$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: jkvgtLF9jPwpNGuMuehNHHWw0yPnS0Sgw5ssPFB9EVM= Subject key identifier: 0E:20:8A:6F:6E:E3:C7:0E:25:C8:89:5B:C8:10:AE:F9:35:0B:22:AF Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1771 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16D6 Signing time: Fri 22 Aug 2025 16:42:09 +0000 Manifest this update: Fri 22 Aug 2025 16:42:09 +0000 Manifest next update: Fri 29 Aug 2025 16:42:09 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: 7f/Te2Oi1rP+7E9U1zMKjeQmbO1M3y8RuNHjUi/iMe0=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: BE080034527011F0A1061D5AC4F9AE02.roa (hash: hJTyURGyPMiJ2vcKve1J9dwSCev0OBfNhIrnqq/i6xA=) 5: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6001 (0x1771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Aug 22 16:42:09 2025 GMT Not After : Aug 29 16:42:09 2025 GMT Subject: CN=68a89de1-df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1f:7b:98:40:78:23:ce:f3:5b:5d:1c:dc:24: f5:9d:c6:96:b9:d1:77:de:98:df:f6:20:51:c4:b5: 4e:e1:a7:cf:eb:1c:34:49:e3:d9:b6:22:63:fb:1e: 21:e6:3a:51:5f:63:2e:7a:c2:7d:42:a8:a4:ee:76: 93:85:c5:8e:28:af:cf:e6:2b:9a:10:3e:b7:4e:95: c7:6b:af:f0:7a:1c:ea:31:ee:2e:ee:93:1d:42:eb: f0:62:3b:c2:36:e1:93:8a:c7:28:03:0d:8e:03:81: ed:cf:44:92:76:2c:78:e8:ce:73:52:3f:16:27:91: eb:6b:07:8f:05:4e:0a:5b:ea:b0:cf:af:5d:5c:4d: 54:6a:60:6a:31:9f:ed:f2:0b:4a:e7:6c:48:6d:66: 35:7e:33:05:18:5e:48:81:ce:70:4f:ec:b3:99:39: e9:28:66:a0:24:b4:57:5e:ca:8d:09:b0:b8:40:1f: e9:e8:94:36:d1:cb:78:e0:19:f4:0e:e2:20:a6:45: 2a:23:17:83:93:7c:96:13:da:d8:33:32:4f:fb:92: be:b5:11:ff:c0:08:5f:c8:58:4b:76:d1:bf:56:f7: 37:b0:57:ae:61:0e:86:6d:b7:47:6e:00:7f:f6:f5: 18:6f:d7:0f:a6:6c:f3:4a:e8:5b:9e:d3:e7:15:6c: 83:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:8A:6F:6E:E3:C7:0E:25:C8:89:5B:C8:10:AE:F9:35:0B:22:AF X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:cd:42:d2:0c:9a:72:c6:65:26:f7:9a:f7:14:3c:b4:91:41: 5a:76:d9:1f:d3:10:47:05:e8:7c:67:26:58:7b:07:c7:f8:bd: 28:3a:39:ec:ac:68:50:b9:46:2f:36:17:32:39:7f:4a:10:86: 49:7d:98:cb:c9:6d:0e:15:77:10:14:5f:45:84:92:15:02:bf: 60:34:e5:c5:90:d5:2f:c8:3d:cb:8d:ae:60:8b:c8:da:98:c5: a3:12:d8:50:a6:2f:00:5e:f7:a3:b8:75:1b:6c:29:a2:37:b8: 27:0f:79:b2:62:57:76:20:93:a8:5f:a0:1f:29:30:67:5e:7c: f6:c7:1d:b3:16:6c:d3:ef:d6:e9:f3:c4:61:50:48:bf:ee:d9: cc:bb:4f:a9:e9:c7:ea:ad:6f:76:77:91:6c:84:54:08:4a:77: cd:c4:bf:0e:12:b3:e2:1f:98:78:58:7e:99:48:79:fb:e1:2c: 98:b2:03:0e:41:c3:9f:57:ae:9b:71:e5:f3:9b:e3:28:88:f3: 71:c4:70:eb:af:ef:d1:ed:b2:ce:fe:30:8e:e1:6e:79:bb:91: 58:6e:fa:da:5c:35:41:2c:07:c8:7d:1f:9a:0b:b9:87:78:ec: 1d:e2:27:aa:3d:8b:9a:8e:09:83:59:a0:cb:ef:a3:c9:8c:4d: f7:2e:bf:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwODIyMTY0MjA5WhcNMjUwODI5MTY0MjA5WjAYMRYwFAYD VQQDEw02OGE4OWRlMS1kZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h97mEB4I87zW10c3CT1ncaWudF33pjf9iBRxLVO4afP6xw0SePZtiJj+x4h 5jpRX2MuesJ9Qqik7naThcWOKK/P5iuaED63TpXHa6/wehzqMe4u7pMdQuvwYjvC NuGTiscoAw2OA4Htz0SSdix46M5zUj8WJ5HrawePBU4KW+qwz69dXE1UamBqMZ/t 8gtK52xIbWY1fjMFGF5Igc5wT+yzmTnpKGagJLRXXsqNCbC4QB/p6JQ20ct44Bn0 DuIgpkUqIxeDk3yWE9rYMzJP+5K+tRH/wAhfyFhLdtG/Vvc3sFeuYQ6GbbdHbgB/ 9vUYb9cPpmzzSuhbntPnFWyD4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4gim9u 48cOJciJW8gQrvk1CyKvMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWzULSDJpyxmUm95r3FDy0kUFadtkf0xBHBeh8ZyZYewfH+L0oOjns rGhQuUYvNhcyOX9KEIZJfZjLyW0OFXcQFF9FhJIVAr9gNOXFkNUvyD3Lja5gi8ja mMWjEthQpi8AXvejuHUbbCmiN7gnD3myYld2IJOoX6AfKTBnXnz2xx2zFmzT79bp 88RhUEi/7tnMu0+p6cfqrW92d5FshFQISnfNxL8OErPiH5h4WH6ZSHn74SyYsgMO QcOfV66bceXzm+MoiPNxxHDrr+/R7bLO/jCO4W55u5FYbvraXDVBLAfIfR+aC7mH eOwd4ieqPYuajgmDWaDL76PJjE33Lr/H -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:06 2025 by rpki-client