$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: N8mYKXDY+ygWwvcFGEivktLntLTkyZe7/rocvTIkGWk= Subject key identifier: 67:C7:F9:19:44:D3:D2:DB:28:AC:D8:C8:6E:6B:54:69:1E:75:F7:0A Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: 62 Signing time: Sat 23 Aug 2025 07:18:18 +0000 Manifest this update: Sat 23 Aug 2025 07:18:18 +0000 Manifest next update: Sat 30 Aug 2025 07:18:18 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: YLfg82k6RvJH5yn6XjiZsvCpc6hGmcL51ZYC7gpOftw=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Aug 23 07:18:18 2025 GMT Not After : Aug 30 07:18:18 2025 GMT Subject: CN=68a96b3a-5804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:19:d4:d8:27:db:db:5f:87:b4:4d:4e:c8: 56:ad:a9:12:ef:e9:42:d6:92:f8:a5:c8:60:1c:c1: 8f:7a:2d:ec:52:1d:9f:c6:fa:bc:ab:ef:e1:42:a4: 16:74:b9:a5:58:42:0e:25:c5:d5:23:49:33:9b:f2: 7c:8d:eb:26:e5:a1:24:f0:b2:4c:f8:eb:8e:5a:4c: 3a:a2:76:c6:7b:5c:9b:5d:c8:8a:2c:45:0f:74:21: 65:49:c6:ff:fd:02:a3:48:39:9d:2c:b2:89:b0:ba: 96:31:32:f9:93:54:c0:ce:46:00:98:5a:9b:09:db: 81:c1:51:3e:00:d4:e3:45:97:ba:8f:28:cc:15:2f: ef:ab:8b:5c:85:f4:23:31:9e:a0:4b:e3:67:e0:b1: 56:23:4c:02:a6:b3:bc:e3:cd:f8:0f:77:49:ca:c1: 5f:7f:a3:e7:80:f2:e9:5b:20:7d:b7:d3:93:3b:b0: b1:6e:78:06:81:7f:07:35:a0:9f:62:14:2b:e6:d1: 41:41:b9:56:fc:cb:a6:34:c1:bc:9f:8a:fe:42:87: 04:5e:9e:37:ad:57:19:8f:fc:4f:c2:ad:47:8d:89: 21:4c:9b:9b:a3:a2:6f:ad:a2:e7:63:1e:e5:d5:fb: 45:5d:1a:e2:db:d7:24:62:3d:d0:fe:28:e5:3d:14: 97:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:F9:19:44:D3:D2:DB:28:AC:D8:C8:6E:6B:54:69:1E:75:F7:0A X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c2:77:c0:5e:52:60:1c:99:d1:4c:9a:02:d1:56:fc:af:c6: 11:22:9a:a6:eb:8d:77:35:43:6b:e8:0f:fe:79:c4:d2:e8:5f: db:78:8a:36:16:00:8a:1f:8f:97:ff:b7:27:b5:10:25:4f:2d: 46:10:28:31:66:ab:f8:c3:c3:bf:ed:c0:49:48:6b:2c:ec:e8: a9:49:d4:f5:e4:2f:4e:39:e4:51:19:d1:91:3e:ed:9b:df:41: 33:85:74:97:94:16:e4:f6:69:16:a7:07:b5:04:6c:3e:d0:f2: 4e:22:8d:f5:a4:10:e2:e9:17:22:f0:78:22:9b:5a:b9:97:19: 01:76:42:9d:2f:47:6b:d1:42:e2:3b:19:c5:70:5f:8a:fb:17: cd:f0:16:be:dd:e2:96:1e:8d:b2:a4:55:93:b3:05:93:29:94: dc:45:2a:99:31:31:03:a8:99:ed:3c:07:54:c4:11:5c:f5:b4: 03:08:dc:d2:1b:9e:9a:a3:e5:9a:85:24:45:87:87:9d:3d:a2: e3:e9:e8:32:2b:10:ab:84:30:05:fb:ce:f6:94:fc:db:74:99: e3:3c:f6:aa:14:49:41:24:a1:51:ff:01:ca:d6:aa:86:ed:5d: 4c:52:ba:a9:3d:c9:49:a6:db:49:54:ee:4a:3b:34:7c:9b:39: 24:be:d8:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Qjc1OTExMC8GA1UEBRMoRkI0QjY4M0ZCQTREQjZBQzFBNUFDNTA4ODA3RkM3RUE0 OTZDNUVDNTAeFw0yNTA4MjMwNzE4MThaFw0yNTA4MzAwNzE4MThaMBgxFjAUBgNV BAMTDTY4YTk2YjNhLTU4MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk9RnU2Cfb21+HtE1OyFatqRLv6ULWkvilyGAcwY96LexSHZ/G+ryr7+FCpBZ0 uaVYQg4lxdUjSTOb8nyN6ybloSTwskz4645aTDqidsZ7XJtdyIosRQ90IWVJxv/9 AqNIOZ0ssomwupYxMvmTVMDORgCYWpsJ24HBUT4A1ONFl7qPKMwVL++ri1yF9CMx nqBL42fgsVYjTAKms7zjzfgPd0nKwV9/o+eA8ulbIH2305M7sLFueAaBfwc1oJ9i FCvm0UFBuVb8y6Y0wbyfiv5ChwRenjetVxmP/E/CrUeNiSFMm5ujom+toudjHuXV +0VdGuLb1yRiPdD+KOU9FJenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ8f5GUTT 0tsorNjIbmtUaR519wowHwYDVR0jBBgwFoAU+0toP7pNtqwaWsUIgH/H6klsXsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNzU5LzY5QzNCRUU2RUI2 NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTB0b1A3cE50cXdhV3NVSWdIX0g2a2xzWHNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NzU5LzY5QzNCRUU2RUI2NDExRUZBOUEyQzI2MUM0RjlBRTAyLy0wdG9QN3BOdHF3 YVdzVUlnSF9INmtsc1hzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABjCd8BeUmAcmdFMmgLRVvyvxhEimqbrjXc1Q2voD/55xNLoX9t4ijYW AIofj5f/tye1ECVPLUYQKDFmq/jDw7/twElIayzs6KlJ1PXkL0455FEZ0ZE+7Zvf QTOFdJeUFuT2aRanB7UEbD7Q8k4ijfWkEOLpFyLweCKbWrmXGQF2Qp0vR2vRQuI7 GcVwX4r7F83wFr7d4pYejbKkVZOzBZMplNxFKpkxMQOome08B1TEEVz1tAMI3NIb npqj5ZqFJEWHh509ouPp6DIrEKuEMAX7zvaU/Nt0meM89qoUSUEkoVH/AcrWqobt XUxSuqk9yUmm20lU7ko7NHybOSS+2Pc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:31 2025 by rpki-client