$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json) Hash identifier: ZLQvMqzfG1FmgClPt5nuwgIx7dR2QvXnbkRXIca+9/k= Subject key identifier: 3E:53:7D:97:6F:BB:6D:FB:03:C1:90:B0:7C:F7:F8:0B:5D:3D:89:F1 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft Manifest number: 1499 Signing time: Fri 22 Aug 2025 18:40:24 +0000 Manifest this update: Fri 22 Aug 2025 18:40:24 +0000 Manifest next update: Fri 29 Aug 2025 18:40:24 +0000 Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: RsYzFOCwSgVnmivIXpm9aVs6qy+E0lXoGJJV5FsAJrQ=) 2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: Aug 22 18:40:24 2025 GMT Not After : Aug 29 18:40:24 2025 GMT Subject: CN=68a8b998-4bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:32:55:21:29:5e:9b:47:93:f6:8e:28:34: ff:03:94:7a:d2:d0:c7:25:ae:07:0a:16:d3:14:f9: 80:bd:72:60:d0:8d:91:ce:c7:b9:2d:5e:81:a3:37: c6:c4:5f:b6:cd:7b:46:6d:ce:45:3d:07:d8:9b:2d: 7d:ad:47:03:b7:df:3d:3d:5c:2b:08:ba:2d:8a:7d: 0a:88:53:01:dd:0e:00:52:fa:c0:ad:0e:00:cc:21: 72:18:41:99:09:7f:d7:09:af:ee:e8:68:3a:7f:0f: 77:d0:fe:d1:a5:ad:a5:78:eb:57:e0:82:08:62:79: a9:f0:42:51:cd:b3:75:37:8f:9d:4a:65:a4:14:14: e5:82:00:96:16:79:ff:7f:45:d1:b9:46:db:02:3a: 24:0f:9f:b3:1a:a3:3b:b5:b7:17:64:90:ad:53:fa: 2e:fa:eb:9d:05:6f:09:61:18:d8:e7:ec:ae:e2:f9: 89:ee:7d:9f:4b:fa:0c:3f:41:42:b9:c1:9c:e5:ed: 19:f1:d2:e1:ff:e8:d4:a8:b3:fd:a5:89:01:7e:e5: b8:7e:e4:e1:fa:eb:c6:09:1f:42:4f:41:35:53:0c: 3c:76:d3:60:f7:b0:fe:25:be:7e:ec:fb:16:5f:9d: d5:cd:18:67:d1:c1:bc:18:d7:c2:2c:e8:5f:b7:ad: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:7D:97:6F:BB:6D:FB:03:C1:90:B0:7C:F7:F8:0B:5D:3D:89:F1 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:c6:bd:fb:09:a5:ed:e3:8f:3f:bc:8d:ff:d6:45:25:ff: 65:95:7e:c0:a2:9a:fe:bd:46:05:8d:2b:77:6d:10:ce:92:da: 6a:7d:bf:91:30:cf:2c:d6:53:79:c5:00:f5:0b:30:a0:ba:7b: 19:d5:ba:49:bd:b7:df:b1:81:c1:96:3e:14:09:16:4d:8c:e5: e4:e1:fc:8f:0f:90:93:b2:0e:25:c0:cb:8c:6a:b6:e1:bc:8a: 46:4f:e1:be:d6:7c:81:a3:79:b8:85:23:86:2a:ad:32:12:5e: a3:6d:81:b6:08:ee:8c:ef:d5:ea:09:b1:66:4e:c7:2f:d5:e2: 5a:c6:21:8d:41:79:b6:c4:d9:4c:34:93:3b:39:d6:4e:fb:32: 14:e7:ae:7f:ca:b7:7f:b5:59:f5:46:0d:ba:2f:a0:de:ba:fe: d8:c2:f3:39:1c:f8:83:95:11:b6:82:1d:2a:0a:2c:c3:13:e0: 3e:d1:23:ed:cf:d2:4e:e2:3c:fc:44:d9:05:f8:e7:63:5d:80: c3:a9:43:e0:7b:94:88:6c:fd:21:ad:16:6c:71:e5:87:49:7c: bb:15:11:28:3d:2d:85:9d:09:51:c6:c5:38:a5:52:20:53:cf: 5a:be:4c:41:d3:26:a6:96:41:84:25:04:c2:a2:ba:7d:61:5c: fc:6d:27:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwODIyMTg0MDI0WhcNMjUwODI5MTg0MDI0WjAYMRYwFAYD VQQDEw02OGE4Yjk5OC00YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkAyVSEpXptHk/aOKDT/A5R60tDHJa4HChbTFPmAvXJg0I2Rzse5LV6BozfG xF+2zXtGbc5FPQfYmy19rUcDt989PVwrCLotin0KiFMB3Q4AUvrArQ4AzCFyGEGZ CX/XCa/u6Gg6fw930P7Rpa2leOtX4IIIYnmp8EJRzbN1N4+dSmWkFBTlggCWFnn/ f0XRuUbbAjokD5+zGqM7tbcXZJCtU/ou+uudBW8JYRjY5+yu4vmJ7n2fS/oMP0FC ucGc5e0Z8dLh/+jUqLP9pYkBfuW4fuTh+uvGCR9CT0E1Uww8dtNg97D+Jb5+7PsW X53VzRhn0cG8GNfCLOhft61N9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5TfZdv u237A8GQsHz3+AtdPYnxMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE bTNGNGtsbFkzLTZadmdEVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC9Ma9+wml7eOPP7yN/9ZFJf9llX7Aopr+vUYFjSt3bRDOktpqfb+R MM8s1lN5xQD1CzCgunsZ1bpJvbffsYHBlj4UCRZNjOXk4fyPD5CTsg4lwMuMarbh vIpGT+G+1nyBo3m4hSOGKq0yEl6jbYG2CO6M79XqCbFmTscv1eJaxiGNQXm2xNlM NJM7OdZO+zIU565/yrd/tVn1Rg26L6Deuv7YwvM5HPiDlRG2gh0qCizDE+A+0SPt z9JO4jz8RNkF+OdjXYDDqUPge5SIbP0hrRZsceWHSXy7FREoPS2FnQlRxsU4pVIg U89avkxB0yamlkGEJQTCorp9YVz8bSd9 -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:55 2025 by rpki-client