$ rpki-client -vvf rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft File: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft (raw, json) Hash identifier: yvKkmyYybv79K4u0naYU4iWd4HKdeZEFzf5QEvXGFfM= Subject key identifier: 1C:24:C3:BE:55:36:96:07:6C:B4:5A:D8:D6:B6:5D:F6:F9:F0:8C:86 Authority key identifier: D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 Certificate issuer: /CN=A918C212/serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft Manifest number: 0136 Signing time: Sat 23 Aug 2025 04:37:00 +0000 Manifest this update: Sat 23 Aug 2025 04:36:59 +0000 Manifest next update: Sat 30 Aug 2025 04:36:59 +0000 Files and hashes: 1: 0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl (hash: 0ZhtsYrdqpMsJz0rCvTt805ELT2oiFjKRH1yJ+obaaU=) 2: BCBA699CA2D111EE89C12A4EC4F9AE02.roa (hash: v8vLgjK5S+JdCLTZc8YYYPXnZStqFTZMOLbog1OTRVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C212, serialNumber=D05AC90A207F6087CE02EDC23188E32AAA1B1B44 Validity Not Before: Aug 23 04:36:59 2025 GMT Not After : Aug 30 04:36:59 2025 GMT Subject: CN=68a9456c-37be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:40:49:22:89:43:81:5b:3e:16:15:4c:f4: 2d:75:0c:2a:bc:18:fb:af:7e:95:3b:e9:ce:b6:f0: 02:ea:1e:6e:e0:70:94:7f:82:17:74:05:08:79:15: f9:88:15:13:4b:eb:05:9b:af:7f:a3:9e:df:4d:64: 8e:26:3c:85:37:c3:00:82:d4:94:1a:26:34:d5:60: e9:ee:4b:87:73:d2:69:51:df:ec:36:77:f7:aa:53: f5:b7:b5:77:b3:5f:df:09:6b:d1:1e:87:ba:f4:6d: c5:a8:d9:0e:b7:29:4d:74:d4:0c:73:cb:73:37:5e: e6:91:d1:5e:5e:b8:70:4e:2e:63:3e:2e:f8:58:4d: 77:55:06:8f:c9:3c:6d:8c:cc:c8:33:df:dc:d5:69: d2:36:93:6f:b8:47:f7:54:00:30:45:1b:bb:c7:01: b0:c7:18:f6:86:62:5e:ce:81:49:9c:4d:d2:64:a1: 8a:30:0c:52:9a:0a:42:56:78:b3:d5:4e:9a:45:3c: 2b:db:d6:09:9b:73:f3:21:8c:da:b1:d8:27:2c:14: c7:33:42:7a:22:1b:2a:f5:e9:40:74:97:d3:33:89: 47:ce:ca:05:4f:b5:0a:0c:70:39:77:c4:47:f5:36: c9:0f:fc:a5:99:09:ea:2f:3c:5f:b7:06:36:86:75: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:C3:BE:55:36:96:07:6C:B4:5A:D8:D6:B6:5D:F6:F9:F0:8C:86 X509v3 Authority Key Identifier: keyid:D0:5A:C9:0A:20:7F:60:87:CE:02:ED:C2:31:88:E3:2A:AA:1B:1B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0FrJCiB_YIfOAu3CMYjjKqobG0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C212/4B233EEAA2D011EE93A88F3DC4F9AE02/0FrJCiB_YIfOAu3CMYjjKqobG0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:4a:88:22:f1:62:a9:6e:39:ed:1e:7e:b4:63:04:86:da:d1: 40:83:6c:6b:0f:a4:b8:e7:b0:24:03:a6:31:8b:1a:16:a4:ec: 3a:bf:6f:83:18:f5:40:3f:5e:96:40:e9:36:34:fd:4d:73:75: 64:1f:0b:30:a8:53:9b:10:db:4c:40:76:6c:8f:00:96:8e:99: a4:25:c8:bd:1c:23:0b:5e:a5:df:f6:4d:a3:f0:99:14:60:3e: 1c:d6:a1:b0:21:11:9e:76:4e:62:35:38:b0:51:46:f3:11:c0: ed:11:c6:d1:32:9e:12:4a:d6:dd:4a:11:d4:fd:63:4b:e2:5b: 2e:68:c9:b2:61:24:93:50:cd:a1:ef:b9:b7:94:37:62:75:58: 57:76:94:4a:3c:71:71:c2:3b:2d:0b:ff:80:da:4b:9a:6c:b9: 23:c8:83:d8:f8:fb:00:90:80:21:e0:0f:76:cf:a1:24:4a:6c: 93:68:06:54:13:eb:1a:83:36:d8:b1:28:0b:b8:94:49:b6:ea: d6:ed:42:1d:05:f8:47:71:31:21:94:6c:30:a6:ce:a9:f9:d8: 40:27:15:cb:73:04:b6:94:d1:df:b9:9c:54:4a:b3:53:a8:d1: a9:4e:a8:d3:f6:54:ae:26:c7:da:c5:93:90:ef:e8:71:77:bb: a7:0e:db:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMTIxMTAvBgNVBAUTKEQwNUFDOTBBMjA3RjYwODdDRTAyRURDMjMxODhFMzJB QUExQjFCNDQwHhcNMjUwODIzMDQzNjU5WhcNMjUwODMwMDQzNjU5WjAYMRYwFAYD VQQDEw02OGE5NDU2Yy0zN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdBASSKJQ4FbPhYVTPQtdQwqvBj7r36VO+nOtvAC6h5u4HCUf4IXdAUIeRX5 iBUTS+sFm69/o57fTWSOJjyFN8MAgtSUGiY01WDp7kuHc9JpUd/sNnf3qlP1t7V3 s1/fCWvRHoe69G3FqNkOtylNdNQMc8tzN17mkdFeXrhwTi5jPi74WE13VQaPyTxt jMzIM9/c1WnSNpNvuEf3VAAwRRu7xwGwxxj2hmJezoFJnE3SZKGKMAxSmgpCVniz 1U6aRTwr29YJm3PzIYzasdgnLBTHM0J6Ihsq9elAdJfTM4lHzsoFT7UKDHA5d8RH 9TbJD/ylmQnqLzxftwY2hnU33wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwkw75V NpYHbLRa2Na2Xfb58IyGMB8GA1UdIwQYMBaAFNBayQogf2CHzgLtwjGI4yqqGxtE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxMi80QjIzM0VFQUEy RDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJZk9BdTNDTVlqaktxb2JH MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBGckpDaUJfWUlmT0F1M0NNWWpqS3FvYkcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxMi80QjIzM0VFQUEyRDAxMUVFOTNBODhGM0RDNEY5QUUwMi8wRnJKQ2lCX1lJ Zk9BdTNDTVlqaktxb2JHMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChSogi8WKpbjntHn60YwSG2tFAg2xrD6S457AkA6YxixoWpOw6v2+D GPVAP16WQOk2NP1Nc3VkHwswqFObENtMQHZsjwCWjpmkJci9HCMLXqXf9k2j8JkU YD4c1qGwIRGedk5iNTiwUUbzEcDtEcbRMp4SStbdShHU/WNL4lsuaMmyYSSTUM2h 77m3lDdidVhXdpRKPHFxwjstC/+A2kuabLkjyIPY+PsAkIAh4A92z6EkSmyTaAZU E+sagzbYsSgLuJRJturW7UIdBfhHcTEhlGwwps6p+dhAJxXLcwS2lNHfuZxUSrNT qNGpTqjT9lSuJsfaxZOQ7+hxd7unDtsd -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:32 2025 by rpki-client