$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json) Hash identifier: NDVpOvcGOhkfUHvj8UlJONu1yw66kT7fe3LJtRnzKB8= Subject key identifier: E7:A8:DF:41:4C:69:F1:6B:1B:46:01:B1:01:CC:25:75:EF:75:DC:44 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft Manifest number: 123B Signing time: Fri 22 Aug 2025 17:16:05 +0000 Manifest this update: Fri 22 Aug 2025 17:16:05 +0000 Manifest next update: Fri 29 Aug 2025 17:16:05 +0000 Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: Wv97QY8NH1T5YSBYK2C6n4L9Q3Wzw0/8W5+NHUC9U1A=) 2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Aug 22 17:16:05 2025 GMT Not After : Aug 29 17:16:05 2025 GMT Subject: CN=68a8a5d5-011c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:a2:3c:a2:97:78:22:b7:05:d1:8d:bd:c9: 29:73:82:5f:c4:70:ca:f1:50:f6:e9:82:46:71:38: 77:db:82:1f:e2:2f:d7:19:3d:7a:91:15:34:ce:45: b0:42:7a:bb:40:51:cc:b1:05:fc:ef:55:a0:72:cc: b3:04:d6:12:1c:f3:c9:1b:c9:50:72:80:d8:a1:c6: f4:d9:f7:85:09:e2:39:a8:84:03:b8:e0:c4:b8:2a: a1:79:3b:a5:0a:9d:61:35:8f:28:5e:a4:bc:19:e8: e0:ce:73:8c:9d:34:ed:84:9e:d6:ad:d3:33:e4:0c: 23:88:57:4d:fa:c7:e0:bd:ad:9d:f2:5c:75:04:8a: b2:f0:81:1b:55:8a:30:eb:a3:8b:11:6e:1f:f3:85: 68:8c:2f:fc:c8:0f:e2:76:2a:40:ef:7a:a4:a5:be: 92:11:f5:8c:fa:97:08:26:8c:43:2d:93:d4:57:f3: 94:29:0d:ec:35:f9:8f:5a:98:e1:f6:33:ce:3b:69: 2b:bb:ed:e9:66:ea:62:20:59:d7:ff:48:98:4e:ce: 0e:4f:4a:d2:0a:21:0c:17:1e:99:46:f6:a4:f8:ee: dd:ba:26:fa:77:89:f0:5a:94:a0:f1:96:c5:2a:07: 86:3d:d3:ea:db:de:a3:36:a9:14:e1:9a:c9:a3:36: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A8:DF:41:4C:69:F1:6B:1B:46:01:B1:01:CC:25:75:EF:75:DC:44 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:23:cd:c8:36:ec:5f:90:6a:74:68:8f:1e:eb:e4:c1:cd:2a: f7:65:17:81:3c:12:14:0e:bb:96:5f:64:38:84:30:08:82:7f: 19:f8:f7:59:cd:c3:04:75:05:82:5e:65:02:56:17:b9:45:1c: 73:16:ad:db:ac:f0:ce:b5:4c:69:18:1f:1c:8a:90:9c:4f:95: 44:c8:42:b6:4b:f6:ac:c6:a6:18:6e:90:c7:b8:9b:c8:48:05: a9:95:78:8e:c1:f7:e4:bf:15:7c:a5:2c:4a:64:dd:93:ab:21: a9:0d:d6:36:ea:2f:bc:ff:60:6b:02:e5:8b:c7:a1:ed:e9:b6: a4:88:07:00:10:85:20:2e:ac:fc:2d:a5:09:74:69:07:d2:36: 22:41:b2:0e:80:01:89:24:0e:da:4a:8b:e1:b2:39:c2:68:b1: bc:26:a4:59:2e:4f:cc:58:12:fd:76:47:19:61:71:a9:e3:e3: 87:b9:da:12:cd:e9:56:16:1d:d5:75:45:08:97:3d:4c:5f:c6: 4a:34:25:45:fb:80:b5:a9:15:c0:56:9a:38:09:aa:15:3d:03: ae:01:03:1d:f7:b1:58:8c:11:88:d7:b1:7b:4f:63:6d:32:4e: 73:a0:89:54:46:16:2f:38:da:5d:ce:93:cc:28:38:e3:91:cf: 2b:75:52:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjUwODIyMTcxNjA1WhcNMjUwODI5MTcxNjA1WjAYMRYwFAYD VQQDEw02OGE4YTVkNS0wMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi2iPKKXeCK3BdGNvckpc4JfxHDK8VD26YJGcTh324If4i/XGT16kRU0zkWw Qnq7QFHMsQX871WgcsyzBNYSHPPJG8lQcoDYocb02feFCeI5qIQDuODEuCqheTul Cp1hNY8oXqS8GejgznOMnTTthJ7WrdMz5AwjiFdN+sfgva2d8lx1BIqy8IEbVYow 66OLEW4f84VojC/8yA/idipA73qkpb6SEfWM+pcIJoxDLZPUV/OUKQ3sNfmPWpjh 9jPOO2kru+3pZupiIFnX/0iYTs4OT0rSCiEMFx6ZRvak+O7duib6d4nwWpSg8ZbF KgeGPdPq296jNqkU4ZrJozamgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeo30FM afFrG0YBsQHMJXXvddxEMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaI83INuxfkGp0aI8e6+TBzSr3ZReBPBIUDruWX2Q4hDAIgn8Z+PdZ zcMEdQWCXmUCVhe5RRxzFq3brPDOtUxpGB8cipCcT5VEyEK2S/asxqYYbpDHuJvI SAWplXiOwffkvxV8pSxKZN2TqyGpDdY26i+8/2BrAuWLx6Ht6bakiAcAEIUgLqz8 LaUJdGkH0jYiQbIOgAGJJA7aSovhsjnCaLG8JqRZLk/MWBL9dkcZYXGp4+OHudoS zelWFh3VdUUIlz1MX8ZKNCVF+4C1qRXAVpo4CaoVPQOuAQMd97FYjBGI17F7T2Nt Mk5zoIlURhYvONpdzpPMKDjjkc8rdVLd -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:56 2025 by rpki-client