$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: /grJ3ryu+4VXqcZ3hsCa93ljTV4B6e5jorZecin/iJk= Subject key identifier: CA:1A:51:D7:00:05:FD:AA:1A:30:CD:09:8A:38:08:61:10:B6:BD:A3 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 0544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0521 Signing time: Fri 22 Aug 2025 23:50:51 +0000 Manifest this update: Fri 22 Aug 2025 23:50:51 +0000 Manifest next update: Fri 29 Aug 2025 23:50:51 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: QV74+S9+mpB4IGn1F2kVHm/GbqOmMyjzQb/I7bvTFOw=) 2: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: /oWh6sDf6JMhXVQFfiBK5T8ylerkJmv9WJJdVtYkSIU=) 3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: hF9MKD/FwgF9cY8hvh9m1ZRU6ZbNvnTiLbcgCIT5wPc=) 4: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: 9aBOau/kR05/ZlK4Ctxtvv3XFrOvJ/VU5zNEft0SiRE=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: M9HaGHa7pI3ilHdh1OGWp/+WvUY2NRFrgXm0KqnYXRc=) 6: B9DEB77E654411EFACBF7956C4F9AE02.roa (hash: xYaxgWyzwtexyE7NeRo7CnQ16cP15TpfRCg28S5nmVo=) 7: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: ERqr4ZgITrZRkOwS3AN4CJTqd2fIDLE15f/P4/QlBUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1348 (0x544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Aug 22 23:50:51 2025 GMT Not After : Aug 29 23:50:51 2025 GMT Subject: CN=68a9025b-daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:32:9d:a9:4d:2a:28:d2:24:b4:97:b0:ed: fa:f9:de:05:66:02:e7:d2:b8:b1:5a:6a:ab:5d:4b: ad:16:00:27:f5:37:5a:ea:d9:64:18:73:79:13:f3: b7:b6:70:4d:5c:80:2a:61:68:54:cd:21:b0:f0:47: c7:7a:ea:bc:41:2a:ec:b2:26:fa:c9:f4:9a:2b:44: 69:bc:2e:51:63:e0:96:48:45:80:65:98:f2:96:5f: 45:d6:4c:1b:90:2c:06:21:48:72:86:e8:d6:82:f7: 8e:33:7e:05:ca:11:41:b4:95:32:f9:79:03:6a:98: e2:33:c3:7a:3d:b7:75:4d:d2:9c:5f:62:95:d6:c5: d3:ad:02:08:1d:e9:7d:ce:8f:00:34:5b:49:fc:dd: 89:d1:13:e3:a3:58:fd:55:eb:bf:a3:9a:93:26:7c: 41:21:7d:f0:07:a7:d4:ac:02:cb:4d:53:70:4a:e5: 18:97:2c:bd:d8:87:2f:eb:25:01:26:7c:f5:ca:3e: a7:41:57:eb:30:c9:8b:f6:db:5f:5f:b3:7a:c0:60: 28:85:8b:e8:ca:81:dc:b0:26:2f:77:78:d4:33:89: 6b:55:ed:72:6b:0c:af:23:d7:73:7c:3e:d6:f6:52: 20:bf:83:d5:0b:2d:8b:fb:18:76:56:12:2a:96:1e: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1A:51:D7:00:05:FD:AA:1A:30:CD:09:8A:38:08:61:10:B6:BD:A3 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:34:fb:02:df:47:b1:d1:a7:ce:37:b3:b2:70:e3:31:90:7b: e9:4b:3b:66:8d:35:88:93:80:d7:89:90:fd:75:7e:f3:e6:eb: 3c:8e:f3:64:af:34:c9:3e:6c:35:2e:ee:03:d2:c0:10:5a:20: a0:8b:36:fc:1a:3b:2b:54:3c:e4:e8:cf:e5:fc:c6:de:2b:de: 74:01:89:2a:96:33:1c:1c:97:e5:5b:9a:10:5a:89:50:c9:ba: 6d:cf:6e:7a:d6:08:aa:7e:30:a7:ba:c7:da:6b:6f:02:be:ee: 72:58:c0:c1:a9:8b:28:2d:67:b5:e5:12:13:8b:4c:2d:e8:59: e4:31:bf:08:54:67:a9:f9:6e:0c:80:60:0a:db:95:52:97:51: ba:f8:e8:69:31:f9:b9:cf:67:c6:d9:d7:af:4a:7c:ab:ad:ae: fc:f7:66:8e:16:67:bc:6f:b2:b4:f8:be:72:cc:06:75:61:c6: 64:17:89:1b:01:53:d4:9d:63:12:9e:8e:8f:39:2f:fe:c1:da: c7:0c:2e:b5:fc:f2:13:d3:d2:85:ea:9c:96:38:9f:28:43:2f: f1:df:79:ab:45:10:02:70:02:fb:51:8e:4e:17:0c:b2:a3:43: 81:6b:db:c7:e8:27:4c:a9:04:29:c5:9c:5c:e6:08:a9:4c:53: 2d:7b:c6:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjUwODIyMjM1MDUxWhcNMjUwODI5MjM1MDUxWjAYMRYwFAYD VQQDEw02OGE5MDI1Yi1kYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMcynalNKijSJLSXsO36+d4FZgLn0rixWmqrXUutFgAn9Tda6tlkGHN5E/O3 tnBNXIAqYWhUzSGw8EfHeuq8QSrssib6yfSaK0RpvC5RY+CWSEWAZZjyll9F1kwb kCwGIUhyhujWgveOM34FyhFBtJUy+XkDapjiM8N6Pbd1TdKcX2KV1sXTrQIIHel9 zo8ANFtJ/N2J0RPjo1j9Veu/o5qTJnxBIX3wB6fUrALLTVNwSuUYlyy92Icv6yUB Jnz1yj6nQVfrMMmL9ttfX7N6wGAohYvoyoHcsCYvd3jUM4lrVe1yawyvI9dzfD7W 9lIgv4PVCy2L+xh2VhIqlh7hfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoaUdcA Bf2qGjDNCYo4CGEQtr2jMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkNPsC30ex0afON7OycOMxkHvpSztmjTWIk4DXiZD9dX7z5us8jvNk rzTJPmw1Lu4D0sAQWiCgizb8GjsrVDzk6M/l/MbeK950AYkqljMcHJflW5oQWolQ ybptz2561giqfjCnusfaa28Cvu5yWMDBqYsoLWe15RITi0wt6FnkMb8IVGep+W4M gGAK25VSl1G6+OhpMfm5z2fG2devSnyrra7892aOFme8b7K0+L5yzAZ1YcZkF4kb AVPUnWMSno6POS/+wdrHDC61/PIT09KF6pyWOJ8oQy/x33mrRRACcAL7UY5OFwyy o0OBa9vH6CdMqQQpxZxc5gipTFMte8ZW -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:20 2025 by rpki-client