$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft File: I_DaaXyqHZJHpmnfh4G6MBN9elk.mft (raw, json) Hash identifier: IXMnjt+HyIfAV7Z+F8wysbxjp60gbf0+iiGiJ6oduPY= Subject key identifier: F3:27:44:CE:33:32:7B:17:D6:D0:C8:E9:7C:E1:F3:99:5D:2B:3C:4C Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft Manifest number: 01B4 Signing time: Sat 23 Aug 2025 03:16:07 +0000 Manifest this update: Sat 23 Aug 2025 03:16:06 +0000 Manifest next update: Sat 30 Aug 2025 03:16:06 +0000 Files and hashes: 1: I_DaaXyqHZJHpmnfh4G6MBN9elk.crl (hash: UwjPRL/MO3DM6FP0q/4yX3h6uFAHub4/tlw/az4IseY=) 2: C662FB52399511EFA72CB43DC4F9AE02.roa (hash: 4VVohuqo/b+MNkkhnn5y++P3zzZEer8IMETCYH0ujFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59 Validity Not Before: Aug 23 03:16:06 2025 GMT Not After : Aug 30 03:16:06 2025 GMT Subject: CN=68a93276-b761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:29:09:e0:45:d6:41:c4:1c:c1:93:cb:a9: 4a:65:1d:e2:25:ce:66:72:f5:e3:51:e7:ba:51:55: 51:7c:be:7f:d6:0a:0c:73:49:48:5b:22:e5:25:4a: 15:3b:61:52:8e:5b:30:48:04:02:cd:0c:b0:97:4a: 88:ec:24:b1:92:4b:55:2d:49:95:57:2a:57:0b:84: c9:cd:a3:c7:13:5b:48:34:68:79:3d:b9:e4:4f:c1: 08:df:38:95:fb:09:f6:6e:0b:3a:63:94:1e:c6:b7: 19:9d:dc:98:70:bb:47:33:18:3a:97:a8:0a:e9:6a: 09:f9:27:bf:a6:71:dc:56:27:62:b8:f0:a3:93:e3: bf:72:e4:64:ec:14:30:ac:e8:dd:99:2e:4a:30:bf: 96:87:fb:b0:ac:40:c9:8f:2c:a6:b6:49:35:75:11: d7:0c:0d:07:6e:cd:2c:ff:81:6a:2c:13:f2:ea:7c: d5:11:dc:bf:cd:f0:34:b8:95:41:4a:7a:ad:ca:cb: 1f:2b:09:5b:bf:91:db:56:88:51:5b:83:6e:5b:03: 72:3f:65:3f:f3:f2:e0:3e:a9:65:39:f0:54:af:ca: 20:95:69:21:bb:6a:2d:d4:9c:eb:65:43:f8:8f:61: ef:69:94:ff:63:ce:8a:9c:ce:05:1c:88:8d:dd:f1: 34:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:27:44:CE:33:32:7B:17:D6:D0:C8:E9:7C:E1:F3:99:5D:2B:3C:4C X509v3 Authority Key Identifier: keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b2:8c:6b:fe:e3:af:32:54:04:db:8a:8d:97:6b:3a:dc:26: fe:41:24:43:7a:a5:0a:08:cd:ce:18:da:0a:69:4d:73:23:37: f0:5f:1b:c0:11:ea:3f:dd:ff:cc:29:21:b5:e2:d1:c3:e8:5d: 4f:e1:54:db:e7:5a:8d:1e:b4:30:14:54:b3:ab:c0:c2:a3:64: a7:6c:ab:9f:9a:7c:3b:78:40:7e:b9:d2:23:9d:d1:60:e1:f6: a9:d0:24:ed:ba:c1:aa:41:35:ea:7f:da:a4:45:50:21:78:e8: 2b:c4:bc:16:85:e7:44:a8:5a:72:2b:5a:e7:35:5e:9b:28:ce: b0:1d:80:21:e8:0c:76:80:74:ec:4f:b8:a1:03:94:2a:63:db: 2a:5e:63:f7:b7:76:5f:0d:39:79:a3:59:fc:e3:b1:a4:5b:e8: 22:8f:d3:46:0a:6a:31:28:ac:47:58:b5:9b:50:ce:57:f3:d5: 96:c0:ef:78:4a:52:04:53:10:3b:60:bd:5d:5a:94:bf:50:fe: 48:1a:aa:32:58:75:fe:c1:ba:46:21:8f:e5:66:c8:77:85:0d: 51:96:ab:81:b6:4d:7e:0e:df:1b:a9:aa:29:14:6d:77:d0:da: 51:76:b0:17:e1:b8:53:59:1f:4c:32:6d:97:52:a0:40:c8:7a: 2e:9d:37:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVCQzgxMTAvBgNVBAUTKDIzRjBEQTY5N0NBQTFEOTI0N0E2NjlERjg3ODFCQTMw MTM3RDdBNTkwHhcNMjUwODIzMDMxNjA2WhcNMjUwODMwMDMxNjA2WjAYMRYwFAYD VQQDEw02OGE5MzI3Ni1iNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+8pCeBF1kHEHMGTy6lKZR3iJc5mcvXjUee6UVVRfL5/1goMc0lIWyLlJUoV O2FSjlswSAQCzQywl0qI7CSxkktVLUmVVypXC4TJzaPHE1tINGh5PbnkT8EI3ziV +wn2bgs6Y5QexrcZndyYcLtHMxg6l6gK6WoJ+Se/pnHcVidiuPCjk+O/cuRk7BQw rOjdmS5KML+Wh/uwrEDJjyymtkk1dRHXDA0Hbs0s/4FqLBPy6nzVEdy/zfA0uJVB SnqtyssfKwlbv5HbVohRW4NuWwNyP2U/8/LgPqllOfBUr8oglWkhu2ot1JzrZUP4 j2HvaZT/Y86KnM4FHIiN3fE0LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMnRM4z MnsX1tDI6Xzh85ldKzxMMB8GA1UdIwQYMBaAFCPw2ml8qh2SR6Zp34eBujATfXpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJDOC82MjYyRjZENkVG MDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUhaSkhwbW5maDRHNk1CTjll bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfRGFhWHlxSFpKSHBtbmZoNEc2TUJOOWVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUJDOC82MjYyRjZENkVGMDIxMUVEOEMyREQ5MUZDNEY5QUUwMi9JX0RhYVh5cUha SkhwbW5maDRHNk1CTjllbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEsoxr/uOvMlQE24qNl2s63Cb+QSRDeqUKCM3OGNoKaU1zIzfwXxvA Eeo/3f/MKSG14tHD6F1P4VTb51qNHrQwFFSzq8DCo2SnbKufmnw7eEB+udIjndFg 4fap0CTtusGqQTXqf9qkRVAheOgrxLwWhedEqFpyK1rnNV6bKM6wHYAh6Ax2gHTs T7ihA5QqY9sqXmP3t3ZfDTl5o1n847GkW+gij9NGCmoxKKxHWLWbUM5X89WWwO94 SlIEUxA7YL1dWpS/UP5IGqoyWHX+wbpGIY/lZsh3hQ1RlquBtk1+Dt8bqaopFG13 0NpRdrAX4bhTWR9MMm2XUqBAyHounTdv -----END CERTIFICATE-----Generated at Sat Aug 23 21:31:10 2025 by rpki-client