$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: Eb8boY8v8AYODd4mCL21aD5kbzqdu4myETrXfmbBF/Q= Subject key identifier: C8:FA:D5:10:CD:94:99:98:8C:83:C7:5B:BC:8D:63:05:A0:6C:95:FA Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 06D0 Signing time: Fri 22 Aug 2025 22:13:15 +0000 Manifest this update: Fri 22 Aug 2025 22:13:15 +0000 Manifest next update: Fri 29 Aug 2025 22:13:15 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: PL35PpZdGqptwGSNOg39FUI5A1HiVm5VyMkRcDUGQZc=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: CcS2RgyDh/Mt65cyyvz7PDgLBgmPqkXqjVn09wN+d7I=) 3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: sB2xN+NI3UCkCts4i5bUwtcZvKVfZaogReZtF2ClOtM=) 4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: Ey7sXMoZK5X/9B/g0P4vb+TT1dBxjAAcErSKVPBVZ8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Aug 22 22:13:15 2025 GMT Not After : Aug 29 22:13:15 2025 GMT Subject: CN=68a8eb7b-85b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:f7:35:42:06:87:25:a6:b4:8d:7c:a1:df: 3e:a1:75:58:5b:84:ea:58:2e:77:9c:51:a4:55:09: 2d:50:ec:57:57:70:1b:84:ae:44:fc:12:1c:b8:3f: c2:72:c4:57:91:a7:d0:cb:3e:e2:5a:c4:e6:6e:33: 56:c1:e8:db:0f:56:b3:fe:15:21:db:40:79:24:f0: 55:31:83:c4:ba:a0:1a:db:98:53:35:25:e6:78:c0: ef:b7:f4:44:f4:8d:09:f6:f2:37:79:22:05:aa:e5: 39:3e:51:4b:ac:5f:8e:1b:65:33:04:3a:52:04:4d: 57:60:21:1d:43:68:8d:86:ef:a3:d1:0e:ae:d0:f4: b6:c0:bd:cf:d1:77:14:a2:8a:b9:c0:89:3a:06:64: 9e:3a:f8:1b:94:9f:37:1c:7b:0f:94:03:4e:e3:51: d8:0b:d0:7a:d4:ed:8b:f5:c7:c7:20:06:7e:04:b5: c4:6f:46:40:e1:c4:09:4a:7c:14:69:07:86:f2:82: 0b:3b:ee:76:08:79:9b:dd:57:1b:aa:4c:56:17:ad: d8:30:a4:b3:0b:a9:30:02:1e:6a:df:fe:24:f6:46: ec:a2:d0:2a:2b:c9:ec:73:a5:35:8a:ee:4d:9f:d3: ff:ee:f3:3a:4c:19:d6:62:49:cc:4f:b4:7c:c3:d8: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FA:D5:10:CD:94:99:98:8C:83:C7:5B:BC:8D:63:05:A0:6C:95:FA X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:be:1c:7c:5f:f7:4c:1c:7a:6b:8c:57:f8:48:74:ee:f1:30: 96:a8:6d:40:ae:ac:60:3d:be:27:14:98:da:83:aa:6d:0d:a7: 2e:3a:16:42:06:15:b4:f8:3a:f4:0a:35:d8:d8:47:7c:d7:06: 16:b5:8d:64:5f:0b:b5:5d:52:4f:8b:78:8b:26:6c:f7:1d:02: 49:84:52:0b:3b:eb:71:35:d7:b5:a0:a1:72:01:19:a4:45:86: 65:3b:55:06:10:03:2e:f6:f3:1d:fc:e2:a8:9a:f6:f5:a0:4c: b5:ed:45:39:42:d9:dc:69:10:8a:f0:73:5b:da:8f:ea:96:4b: e3:a8:79:ca:e5:54:94:dd:3d:94:9c:b1:d2:a3:ee:85:43:37: 4b:93:31:98:87:f7:41:1e:85:f3:c7:c0:02:9a:15:d7:8d:45: e2:0a:eb:11:df:ea:ec:cf:ff:39:d6:4f:c2:81:9c:3f:b1:21: 4b:e6:9f:3b:15:16:26:b0:38:67:6d:ff:42:fe:63:97:7e:92: d4:f6:7a:cc:3e:3d:78:d7:62:67:3f:93:ef:7e:8b:a8:1c:50: 1c:e6:90:f3:38:7e:6b:9c:49:f5:0d:46:d0:b7:a4:f2:a9:7a: ff:65:71:af:2f:92:07:ce:92:e0:4a:ec:a6:cc:d0:a4:c2:18: f0:c1:49:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUwODIyMjIxMzE1WhcNMjUwODI5MjIxMzE1WjAYMRYwFAYD VQQDEw02OGE4ZWI3Yi04NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1an3NUIGhyWmtI18od8+oXVYW4TqWC53nFGkVQktUOxXV3AbhK5E/BIcuD/C csRXkafQyz7iWsTmbjNWwejbD1az/hUh20B5JPBVMYPEuqAa25hTNSXmeMDvt/RE 9I0J9vI3eSIFquU5PlFLrF+OG2UzBDpSBE1XYCEdQ2iNhu+j0Q6u0PS2wL3P0XcU ooq5wIk6BmSeOvgblJ83HHsPlANO41HYC9B61O2L9cfHIAZ+BLXEb0ZA4cQJSnwU aQeG8oILO+52CHmb3VcbqkxWF63YMKSzC6kwAh5q3/4k9kbsotAqK8nsc6U1iu5N n9P/7vM6TBnWYknMT7R8w9ibewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMj61RDN lJmYjIPHW7yNYwWgbJX6MB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOvhx8X/dMHHprjFf4SHTu8TCWqG1ArqxgPb4nFJjag6ptDacuOhZC BhW0+Dr0CjXY2Ed81wYWtY1kXwu1XVJPi3iLJmz3HQJJhFILO+txNde1oKFyARmk RYZlO1UGEAMu9vMd/OKomvb1oEy17UU5QtncaRCK8HNb2o/qlkvjqHnK5VSU3T2U nLHSo+6FQzdLkzGYh/dBHoXzx8ACmhXXjUXiCusR3+rsz/851k/CgZw/sSFL5p87 FRYmsDhnbf9C/mOXfpLU9nrMPj1412JnP5PvfouoHFAc5pDzOH5rnEn1DUbQt6Ty qXr/ZXGvL5IHzpLgSuymzNCkwhjwwUl3 -----END CERTIFICATE-----Generated at Sat Aug 23 10:57:12 2025 by rpki-client