2:e0:78:7f:ac: e5:ed:90:28:74:7f:e4:cd:4d:9d:6b:27:1b:fc:ae:3b:4e:e1: 20:54:2b:ee:a3:46:89:4e:65:f7:02:4d:d3:d5:c8:4c:09:a9: 00:57:f0:7b:90:34:f4:c9:34:4c:9f:88:55:cb:06:6c:30:80: c7:e2:9c:a4:2a:f0:d4:ef:98:97:e6:93:3a:af:96:90:ad:04: b3:02:0d:4a:b5:b9:74:c9:2f:9f:3d:f4:98:68:45:fc:48:0c: fe:dc:b6:cb:f0:6c:2c:71:1c:22:fa:24:5d:4c:e4:ed:ed:d1: de:ba:b8:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUwODIzMDUxMzE1WhcNMjUwODMwMDUxMzE1WjAYMRYwFAYD VQQDEw02OGE5NGRlYi1mMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP6trmsTjgUUE1l3S7fF4mrALu+FooSkvaATiLVmSNrLk0sgx5PeVKNUEsi6 mYQ6rlRYjLGKq3eZjcEc2ZHxMUHGr4/MYMo4qRtxpuMdSFniCnKxDHv4s7qW6i94 PTPyQhL5WVNF88XhrnNQ4FP/e2x7YOahaMWYA0pDJLjfymQdtZXCpTgMT/3VLkA9 PVzzG63GQWoDvS290byzuXnDUGIO+h4P4vkBD910B8jiS0kbmLtlL+DecfQhhu/u G3M/dTNIo+Msi2myhx0qZlKgB4LTCwe+00sOS14TZM3U7mgDuYdrc/CzI438kBuw 8TpbxrLXFTxzO9suo79l+5Tm8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgETF7p KGshKJ+Kfqiyn2gOnlzlMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYUilwu7QjvglXxmfELKR2gK0IDiMUQ//ARNH0I5M+p6zCT5FuE0Di t029gXTnDyi0BfckJ95MMcSEOZJQHkE4HfE0GpeCah5L9C8mz2yGWR8+VhxHk3hb V8ExiS2FApZSGYcjb/3YQGb4tPVrXmnzyq5bEEHREYFuPC/pUSGf7Uwkdk5hG3aP rZ008uB4f6zl7ZAodH/kzU2daycb/K47TuEgVCvuo0aJTmX3Ak3T1chMCakAV/B7 kDT0yTRMn4hVywZsMIDH4pykKvDU75iX5pM6r5aQrQSzAg1Ktbl0yS+fPfSYaEX8 SAz+3LbL8GwscRwi+iRdTOTt7dHeurjx -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:08 2025 by rpki-client