$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: 9blSjt+IpwHVTTZinrFlnsRMcfXDVVW2ZsJh1Qck3Bk= Subject key identifier: 9A:95:FE:F8:27:DD:07:D9:A6:29:8F:67:FA:2A:BC:64:26:DC:44:8B Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 1357 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 12F9 Signing time: Fri 22 Aug 2025 17:12:48 +0000 Manifest this update: Fri 22 Aug 2025 17:12:48 +0000 Manifest next update: Fri 29 Aug 2025 17:12:48 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: 78lAaH+UIusZfedQidYi7veqbjv9Qt/YhnYqpgPyza0=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4951 (0x1357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Aug 22 17:12:48 2025 GMT Not After : Aug 29 17:12:48 2025 GMT Subject: CN=68a8a510-053b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:be:31:99:c0:eb:de:9a:7f:65:f7:11:50: fc:fe:14:a8:03:88:e9:04:eb:19:3e:ba:c8:4b:aa: 00:8a:8c:a6:40:c6:e2:d1:b8:95:fa:78:78:31:46: 08:05:fc:76:31:ff:c0:ec:a2:3f:8c:d4:5d:7c:10: a8:4e:4f:d5:a9:c9:fb:7b:15:42:0a:7a:d5:49:d3: 86:b3:9a:d3:23:14:3a:4e:29:59:74:25:1a:a9:73: 8a:db:f0:ed:37:34:a4:de:8d:82:66:34:b2:f5:5a: 2e:ca:6a:98:5c:15:b0:44:5c:9f:b3:24:82:ab:ed: 6c:76:17:36:f4:8d:9d:e5:d6:3d:52:fc:30:c0:05: 00:98:5e:6e:4e:93:ed:94:4c:7e:09:d2:3f:8d:8e: b2:34:f9:29:b1:7b:36:4f:56:14:0a:a9:d9:71:45: c9:7d:19:09:45:cf:a1:9a:8e:cd:e9:b6:fb:c6:5f: b9:d7:05:5b:70:4e:32:0d:57:53:77:b0:0c:83:cb: 30:43:4a:c1:65:74:25:f4:97:ad:3b:f1:e5:d9:9f: 1e:ca:07:98:06:61:b8:04:41:89:fb:f2:3c:da:80: ec:09:ce:2f:79:a6:8e:02:f0:97:d8:81:05:e1:5f: 2c:a1:3b:80:88:cb:f5:9a:38:ad:8a:d1:96:a8:7c: be:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:95:FE:F8:27:DD:07:D9:A6:29:8F:67:FA:2A:BC:64:26:DC:44:8B X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:32:50:cc:22:f0:dd:89:7b:6d:c1:60:7b:5d:a4:a5:03:38: 8b:50:b2:78:52:b9:69:37:31:36:db:9c:44:63:ee:01:21:e7: 55:c5:d2:ea:a9:3d:51:4f:1a:fd:9a:b3:03:ec:6a:e6:c5:e6: 01:a5:c2:d4:37:e4:5e:52:48:40:4b:92:a9:c1:9d:73:70:68: 3a:7e:3b:1d:49:d7:0e:40:e0:5f:68:c8:80:69:4b:cc:d0:3d: ed:43:d9:89:28:a7:84:0d:72:5f:5a:0c:48:1f:e4:e3:8a:40: b7:45:da:10:f8:e0:9f:cf:7f:f4:e0:7f:dc:e3:79:23:97:9f: 88:c2:d8:70:d3:4a:80:0d:6f:55:2e:16:ed:5e:4f:92:b1:ef: 9c:05:e5:3e:3d:4a:ed:fb:17:16:57:03:70:09:3f:05:bc:7a: 95:85:4c:f6:27:cf:dc:50:f2:bc:c1:21:b9:c6:24:f2:bd:fd: 06:af:66:c4:99:57:fe:b2:87:80:c8:95:91:a1:07:4b:cb:3c: 7e:db:56:89:83:c9:9d:74:f5:ef:36:ea:17:7f:d1:cc:aa:48: 74:f3:c6:b1:3f:02:1c:cd:d5:27:e5:54:45:f3:2b:ad:9e:9a: 51:04:47:cf:0b:7a:f2:37:8a:2c:4b:b7:24:1d:a0:33:d4:b9: 53:2f:e1:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUwODIyMTcxMjQ4WhcNMjUwODI5MTcxMjQ4WjAYMRYwFAYD VQQDEw02OGE4YTUxMC0wNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwza+MZnA696af2X3EVD8/hSoA4jpBOsZPrrIS6oAioymQMbi0biV+nh4MUYI Bfx2Mf/A7KI/jNRdfBCoTk/Vqcn7exVCCnrVSdOGs5rTIxQ6TilZdCUaqXOK2/Dt NzSk3o2CZjSy9VouymqYXBWwRFyfsySCq+1sdhc29I2d5dY9UvwwwAUAmF5uTpPt lEx+CdI/jY6yNPkpsXs2T1YUCqnZcUXJfRkJRc+hmo7N6bb7xl+51wVbcE4yDVdT d7AMg8swQ0rBZXQl9JetO/Hl2Z8eygeYBmG4BEGJ+/I82oDsCc4veaaOAvCX2IEF 4V8soTuAiMv1mjititGWqHy+sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqV/vgn 3QfZpimPZ/oqvGQm3ESLMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoMlDMIvDdiXttwWB7XaSlAziLULJ4UrlpNzE225xEY+4BIedVxdLq qT1RTxr9mrMD7GrmxeYBpcLUN+ReUkhAS5KpwZ1zcGg6fjsdSdcOQOBfaMiAaUvM 0D3tQ9mJKKeEDXJfWgxIH+TjikC3RdoQ+OCfz3/04H/c43kjl5+Iwthw00qADW9V LhbtXk+Sse+cBeU+PUrt+xcWVwNwCT8FvHqVhUz2J8/cUPK8wSG5xiTyvf0Gr2bE mVf+soeAyJWRoQdLyzx+21aJg8mddPXvNuoXf9HMqkh088axPwIczdUn5VRF8yut nppRBEfPC3ryN4osS7ckHaAz1LlTL+E/ -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:04 2025 by rpki-client