$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: lQ/k4OBhXaf+gd2iqFW7peugiA5Z3jOfV8fLRLV30MU= Subject key identifier: 95:75:6A:D0:11:3A:21:6C:9D:EC:BB:34:71:81:AC:00:85:67:07:1E Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 1757 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 16BC Signing time: Wed 02 Jul 2025 16:44:10 +0000 Manifest this update: Wed 02 Jul 2025 16:44:09 +0000 Manifest next update: Wed 09 Jul 2025 16:44:09 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: R5rmr0qCsxjKiNX3DUWPFSJe4f0T9+sHlog+XVbLUz8=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: +7/Vt0FTaK5GWH/3IE+pQmL2wHj4vbU0fzaTx23ZBa4=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: dHZjnobEWvCkJLuRIvZrVbscT5l1hAVdVQPJ8ZrvrKU=) 4: BE080034527011F0A1061D5AC4F9AE02.roa (hash: hJTyURGyPMiJ2vcKve1J9dwSCev0OBfNhIrnqq/i6xA=) 5: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: J48bHySJ6PshhvlJwPkBG6RyobLf8a6YeYETe5QG1TY=) 6: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg=) 7: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: o4sVUAvBbfXlH+Fkt0MhUocTngit2NpPuryfYPu2kLw=) 8: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: NWWiuwLgl9RwlWRS8BInX5D7zCXvjEBWjuBg9LiZans=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5975 (0x1757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Jul 2 16:44:09 2025 GMT Not After : Jul 9 16:44:09 2025 GMT Subject: CN=686561da-4521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:83:f8:0b:8f:e1:3b:d9:9e:b3:a4:37:55: a5:46:e0:ad:dc:46:c0:4a:21:ba:1a:b9:f9:0e:45: 4e:9c:a2:79:5e:a4:4e:de:cf:60:d6:cc:f2:c8:90: 3b:3f:d6:f4:e5:3a:d5:c5:19:27:e3:4d:97:7d:d4: 18:8d:53:6e:79:45:93:8f:78:ee:d8:11:7e:bc:5d: 80:41:8b:50:b2:f7:5b:9a:0f:93:f4:6c:83:e2:7b: 6a:e5:c5:1f:f8:38:4b:c4:98:4a:60:90:67:ef:ac: f1:d8:06:09:80:46:0d:fc:fe:ec:f3:96:19:db:8e: 16:dc:c2:af:69:2a:44:9e:b2:a8:2c:17:e2:88:65: 01:00:c5:4d:8f:b4:f3:9d:f2:19:0e:8c:79:df:84: eb:f2:29:f2:e3:94:3f:f3:40:d7:df:aa:03:94:6e: 81:e5:68:e9:20:0d:52:77:d2:99:97:1c:7a:61:42: ae:40:5f:c9:4f:14:1c:3a:2e:e7:8e:5e:cd:9d:90: 34:d9:2a:7d:cc:39:90:31:f5:e8:3d:36:5f:08:4d: 1e:c5:d0:48:dc:e1:37:a2:b6:f1:c7:0d:85:9e:df: 25:d7:48:bd:a9:77:5d:b8:d8:c8:79:36:3b:3c:70: d2:f1:13:c5:40:80:37:14:00:98:e9:85:ba:15:c0: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:6A:D0:11:3A:21:6C:9D:EC:BB:34:71:81:AC:00:85:67:07:1E X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:18:61:41:79:34:ca:4d:35:f6:f6:ef:94:79:6c:16:3d:a1: ad:3d:43:7a:12:88:03:c7:bc:f3:fd:f2:61:a4:3d:47:33:ab: 80:ba:ac:7c:f0:5b:8b:40:a9:68:13:3a:17:f0:5e:42:06:f2: 45:df:e9:75:2e:93:f5:3e:0a:61:41:7c:d1:6e:7c:9a:18:81: 44:55:72:a8:94:88:f7:2a:c1:e2:50:07:da:4e:c9:57:53:63: b9:97:a4:aa:43:8b:05:7e:a9:1b:4b:29:d0:47:b3:2a:34:28: 77:dd:64:44:21:68:2f:68:38:bf:12:29:f3:83:a0:d1:43:85: 63:d3:d7:c4:97:17:f6:7e:9c:5e:be:4b:74:a9:5e:dd:22:85: 02:1f:69:d0:91:91:13:85:66:4d:f5:34:db:28:e1:49:c3:40: 94:95:0b:93:47:5e:28:1d:6f:77:d6:91:89:3b:88:c9:54:58: 65:5d:17:8f:d8:1a:12:d0:12:dd:28:7e:e4:d3:9e:ea:ff:e4: f8:3e:f0:9e:d3:df:bd:66:08:59:3d:cf:c2:4e:a1:b9:f2:77: f3:ca:a9:21:76:3a:6e:1d:48:1f:5f:de:7d:0c:b1:ff:5d:66: c1:af:1a:96:2d:d0:bb:da:a2:2e:f5:2d:eb:4b:91:fd:30:1d: 4a:60:b3:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjUwNzAyMTY0NDA5WhcNMjUwNzA5MTY0NDA5WjAYMRYwFAYD VQQDEw02ODY1NjFkYS00NTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0buD+AuP4TvZnrOkN1WlRuCt3EbASiG6Grn5DkVOnKJ5XqRO3s9g1szyyJA7 P9b05TrVxRkn402XfdQYjVNueUWTj3ju2BF+vF2AQYtQsvdbmg+T9GyD4ntq5cUf +DhLxJhKYJBn76zx2AYJgEYN/P7s85YZ244W3MKvaSpEnrKoLBfiiGUBAMVNj7Tz nfIZDox534Tr8iny45Q/80DX36oDlG6B5WjpIA1Sd9KZlxx6YUKuQF/JTxQcOi7n jl7NnZA02Sp9zDmQMfXoPTZfCE0exdBI3OE3orbxxw2Fnt8l10i9qXdduNjIeTY7 PHDS8RPFQIA3FACY6YW6FcCDOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV1atAR OiFsney7NHGBrACFZwceMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJGGFBeTTKTTX29u+UeWwWPaGtPUN6EogDx7zz/fJhpD1HM6uAuqx8 8FuLQKloEzoX8F5CBvJF3+l1LpP1PgphQXzRbnyaGIFEVXKolIj3KsHiUAfaTslX U2O5l6SqQ4sFfqkbSynQR7MqNCh33WREIWgvaDi/Einzg6DRQ4Vj09fElxf2fpxe vkt0qV7dIoUCH2nQkZEThWZN9TTbKOFJw0CUlQuTR14oHW931pGJO4jJVFhlXReP 2BoS0BLdKH7k057q/+T4PvCe09+9ZghZPc/CTqG58nfzyqkhdjpuHUgfX959DLH/ XWbBrxqWLdC72qIu9S3rS5H9MB1KYLOf -----END CERTIFICATE-----Generated at Thu Jul 3 23:10:56 2025 by rpki-client