$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: /6k7nLNIXlYU+KZZrmDPZoLyTzkiMQ8KMdbXIYvRwiA= Subject key identifier: E9:07:B1:69:9B:B7:AA:FD:2A:7D:5F:C9:EE:E4:22:EB:1E:FC:83:5A Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 05FD Signing time: Fri 22 Aug 2025 23:07:08 +0000 Manifest this update: Fri 22 Aug 2025 23:07:07 +0000 Manifest next update: Fri 29 Aug 2025 23:07:07 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: s02cNHdhs8FgPqrDoAWfyuX5ssEkvXsWgzcwjerHb88=) 2: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: uJ34QZzPWsLiblBgV7Ywgb0TXxMUSuEWmFUneXtmF9w=) 3: C49CE482BEA411EB85828650C4F9AE02.roa (hash: tWGIt1j5EvwGUw+Sd+nJTxQY0ACb+5Zewj9NqITpqME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: Aug 22 23:07:07 2025 GMT Not After : Aug 29 23:07:07 2025 GMT Subject: CN=68a8f81b-10bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:49:b4:4d:0d:29:7d:55:4e:b2:64:95:9e:71: a3:ef:56:c3:d9:dd:56:3e:2f:83:09:1f:ac:86:53: 87:8d:93:6c:46:87:44:db:48:2a:64:fe:2c:db:bf: d7:19:55:11:f1:73:17:9e:2c:89:01:74:26:c5:b6: 7f:34:79:e7:c6:f6:0a:f1:bd:a8:6b:73:8e:51:95: c6:06:c2:12:2c:40:3c:bf:2e:82:8f:47:cf:7f:fa: 31:62:d3:57:b5:36:5a:0d:71:17:9b:cb:20:fb:5d: a3:fd:f2:bf:12:35:53:a5:1a:c5:29:17:62:be:dd: c9:4b:cf:b7:5b:17:c2:99:85:b6:19:7b:83:e0:ef: a0:f6:b8:97:78:cf:a9:d6:24:36:11:8a:fe:f4:4a: 3a:33:13:88:a9:33:28:d0:59:69:ac:a4:04:99:bd: f3:d0:57:97:64:a6:ba:95:a7:ab:ab:36:c7:36:d4: a3:67:8b:aa:f8:a5:46:5b:cd:4d:47:d1:fe:7f:0b: 33:c6:d6:88:d3:48:58:1b:c3:1b:7e:fe:e7:a6:3b: 5d:34:77:3d:8a:8f:0c:0d:27:7f:1f:60:7d:4f:64: 72:be:83:c5:1e:ad:73:ff:90:dc:55:a0:eb:bc:19: 04:10:82:96:b2:c1:42:13:3d:e7:a6:aa:43:82:62: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:07:B1:69:9B:B7:AA:FD:2A:7D:5F:C9:EE:E4:22:EB:1E:FC:83:5A X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:27:13:d7:cf:24:ae:e7:8c:f5:73:bb:9a:bc:10:d3:6d:87: 36:96:32:50:63:05:1d:c5:30:74:71:8c:a8:1b:dc:71:c5:51: 8f:4d:9b:b7:90:d4:04:97:c7:a9:23:4d:a7:2c:ec:b3:aa:83: 1c:80:9d:31:fc:07:53:a7:14:a4:bd:36:e6:bf:47:de:cd:dc: 46:56:d0:e4:79:56:c5:93:32:e3:ae:18:c0:d9:45:0a:72:1a: c7:b1:9d:af:91:51:d9:6a:ad:4a:b0:d5:2e:0d:84:bf:15:1f: a9:f7:04:bc:a0:22:f6:1c:21:e9:17:a6:30:d7:f1:4e:ef:4c: 5c:1a:d9:d5:48:53:1f:70:06:89:57:88:e9:e6:29:44:11:30: 18:4a:7b:ad:8f:17:e7:ea:81:f6:b8:e0:3b:8f:dd:b9:0d:bb: 72:96:ef:91:29:af:07:e0:04:93:10:e8:b5:ff:2a:86:df:fe: 37:c8:bd:a4:48:6a:db:32:ec:54:e8:6d:e3:92:6f:47:b9:b5: 27:f0:30:9b:a3:4d:e6:92:3a:d5:66:fc:2f:a1:07:88:0c:48: 1e:bd:7d:b6:e1:02:af:40:05:ce:06:f3:f9:42:b7:c6:f8:c7: 66:9a:81:4d:91:d6:49:a1:d0:32:11:9c:6f:b7:19:ae:f1:b5: b8:dd:c0:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjUwODIyMjMwNzA3WhcNMjUwODI5MjMwNzA3WjAYMRYwFAYD VQQDEw02OGE4ZjgxYi0xMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkm0TQ0pfVVOsmSVnnGj71bD2d1WPi+DCR+shlOHjZNsRodE20gqZP4s27/X GVUR8XMXniyJAXQmxbZ/NHnnxvYK8b2oa3OOUZXGBsISLEA8vy6Cj0fPf/oxYtNX tTZaDXEXm8sg+12j/fK/EjVTpRrFKRdivt3JS8+3WxfCmYW2GXuD4O+g9riXeM+p 1iQ2EYr+9Eo6MxOIqTMo0FlprKQEmb3z0FeXZKa6laerqzbHNtSjZ4uq+KVGW81N R9H+fwszxtaI00hYG8Mbfv7npjtdNHc9io8MDSd/H2B9T2RyvoPFHq1z/5DcVaDr vBkEEIKWssFCEz3npqpDgmJEzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkHsWmb t6r9Kn1fye7kIuse/INaMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqJxPXzySu54z1c7uavBDTbYc2ljJQYwUdxTB0cYyoG9xxxVGPTZu3 kNQEl8epI02nLOyzqoMcgJ0x/AdTpxSkvTbmv0fezdxGVtDkeVbFkzLjrhjA2UUK chrHsZ2vkVHZaq1KsNUuDYS/FR+p9wS8oCL2HCHpF6Yw1/FO70xcGtnVSFMfcAaJ V4jp5ilEETAYSnutjxfn6oH2uOA7j925Dbtylu+RKa8H4ASTEOi1/yqG3/43yL2k SGrbMuxU6G3jkm9HubUn8DCbo03mkjrVZvwvoQeIDEgevX224QKvQAXOBvP5QrfG +MdmmoFNkdZJodAyEZxvtxmu8bW43cCb -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:50 2025 by rpki-client