$ rpki-client -vvf rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft File: sHoKQBnouCACE78tzPxocPheBGY.mft (raw, json) Hash identifier: EE6A0qbH4Gxfx1dgonLpuxZtFk2Ob79R5OH4AnztKR8= Subject key identifier: 71:2E:5E:2F:BF:40:0E:CC:DB:87:6F:A2:75:07:5B:47:1C:51:BB:3B Authority key identifier: B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 Certificate issuer: /CN=A916E5FB/serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft Manifest number: 0C56 Signing time: Fri 22 Aug 2025 18:38:14 +0000 Manifest this update: Fri 22 Aug 2025 18:38:13 +0000 Manifest next update: Fri 29 Aug 2025 18:38:13 +0000 Files and hashes: 1: sHoKQBnouCACE78tzPxocPheBGY.crl (hash: /tLpYp0lCsHCjjY4AZ6UAbWuzdNmnZDsyX5kQYrEqhM=) 2: 6ED5481209DF11EAA6052433C4F9AE02.roa (hash: m+JE5pCglgWFiHYLAbZNmBupgcN+FxTJD3mSp1g3gfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E5FB, serialNumber=B07A0A4019E8B8200213BF2DCCFC6870F85E0466 Validity Not Before: Aug 22 18:38:13 2025 GMT Not After : Aug 29 18:38:13 2025 GMT Subject: CN=68a8b915-80b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:c8:b9:ad:ac:84:2e:9a:f3:56:11:4f:cb: 0e:c0:9f:a0:8a:95:e6:ba:51:85:44:b4:eb:f5:85: 0d:d2:8e:4c:fb:67:03:ee:55:a9:9d:cf:8f:8c:66: 3c:6a:27:fa:0d:ed:9d:28:8b:66:20:69:e2:7a:0a: c5:e4:8e:7f:79:18:ed:cc:ea:e9:98:53:37:8c:66: c7:20:84:9c:c8:0d:b0:a6:ef:b8:d4:c2:3f:03:35: bc:fb:5b:a6:68:f9:f0:0f:fc:e0:2c:4b:17:54:ef: 75:1e:b3:3f:04:a0:1a:8a:bf:e3:94:ea:cb:59:23: 74:6a:47:89:3e:9e:ee:5b:18:39:f3:7c:ab:9c:18: 21:c6:af:d4:de:11:00:a0:95:53:a2:74:de:f7:6b: 24:0d:59:7d:be:ad:a4:a3:f5:3a:e4:2e:55:a9:86: c3:7b:9d:98:29:8b:1f:52:47:b8:0f:93:e0:05:a3: 8a:16:10:ae:29:dd:53:0f:7b:cb:d5:7d:26:13:f6: 97:ab:26:5f:45:8f:c9:bf:40:38:a9:dd:e2:85:f4: c9:41:36:88:0b:be:b3:7f:27:7f:20:9e:96:90:39: ed:03:69:71:1a:ae:7e:2b:d9:e1:91:88:da:22:59: 50:ad:f3:6e:91:02:8f:54:e4:fc:66:39:2d:3c:17: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:5E:2F:BF:40:0E:CC:DB:87:6F:A2:75:07:5B:47:1C:51:BB:3B X509v3 Authority Key Identifier: keyid:B0:7A:0A:40:19:E8:B8:20:02:13:BF:2D:CC:FC:68:70:F8:5E:04:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sHoKQBnouCACE78tzPxocPheBGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E5FB/C156DF8E09DE11EA9E4E7D32C4F9AE02/sHoKQBnouCACE78tzPxocPheBGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c7:c5:a8:7b:3a:58:47:2c:db:aa:10:30:54:16:e0:7c:ff: 34:74:5d:31:1d:1a:94:15:8c:a2:c4:75:e6:ad:28:26:f1:ef: 48:5a:d5:34:96:df:47:71:ab:d6:03:e1:c4:d3:54:7b:78:67: ca:c7:73:55:d8:96:c6:9d:5a:3e:a4:ac:a6:79:14:f2:b1:b5: b8:94:50:4e:e5:9b:89:82:37:d3:36:cd:21:42:b3:cf:5c:cd: cf:cf:40:e0:2b:cd:fd:98:6c:00:9d:d5:c1:88:bc:b7:c1:b2: f1:25:8e:06:72:a5:fe:31:37:b7:00:e5:62:00:59:14:ce:cd: 7a:87:6a:a5:09:7e:f3:62:38:76:44:ea:e6:9c:e8:cd:de:21: 56:f2:09:5e:fe:89:2a:89:6a:96:83:79:46:74:38:bb:bc:7a: 9a:fc:61:dd:a6:2d:33:a3:1b:d4:0c:23:8e:91:16:8e:52:4f: 7f:40:12:72:26:c7:46:e6:30:b0:91:52:1e:bc:93:f0:3e:4e: 6f:ec:44:11:4e:76:98:7f:bb:25:91:eb:03:c4:cb:2e:59:e2: 21:7f:5f:24:e6:49:5e:d1:41:4b:a5:3a:0a:7e:b3:b2:09:31: da:28:e5:43:f4:84:f4:0b:4d:94:20:a9:11:db:fd:21:f7:a5: f3:25:51:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1RkIxMTAvBgNVBAUTKEIwN0EwQTQwMTlFOEI4MjAwMjEzQkYyRENDRkM2ODcw Rjg1RTA0NjYwHhcNMjUwODIyMTgzODEzWhcNMjUwODI5MTgzODEzWjAYMRYwFAYD VQQDEw02OGE4YjkxNS04MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/HIua2shC6a81YRT8sOwJ+gipXmulGFRLTr9YUN0o5M+2cD7lWpnc+PjGY8 aif6De2dKItmIGniegrF5I5/eRjtzOrpmFM3jGbHIIScyA2wpu+41MI/AzW8+1um aPnwD/zgLEsXVO91HrM/BKAair/jlOrLWSN0akeJPp7uWxg583yrnBghxq/U3hEA oJVTonTe92skDVl9vq2ko/U65C5VqYbDe52YKYsfUke4D5PgBaOKFhCuKd1TD3vL 1X0mE/aXqyZfRY/Jv0A4qd3ihfTJQTaIC76zfyd/IJ6WkDntA2lxGq5+K9nhkYja IllQrfNukQKPVOT8ZjktPBcFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEuXi+/ QA7M24dvonUHW0ccUbs7MB8GA1UdIwQYMBaAFLB6CkAZ6LggAhO/Lcz8aHD4XgRm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTVGQi9DMTU2REY4RTA5 REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VDQUNFNzh0elB4b2NQaGVC R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NIb0tRQm5vdUNBQ0U3OHR6UHhvY1BoZUJHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTVGQi9DMTU2REY4RTA5REUxMUVBOUU0RTdEMzJDNEY5QUUwMi9zSG9LUUJub3VD QUNFNzh0elB4b2NQaGVCR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQx8WoezpYRyzbqhAwVBbgfP80dF0xHRqUFYyixHXmrSgm8e9IWtU0 lt9HcavWA+HE01R7eGfKx3NV2JbGnVo+pKymeRTysbW4lFBO5ZuJgjfTNs0hQrPP XM3Pz0DgK839mGwAndXBiLy3wbLxJY4GcqX+MTe3AOViAFkUzs16h2qlCX7zYjh2 ROrmnOjN3iFW8gle/okqiWqWg3lGdDi7vHqa/GHdpi0zoxvUDCOOkRaOUk9/QBJy JsdG5jCwkVIevJPwPk5v7EQRTnaYf7slkesDxMsuWeIhf18k5kle0UFLpToKfrOy CTHaKOVD9IT0C02UIKkR2/0h96XzJVGn -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:24 2025 by rpki-client