$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json) Hash identifier: 4Z9EFENti1JQJSWckhbo6KVYIPlrocJ+qxGcoBe42e4= Subject key identifier: F3:91:FF:AD:F1:51:92:26:D9:A9:3F:6B:CB:68:5C:63:03:F0:A9:C3 Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft Manifest number: 0218 Signing time: Sat 23 Aug 2025 02:12:52 +0000 Manifest this update: Sat 23 Aug 2025 02:12:52 +0000 Manifest next update: Sat 30 Aug 2025 02:12:52 +0000 Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: 7XkOKgdzqDZrFhfe/JiCXJ+suz4u6jtWCcdiPUj7Ffo=) 2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C Validity Not Before: Aug 23 02:12:52 2025 GMT Not After : Aug 30 02:12:52 2025 GMT Subject: CN=68a923a4-43cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:23:33:92:62:10:46:0b:82:3d:48:3c:79: e4:86:5e:a8:e6:3e:cc:f7:5c:95:0d:23:24:55:b6: 5c:e3:00:74:cb:f2:da:0f:d7:01:c0:41:c2:6b:ec: de:43:d5:9b:cb:38:43:5c:e1:16:76:35:04:41:e3: ba:3a:6f:3a:0f:3b:19:d0:6c:47:1c:20:4a:07:48: ad:e4:29:f8:85:e8:a1:ef:26:30:4b:62:02:c7:31: 1d:4b:fa:95:6a:6c:7d:ec:35:a6:4e:3d:03:a3:80: 27:2d:1b:eb:f9:83:9f:3c:4a:cc:18:e0:0f:16:50: 58:e2:41:52:e6:1e:82:fa:81:35:f9:24:b1:91:95: ed:43:57:5b:30:c2:89:f3:58:1c:b2:3b:b7:e7:f8: 52:ae:9d:45:87:9f:88:9c:af:2e:23:73:11:72:02: ff:02:2f:6e:24:66:17:83:9f:a5:69:94:09:69:a3: 8f:b3:02:15:92:4d:a8:5f:17:86:ae:cb:3c:61:89: 56:13:7c:12:77:72:c7:1e:5c:1b:79:31:ff:07:56: de:05:db:4e:32:0a:2b:a2:c7:a0:b4:73:d2:be:30: 91:f1:c8:e0:22:70:7f:d3:8a:8c:6e:dc:dd:15:55: 0b:09:ee:fd:d9:a7:96:c8:c6:51:97:cc:1b:ad:c9: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:91:FF:AD:F1:51:92:26:D9:A9:3F:6B:CB:68:5C:63:03:F0:A9:C3 X509v3 Authority Key Identifier: keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:8f:af:1c:f5:e9:fc:9e:e9:7d:6a:c9:e6:9f:ae:00:54:30: 1d:8e:d7:c8:3c:a7:ff:94:10:51:d3:39:8c:7e:3f:bd:da:14: 40:e9:70:c0:e9:52:70:2a:b4:93:ae:59:3f:78:8e:8b:13:7b: e6:b6:91:21:3a:75:d3:15:a2:cb:03:50:bd:9f:32:a1:10:86: d3:eb:85:31:cf:39:97:29:c6:fd:30:bf:cf:f4:95:de:96:41: 5b:ab:d9:7f:65:99:c4:72:8f:61:ee:93:92:20:98:56:9f:06: 0b:1e:a6:22:56:8d:84:a3:65:e8:78:09:07:50:98:a5:02:00: 7a:f9:83:65:21:03:c7:84:c4:9a:9e:86:e0:51:41:7f:e5:2c: ad:b9:ac:04:1f:5f:85:e0:9f:66:ac:9c:c6:8e:02:37:78:7f: 55:55:af:d5:27:be:c8:f4:43:4d:7f:84:e2:a8:65:4b:f6:e7: 56:fd:a6:81:39:68:df:bc:3b:02:8e:10:76:dc:ba:03:d7:83: 36:aa:98:ef:db:65:37:3a:3e:15:ad:9e:28:f4:a5:ae:1a:92: e5:6b:a6:aa:25:e8:ff:2e:28:97:c2:cf:a9:91:06:6e:42:92: 6f:eb:6b:a5:20:1c:be:3f:aa:9a:47:e3:ca:a4:d2:04:68:0f: 1c:67:a6:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF RTREMUQ5OUMwHhcNMjUwODIzMDIxMjUyWhcNMjUwODMwMDIxMjUyWjAYMRYwFAYD VQQDEw02OGE5MjNhNC00M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IkjM5JiEEYLgj1IPHnkhl6o5j7M91yVDSMkVbZc4wB0y/LaD9cBwEHCa+ze Q9WbyzhDXOEWdjUEQeO6Om86DzsZ0GxHHCBKB0it5Cn4heih7yYwS2ICxzEdS/qV amx97DWmTj0Do4AnLRvr+YOfPErMGOAPFlBY4kFS5h6C+oE1+SSxkZXtQ1dbMMKJ 81gcsju35/hSrp1Fh5+InK8uI3MRcgL/Ai9uJGYXg5+laZQJaaOPswIVkk2oXxeG rss8YYlWE3wSd3LHHlwbeTH/B1beBdtOMgorosegtHPSvjCR8cjgInB/04qMbtzd FVULCe792aeWyMZRl8wbrcmBgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOR/63x UZIm2ak/a8toXGMD8KnDMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9j68c9en8nul9asnmn64AVDAdjtfIPKf/lBBR0zmMfj+92hRA6XDA 6VJwKrSTrlk/eI6LE3vmtpEhOnXTFaLLA1C9nzKhEIbT64UxzzmXKcb9ML/P9JXe lkFbq9l/ZZnEco9h7pOSIJhWnwYLHqYiVo2Eo2XoeAkHUJilAgB6+YNlIQPHhMSa nobgUUF/5SytuawEH1+F4J9mrJzGjgI3eH9VVa/VJ77I9ENNf4TiqGVL9udW/aaB OWjfvDsCjhB23LoD14M2qpjv22U3Oj4VrZ4o9KWuGpLla6aqJej/LiiXws+pkQZu QpJv62ulIBy+P6qaR+PKpNIEaA8cZ6Zb -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:13 2025 by rpki-client