$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: EcE0VXbYE0PVpuDtCN8h1amMhhm0GqLWchLxfpcYr1U= Subject key identifier: 4B:E8:AC:23:05:49:9F:FC:21:8B:4A:5C:4C:74:87:E2:62:86:6F:B4 Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 0886 Signing time: Fri 22 Aug 2025 20:44:16 +0000 Manifest this update: Fri 22 Aug 2025 20:44:15 +0000 Manifest next update: Fri 29 Aug 2025 20:44:15 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: dbHVyYqaPSxxiiysj6PMgJ/bU7xy0sy6DgmraqcfusY=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: p0a0nQBisH4VKwtpLEiKDNLpUVAu9yIvpOIZZoB51RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Aug 22 20:44:15 2025 GMT Not After : Aug 29 20:44:15 2025 GMT Subject: CN=68a8d6a0-adea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:9a:f6:e1:17:94:c7:f7:5a:b3:87:b6:64: fc:0c:32:be:64:a9:cf:1f:f6:9b:1f:23:2d:c5:47: 17:c5:5a:01:c7:61:00:2d:3c:f9:a5:97:21:5a:db: 64:46:83:3e:fe:89:d1:50:62:67:57:6c:11:5d:13: f2:61:5b:1c:d8:6a:53:86:ec:d4:15:96:f7:02:4f: d8:02:df:e3:14:bb:e6:7e:29:c6:61:ae:ad:cd:64: 4a:6c:ca:ab:f5:74:0e:d6:7f:b8:b0:d4:6b:96:0c: 58:02:31:a9:06:8d:85:44:a6:17:34:6d:2c:65:20: f7:7f:9b:01:35:9c:fb:ea:a4:fd:9f:63:97:90:7e: c8:5d:6c:f4:6c:39:aa:d7:bd:a1:16:bf:45:dd:cb: 06:55:b1:14:3f:b1:35:9a:c6:78:51:b9:8e:ff:7c: 8f:f5:71:02:10:8b:70:28:f5:73:01:80:7a:25:8c: af:0c:f7:7e:9a:f5:40:8e:26:00:eb:a7:52:d9:a6: 98:b6:54:fe:97:88:49:17:3c:3f:b4:0a:8f:0e:40: 6a:84:ed:38:8f:ed:a1:80:76:e5:79:c4:70:4a:95: 39:c6:32:0c:80:28:bf:73:a2:7e:90:b1:d2:b2:5e: ee:27:0e:33:10:d0:9d:dd:79:9c:19:98:ed:92:89: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E8:AC:23:05:49:9F:FC:21:8B:4A:5C:4C:74:87:E2:62:86:6F:B4 X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:07:ee:65:73:b6:eb:f9:94:e3:ed:29:0e:cd:c1:c3:ce:96: 72:2a:03:a0:39:47:d2:ba:cc:9f:0f:53:22:5b:07:f1:81:96: 74:1a:01:1c:22:c6:ec:46:9f:0f:f2:9d:86:ca:24:85:8e:8d: 1e:9d:9c:28:67:28:04:ec:2c:9a:bd:77:b1:18:d1:46:1c:1e: 9d:cf:e9:a9:4a:3c:0a:c4:23:20:b0:e5:d4:4c:84:6a:86:cd: 67:25:6f:01:2a:85:ca:d6:fb:8a:9c:3b:1e:cb:35:bb:77:3b: 38:2a:ed:4b:42:59:7c:b1:d0:b2:d4:54:19:f8:06:c7:4b:20: a1:23:f8:a1:83:cb:ab:bb:77:ee:59:8d:32:d9:ec:9a:34:47: 2a:05:c7:c8:5b:af:e6:0a:f5:3f:d6:ca:57:b3:72:c3:5d:96: 54:c7:6c:30:57:85:a7:78:39:aa:7e:64:2a:1b:30:12:98:98: f2:20:43:f9:ee:43:a1:ee:91:e2:53:a6:4a:3c:97:f7:40:23: bb:9e:e8:26:42:41:71:56:2f:b9:e4:08:40:fc:71:d6:db:5f: 6a:25:d5:7c:17:db:79:d7:7a:24:8f:58:4a:05:1a:97:e5:e0: 97:63:4a:c0:32:3a:35:57:87:49:5e:81:11:09:6d:4e:fd:0b: c8:33:04:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjUwODIyMjA0NDE1WhcNMjUwODI5MjA0NDE1WjAYMRYwFAYD VQQDEw02OGE4ZDZhMC1hZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWma9uEXlMf3WrOHtmT8DDK+ZKnPH/abHyMtxUcXxVoBx2EALTz5pZchWttk RoM+/onRUGJnV2wRXRPyYVsc2GpThuzUFZb3Ak/YAt/jFLvmfinGYa6tzWRKbMqr 9XQO1n+4sNRrlgxYAjGpBo2FRKYXNG0sZSD3f5sBNZz76qT9n2OXkH7IXWz0bDmq 172hFr9F3csGVbEUP7E1msZ4UbmO/3yP9XECEItwKPVzAYB6JYyvDPd+mvVAjiYA 66dS2aaYtlT+l4hJFzw/tAqPDkBqhO04j+2hgHblecRwSpU5xjIMgCi/c6J+kLHS sl7uJw4zENCd3XmcGZjtkonbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvorCMF SZ/8IYtKXEx0h+Jihm+0MB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDB+5lc7br+ZTj7SkOzcHDzpZyKgOgOUfSusyfD1MiWwfxgZZ0GgEc IsbsRp8P8p2GyiSFjo0enZwoZygE7CyavXexGNFGHB6dz+mpSjwKxCMgsOXUTIRq hs1nJW8BKoXK1vuKnDseyzW7dzs4Ku1LQll8sdCy1FQZ+AbHSyChI/ihg8uru3fu WY0y2eyaNEcqBcfIW6/mCvU/1spXs3LDXZZUx2wwV4WneDmqfmQqGzASmJjyIEP5 7kOh7pHiU6ZKPJf3QCO7nugmQkFxVi+55AhA/HHW219qJdV8F9t513okj1hKBRqX 5eCXY0rAMjo1V4dJXoERCW1O/QvIMwTP -----END CERTIFICATE-----Generated at Sun Aug 24 00:47:45 2025 by rpki-client