$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft File: V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json) Hash identifier: zjT4L3uwBQM/TRGZ/tJA1Iyeq/b4KCw5dXUhV0sRZYo= Subject key identifier: F1:44:C3:77:3C:F8:E5:03:5F:EF:B1:EF:F7:81:24:F6:EB:AD:D0:B5 Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E Certificate issuer: /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 06:30:45 +0000 Manifest this update: Sat 23 Aug 2025 06:30:44 +0000 Manifest next update: Sat 30 Aug 2025 06:30:44 +0000 Files and hashes: 1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: 6kYBpIlaBDK8wCOiuhikWU6cyFJSIyrKmjPHRBgBaEA=) 2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: C51FnirOwHNLSENUvzzb2TxTVOy5VJ2d+aAfYjutEMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E Validity Not Before: Aug 23 06:30:44 2025 GMT Not After : Aug 30 06:30:44 2025 GMT Subject: CN=68a96015-db74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:9f:00:b6:e9:78:25:f0:21:c7:35:29:a3: 82:5c:19:6c:e5:4e:b3:56:e6:ac:fd:0f:9e:89:c6: e3:4f:f4:d6:d2:6e:2d:1a:a7:f4:61:36:db:dd:83: be:73:fe:a7:dc:be:bc:3b:ec:b9:6c:7b:65:82:22: 7d:5a:b7:1b:99:dc:60:e9:4d:d9:2a:21:65:fd:77: e1:7f:80:54:43:42:1f:b7:71:63:0f:46:01:75:57: 3e:27:d7:9e:d3:5c:49:2f:74:61:e6:97:bc:07:92: 10:55:a4:03:56:ce:f6:ea:bc:f2:3f:b9:84:84:80: 9a:f1:f1:af:06:64:0b:fa:2c:c2:0f:14:91:d4:24: 31:37:e9:a1:a9:ef:bd:37:54:80:9f:af:9f:89:f4: a4:09:ef:ac:37:bd:f5:cd:d6:dc:70:5a:5c:d4:6c: be:83:f5:c3:3f:0a:b1:18:af:8c:31:fa:ad:bf:ea: 1a:71:0e:4b:51:13:b7:4d:f8:1e:d5:e5:e8:3c:74: 9e:8a:71:3d:c5:0d:81:72:57:12:41:3b:76:89:cd: 5f:40:03:c5:99:ab:b0:f9:7d:50:a7:58:79:63:0e: 26:8e:7b:16:20:10:91:2f:01:bd:fd:58:82:99:99: 4b:12:61:a8:8b:18:51:ac:f0:9b:86:ce:5b:58:00: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:C3:77:3C:F8:E5:03:5F:EF:B1:EF:F7:81:24:F6:EB:AD:D0:B5 X509v3 Authority Key Identifier: keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:01:e8:c0:73:11:84:c9:4c:3d:36:08:f6:13:1f:25:74:19: a4:1f:b6:65:ce:01:e4:2a:eb:d7:a9:a9:2f:cf:6e:2b:98:9d: 1f:63:a2:7f:28:06:e4:0d:53:a8:a1:23:db:dc:64:26:65:12: ef:fc:0c:99:4f:76:70:f6:c0:c3:2a:5f:c6:fb:e3:7b:c0:48: 46:89:b0:f4:b0:6f:81:3f:df:25:e8:3f:78:5a:d6:d9:3f:95: 66:82:72:bb:1c:d5:c5:02:90:72:a4:6e:c9:22:c7:cd:74:41: e3:98:87:1f:a9:20:84:dc:62:60:75:92:ca:6f:60:0c:b9:aa: aa:af:61:b2:c0:c7:ce:18:1c:ba:7f:ba:b6:4b:15:63:26:cb: c8:85:65:87:2e:20:38:17:2e:c9:2c:b4:63:ac:df:d6:0c:a7: 86:49:fb:90:2e:a5:fa:f7:6e:a2:30:38:35:15:af:d7:c4:be: 0e:8d:94:db:d3:32:11:07:b3:7a:e8:f3:24:50:9b:94:99:15: 3d:34:81:00:a8:68:4d:d4:b5:97:79:19:66:4d:c6:2d:c7:e6: 3f:0d:79:0a:09:f2:3d:47:0d:bd:96:ff:3c:92:7a:1f:08:d6: f5:79:8b:74:38:db:3c:6b:1c:e7:26:e6:52:43:e4:b1:7d:fb: 17:3f:38:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFDMzAxMTAvBgNVBAUTKDU3Njc5MDI0NENDMjkyNzVDMTEyMzU2RkY2MjBGMjYy MEQ3RDYxNUUwHhcNMjUwODIzMDYzMDQ0WhcNMjUwODMwMDYzMDQ0WjAYMRYwFAYD VQQDEw02OGE5NjAxNS1kYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRufALbpeCXwIcc1KaOCXBls5U6zVuas/Q+eicbjT/TW0m4tGqf0YTbb3YO+ c/6n3L68O+y5bHtlgiJ9Wrcbmdxg6U3ZKiFl/Xfhf4BUQ0Ift3FjD0YBdVc+J9ee 01xJL3Rh5pe8B5IQVaQDVs726rzyP7mEhICa8fGvBmQL+izCDxSR1CQxN+mhqe+9 N1SAn6+fifSkCe+sN731zdbccFpc1Gy+g/XDPwqxGK+MMfqtv+oacQ5LURO3Tfge 1eXoPHSeinE9xQ2BclcSQTt2ic1fQAPFmauw+X1Qp1h5Yw4mjnsWIBCRLwG9/ViC mZlLEmGoixhRrPCbhs5bWAD4HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFEw3c8 +OUDX++x7/eBJPbrrdC1MB8GA1UdIwQYMBaAFFdnkCRMwpJ1wRI1b/Yg8mINfWFe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC82QkM0Q0RGRThD NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tuWEJFalZ2OWlEeVlnMTlZ VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1YyZVFKRXpDa25YQkVqVnY5aUR5WWcxOVlWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUMzMC82QkM0Q0RGRThDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tu WEJFalZ2OWlEeVlnMTlZVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCAejAcxGEyUw9Ngj2Ex8ldBmkH7ZlzgHkKuvXqakvz24rmJ0fY6J/ KAbkDVOooSPb3GQmZRLv/AyZT3Zw9sDDKl/G++N7wEhGibD0sG+BP98l6D94WtbZ P5VmgnK7HNXFApBypG7JIsfNdEHjmIcfqSCE3GJgdZLKb2AMuaqqr2GywMfOGBy6 f7q2SxVjJsvIhWWHLiA4Fy7JLLRjrN/WDKeGSfuQLqX6926iMDg1Fa/XxL4OjZTb 0zIRB7N66PMkUJuUmRU9NIEAqGhN1LWXeRlmTcYtx+Y/DXkKCfI9Rw29lv88knof CNb1eYt0ONs8axznJuZSQ+SxffsXPziW -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:58 2025 by rpki-client