$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: bDCO3r0paRPkJosH+nkMVeUEs7qzxvPSlZQLuMPWR3s= Subject key identifier: D9:69:43:91:51:DA:AE:C2:11:82:CD:DE:8E:37:7B:E7:78:18:1A:B0 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0C7C Signing time: Fri 22 Aug 2025 18:34:23 +0000 Manifest this update: Fri 22 Aug 2025 18:34:23 +0000 Manifest next update: Fri 29 Aug 2025 18:34:23 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: 964VzJaDix6fGtQLjcsY88GPApAIcOPM0sm4UbPVz24=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: 72kjZWvSx4fyueGWPj1oIcb7cSxhi/YjCVNjsbLh3iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3220 (0xc94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Aug 22 18:34:23 2025 GMT Not After : Aug 29 18:34:23 2025 GMT Subject: CN=68a8b82f-a9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:7d:58:01:40:5a:74:6a:c7:d7:98:1d:4d: 8d:e6:61:82:98:cf:f4:38:30:64:66:8d:61:ef:fd: e2:39:63:d4:ee:2e:1b:8e:96:e3:b4:23:08:26:8a: 0e:01:02:91:f5:25:27:c9:d9:b3:eb:84:2c:19:ad: 09:59:a8:1d:2f:69:a5:d4:e3:69:45:46:93:c6:75: 53:0c:84:66:fc:2f:1c:f6:5d:4d:74:92:51:56:51: 84:14:53:ae:7c:5b:ec:5f:6a:52:c1:a3:54:c5:f1: 92:b1:b3:cd:45:a3:9b:3c:4a:91:f9:3e:4c:0b:b1: d7:61:d1:13:59:c2:48:05:bc:26:68:14:3a:4b:df: b2:37:47:69:68:3c:77:b2:68:e0:6a:f0:31:fb:5c: 05:64:f4:79:03:9e:ac:8f:9e:2b:79:0c:07:d7:cd: 08:0b:a7:3f:95:58:fc:a3:b0:0a:32:03:e3:2b:3d: 8a:2b:11:17:5c:d6:49:87:46:8b:b4:bc:ed:17:d1: b3:d7:05:34:6c:46:95:c8:0e:6b:c8:ed:51:fb:8b: 6b:37:43:da:2a:e2:d4:d4:eb:b6:1b:32:3e:cc:ec: d1:f3:32:ce:7c:1f:cc:35:cc:26:ee:c4:93:6e:f7: f4:8a:2d:66:d5:90:6b:83:c2:eb:30:35:29:e3:ea: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:69:43:91:51:DA:AE:C2:11:82:CD:DE:8E:37:7B:E7:78:18:1A:B0 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:89:0c:a5:97:f3:b5:b4:c2:0d:5c:d4:2a:87:f4:ae:06: 30:63:c5:d7:da:4c:16:f0:7a:ca:ce:c5:fd:bb:6a:94:d0:66: 6a:7d:2d:df:23:5d:2c:a5:ec:c8:69:91:b1:01:db:fc:d5:e7: 0a:1e:a9:62:91:48:8c:39:b5:24:5c:71:3a:a2:c4:96:63:12: 37:8e:50:c0:79:d2:0a:dc:e3:9a:2c:9a:81:f8:ef:35:ad:8a: da:ff:cc:6e:a3:40:e4:71:4d:3c:f7:06:d2:d1:3c:68:2d:ba: 6a:40:92:c9:3f:4d:b3:97:3c:e4:e4:ca:5b:7f:3c:62:46:9e: 6c:18:98:7a:14:a8:00:8b:cf:34:e1:93:68:13:8b:6d:aa:21: a0:a6:d5:a3:85:b3:c3:94:93:38:44:b4:cc:28:5e:fe:79:60: ab:9b:c7:39:4c:a6:8b:d0:45:ce:8e:08:3c:14:fd:49:c4:10: 7e:91:9d:11:37:13:73:7c:76:28:7f:8c:9d:64:b2:8a:a9:1a: 41:3c:ee:e4:5a:77:71:48:a9:01:78:fd:95:28:4a:10:0f:f5: e2:d4:56:86:e5:11:ab:61:b9:6f:19:69:d9:1f:ba:f4:67:49: ca:6b:b3:df:19:e7:96:39:bf:34:47:3f:95:63:8a:a9:d4:1e: 90:d6:d4:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjUwODIyMTgzNDIzWhcNMjUwODI5MTgzNDIzWjAYMRYwFAYD VQQDEw02OGE4YjgyZi1hOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58l9WAFAWnRqx9eYHU2N5mGCmM/0ODBkZo1h7/3iOWPU7i4bjpbjtCMIJooO AQKR9SUnydmz64QsGa0JWagdL2ml1ONpRUaTxnVTDIRm/C8c9l1NdJJRVlGEFFOu fFvsX2pSwaNUxfGSsbPNRaObPEqR+T5MC7HXYdETWcJIBbwmaBQ6S9+yN0dpaDx3 smjgavAx+1wFZPR5A56sj54reQwH180IC6c/lVj8o7AKMgPjKz2KKxEXXNZJh0aL tLztF9Gz1wU0bEaVyA5ryO1R+4trN0PaKuLU1Ou2GzI+zOzR8zLOfB/MNcwm7sST bvf0ii1m1ZBrg8LrMDUp4+oN/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlpQ5FR 2q7CEYLN3o43e+d4GBqwMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3O4kMpZfztbTCDVzUKof0rgYwY8XX2kwW8HrKzsX9u2qU0GZqfS3f I10spezIaZGxAdv81ecKHqlikUiMObUkXHE6osSWYxI3jlDAedIK3OOaLJqB+O81 rYra/8xuo0DkcU089wbS0TxoLbpqQJLJP02zlzzk5MpbfzxiRp5sGJh6FKgAi880 4ZNoE4ttqiGgptWjhbPDlJM4RLTMKF7+eWCrm8c5TKaL0EXOjgg8FP1JxBB+kZ0R NxNzfHYof4ydZLKKqRpBPO7kWndxSKkBeP2VKEoQD/Xi1FaG5RGrYblvGWnZH7r0 Z0nKa7PfGeeWOb80Rz+VY4qp1B6Q1tS0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:35 2025 by rpki-client