$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json) Hash identifier: HiVQQRPEcz32eGvyMFKmihr6ZubIWBbZOIID91eNA+c= Subject key identifier: 58:18:A5:A3:CB:8D:AC:CD:73:1B:3D:8E:70:A5:8A:05:BC:59:5C:D4 Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft Manifest number: 0BC0 Signing time: Fri 22 Aug 2025 19:03:53 +0000 Manifest this update: Fri 22 Aug 2025 19:03:52 +0000 Manifest next update: Fri 29 Aug 2025 19:03:52 +0000 Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: JHvFeZb7yNianaLip4AjK8ykv4L5r0G40SSGCbJ3HTQ=) 2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: kbjVSRJWVNsKP886UTdCXje46K3vQ/OgBysCSuexrdk=) 3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 0VsxW37CUzW4AoNDh7cYqP2zuBQmSz8Y4/jKr2zDwys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0 Validity Not Before: Aug 22 19:03:52 2025 GMT Not After : Aug 29 19:03:52 2025 GMT Subject: CN=68a8bf18-da91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:7b:b5:3d:bd:d0:a1:c7:09:7f:79:3a:52: 2c:fd:43:0a:87:ab:9f:de:88:5e:c0:53:25:a7:2d: df:5f:2f:c0:02:7c:d2:46:ee:a9:ce:85:af:63:39: c7:f3:f6:f3:4f:f1:3b:8d:c4:41:8e:32:a4:35:a8: 3a:d7:32:9c:a4:f6:f9:b5:4d:32:3c:20:66:9c:ea: 1d:11:10:72:84:dd:02:52:8c:8b:ff:5a:3f:96:a7: 4e:25:c1:6f:cf:b5:01:0b:08:2b:93:3d:1d:68:10: 93:fe:2d:cf:0b:09:3b:42:7b:1e:a1:a4:59:d8:88: e4:49:14:5c:23:ce:0a:83:b8:f2:00:14:55:43:0c: c6:f8:c1:b7:ea:3c:e7:1c:f4:75:24:bd:e1:fd:12: 59:d0:ef:dc:fc:b0:a2:74:cb:0c:ef:10:52:d7:5d: 8f:03:59:db:74:cc:3e:2b:31:3c:4c:0e:0c:8d:a9: 03:51:98:a7:a0:8d:da:00:44:63:1d:cc:1d:01:88: 6c:3b:09:38:72:41:ca:6d:28:17:f0:ad:12:50:73: ba:e4:64:d3:bb:c6:d9:18:aa:79:9d:69:30:c1:e2: af:20:45:77:dd:d9:93:ee:6c:7c:c8:2c:94:a3:55: 0f:7d:c1:8a:0d:d2:4d:87:75:2a:16:4f:16:13:44: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:18:A5:A3:CB:8D:AC:CD:73:1B:3D:8E:70:A5:8A:05:BC:59:5C:D4 X509v3 Authority Key Identifier: keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:3b:cc:60:b8:38:34:f5:b4:f4:7a:1b:ab:b1:59:b2:ea:0b: 34:f0:bb:54:58:b8:b4:32:98:72:49:f5:c7:a3:bc:d4:39:25: 63:50:82:77:b7:36:c6:6f:ba:c0:44:23:07:ac:7b:54:85:9c: 23:03:07:68:0e:24:7b:ff:a0:c1:fe:12:99:36:52:ef:d4:b3: a7:06:c5:fc:9d:36:71:91:6b:e8:64:8c:5a:fe:68:fc:3d:90: c0:20:0d:1e:db:e3:d2:dc:b3:66:89:20:e8:23:82:3e:02:ef: cb:dd:d2:df:ff:4e:9a:22:cd:99:1f:da:23:32:40:1d:6b:64: 74:97:8d:2e:36:9e:6d:c7:10:d8:d9:c1:9b:96:77:5d:ed:05: df:85:6e:e8:87:d1:96:cf:9b:db:a1:f3:6b:b5:25:cc:bc:57: 47:8b:0f:39:4f:4d:48:1b:0e:21:88:16:85:15:79:1d:cc:22: 99:c7:d1:51:c6:59:f6:62:e4:fe:12:87:02:8e:92:40:b9:20: 72:ee:44:01:e1:e5:d7:2a:53:fb:6d:50:d9:be:78:62:60:3c: b9:c1:50:4c:40:e3:50:61:81:b6:3d:41:e4:d5:d4:c4:03:40: fd:43:f6:37:8a:e4:17:a2:ed:af:39:a0:e0:dd:fa:e5:fb:76: 30:a3:12:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw RjUyOTc5QTAwHhcNMjUwODIyMTkwMzUyWhcNMjUwODI5MTkwMzUyWjAYMRYwFAYD VQQDEw02OGE4YmYxOC1kYTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp17tT290KHHCX95OlIs/UMKh6uf3ohewFMlpy3fXy/AAnzSRu6pzoWvYznH 8/bzT/E7jcRBjjKkNag61zKcpPb5tU0yPCBmnOodERByhN0CUoyL/1o/lqdOJcFv z7UBCwgrkz0daBCT/i3PCwk7QnseoaRZ2IjkSRRcI84Kg7jyABRVQwzG+MG36jzn HPR1JL3h/RJZ0O/c/LCidMsM7xBS112PA1nbdMw+KzE8TA4MjakDUZinoI3aAERj HcwdAYhsOwk4ckHKbSgX8K0SUHO65GTTu8bZGKp5nWkwweKvIEV33dmT7mx8yCyU o1UPfcGKDdJNh3UqFk8WE0SOhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgYpaPL jazNcxs9jnCligW8WVzUMB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3 QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53 UzI1YzEtb1NnUDBQVXBlYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0O8xguDg09bT0ehursVmy6gs08LtUWLi0MphySfXHo7zUOSVjUIJ3 tzbGb7rARCMHrHtUhZwjAwdoDiR7/6DB/hKZNlLv1LOnBsX8nTZxkWvoZIxa/mj8 PZDAIA0e2+PS3LNmiSDoI4I+Au/L3dLf/06aIs2ZH9ojMkAda2R0l40uNp5txxDY 2cGblndd7QXfhW7oh9GWz5vbofNrtSXMvFdHiw85T01IGw4hiBaFFXkdzCKZx9FR xln2YuT+EocCjpJAuSBy7kQB4eXXKlP7bVDZvnhiYDy5wVBMQONQYYG2PUHk1dTE A0D9Q/Y3iuQXou2vOaDg3frl+3YwoxLd -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:24 2025 by rpki-client