$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json) Hash identifier: LI4UguB7ugFe38jVLPYl8t3VXv2xXecRHw/J3OWS2hM= Subject key identifier: F7:FE:6F:55:0E:A1:6C:AE:F9:A6:5A:A7:44:82:11:0C:7C:4C:3D:C4 Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft Manifest number: 0F Signing time: Sat 23 Aug 2025 08:19:49 +0000 Manifest this update: Sat 23 Aug 2025 08:19:49 +0000 Manifest next update: Sat 30 Aug 2025 08:19:49 +0000 Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: x11d4fKRqamIPPyeN3kSce2CNRppCQ6D7ypBMkiEkAQ=) 2: 9F9EE58C783011F0B097E07BC4F9AE02.roa (hash: 6h0NC6fnyVrjlZRLQUdED+ump8j2JnnC17arwDP46lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Validity Not Before: Aug 23 08:19:49 2025 GMT Not After : Aug 30 08:19:49 2025 GMT Subject: CN=68a979a5-e0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9d:b0:f2:d2:18:2c:40:90:53:f9:e4:71:7b: b6:59:42:89:86:31:9c:a5:15:5f:92:5d:da:d4:b5: b6:84:55:96:51:a4:5e:86:e2:c5:c4:70:bd:0f:79: 14:26:f7:d9:b4:a4:ff:ef:4c:e5:25:a4:13:50:bc: 33:5a:b5:67:3a:63:db:5c:17:22:58:16:47:99:7d: a5:72:f6:a9:10:db:2a:34:87:24:70:c7:cb:e5:f0: 55:e4:eb:b0:71:a0:1d:7a:f8:31:75:0a:bb:1d:5f: 9e:f8:0f:d6:a7:ff:3f:02:b7:92:42:fe:a4:74:4f: 14:76:ce:05:1c:f9:74:1d:e8:05:9f:ee:e6:96:eb: 79:02:a0:a2:fc:f1:aa:6d:54:91:45:27:1f:c7:7e: 54:2c:c6:9b:ad:1d:cb:bb:86:94:1c:87:56:5c:2b: 96:ad:22:77:3f:b6:1a:c4:6e:80:5b:4b:ff:d0:2a: b1:35:83:bf:08:04:88:fa:f3:08:72:e9:7d:66:bf: ae:9a:06:ed:72:1b:bd:4c:53:b3:be:52:57:2a:fa: 7b:d7:29:af:64:45:c8:38:f0:1d:e8:36:d6:bb:63: 96:d7:ca:16:92:f1:c6:16:a7:12:77:44:f6:52:74: c8:da:02:a7:d8:81:82:42:ae:8b:65:fc:14:1a:45: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FE:6F:55:0E:A1:6C:AE:F9:A6:5A:A7:44:82:11:0C:7C:4C:3D:C4 X509v3 Authority Key Identifier: keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7f:3c:63:61:f5:c5:10:21:a3:84:4d:44:27:d9:b0:6a:c0: 81:bf:7a:79:d3:75:47:23:1c:3f:38:76:f6:47:66:a2:94:2e: 98:14:42:84:b1:b0:e0:b8:9b:51:49:4a:e2:09:bf:5a:fe:7a: c4:db:9d:d0:03:d9:69:34:84:2f:43:af:bf:4c:8f:8a:ce:0f: 4c:81:21:ff:18:df:2b:f1:dc:f6:c4:93:5f:95:36:5c:31:c9: 5e:0c:1d:ce:97:ba:93:45:0b:ac:cf:ff:bb:28:fc:5d:34:a9: 89:48:19:29:1b:12:d7:fd:92:9b:66:de:7f:d5:aa:0d:0b:0d: 01:31:be:16:03:d8:5e:41:f4:ac:ea:60:6a:e1:80:48:e7:f0: fa:70:07:c0:9d:e1:f8:b3:96:3f:17:cf:8d:1e:05:3f:74:d8: ff:12:fc:b6:fb:b8:2b:67:ff:e4:41:bb:56:bb:9c:48:f3:82: 06:61:72:56:ad:7e:95:88:1f:b1:98:c3:c3:27:5d:97:86:8f: 1e:6d:a5:36:59:ec:e9:17:18:7a:d1:bf:f9:bd:1d:ab:1e:9a: d3:5d:07:e4:b3:37:0a:a6:a2:79:79:98:4f:1a:88:68:28:d8: 10:8e:77:a7:0f:b4:8a:df:82:05:35:e5:7d:c9:d0:75:ad:77: 6c:c3:26:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTQwMjExMC8GA1UEBRMoRjBBMDBDMzFEMDkxRTI0NTcxMzdEMkE4RUYzMjY3NzQ3 RUREN0MyMjAeFw0yNTA4MjMwODE5NDlaFw0yNTA4MzAwODE5NDlaMBgxFjAUBgNV BAMTDTY4YTk3OWE1LWUwYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvnbDy0hgsQJBT+eRxe7ZZQomGMZylFV+SXdrUtbaEVZZRpF6G4sXEcL0PeRQm 99m0pP/vTOUlpBNQvDNatWc6Y9tcFyJYFkeZfaVy9qkQ2yo0hyRwx8vl8FXk67Bx oB16+DF1CrsdX574D9an/z8Ct5JC/qR0TxR2zgUc+XQd6AWf7uaW63kCoKL88apt VJFFJx/HflQsxputHcu7hpQch1ZcK5atInc/thrEboBbS//QKrE1g78IBIj68why 6X1mv66aBu1yG71MU7O+Ulcq+nvXKa9kRcg48B3oNta7Y5bXyhaS8cYWpxJ3RPZS dMjaAqfYgYJCrotl/BQaRSNzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9/5vVQ6h bK75plqnRIIRDHxMPcQwHwYDVR0jBBgwFoAU8KAMMdCR4kVxN9Ko7zJndH7dfCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNDAyLzQ3Q0I1QkM0NkRG OTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtWeE45S283ekpuZEg3ZGZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEtBTU1kQ1I0a1Z4TjlLbzd6Sm5kSDdkZkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NDAyLzQ3Q0I1QkM0NkRGOTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtW eE45S283ekpuZEg3ZGZDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACV/PGNh9cUQIaOETUQn2bBqwIG/ennTdUcjHD84dvZHZqKULpgUQoSx sOC4m1FJSuIJv1r+esTbndAD2Wk0hC9Dr79Mj4rOD0yBIf8Y3yvx3PbEk1+VNlwx yV4MHc6XupNFC6zP/7so/F00qYlIGSkbEtf9kptm3n/Vqg0LDQExvhYD2F5B9Kzq YGrhgEjn8PpwB8Cd4fizlj8Xz40eBT902P8S/Lb7uCtn/+RBu1a7nEjzggZhclat fpWIH7GYw8MnXZeGjx5tpTZZ7OkXGHrRv/m9HasemtNdB+SzNwqmonl5mE8aiGgo 2BCOd6cPtIrfggU15X3J0HWtd2zDJng= -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:44 2025 by rpki-client