$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: GUN6h948Ia/gRlLcjALx99KmsJdBva7asMQBzbXxlOY= Subject key identifier: 17:84:E9:D3:32:BC:02:2E:7E:B7:40:FA:2C:44:19:25:E2:76:31:4A Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0B8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0B87 Signing time: Fri 22 Aug 2025 19:09:08 +0000 Manifest this update: Fri 22 Aug 2025 19:09:08 +0000 Manifest next update: Fri 29 Aug 2025 19:09:08 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: 4ycjBA8a8p2sFYjJafKYuY1Et58gOfO+LPKAq+4N/Ew=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: 2QDvhbtMSuUMKkHjiP/BzPb8Yd8fGPxfNmWlpQE2e54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2958 (0xb8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Aug 22 19:09:08 2025 GMT Not After : Aug 29 19:09:08 2025 GMT Subject: CN=68a8c054-b339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:68:48:c5:9a:12:ad:5b:52:d2:00:52:38: ff:43:b8:0e:10:ba:bc:02:d8:75:24:f1:af:9e:d8: 29:9a:cd:d4:9b:6f:75:de:cc:3b:06:39:74:48:02: e0:13:5e:01:34:a8:c8:31:ef:0f:32:4c:66:2a:df: c1:1e:7e:bb:ae:a4:05:eb:db:da:f3:59:70:84:d2: ad:d3:1c:17:98:e6:30:70:5b:20:22:7c:d4:3a:52: 3c:73:c8:d1:bc:bb:19:26:ec:3c:9c:67:6d:98:cb: 45:40:ae:3d:12:06:69:16:d0:f3:20:ff:c1:a5:7d: 85:26:83:3e:e8:98:51:ba:e8:8c:56:d3:29:f0:96: 5a:8c:51:8c:43:9b:51:98:d8:49:47:6a:c0:c0:f3: 76:94:b5:ec:08:66:a5:b6:8c:d2:7a:1e:3c:00:44: 95:3e:2c:8b:28:dc:83:37:03:ab:b2:c7:2b:c3:15: fb:25:32:4f:d1:04:e1:51:be:d1:8b:2e:24:32:98: 4d:27:a6:cc:75:5a:b7:04:14:50:c7:c1:8c:a7:0f: 16:97:68:b6:4f:38:e8:8c:72:11:ce:3f:b1:a8:6f: d1:06:f9:22:0f:92:49:f0:cb:b1:1b:be:fe:08:3f: 31:7d:d9:3b:23:04:1e:fa:56:83:11:03:a4:50:8d: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:84:E9:D3:32:BC:02:2E:7E:B7:40:FA:2C:44:19:25:E2:76:31:4A X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:8f:c7:ba:25:9e:92:2b:a4:c7:c1:50:bb:e0:27:c4:00: 63:9c:e9:5e:d4:58:47:e6:a9:ce:f6:44:5c:7c:32:5c:ac:50: 06:4d:b0:19:5d:9f:82:b8:d2:46:a1:cc:56:54:b5:42:cd:5d: 83:89:47:1c:78:69:b6:45:0c:26:88:e0:5a:44:1e:f2:de:a4: 3a:4b:7f:2a:7b:4a:cc:47:cb:99:dd:6b:3b:38:f3:e6:16:d0: 6b:a2:af:58:b0:1e:a7:d9:f7:4e:cd:30:0b:62:60:f1:bf:bd: 5e:fd:f8:30:29:6c:6e:db:49:ac:7d:29:a8:ad:ef:55:51:d3: ed:6d:5e:24:43:cc:ca:f6:35:76:c5:c8:46:3b:9f:5a:12:fb: 51:fb:9f:97:e7:0b:15:c4:be:56:23:d1:e9:6c:eb:7f:45:b5: b7:8f:78:ab:9f:75:bd:0a:ad:7d:e5:6d:c0:0c:8d:b7:83:c9: 82:fe:23:9e:2c:ff:bf:15:66:1b:99:76:5e:1c:88:26:0d:b2: 46:9b:df:4c:8e:7a:b5:1b:a9:d6:fa:43:69:ff:2b:66:f3:f1: f1:40:d2:41:a2:71:41:96:45:3a:a4:b2:f0:f2:e6:d7:31:30: 8e:62:96:0d:d5:e5:98:99:2d:3b:fe:b3:4f:e0:30:8c:6e:15: 92:a1:91:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjUwODIyMTkwOTA4WhcNMjUwODI5MTkwOTA4WjAYMRYwFAYD VQQDEw02OGE4YzA1NC1iMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5toSMWaEq1bUtIAUjj/Q7gOELq8Ath1JPGvntgpms3Um2913sw7Bjl0SALg E14BNKjIMe8PMkxmKt/BHn67rqQF69va81lwhNKt0xwXmOYwcFsgInzUOlI8c8jR vLsZJuw8nGdtmMtFQK49EgZpFtDzIP/BpX2FJoM+6JhRuuiMVtMp8JZajFGMQ5tR mNhJR2rAwPN2lLXsCGaltozSeh48AESVPiyLKNyDNwOrsscrwxX7JTJP0QThUb7R iy4kMphNJ6bMdVq3BBRQx8GMpw8Wl2i2TzjojHIRzj+xqG/RBvkiD5JJ8MuxG77+ CD8xfdk7IwQe+laDEQOkUI1tTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeE6dMy vAIufrdA+ixEGSXidjFKMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAt4/HuiWekiukx8FQu+AnxABjnOle1FhH5qnO9kRcfDJcrFAGTbAZ XZ+CuNJGocxWVLVCzV2DiUcceGm2RQwmiOBaRB7y3qQ6S38qe0rMR8uZ3Ws7OPPm FtBroq9YsB6n2fdOzTALYmDxv71e/fgwKWxu20msfSmore9VUdPtbV4kQ8zK9jV2 xchGO59aEvtR+5+X5wsVxL5WI9HpbOt/RbW3j3irn3W9Cq195W3ADI23g8mC/iOe LP+/FWYbmXZeHIgmDbJGm99Mjnq1G6nW+kNp/ytm8/HxQNJBonFBlkU6pLLw8ubX MTCOYpYN1eWYmS07/rNP4DCMbhWSoZFV -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:46 2025 by rpki-client