$ rpki-client -vvf rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft File: DeK2pi5UoKYbzzFLbi77jzoeOno.mft (raw, json) Hash identifier: BiF1OAPS4qhofLCTsYHJdhabVAu7LGHDjqH4vxHGl6g= Subject key identifier: E2:4A:A2:69:C3:6F:97:30:56:44:F3:92:16:9E:79:94:69:F9:22:36 Authority key identifier: 0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A Certificate issuer: /CN=A916F8DB/serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft Manifest number: 016A Signing time: Sat 23 Aug 2025 04:00:35 +0000 Manifest this update: Sat 23 Aug 2025 04:00:34 +0000 Manifest next update: Sat 30 Aug 2025 04:00:34 +0000 Files and hashes: 1: DeK2pi5UoKYbzzFLbi77jzoeOno.crl (hash: djfi0qIHIrkefZBY1PjqOVSQxnRmj7B5ESaqt6G32Qo=) 2: 65A459FE54BD11EE8C958973C4F9AE02.roa (hash: iUnEHsfjN1jchtBZnX9gEs2PWdWpqrF2oKCzEFQT8+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F8DB, serialNumber=0DE2B6A62E54A0A61BCF314B6E2EFB8F3A1E3A7A Validity Not Before: Aug 23 04:00:34 2025 GMT Not After : Aug 30 04:00:34 2025 GMT Subject: CN=68a93ce2-313b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:61:cf:d1:2d:b2:40:5c:c8:55:a7:82:c1: 38:cc:ba:22:d1:f7:e1:1b:26:dd:07:87:e5:cc:10: c1:4e:48:1a:f6:8f:41:ef:83:06:86:2d:2e:1d:30: 64:30:4c:64:b9:87:b9:d6:e2:3a:06:88:13:7e:be: 0e:90:c8:63:df:e2:10:8b:8a:2c:de:52:7c:a9:2b: 33:58:f5:46:23:9e:24:46:d2:9b:d0:55:d1:51:71: bc:3f:b4:3b:23:25:d5:bc:74:57:d4:9a:cf:1d:5e: 2a:7b:6c:80:fa:4a:0b:21:c5:1a:07:4b:e2:d9:5d: 6e:0b:12:3e:64:9d:56:1e:ea:7e:a3:68:a7:23:e8: f7:49:05:b9:8a:10:bf:41:95:6a:a4:32:3b:d6:06: 85:2b:a0:7b:93:e6:84:d1:fc:a0:84:0f:1b:ea:ef: 52:ad:27:cf:05:4f:2b:f3:44:66:43:08:d7:ba:4b: 24:a6:96:d3:94:25:c7:4e:73:5f:cf:d0:1d:af:76: f5:3b:a7:cd:bb:01:8c:bb:05:2a:61:fd:fc:67:51: 95:3b:83:67:ea:b9:4f:4d:ca:b3:a5:ed:82:48:b5: 97:b8:5c:51:94:17:7c:48:b1:09:cd:0f:c9:56:0b: 5f:c4:7d:4d:56:db:64:f8:7c:1f:2a:60:af:0a:17: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4A:A2:69:C3:6F:97:30:56:44:F3:92:16:9E:79:94:69:F9:22:36 X509v3 Authority Key Identifier: keyid:0D:E2:B6:A6:2E:54:A0:A6:1B:CF:31:4B:6E:2E:FB:8F:3A:1E:3A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeK2pi5UoKYbzzFLbi77jzoeOno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F8DB/6C8BB86254BC11EEB8DB114AC4F9AE02/DeK2pi5UoKYbzzFLbi77jzoeOno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:38:c4:70:a0:29:50:22:08:da:46:f7:4e:ff:20:a6:9f:5a: 0c:a4:13:2e:38:85:a7:ac:b2:7d:e4:be:17:1c:cf:7d:05:6a: 87:17:ea:71:a3:b5:d1:2b:d9:fd:b2:16:c7:fc:da:01:83:6d: e8:79:a4:37:0f:77:35:23:a6:e1:7a:85:f2:f3:19:2f:4b:6f: d8:c8:38:19:c9:c2:32:20:67:f9:ce:cb:e0:d0:be:2b:3c:be: 1a:0f:f9:0a:6f:2d:66:49:eb:73:0f:89:5a:d6:22:e8:9c:bd: 65:af:b1:be:ab:4b:c2:7c:b8:b0:b2:b7:4d:6b:d8:6d:0d:b5: 45:ab:a6:b4:5b:a0:13:8b:57:f4:d4:c1:23:d8:f0:ae:ad:76: 56:bd:18:ea:50:0b:fb:b4:2f:14:53:c4:dc:35:02:54:36:50: 08:f3:9d:82:77:ec:44:f6:61:de:31:c1:ec:6e:d6:e0:b6:97: cc:da:41:01:04:2b:1b:0d:fa:19:69:65:7f:17:d9:e4:33:b4: 66:a9:9b:ba:93:23:ae:9a:c5:cd:fa:0b:c3:81:58:b2:78:78: 6b:27:a7:77:68:b4:8b:88:88:19:d2:36:a1:3a:d2:db:3b:ae: c5:a7:7f:cc:68:b7:3e:0a:a2:80:21:a1:be:f2:9a:de:e3:ff: fa:77:d1:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY4REIxMTAvBgNVBAUTKDBERTJCNkE2MkU1NEEwQTYxQkNGMzE0QjZFMkVGQjhG M0ExRTNBN0EwHhcNMjUwODIzMDQwMDM0WhcNMjUwODMwMDQwMDM0WjAYMRYwFAYD VQQDEw02OGE5M2NlMi0zMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1llhz9EtskBcyFWngsE4zLoi0ffhGybdB4flzBDBTkga9o9B74MGhi0uHTBk MExkuYe51uI6BogTfr4OkMhj3+IQi4os3lJ8qSszWPVGI54kRtKb0FXRUXG8P7Q7 IyXVvHRX1JrPHV4qe2yA+koLIcUaB0vi2V1uCxI+ZJ1WHup+o2inI+j3SQW5ihC/ QZVqpDI71gaFK6B7k+aE0fyghA8b6u9SrSfPBU8r80RmQwjXukskppbTlCXHTnNf z9Adr3b1O6fNuwGMuwUqYf38Z1GVO4Nn6rlPTcqzpe2CSLWXuFxRlBd8SLEJzQ/J VgtfxH1NVttk+HwfKmCvChfJtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJKomnD b5cwVkTzkhaeeZRp+SI2MB8GA1UdIwQYMBaAFA3itqYuVKCmG88xS24u+486Hjp6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjhEQi82QzhCQjg2MjU0 QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9LWWJ6ekZMYmk3N2p6b2VP bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlSzJwaTVVb0tZYnp6RkxiaTc3anpvZU9uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjhEQi82QzhCQjg2MjU0QkMxMUVFQjhEQjExNEFDNEY5QUUwMi9EZUsycGk1VW9L WWJ6ekZMYmk3N2p6b2VPbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOMRwoClQIgjaRvdO/yCmn1oMpBMuOIWnrLJ95L4XHM99BWqHF+px o7XRK9n9shbH/NoBg23oeaQ3D3c1I6bheoXy8xkvS2/YyDgZycIyIGf5zsvg0L4r PL4aD/kKby1mSetzD4la1iLonL1lr7G+q0vCfLiwsrdNa9htDbVFq6a0W6ATi1f0 1MEj2PCurXZWvRjqUAv7tC8UU8TcNQJUNlAI852Cd+xE9mHeMcHsbtbgtpfM2kEB BCsbDfoZaWV/F9nkM7RmqZu6kyOumsXN+gvDgViyeHhrJ6d3aLSLiIgZ0jahOtLb O67Fp3/MaLc+CqKAIaG+8pre4//6d9HO -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:54 2025 by rpki-client